$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3127b0a-427a-4adc-97af-3e60a9f083ea.roa File: f3127b0a-427a-4adc-97af-3e60a9f083ea.roa (raw, json) Hash identifier: QWGCm+EFXO+btar6JXMLjDq8PNlp1OLspTEajO7GGNQ= Subject key identifier: E2:6D:E5:0A:3A:A0:5D:04:B6:70:87:8F:F3:A1:0B:B0:B9:77:B8:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53F84A2AC4CA73BB85593D292FDAC146EF6285AB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3127b0a-427a-4adc-97af-3e60a9f083ea.roa Signing time: Tue 04 Nov 2025 01:11:06 +0000 ROA not before: Tue 04 Nov 2025 01:11:06 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.89.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f8:4a:2a:c4:ca:73:bb:85:59:3d:29:2f:da:c1:46:ef:62:85:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 01:11:06 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=e455f612fcaa3647a252c739904f5e8ed66132f7b18c6f86f68bc3a2d338632e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:62:c3:18:b6:f9:c5:6d:47:a2:b6:13:aa: a7:ca:a8:6d:f3:d9:86:c0:0c:e9:7d:8b:b0:72:4d: 23:a0:fb:a0:b8:2b:e7:17:da:c5:67:09:bb:78:28: 8c:52:a1:0a:c4:21:f2:5f:a4:1d:c3:d4:f7:8c:a2: 7d:a8:6c:47:7b:10:bc:aa:21:c4:84:79:0b:49:4d: 29:99:bb:1e:e2:84:a2:0e:51:d4:44:a7:d4:30:85: de:2a:bb:6f:1a:2a:0b:3b:1a:7e:1a:0f:05:6e:22: 11:cd:11:ad:2c:dc:6e:d3:89:00:5d:e2:a9:ef:8e: db:eb:43:07:40:01:0c:97:b8:6b:38:5d:88:cb:47: 5a:69:75:cd:96:d2:6c:01:f0:08:3b:98:71:ef:98: 6c:58:ec:a3:39:09:8f:4d:90:d7:02:4f:b2:07:77: eb:8b:ee:c7:b1:8b:be:0e:7e:32:a7:ad:78:bf:74: 24:36:3a:58:2e:13:e8:2a:9c:58:b8:2c:b2:dc:26: 73:65:61:06:e2:2b:58:1f:43:2f:1c:73:05:11:cb: 05:bb:c6:c5:1e:ad:16:c5:3b:11:06:83:e5:d4:4b: b3:6c:10:47:8e:fc:5d:ad:4a:92:9a:75:e6:9c:fb: 16:e8:2c:a7:0a:63:89:10:dd:54:7e:e7:7c:49:d2: 4e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6D:E5:0A:3A:A0:5D:04:B6:70:87:8F:F3:A1:0B:B0:B9:77:B8:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3127b0a-427a-4adc-97af-3e60a9f083ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.89.160.0/19 Signature Algorithm: sha256WithRSAEncryption 0d:01:2c:eb:26:81:b4:30:c0:85:da:a8:7d:ed:45:98:71:73: 12:f6:6a:f1:31:f0:e5:2c:18:15:c5:18:52:1e:d1:71:12:49: 68:d2:9b:38:78:91:89:83:7a:4a:31:13:0c:e3:06:9c:78:ef: 35:92:e6:54:66:7b:3a:ea:f2:bb:5f:2d:a4:5a:2b:bc:4e:c8: 2e:f0:e5:25:67:94:50:74:d3:63:76:da:45:1e:6f:54:fe:9e: f9:a8:1e:a4:4d:15:bf:03:cc:4f:cc:6c:80:6f:4e:85:3f:2f: 35:68:42:69:d8:ec:39:e2:52:89:b4:85:cf:45:e6:e2:e7:d8: 3f:3a:6b:b8:4d:7b:bb:04:30:08:c4:03:6d:5e:1d:18:d1:56: 63:00:3e:a6:be:0d:bc:f4:d6:83:1f:10:f0:b8:c5:6c:61:58: ba:c6:04:e3:b8:8e:8f:b6:fd:96:9a:9a:30:5a:93:77:31:df: 7e:5b:97:9f:2b:6b:51:4c:b0:27:d5:ab:c7:18:89:31:4c:77: 31:89:27:44:df:0c:7b:7b:12:89:99:12:59:df:44:4d:6d:be: fc:b5:6a:0f:94:8b:90:ce:6b:46:6c:07:49:49:aa:d8:a7:1e: 7b:22:f3:0b:86:32:49:42:3d:79:ba:43:c4:03:13:79:43:25: cc:76:8b:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU/hKKsTKc7uFWT0pL9rBRu9ihaswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDExMTA2WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDU1ZjYxMmZjYWEzNjQ3YTI1MmM3Mzk5MDRmNWU4ZWQ2 NjEzMmY3YjE4YzZmODZmNjhiYzNhMmQzMzg2MzJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCum2LDGLb5xW1HorYTqqfKqG3z2YbADOl9i7ByTSOg+6C4 K+cX2sVnCbt4KIxSoQrEIfJfpB3D1PeMon2obEd7ELyqIcSEeQtJTSmZux7ihKIO UdREp9Qwhd4qu28aKgs7Gn4aDwVuIhHNEa0s3G7TiQBd4qnvjtvrQwdAAQyXuGs4 XYjLR1ppdc2W0mwB8Ag7mHHvmGxY7KM5CY9NkNcCT7IHd+uL7sexi74OfjKnrXi/ dCQ2OlguE+gqnFi4LLLcJnNlYQbiK1gfQy8ccwURywW7xsUerRbFOxEGg+XUS7Ns EEeO/F2tSpKadeac+xboLKcKY4kQ3VR+53xJ0k6fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4m3lCjqgXQS2cIeP86ELsLl3uFYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YzMTI3YjBhLTQyN2EtNGFkYy05N2FmLTNlNjBhOWYwODNlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUSWaAwDQYJKoZIhvcNAQELBQADggEBAA0BLOsmgbQwwIXaqH3tRZhxcxL2 avEx8OUsGBXFGFIe0XESSWjSmzh4kYmDekoxEwzjBpx47zWS5lRmezrq8rtfLaRa K7xOyC7w5SVnlFB002N22kUeb1T+nvmoHqRNFb8DzE/MbIBvToU/LzVoQmnY7Dni Uom0hc9F5uLn2D86a7hNe7sEMAjEA21eHRjRVmMAPqa+Dbz01oMfEPC4xWxhWLrG BOO4jo+2/ZaamjBak3cx335bl58ra1FMsCfVq8cYiTFMdzGJJ0TfDHt7EomZElnf RE1tvvy1ag+Ui5DOa0ZsB0lJqtinHnsi8wuGMklCPXm6Q8QDE3lDJcx2iwo= -----END CERTIFICATE-----Generated at Wed Nov 5 01:50:00 2025 by rpki-client