$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14994c42-c84e-4ec7-9ab4-51a8bc33b19c.roa File: 14994c42-c84e-4ec7-9ab4-51a8bc33b19c.roa (raw, json) Hash identifier: 5VX73eGXe1x9VDJwXmBuwXUee/wh97VoqUFX09tQzPY= Subject key identifier: 80:5D:12:5D:D1:ED:71:B6:69:E4:B8:DC:2B:CC:C6:35:32:BD:6F:24 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4846EE1E462850D7B446B259812E3A3DF26CD705 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14994c42-c84e-4ec7-9ab4-51a8bc33b19c.roa Signing time: Sat 18 Oct 2025 15:33:38 +0000 ROA not before: Sat 18 Oct 2025 15:33:38 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:46:ee:1e:46:28:50:d7:b4:46:b2:59:81:2e:3a:3d:f2:6c:d7:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 15:33:38 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=914909f30ac12fb8bcc833d42256c506944d9cea3f6c7cebe9651610db15e508, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:82:d8:e5:b3:55:2d:52:1f:fa:e3:02:0c:62: 49:8a:df:01:d4:25:4b:45:3d:db:ef:c5:d0:68:ea: 30:23:9e:dc:51:71:df:b9:7d:af:5c:1e:27:bc:99: 25:f7:26:30:32:06:41:8d:60:41:3d:8a:ff:2e:f5: 3b:25:e2:fa:37:3b:8e:33:6c:a9:da:bf:ba:15:be: 8b:73:e6:b0:a0:69:e6:74:c4:47:9a:49:d8:55:21: d4:3f:fc:80:9b:33:cf:77:0c:48:77:aa:a4:c8:06: 8e:7d:10:a5:f9:94:14:9c:62:4f:f0:59:9c:71:d6: 42:8c:61:92:10:ad:a4:76:6c:16:f2:51:91:46:d9: 88:ac:22:06:15:47:b2:cb:89:9e:4a:a2:d7:61:d4: 2a:66:9d:72:55:2b:56:b0:66:8e:50:1b:7f:95:4d: 26:8e:bb:05:ca:63:75:83:a4:87:60:f7:a6:f7:ad: 88:22:67:5d:2e:6f:f6:4f:72:dc:0b:d1:c8:f0:92: 9a:29:71:93:23:8f:bc:c8:a0:c3:f2:93:61:b1:f6: b6:78:88:07:d0:d9:a4:d0:36:60:6a:b3:b2:75:86: d8:92:61:71:a5:91:6b:60:0e:18:62:7a:c6:52:9f: 04:4c:e9:41:d8:32:46:e4:5e:d5:02:75:72:74:55: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5D:12:5D:D1:ED:71:B6:69:E4:B8:DC:2B:CC:C6:35:32:BD:6F:24 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14994c42-c84e-4ec7-9ab4-51a8bc33b19c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.150.0/24 Signature Algorithm: sha256WithRSAEncryption 60:e5:71:7f:ef:2e:97:ee:81:b5:87:72:6e:12:14:2c:3b:5f: 3f:98:61:03:93:ae:49:68:be:07:4b:94:2e:c1:1c:8e:ec:69: 11:65:c7:90:f0:01:ae:b6:b8:93:f8:9b:7e:d0:77:59:dd:b8: 42:5b:10:ab:13:be:af:15:6d:de:49:5f:72:09:55:f1:0a:57: 2f:a9:82:99:ca:25:28:cc:59:4e:40:8c:71:f0:33:43:de:13: 22:4c:b6:3e:c2:0c:b5:e8:42:ec:8a:23:b0:20:2e:91:3c:01: 7e:3a:2c:3b:76:21:17:52:2f:be:60:9d:aa:31:df:87:41:3d: c9:db:29:c6:76:55:7f:e1:60:75:bc:87:38:a5:c2:5d:10:b8: 99:4b:14:af:06:ae:26:f7:4a:5f:1f:af:81:e6:fe:75:9b:97: 7b:46:6a:6f:6d:a3:2e:d2:2b:e7:7d:72:f9:4c:c1:b7:a6:8a: fa:89:d0:48:41:bd:ec:39:d7:39:d9:75:51:d8:c3:cf:36:75: 06:75:f6:81:73:95:3e:03:74:80:1d:7b:fd:7d:2d:44:e6:0b: 59:c4:fb:f3:68:b9:52:c5:bc:8c:35:9a:43:0e:f6:83:1b:81: 8f:0d:37:e3:6e:1c:5e:f7:af:5e:41:07:64:7b:5a:ce:03:e7: 1b:70:1e:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSEbuHkYoUNe0RrJZgS46PfJs1wUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTUzMzM4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTQ5MDlmMzBhYzEyZmI4YmNjODMzZDQyMjU2YzUwNjk0 NGQ5Y2VhM2Y2YzdjZWJlOTY1MTYxMGRiMTVlNTA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYgtjls1UtUh/64wIMYkmK3wHUJUtFPdvvxdBo6jAjntxR cd+5fa9cHie8mSX3JjAyBkGNYEE9iv8u9Tsl4vo3O44zbKnav7oVvotz5rCgaeZ0 xEeaSdhVIdQ//ICbM893DEh3qqTIBo59EKX5lBScYk/wWZxx1kKMYZIQraR2bBby UZFG2YisIgYVR7LLiZ5Kotdh1CpmnXJVK1awZo5QG3+VTSaOuwXKY3WDpIdg96b3 rYgiZ10ub/ZPctwL0cjwkpopcZMjj7zIoMPyk2Gx9rZ4iAfQ2aTQNmBqs7J1htiS YXGlkWtgDhhiesZSnwRM6UHYMkbkXtUCdXJ0VQXRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgF0SXdHtcbZp5LjcK8zGNTK9byQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE0OTk0YzQyLWM4NGUtNGVjNy05YWI0LTUxYThiYzMzYjE5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9JYwDQYJKoZIhvcNAQELBQADggEBAGDlcX/vLpfugbWHcm4SFCw7Xz+Y YQOTrklovgdLlC7BHI7saRFlx5DwAa62uJP4m37Qd1nduEJbEKsTvq8Vbd5JX3IJ VfEKVy+pgpnKJSjMWU5AjHHwM0PeEyJMtj7CDLXoQuyKI7AgLpE8AX46LDt2IRdS L75gnaox34dBPcnbKcZ2VX/hYHW8hzilwl0QuJlLFK8Grib3Sl8fr4Hm/nWbl3tG am9toy7SK+d9cvlMwbemivqJ0EhBvew51znZdVHYw882dQZ19oFzlT4DdIAde/19 LUTmC1nE+/NouVLFvIw1mkMO9oMbgY8NN+NuHF73r15BB2R7Ws4D5xtwHvM= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:50 2025 by rpki-client