$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e080d4f-2546-4fd5-91fc-ebee338e4473.roa File: 0e080d4f-2546-4fd5-91fc-ebee338e4473.roa (raw, json) Hash identifier: P0ee/o06Y0nXdslLk7jPj7AqeubKOEJj6V7McYmicvY= Subject key identifier: D7:98:2B:36:8D:44:D8:3D:F2:36:36:44:3B:39:E2:E4:70:2B:75:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 210AB4EBFC20C79F4129699B6EB1A248F81854C1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e080d4f-2546-4fd5-91fc-ebee338e4473.roa Signing time: Sat 18 Oct 2025 17:53:33 +0000 ROA not before: Sat 18 Oct 2025 17:53:33 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0a:b4:eb:fc:20:c7:9f:41:29:69:9b:6e:b1:a2:48:f8:18:54:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:53:33 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=51df8bb01c8433d124d487d8f9971ce4ab77b911ec6d3159924da95240a5b7e9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bc:5f:9b:96:c1:fa:77:6d:a4:b9:1b:f1:14: 39:9c:a3:49:59:b3:c7:98:22:0b:2d:92:b1:4a:8d: fe:e6:1c:bc:34:70:ea:b1:4e:d7:46:2f:5b:67:04: 08:10:15:84:85:fd:70:43:04:a0:5a:35:02:83:15: 99:3d:5d:62:fb:dc:42:96:73:63:f8:c4:b8:21:88: b3:b9:5f:49:47:e8:c8:d8:cc:83:98:7e:97:b6:99: 10:48:a2:fc:c4:63:f8:df:41:22:a7:59:73:cd:4f: 85:23:2c:73:f4:6a:7c:ac:8b:2a:b1:a2:99:ad:73: 03:2e:0e:56:67:98:85:ef:17:df:32:0a:9f:03:78: 1b:c8:f8:6e:8b:ed:d2:6f:1e:ad:62:e9:34:f0:cb: 84:22:9a:9b:26:5e:35:82:30:3b:ff:c8:aa:e8:23: 78:eb:36:1d:a7:51:ca:9a:be:5e:f3:0d:36:3e:b8: 66:b6:6a:ea:dd:2a:55:36:36:a3:0e:fc:01:c5:a6: 8d:82:4c:1c:56:e5:fe:d5:b7:e5:e9:6a:01:72:03: 66:cd:75:ab:0e:43:25:b2:2b:5a:ed:e2:c6:74:a8: 71:1f:4f:18:9d:e1:bb:3b:a5:ab:a3:53:fa:a9:c6: fb:fe:5b:11:4a:c0:55:e0:2b:7c:58:d0:1a:c3:e9: 6b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:98:2B:36:8D:44:D8:3D:F2:36:36:44:3B:39:E2:E4:70:2B:75:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e080d4f-2546-4fd5-91fc-ebee338e4473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.156.0/22 Signature Algorithm: sha256WithRSAEncryption 37:66:76:68:36:ef:f2:27:e6:9f:ea:f9:47:17:af:39:38:42: ae:34:9b:05:e7:e8:01:c3:5a:f1:6c:1b:80:25:76:c1:cd:58: bc:c6:a3:5b:ee:f9:5d:73:99:c0:4d:b1:a1:7b:8b:85:24:0c: 54:be:3e:6b:00:65:27:a4:46:00:a7:5f:43:d6:90:f8:f5:19: 9d:28:16:73:3a:0b:10:0d:41:a8:13:c8:6e:3c:1f:8e:69:3f: 61:0a:64:ce:8f:da:0d:b9:d0:f9:a3:78:69:34:20:22:6e:fe: 2f:74:85:66:42:60:c9:f6:21:2f:8a:e4:72:bd:35:d9:fa:bb: 88:21:ef:dd:08:2e:2d:ef:f4:51:4f:76:28:00:01:49:fe:6a: 69:63:51:f5:e5:78:0b:3a:c9:43:46:ab:99:9a:44:3f:ee:84: 7b:ad:74:55:9e:44:cc:ed:70:83:65:2e:92:df:ba:a8:d9:9c: 42:11:98:c8:d5:7b:2a:ac:3f:0b:ff:ce:22:6d:76:fe:c7:02: 87:aa:69:41:86:52:96:36:d4:cf:11:88:ac:53:10:e9:15:a6: b4:20:0e:a2:76:13:1f:50:7f:3d:89:ea:b4:a5:57:05:ed:7a: 36:5b:2e:bb:55:0a:15:34:d9:9d:f0:d9:46:db:1b:55:71:58: 34:1d:27:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIQq06/wgx59BKWmbbrGiSPgYVMEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTc1MzMzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWRmOGJiMDFjODQzM2QxMjRkNDg3ZDhmOTk3MWNlNGFi NzdiOTExZWM2ZDMxNTk5MjRkYTk1MjQwYTViN2U5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwvF+blsH6d22kuRvxFDmco0lZs8eYIgstkrFKjf7mHLw0 cOqxTtdGL1tnBAgQFYSF/XBDBKBaNQKDFZk9XWL73EKWc2P4xLghiLO5X0lH6MjY zIOYfpe2mRBIovzEY/jfQSKnWXPNT4UjLHP0anysiyqxopmtcwMuDlZnmIXvF98y Cp8DeBvI+G6L7dJvHq1i6TTwy4QimpsmXjWCMDv/yKroI3jrNh2nUcqavl7zDTY+ uGa2aurdKlU2NqMO/AHFpo2CTBxW5f7Vt+XpagFyA2bNdasOQyWyK1rt4sZ0qHEf Txid4bs7paujU/qpxvv+WxFKwFXgK3xY0BrD6WuzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU15grNo1E2D3yNjZEOzni5HArdY8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBlMDgwZDRmLTI1NDYtNGZkNS05MWZjLWViZWUzMzhlNDQ3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISmpwwDQYJKoZIhvcNAQELBQADggEBADdmdmg27/In5p/q+UcXrzk4Qq40 mwXn6AHDWvFsG4AldsHNWLzGo1vu+V1zmcBNsaF7i4UkDFS+PmsAZSekRgCnX0PW kPj1GZ0oFnM6CxANQagTyG48H45pP2EKZM6P2g250PmjeGk0ICJu/i90hWZCYMn2 IS+K5HK9Ndn6u4gh790ILi3v9FFPdigAAUn+amljUfXleAs6yUNGq5maRD/uhHut dFWeRMztcINlLpLfuqjZnEIRmMjVeyqsPwv/ziJtdv7HAoeqaUGGUpY21M8RiKxT EOkVprQgDqJ2Ex9Qfz2J6rSlVwXtejZbLrtVChU02Z3w2UbbG1VxWDQdJ1E= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:35 2025 by rpki-client