$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ade161c-b56c-4816-aa55-527cdc748ead.roa File: 0ade161c-b56c-4816-aa55-527cdc748ead.roa (raw, json) Hash identifier: 8Yy95vTyWZk1E31IGvVuJqrV8mvET3dAaHiyTiZieCo= Subject key identifier: D0:87:FB:58:A9:AB:63:14:3E:33:C1:E6:94:90:D6:FD:93:22:F3:12 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 055EF03C38E1A93E17ABD113ACC92A0CF5719A00 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ade161c-b56c-4816-aa55-527cdc748ead.roa Signing time: Sun 19 Oct 2025 14:10:12 +0000 ROA not before: Sun 19 Oct 2025 14:10:12 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5e:f0:3c:38:e1:a9:3e:17:ab:d1:13:ac:c9:2a:0c:f5:71:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:10:12 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=0489e586c2a2b6b3aa35d8cdbb25d3f947c0add7df844f214101863956c21d71, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d8:2d:81:46:b3:5b:90:f0:5a:88:cf:12:19: ee:04:c1:17:ca:ba:a2:15:a3:ac:2f:96:73:61:0f: ae:63:65:ae:c9:2a:cf:65:b0:ed:20:35:ef:49:09: 3d:43:76:8e:4e:85:b4:90:1d:71:63:4b:3b:1e:e8: fd:8b:cd:16:23:53:93:01:9f:30:97:52:8a:17:97: fe:c4:ea:9d:f8:4d:28:92:e3:7c:13:fd:88:b9:18: 78:72:6a:7a:55:61:6e:53:43:8d:48:3c:6c:39:f4: 0d:9a:90:d6:b1:d4:5c:8f:7a:78:a7:93:56:e9:a3: 1d:cb:a7:89:75:d5:a9:09:0f:d4:22:92:30:3f:5a: 3e:17:57:20:5d:8c:15:a6:52:a1:39:a9:6b:f2:ad: 0a:02:a3:95:21:ab:ea:9e:28:f2:7f:41:87:d0:04: 74:fb:30:a2:f7:32:4f:38:bb:45:06:43:b6:22:64: 61:80:83:5e:3e:2c:e6:d3:31:c2:26:9a:9a:b3:31: 24:71:52:8d:da:ab:b9:c0:b9:bb:3a:63:8b:59:42: d3:be:ac:86:d5:83:26:5b:1c:83:3d:f2:0d:c5:14: 8a:97:6d:17:3c:e0:17:08:48:44:df:26:b1:ed:0f: 07:bc:93:97:bf:1b:fd:ec:12:ce:22:5e:ab:b7:cf: c8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:87:FB:58:A9:AB:63:14:3E:33:C1:E6:94:90:D6:FD:93:22:F3:12 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ade161c-b56c-4816-aa55-527cdc748ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.55.0/24 Signature Algorithm: sha256WithRSAEncryption 81:13:67:a1:86:bd:29:66:c3:21:20:b2:8c:a3:7f:73:01:62: 23:fa:0b:6f:75:66:e1:76:5f:a6:8e:3f:9c:94:8c:58:64:18: 9f:bc:c8:1e:2c:62:4f:de:fa:23:0d:d7:91:1c:05:ed:35:ee: 7b:3a:42:82:5e:8c:6d:82:b2:66:c0:c4:c1:3f:b6:43:b9:3e: a2:1f:8d:93:d4:80:ff:fb:38:58:f0:b0:5f:a6:ab:26:e0:83: b2:a7:09:67:73:20:73:d8:17:98:fc:d2:9b:55:2d:9f:43:c3: f8:9c:49:8a:d5:0f:62:36:4e:91:cb:6a:b6:02:f6:ec:49:9f: 68:7c:10:ec:ab:ca:1d:67:27:da:f6:25:f7:34:22:87:89:5a: c4:49:98:16:a9:5d:31:c4:03:12:5a:8e:c5:4f:07:88:45:e7: e3:98:07:74:16:27:2b:ba:75:72:c2:80:4b:d7:19:91:fd:cb: fb:9d:71:a3:06:b2:12:df:4d:87:45:02:bc:3f:5a:56:51:cb: 1e:91:64:9b:89:0d:09:dc:64:1a:94:d0:da:4b:79:44:13:d9: c4:a0:0d:2d:7a:95:f6:28:20:14:a5:48:14:a9:45:4a:10:a2: fa:06:1d:ae:74:36:5a:a3:5e:3b:cc:ad:cd:83:23:04:75:ca: 5a:86:76:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBV7wPDjhqT4Xq9ETrMkqDPVxmgAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQxMDEyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDg5ZTU4NmMyYTJiNmIzYWEzNWQ4Y2RiYjI1ZDNmOTQ3 YzBhZGQ3ZGY4NDRmMjE0MTAxODYzOTU2YzIxZDcxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR2C2BRrNbkPBaiM8SGe4EwRfKuqIVo6wvlnNhD65jZa7J Ks9lsO0gNe9JCT1Ddo5OhbSQHXFjSzse6P2LzRYjU5MBnzCXUooXl/7E6p34TSiS 43wT/Yi5GHhyanpVYW5TQ41IPGw59A2akNax1FyPenink1bpox3Lp4l11akJD9Qi kjA/Wj4XVyBdjBWmUqE5qWvyrQoCo5Uhq+qeKPJ/QYfQBHT7MKL3Mk84u0UGQ7Yi ZGGAg14+LObTMcImmpqzMSRxUo3aq7nAubs6Y4tZQtO+rIbVgyZbHIM98g3FFIqX bRc84BcISETfJrHtDwe8k5e/G/3sEs4iXqu3z8j/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0If7WKmrYxQ+M8HmlJDW/ZMi8xIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBhZGUxNjFjLWI1NmMtNDgxNi1hYTU1LTUyN2NkYzc0OGVhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQjcwDQYJKoZIhvcNAQELBQADggEBAIETZ6GGvSlmwyEgsoyjf3MBYiP6 C291ZuF2X6aOP5yUjFhkGJ+8yB4sYk/e+iMN15EcBe017ns6QoJejG2CsmbAxME/ tkO5PqIfjZPUgP/7OFjwsF+mqybgg7KnCWdzIHPYF5j80ptVLZ9Dw/icSYrVD2I2 TpHLarYC9uxJn2h8EOyryh1nJ9r2Jfc0IoeJWsRJmBapXTHEAxJajsVPB4hF5+OY B3QWJyu6dXLCgEvXGZH9y/udcaMGshLfTYdFArw/WlZRyx6RZJuJDQncZBqU0NpL eUQT2cSgDS16lfYoIBSlSBSpRUoQovoGHa50NlqjXjvMrc2DIwR1ylqGdqA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:45:26 2025 by rpki-client