$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14626009-2224-4409-a7bc-f6a19e529771.roa File: 14626009-2224-4409-a7bc-f6a19e529771.roa (raw, json) Hash identifier: cNr0jOFIIj7FBHV1+YGZbZgHu+tK8rdjRjTUOcockWI= Subject key identifier: 78:09:B9:02:FA:49:0E:20:44:56:B4:BA:4D:6C:43:5D:80:48:C5:4A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0522D9B087D916A8B346E1F4D8B5B9D6B62C9486 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14626009-2224-4409-a7bc-f6a19e529771.roa Signing time: Sat 18 Oct 2025 16:41:23 +0000 ROA not before: Sat 18 Oct 2025 16:41:23 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:22:d9:b0:87:d9:16:a8:b3:46:e1:f4:d8:b5:b9:d6:b6:2c:94:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:41:23 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=a090714de48e35843a4a3539771f7b5b6cb096a35ff3ac223874482a571992ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:b7:b8:fd:a5:fb:18:f6:dd:d5:31:47:30: 7d:53:16:de:12:5f:0d:d0:71:1d:84:6d:40:6c:e3: b4:97:e7:40:9c:c8:b6:1e:83:d1:eb:28:48:37:00: 70:25:bb:83:ec:f7:d4:ed:62:2f:b0:c5:22:17:d7: 97:04:24:9f:03:a7:3c:69:99:e6:b4:88:63:02:b8: 43:ec:f5:8f:b3:fb:00:7b:0a:5f:52:3f:fc:19:26: e6:49:80:2c:03:e1:d4:3a:c5:62:cd:6f:f9:23:34: 66:7c:11:47:ad:fa:8c:25:0b:02:60:8b:aa:1e:f8: 64:2e:03:7c:67:52:8f:0d:ce:c7:cd:fc:f0:9d:18: 05:9b:eb:97:b6:4f:e8:7f:85:15:82:b0:69:43:56: 20:58:4d:8d:95:8a:6c:65:e2:9f:e8:3e:48:fa:bd: cd:5f:33:f2:4f:4f:70:34:f7:e6:43:0d:df:e1:b3: 89:93:dd:24:e0:f0:02:e1:86:87:6c:f6:12:18:a3: 11:f9:59:68:bc:1f:ca:a1:8e:7b:05:cd:9c:b0:bf: 08:df:83:aa:99:f6:e3:e0:1b:aa:c5:b5:4a:47:20: d7:6c:67:7e:b9:01:94:5c:7d:10:aa:3d:75:4a:8c: d3:21:52:b3:67:d5:29:90:8e:2b:79:ea:d9:97:04: 04:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:09:B9:02:FA:49:0E:20:44:56:B4:BA:4D:6C:43:5D:80:48:C5:4A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14626009-2224-4409-a7bc-f6a19e529771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.12.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:77:24:99:35:33:9f:02:91:57:78:63:85:41:d8:b8:b6:2b: f7:81:0d:6e:97:c1:14:a0:14:76:ec:40:2e:c2:0f:89:e5:c1: 93:1d:ac:52:0d:12:2b:97:f9:8c:f5:40:1e:d8:a1:23:05:0a: 3a:5d:67:02:b1:f3:be:95:64:a9:a9:62:44:4f:3e:98:20:87: d3:cd:e7:76:ca:16:d0:a0:04:38:aa:2c:4a:03:a5:b3:4d:c3: 21:89:b5:5d:46:97:aa:ae:6b:6e:31:ae:06:25:34:d2:1f:97: bd:f5:a0:b9:7a:9a:9a:9a:3d:b2:21:f8:6a:6b:c4:07:4e:44: 3a:f7:3d:a3:9d:11:49:94:da:8c:92:25:20:ac:1b:29:ef:d3: eb:c2:5b:2f:16:7b:c5:dd:10:2e:f3:b5:98:2e:cc:cd:49:75: 3a:bd:53:61:9b:ef:89:2d:6f:08:dd:ab:48:4b:e3:92:b6:14: 5b:35:6e:af:1e:bf:7d:71:7c:d1:53:b9:d5:56:e4:81:81:be: 37:44:e8:48:63:22:9a:82:f9:ca:e1:00:cb:9e:7e:4b:9a:07: 22:c2:68:ac:f6:80:3d:81:8d:86:98:7c:00:76:4e:7f:93:51: bc:d4:4f:15:4d:6d:ce:9a:2e:38:6c:d8:99:64:bb:6b:6e:a9: f0:20:f8:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBSLZsIfZFqizRuH02LW51rYslIYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTY0MTIzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDkwNzE0ZGU0OGUzNTg0M2E0YTM1Mzk3NzFmN2I1YjZj YjA5NmEzNWZmM2FjMjIzODc0NDgyYTU3MTk5MmNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrgre4/aX7GPbd1TFHMH1TFt4SXw3QcR2EbUBs47SX50Cc yLYeg9HrKEg3AHAlu4Ps99TtYi+wxSIX15cEJJ8Dpzxpmea0iGMCuEPs9Y+z+wB7 Cl9SP/wZJuZJgCwD4dQ6xWLNb/kjNGZ8EUet+owlCwJgi6oe+GQuA3xnUo8NzsfN /PCdGAWb65e2T+h/hRWCsGlDViBYTY2Vimxl4p/oPkj6vc1fM/JPT3A09+ZDDd/h s4mT3STg8ALhhods9hIYoxH5WWi8H8qhjnsFzZywvwjfg6qZ9uPgG6rFtUpHINds Z365AZRcfRCqPXVKjNMhUrNn1SmQjit56tmXBASdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeAm5AvpJDiBEVrS6TWxDXYBIxUowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE0NjI2MDA5LTIyMjQtNDQwOS1hN2JjLWY2YTE5ZTUyOTc3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISoAwwDQYJKoZIhvcNAQELBQADggEBAC53JJk1M58CkVd4Y4VB2Li2K/eB DW6XwRSgFHbsQC7CD4nlwZMdrFINEiuX+Yz1QB7YoSMFCjpdZwKx876VZKmpYkRP Ppggh9PN53bKFtCgBDiqLEoDpbNNwyGJtV1Gl6qua24xrgYlNNIfl731oLl6mpqa PbIh+GprxAdORDr3PaOdEUmU2oySJSCsGynv0+vCWy8We8XdEC7ztZguzM1JdTq9 U2Gb74ktbwjdq0hL45K2FFs1bq8ev31xfNFTudVW5IGBvjdE6EhjIpqC+crhAMue fkuaByLCaKz2gD2BjYaYfAB2Tn+TUbzUTxVNbc6aLjhs2Jlku2tuqfAg+N0= -----END CERTIFICATE-----Generated at Mon Oct 20 11:54:59 2025 by rpki-client