$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08823712-28c0-4476-b0b2-16120132b7cb.roa File: 08823712-28c0-4476-b0b2-16120132b7cb.roa (raw, json) Hash identifier: SwzMxeVBZch9ntTHFaC5eWOH7otaT1tVSegDvPbRg0M= Subject key identifier: F9:F1:47:8C:D5:44:C7:AC:37:B5:80:F4:23:06:34:DD:76:1F:0E:48 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1E5A610B6BB9FFCB8E9D3059A4E97120915344E0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08823712-28c0-4476-b0b2-16120132b7cb.roa Signing time: Thu 16 Oct 2025 16:07:48 +0000 ROA not before: Thu 16 Oct 2025 16:07:48 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:5a:61:0b:6b:b9:ff:cb:8e:9d:30:59:a4:e9:71:20:91:53:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 16:07:48 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=6194186efe79c1bbd70a7be5505cafce43c8461c56e438ba631f86397a359247, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:05:9d:f7:0f:98:58:e1:4a:6e:3d:4b:6b:c4: 65:7b:16:12:a4:cb:53:39:8b:30:98:64:79:5e:51: a3:ed:59:5f:57:a2:22:f5:29:b3:17:42:16:fd:73: 11:b5:b4:a8:33:de:bf:b1:86:08:3a:2d:26:5e:53: 97:41:28:92:6f:ea:0a:5c:fe:62:1e:1e:9c:1c:b3: 3d:c1:e8:a2:63:4b:1a:1d:b9:5f:25:ae:48:78:2f: 42:c0:7d:d2:76:e7:e4:b3:7b:08:65:de:2d:48:a7: 10:53:b0:44:f6:be:a4:ff:dd:7d:14:40:42:b7:0f: fa:02:da:08:fd:02:63:5c:e8:22:17:f7:a0:c4:f9: e1:a6:df:62:4d:c4:f5:7c:b7:4d:ec:24:32:ca:5e: 1e:14:b6:8d:53:2f:7b:a5:ff:96:3f:95:45:db:97: 1b:b6:f2:77:7a:b0:8e:77:a9:20:2f:25:ee:17:96: 52:63:76:33:e5:69:55:18:d5:f2:33:d4:0c:97:d4: bc:47:98:b6:61:d4:28:20:8b:ad:b7:9c:81:7e:95: 23:a0:24:27:cb:ac:3d:00:cb:e1:fe:25:b7:af:a4: b1:59:f5:1d:bb:bb:a6:c5:1b:77:c1:0d:13:56:81: 18:42:40:19:50:0e:20:97:80:6f:6c:a0:bb:ae:69: e8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F1:47:8C:D5:44:C7:AC:37:B5:80:F4:23:06:34:DD:76:1F:0E:48 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08823712-28c0-4476-b0b2-16120132b7cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.105.0/24 Signature Algorithm: sha256WithRSAEncryption 34:ff:77:15:1c:95:ef:9e:d6:80:0c:1e:d2:9d:1e:9c:6e:45: bf:91:fa:d0:bb:ca:bf:c4:e8:ef:1a:5a:73:76:60:91:20:5b: 1d:8f:50:5d:53:11:8b:6f:be:c0:3c:4b:ac:c2:bf:26:c3:b9: 61:5d:fc:25:62:ac:70:9d:15:71:08:44:75:1b:a7:fe:51:07: ef:e5:bd:68:16:ea:07:7e:13:45:5c:d9:06:10:32:49:17:7e: c9:d6:e6:a0:12:2b:11:14:2a:d2:ff:f1:53:4d:12:2c:de:8c: d0:6f:e3:08:50:4f:23:34:21:4d:0f:ec:55:b8:57:b6:84:b5: d3:19:3d:66:de:af:fe:a5:ec:ef:ac:b2:d6:d4:a2:73:4d:76: a1:fe:94:f0:8d:3c:0d:44:6b:e4:0a:d4:36:12:46:e5:e8:2e: 0e:ca:ae:40:51:19:62:fb:8b:62:ba:df:82:bb:a2:de:f5:d8: 06:19:37:b3:c1:4a:e5:9d:30:ea:18:90:75:1d:0a:26:97:cf: 96:31:13:ce:1c:a2:7c:4d:e0:36:7a:e5:0d:8d:36:ed:2a:4b: 91:ba:4d:74:b0:71:cf:47:ea:c1:e4:ea:ef:60:73:2d:10:92: 34:d5:76:bd:24:17:ac:6a:f8:ed:8f:b4:be:e6:f4:6c:b9:35: 84:3d:04:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHlphC2u5/8uOnTBZpOlxIJFTROAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTYwNzQ4WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTk0MTg2ZWZlNzljMWJiZDcwYTdiZTU1MDVjYWZjZTQz Yzg0NjFjNTZlNDM4YmE2MzFmODYzOTdhMzU5MjQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjBZ33D5hY4UpuPUtrxGV7FhKky1M5izCYZHleUaPtWV9X oiL1KbMXQhb9cxG1tKgz3r+xhgg6LSZeU5dBKJJv6gpc/mIeHpwcsz3B6KJjSxod uV8lrkh4L0LAfdJ25+Szewhl3i1IpxBTsET2vqT/3X0UQEK3D/oC2gj9AmNc6CIX 96DE+eGm32JNxPV8t03sJDLKXh4Uto1TL3ul/5Y/lUXblxu28nd6sI53qSAvJe4X llJjdjPlaVUY1fIz1AyX1LxHmLZh1Cggi623nIF+lSOgJCfLrD0Ay+H+JbevpLFZ 9R27u6bFG3fBDRNWgRhCQBlQDiCXgG9soLuuaeg1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+fFHjNVEx6w3tYD0IwY03XYfDkgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA4ODIzNzEyLTI4YzAtNDQ3Ni1iMGIyLTE2MTIwMTMyYjdjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRGkwDQYJKoZIhvcNAQELBQADggEBADT/dxUcle+e1oAMHtKdHpxuRb+R +tC7yr/E6O8aWnN2YJEgWx2PUF1TEYtvvsA8S6zCvybDuWFd/CVirHCdFXEIRHUb p/5RB+/lvWgW6gd+E0Vc2QYQMkkXfsnW5qASKxEUKtL/8VNNEizejNBv4whQTyM0 IU0P7FW4V7aEtdMZPWber/6l7O+sstbUonNNdqH+lPCNPA1Ea+QK1DYSRuXoLg7K rkBRGWL7i2K634K7ot712AYZN7PBSuWdMOoYkHUdCiaXz5YxE84conxN4DZ65Q2N Nu0qS5G6TXSwcc9H6sHk6u9gcy0QkjTVdr0kF6xq+O2PtL7m9Gy5NYQ9BPA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:06:18 2025 by rpki-client