$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/04cdc23a-c1fe-414e-9e1d-200e06d16414.roa File: 04cdc23a-c1fe-414e-9e1d-200e06d16414.roa (raw, json) Hash identifier: b05iOm2B9VCscDSIl9wYqcYmz+QlyhaDE+peBsvsR+k= Subject key identifier: 84:E2:EF:11:6C:00:6D:4C:14:DB:39:39:CA:C6:F6:98:43:14:60:E5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 596D066A15F1D1EE882DA58E93792D5B0D2EA88A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/04cdc23a-c1fe-414e-9e1d-200e06d16414.roa Signing time: Sat 18 Oct 2025 12:50:12 +0000 ROA not before: Sat 18 Oct 2025 12:50:12 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6d:06:6a:15:f1:d1:ee:88:2d:a5:8e:93:79:2d:5b:0d:2e:a8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:50:12 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=e34f6888916d4c6e688fb46e0e2946a35ba328a8e065b04c0934ffcd996b6bc9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:f8:d6:63:3f:05:c0:60:31:cb:af:a2:53: 0f:2b:6d:24:cd:09:e5:3a:3b:01:76:87:bd:16:b0: 98:10:47:58:c9:b3:60:17:ab:c0:53:e7:cd:07:2a: 58:73:10:a9:f8:cb:d5:cd:c8:ce:20:40:19:d9:a9: d6:1d:80:80:92:67:b6:a1:53:38:d0:8b:76:8d:b8: af:2a:92:23:bc:93:12:a7:fe:18:41:37:fd:77:55: e1:28:27:54:98:9f:5a:2f:6b:ef:da:e3:37:f9:44: 6a:99:c6:8f:7f:03:4b:49:6d:93:6b:52:08:3b:d1: 3d:1a:d2:00:d3:a3:b3:27:67:0c:49:b3:9d:6a:e3: 46:2e:8d:be:e4:2c:dd:2a:dc:af:fd:93:5d:b2:bd: ef:59:4b:b5:37:4f:5e:7a:49:36:22:36:de:9c:fa: 2f:ca:66:7f:49:9f:ce:52:23:a7:8c:63:12:a3:ec: 3d:95:78:88:20:c1:80:54:6b:db:6e:e1:75:e6:18: fe:62:72:98:22:49:d7:ec:80:a3:23:a8:39:32:66: 35:ea:d4:2d:a4:7f:36:5d:52:bb:cb:9d:5a:56:24: c3:61:c6:cb:9b:33:dc:9f:a1:9f:08:0b:c9:44:c0: e3:80:ef:04:20:14:b2:64:a5:a2:6b:03:b5:ff:4c: 36:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E2:EF:11:6C:00:6D:4C:14:DB:39:39:CA:C6:F6:98:43:14:60:E5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/04cdc23a-c1fe-414e-9e1d-200e06d16414.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.0.0/22 Signature Algorithm: sha256WithRSAEncryption 24:1a:1e:24:6f:03:15:1d:4b:75:3e:0a:bf:a3:28:cf:c5:88: 55:4d:e8:1b:76:07:ab:29:0e:3e:c6:ad:30:1c:90:2b:09:d5: 8a:99:5d:24:d1:e6:a5:7e:4c:12:5b:d3:ea:ed:dc:17:0f:e0: 0e:01:b3:f7:68:b8:54:ae:43:62:c2:e4:d3:91:3c:8a:38:42: 0c:bf:1d:a4:21:ea:12:9d:d5:04:1b:f4:31:91:08:e4:fa:2f: 81:fe:c0:f5:9c:cf:be:f3:38:fb:4d:e6:aa:cf:68:1b:26:03: 45:cb:55:69:8b:e2:f6:ad:67:ae:3c:33:2a:ed:cc:d5:53:22: e3:ed:1a:16:b5:ad:0b:5f:97:d3:1d:01:8d:52:f9:10:1f:01: 15:8d:ee:e5:ed:72:77:c8:09:3c:74:b7:96:ef:7d:a1:e7:9d: f2:9a:38:0f:6f:40:98:75:43:9f:5e:03:3f:ba:91:81:99:cc: 0c:27:99:c0:0a:e6:a4:42:3e:68:09:ab:70:c1:5c:a5:c9:9f: 2c:8b:a3:a4:45:5a:0a:25:8b:a9:83:cc:b3:d4:0b:34:be:cd: 2c:67:f0:71:69:14:85:31:98:99:3b:9a:e0:50:8c:48:cb:24: 4d:b8:75:be:e7:92:69:c2:a2:fd:0f:9a:0b:6c:5b:95:8a:cb: 99:ee:77:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWW0GahXx0e6ILaWOk3ktWw0uqIowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTI1MDEyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzRmNjg4ODkxNmQ0YzZlNjg4ZmI0NmUwZTI5NDZhMzVi YTMyOGE4ZTA2NWIwNGMwOTM0ZmZjZDk5NmI2YmM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnJPjWYz8FwGAxy6+iUw8rbSTNCeU6OwF2h70WsJgQR1jJ s2AXq8BT580HKlhzEKn4y9XNyM4gQBnZqdYdgICSZ7ahUzjQi3aNuK8qkiO8kxKn /hhBN/13VeEoJ1SYn1ova+/a4zf5RGqZxo9/A0tJbZNrUgg70T0a0gDTo7MnZwxJ s51q40Yujb7kLN0q3K/9k12yve9ZS7U3T156STYiNt6c+i/KZn9Jn85SI6eMYxKj 7D2VeIggwYBUa9tu4XXmGP5icpgiSdfsgKMjqDkyZjXq1C2kfzZdUrvLnVpWJMNh xsubM9yfoZ8IC8lEwOOA7wQgFLJkpaJrA7X/TDbZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhOLvEWwAbUwU2zk5ysb2mEMUYOUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA0Y2RjMjNhLWMxZmUtNDE0ZS05ZTFkLTIwMGUwNmQxNjQxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISoQAwDQYJKoZIhvcNAQELBQADggEBACQaHiRvAxUdS3U+Cr+jKM/FiFVN 6Bt2B6spDj7GrTAckCsJ1YqZXSTR5qV+TBJb0+rt3BcP4A4Bs/douFSuQ2LC5NOR PIo4Qgy/HaQh6hKd1QQb9DGRCOT6L4H+wPWcz77zOPtN5qrPaBsmA0XLVWmL4vat Z648MyrtzNVTIuPtGha1rQtfl9MdAY1S+RAfARWN7uXtcnfICTx0t5bvfaHnnfKa OA9vQJh1Q59eAz+6kYGZzAwnmcAK5qRCPmgJq3DBXKXJnyyLo6RFWgoli6mDzLPU CzS+zSxn8HFpFIUxmJk7muBQjEjLJE24db7nkmnCov0PmgtsW5WKy5nudwc= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:04 2025 by rpki-client