$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/140f0c68-43d2-4b57-9511-0ffe6bf2de17.roa File: 140f0c68-43d2-4b57-9511-0ffe6bf2de17.roa (raw, json) Hash identifier: +br/2YGkl9RpZIsMb0sjGiqYanCoi+ZJf4Bpj/11NTw= Subject key identifier: 59:75:2E:75:E6:47:D2:5F:5F:E2:F2:F3:35:16:B4:BB:09:AA:D7:7B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1355DE6B5570421D55943892978DBF1FB1DEC4F8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/140f0c68-43d2-4b57-9511-0ffe6bf2de17.roa Signing time: Sun 19 Oct 2025 15:23:08 +0000 ROA not before: Sun 19 Oct 2025 15:23:08 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:55:de:6b:55:70:42:1d:55:94:38:92:97:8d:bf:1f:b1:de:c4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 15:23:08 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=25c34e0498eb095d8e8c4f01d92b2d38d5b1f9952904d8380e51a17536fb93a2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:ed:66:71:f9:60:6a:0c:4b:9c:91:f4:6d: ca:c4:01:c2:bb:41:29:fd:37:c4:38:5b:59:53:48: cc:68:06:97:b3:0d:03:e1:5c:fb:77:82:24:b6:4d: b7:d4:d1:37:38:e8:76:72:fd:9d:e5:38:8b:1e:ec: 81:42:11:b8:bf:da:95:2c:3b:eb:a5:dd:70:dd:8a: c3:4b:a0:60:89:21:62:45:e9:8e:b1:d0:62:4c:56: 0a:82:59:90:db:c4:b5:b0:96:1d:e0:e2:e7:b4:41: 38:ed:d7:e8:0f:b9:6b:9a:cb:31:2e:48:03:6a:54: f2:9b:dc:ba:a8:90:23:9f:e2:05:f5:7a:78:58:98: ee:58:df:1e:22:a6:91:7e:05:16:d8:12:98:c0:9e: f4:03:e3:91:1a:f5:62:d5:62:57:b9:c9:2c:a8:da: fe:07:11:53:e8:34:64:0d:60:fb:b2:6b:21:8a:cf: 17:2e:2e:7c:ff:57:38:f1:5e:a8:ef:36:4f:1b:61: bd:98:41:2b:55:8b:13:a4:75:ce:d5:5a:95:85:e6: 1e:a1:22:58:50:f7:f8:91:06:a0:28:8a:29:40:80: 03:8a:06:33:ab:84:e4:6d:76:f0:8f:30:86:7d:6d: 54:1d:85:18:70:39:d5:90:eb:44:21:c1:b8:5b:61: 5c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:75:2E:75:E6:47:D2:5F:5F:E2:F2:F3:35:16:B4:BB:09:AA:D7:7B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/140f0c68-43d2-4b57-9511-0ffe6bf2de17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.128.0/24 Signature Algorithm: sha256WithRSAEncryption 97:0a:e8:f2:37:bb:a1:68:58:75:3e:68:4f:bb:03:db:3b:0a: c4:20:ba:a4:32:df:34:c9:e7:39:08:49:1e:1e:97:13:22:28: c4:28:44:55:46:f4:88:76:4f:29:9d:6c:e3:05:79:3d:4e:12: e9:c1:32:7b:ed:a8:ae:41:b4:5b:b3:9e:e3:c4:e5:81:8c:a0: da:8d:42:9a:34:48:5f:fe:44:6c:97:f0:c4:4e:74:56:6a:d8: 6c:82:8c:79:a6:76:67:92:bc:0d:a0:d8:59:9c:37:a9:9b:0c: 94:fa:cd:a6:26:82:ae:f9:07:07:72:f2:64:87:63:d8:44:98: e2:71:6f:35:8f:a6:9c:81:7f:85:6b:f1:c5:23:86:08:07:0f: 80:53:9d:68:c3:aa:a1:a0:a0:7d:d9:b5:b7:01:08:8a:21:7b: f7:c5:90:92:14:10:d4:5b:59:f9:d1:49:2e:da:21:19:db:62: e7:a2:dc:c7:fd:da:5c:05:30:9e:40:b4:c6:83:19:fa:29:b9: 01:2a:71:e0:bd:8b:c6:70:c9:a1:91:0b:54:53:a3:12:e1:26: 45:b8:a7:d4:2d:d8:09:77:94:d1:b5:f4:89:5c:d4:40:53:31: f8:b8:34:3c:df:0c:50:b9:b7:54:52:c1:04:e9:3a:d2:c4:ca: 5a:11:5e:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE1Xea1VwQh1VlDiSl42/H7HexPgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTUyMzA4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWMzNGUwNDk4ZWIwOTVkOGU4YzRmMDFkOTJiMmQzOGQ1 YjFmOTk1MjkwNGQ4MzgwZTUxYTE3NTM2ZmI5M2EyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzde1mcflgagxLnJH0bcrEAcK7QSn9N8Q4W1lTSMxoBpez DQPhXPt3giS2TbfU0Tc46HZy/Z3lOIse7IFCEbi/2pUsO+ul3XDdisNLoGCJIWJF 6Y6x0GJMVgqCWZDbxLWwlh3g4ue0QTjt1+gPuWuayzEuSANqVPKb3LqokCOf4gX1 enhYmO5Y3x4ippF+BRbYEpjAnvQD45Ea9WLVYle5ySyo2v4HEVPoNGQNYPuyayGK zxcuLnz/VzjxXqjvNk8bYb2YQStVixOkdc7VWpWF5h6hIlhQ9/iRBqAoiilAgAOK BjOrhORtdvCPMIZ9bVQdhRhwOdWQ60QhwbhbYVw3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWXUudeZH0l9f4vLzNRa0uwmq13swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE0MGYwYzY4LTQzZDItNGI1Ny05NTExLTBmZmU2YmYyZGUxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQIAwDQYJKoZIhvcNAQELBQADggEBAJcK6PI3u6FoWHU+aE+7A9s7CsQg uqQy3zTJ5zkISR4elxMiKMQoRFVG9Ih2TymdbOMFeT1OEunBMnvtqK5BtFuznuPE 5YGMoNqNQpo0SF/+RGyX8MROdFZq2GyCjHmmdmeSvA2g2FmcN6mbDJT6zaYmgq75 Bwdy8mSHY9hEmOJxbzWPppyBf4Vr8cUjhggHD4BTnWjDqqGgoH3ZtbcBCIohe/fF kJIUENRbWfnRSS7aIRnbYuei3Mf92lwFMJ5AtMaDGfopuQEqceC9i8ZwyaGRC1RT oxLhJkW4p9Qt2Al3lNG19Ilc1EBTMfi4NDzfDFC5t1RSwQTpOtLEyloRXjI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:07:14 2025 by rpki-client