$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16067a15-d8d1-44e9-89b5-7e5315c059f5.roa File: 16067a15-d8d1-44e9-89b5-7e5315c059f5.roa (raw, json) Hash identifier: EYf+2qk1/x5KkEXfss6zDYcg3GlY7WSwvB5XUiki6yo= Subject key identifier: 99:CF:FD:64:BE:76:2E:68:C5:D2:2F:25:EC:E0:11:05:BD:86:87:7F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 19E73F8C5E90DECB1B2EE86ED7F06F945C401D65 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16067a15-d8d1-44e9-89b5-7e5315c059f5.roa Signing time: Sat 18 Oct 2025 22:10:15 +0000 ROA not before: Sat 18 Oct 2025 22:10:15 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e7:3f:8c:5e:90:de:cb:1b:2e:e8:6e:d7:f0:6f:94:5c:40:1d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:10:15 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=cc342813d8b93b4e89b096acbcb07a5df4f9eaff7f678bb072fb4a23b7c3d546, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:db:6c:ca:7b:31:bc:b6:53:bd:62:cf:90: 5d:51:60:8c:93:99:7c:9b:cc:7f:1b:25:60:64:46: a3:6d:31:48:b6:ea:b6:82:e7:23:fe:41:ab:98:b1: a3:e1:11:18:27:44:d0:e2:07:98:f1:ba:17:3b:7a: 8e:b6:95:ce:30:c5:51:e1:21:17:3b:ee:01:f0:63: 5c:e7:3d:c1:4c:fe:c1:f5:1b:b2:65:16:f7:ee:85: c6:0c:cb:ad:5e:d4:fa:db:b8:47:13:98:32:db:39: 6a:58:59:e4:95:4e:d2:4c:38:13:ad:88:2d:40:65: b7:84:d7:45:a0:13:dc:d6:02:ac:51:37:ca:06:ac: 8a:03:e7:62:f2:d5:6d:8c:82:d0:e4:0f:9d:2d:85: 2f:a3:1a:a4:15:87:e9:2e:5d:ca:f8:3c:38:a0:27: d8:d7:7e:d8:8d:50:5d:08:47:ab:58:75:69:10:f2: 79:72:72:06:87:c5:03:5b:cd:55:ea:39:c5:01:f1: 66:9a:29:98:8c:ae:a3:52:9b:5c:40:57:ad:a4:b1: 1e:02:5c:bc:08:e4:c1:ac:45:b2:39:2e:91:9e:bc: 65:7a:ab:e8:ce:6e:ce:e2:84:0c:bd:ae:1f:a7:c6: d5:b6:04:4c:e5:c3:da:dd:f4:fe:0b:7a:73:09:0e: f0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CF:FD:64:BE:76:2E:68:C5:D2:2F:25:EC:E0:11:05:BD:86:87:7F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16067a15-d8d1-44e9-89b5-7e5315c059f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.204.0/23 Signature Algorithm: sha256WithRSAEncryption b1:e6:17:e3:20:43:97:3e:e4:15:37:06:6f:7f:16:0a:8d:3b: 0b:7f:8a:cb:ea:ef:36:e8:73:81:7e:14:64:0b:b9:b6:2a:d9: 2c:cb:45:1c:98:e5:07:4e:33:0e:42:7e:f2:c9:db:93:eb:f7: 23:d0:1c:f2:d7:61:30:e5:a3:c6:46:80:c5:28:80:2a:8b:66: d0:fc:95:2c:c6:58:74:4e:10:a3:de:26:4d:b4:9b:6b:6a:74: 88:05:82:5e:58:e2:1e:bb:c1:f6:7c:e5:f1:e7:14:97:32:db: 08:c4:c5:27:15:a2:60:c2:d6:7b:46:a8:76:94:de:9d:5f:9d: d9:af:ff:18:f8:e8:7c:8f:06:86:c7:68:93:d6:b6:e9:72:86: 3f:21:a0:7a:f5:e8:82:85:bb:45:aa:29:70:d8:42:af:40:9e: ed:b4:42:cf:01:2f:d7:5a:68:1b:e4:7a:ad:28:97:6f:a0:b7: 1d:0e:79:50:ff:b7:19:9e:fc:fd:cf:8a:f2:9f:ad:fc:bc:2b: f4:87:bd:d4:c7:56:b7:3e:5f:6e:ff:3f:90:9e:42:f6:7f:a9: cd:95:5b:92:4b:4c:a7:db:b6:76:72:f8:1f:c3:e8:ec:18:72: ed:bc:53:6e:5b:5d:ca:ae:e2:5e:b0:e2:e1:df:52:d3:05:cf: 95:8a:90:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGec/jF6Q3ssbLuhu1/BvlFxAHWUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjIxMDE1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzM0MjgxM2Q4YjkzYjRlODliMDk2YWNiY2IwN2E1ZGY0 ZjllYWZmN2Y2NzhiYjA3MmZiNGEyM2I3YzNkNTQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcittsynsxvLZTvWLPkF1RYIyTmXybzH8bJWBkRqNtMUi2 6raC5yP+QauYsaPhERgnRNDiB5jxuhc7eo62lc4wxVHhIRc77gHwY1znPcFM/sH1 G7JlFvfuhcYMy61e1PrbuEcTmDLbOWpYWeSVTtJMOBOtiC1AZbeE10WgE9zWAqxR N8oGrIoD52Ly1W2MgtDkD50thS+jGqQVh+kuXcr4PDigJ9jXftiNUF0IR6tYdWkQ 8nlycgaHxQNbzVXqOcUB8WaaKZiMrqNSm1xAV62ksR4CXLwI5MGsRbI5LpGevGV6 q+jObs7ihAy9rh+nxtW2BEzlw9rd9P4LenMJDvD3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmc/9ZL52LmjF0i8l7OARBb2Gh38wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2MDY3YTE1LWQ4ZDEtNDRlOS04OWI1LTdlNTMxNWMwNTlmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrMwwDQYJKoZIhvcNAQELBQADggEBALHmF+MgQ5c+5BU3Bm9/FgqNOwt/ isvq7zboc4F+FGQLubYq2SzLRRyY5QdOMw5CfvLJ25Pr9yPQHPLXYTDlo8ZGgMUo gCqLZtD8lSzGWHROEKPeJk20m2tqdIgFgl5Y4h67wfZ85fHnFJcy2wjExScVomDC 1ntGqHaU3p1fndmv/xj46HyPBobHaJPWtulyhj8hoHr16IKFu0WqKXDYQq9Anu20 Qs8BL9daaBvkeq0ol2+gtx0OeVD/txme/P3PivKfrfy8K/SHvdTHVrc+X27/P5Ce QvZ/qc2VW5JLTKfbtnZy+B/D6OwYcu28U25bXcqu4l6w4uHfUtMFz5WKkPg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:30:34 2025 by rpki-client