$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/04369a2d-2f49-4a30-8ce1-3377131405a9.roa File: 04369a2d-2f49-4a30-8ce1-3377131405a9.roa (raw, json) Hash identifier: dmaC9/tIcs0X3likWLuFKFK/TzAJ2R5lHqW515lfrS8= Subject key identifier: 0C:49:8A:37:75:04:A6:19:AC:37:84:DD:EA:48:AE:58:90:77:29:03 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 631E1F34DA01634BF3A5B7A7A0EBCFF1BB42A45B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/04369a2d-2f49-4a30-8ce1-3377131405a9.roa Signing time: Sat 18 Oct 2025 15:11:25 +0000 ROA not before: Sat 18 Oct 2025 15:11:25 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1e:1f:34:da:01:63:4b:f3:a5:b7:a7:a0:eb:cf:f1:bb:42:a4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 15:11:25 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=f55db9fc12b7ecca3f625e9954553367f5c24c42db9d76de3a69fad9fcf1a75f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:4c:d4:d8:08:19:f2:8b:cc:08:40:41:c1: f8:75:f6:6f:1a:2c:46:00:17:22:51:c1:64:e1:7e: 41:43:74:ca:40:d5:3f:dd:d8:58:e7:ac:c9:f3:68: 9e:d3:34:18:2a:58:f2:44:34:42:ce:3b:14:30:13: e9:12:ef:a5:f8:3a:64:9f:a1:60:0b:99:cd:f6:60: 5d:48:6e:09:fd:41:ad:36:ee:0b:c9:d2:7e:fc:e0: c5:eb:e8:46:c4:b4:7f:8d:8a:d0:06:c0:1e:c9:99: b9:7a:0a:e6:a2:03:05:40:a8:15:80:89:9f:60:53: 82:1f:f2:74:4b:22:2b:54:ee:5a:fa:29:c3:c8:61: bb:73:d7:2f:1f:56:3d:aa:2d:5d:b8:75:11:be:1b: 25:5d:05:25:74:57:9d:30:2e:8b:7f:e8:f2:66:70: 2d:71:a2:ea:72:c2:e0:f4:01:d7:92:dd:2d:8d:62: ba:fb:4d:21:20:3a:8c:cd:87:b8:7e:e3:06:55:20: 77:23:97:21:a3:08:2a:db:5f:3b:a1:89:73:53:56: 2d:b1:91:f3:98:28:89:b0:bd:41:7a:f2:9b:8f:7e: 91:8b:6c:07:55:cc:18:a4:30:e5:b1:18:fe:4f:42: d0:e9:cf:51:6b:8e:48:64:2b:10:a6:0d:86:da:41: 89:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:49:8A:37:75:04:A6:19:AC:37:84:DD:EA:48:AE:58:90:77:29:03 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/04369a2d-2f49-4a30-8ce1-3377131405a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.68.0/24 Signature Algorithm: sha256WithRSAEncryption 15:08:29:fd:c1:68:94:13:b2:ae:88:ae:e4:d4:79:36:48:45: 88:2d:18:79:76:c8:64:df:9b:fd:8c:24:b0:21:ba:bd:97:1d: 81:c0:a8:29:86:3e:44:b6:0b:2e:e8:47:ad:4c:21:a4:a9:5a: 99:cd:a0:ea:fc:fc:84:56:88:62:ac:7e:58:2a:f2:31:17:b7: 72:e3:e5:1c:33:04:1c:8b:c2:4b:c0:55:08:16:cb:72:dc:5f: a0:cf:e8:fc:4d:5b:3d:59:32:0b:ce:d9:af:72:65:45:3b:79: c6:ac:3b:fc:64:b5:72:90:de:e0:98:bc:fc:df:f8:30:4f:fc: 42:95:6a:6f:21:a1:2e:eb:51:85:b1:42:27:7a:c2:fd:8e:98: 88:81:6d:5c:10:f6:a3:15:86:16:7b:5d:18:a1:52:5e:ca:48: f2:3a:27:e8:43:a5:a1:d0:3f:a8:48:3d:bf:9e:65:9e:6a:59: 57:56:d7:ac:ce:6d:5a:df:45:01:e8:29:22:15:46:9e:26:b3: 81:d8:bc:34:04:d3:37:9c:8a:e1:04:45:72:f0:b5:39:a9:a4: 21:cd:b4:df:64:bb:6a:68:29:99:fa:8f:2f:34:ad:6f:c8:c0: 91:aa:4e:71:37:da:31:99:98:9c:39:1b:4e:62:b2:bd:3a:95: e4:15:ba:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYx4fNNoBY0vzpbenoOvP8btCpFswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTUxMTI1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTVkYjlmYzEyYjdlY2NhM2Y2MjVlOTk1NDU1MzM2N2Y1 YzI0YzQyZGI5ZDc2ZGUzYTY5ZmFkOWZjZjFhNzVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoTkzU2AgZ8ovMCEBBwfh19m8aLEYAFyJRwWThfkFDdMpA 1T/d2FjnrMnzaJ7TNBgqWPJENELOOxQwE+kS76X4OmSfoWALmc32YF1Ibgn9Qa02 7gvJ0n784MXr6EbEtH+NitAGwB7Jmbl6CuaiAwVAqBWAiZ9gU4If8nRLIitU7lr6 KcPIYbtz1y8fVj2qLV24dRG+GyVdBSV0V50wLot/6PJmcC1xoupywuD0AdeS3S2N Yrr7TSEgOozNh7h+4wZVIHcjlyGjCCrbXzuhiXNTVi2xkfOYKImwvUF68puPfpGL bAdVzBikMOWxGP5PQtDpz1FrjkhkKxCmDYbaQYlxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDEmKN3UEphmsN4Td6kiuWJB3KQMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA0MzY5YTJkLTJmNDktNGEzMC04Y2UxLTMzNzcxMzE0MDVhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9UQwDQYJKoZIhvcNAQELBQADggEBABUIKf3BaJQTsq6IruTUeTZIRYgt GHl2yGTfm/2MJLAhur2XHYHAqCmGPkS2Cy7oR61MIaSpWpnNoOr8/IRWiGKsflgq 8jEXt3Lj5RwzBByLwkvAVQgWy3LcX6DP6PxNWz1ZMgvO2a9yZUU7ecasO/xktXKQ 3uCYvPzf+DBP/EKVam8hoS7rUYWxQid6wv2OmIiBbVwQ9qMVhhZ7XRihUl7KSPI6 J+hDpaHQP6hIPb+eZZ5qWVdW16zObVrfRQHoKSIVRp4ms4HYvDQE0zeciuEERXLw tTmppCHNtN9ku2poKZn6jy80rW/IwJGqTnE32jGZmJw5G05isr06leQVujc= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:41 2025 by rpki-client