$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/185c34b5-f51c-45bb-8a53-751b98d70e2f.roa File: 185c34b5-f51c-45bb-8a53-751b98d70e2f.roa (raw, json) Hash identifier: AvgEfkFK63WRpYaS9sdQa+mPGnbyaOMHPxaq9O5q+d4= Subject key identifier: 63:CA:01:AB:49:3E:B1:13:8A:BB:16:97:F4:FA:9C:28:B3:6F:B5:65 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 362CE7483A28B5EA6E7D54C6D6FD4D6BB7F10C60 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/185c34b5-f51c-45bb-8a53-751b98d70e2f.roa Signing time: Sat 18 Oct 2025 09:01:24 +0000 ROA not before: Sat 18 Oct 2025 09:01:24 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:2c:e7:48:3a:28:b5:ea:6e:7d:54:c6:d6:fd:4d:6b:b7:f1:0c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:01:24 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=fafe62a880168143c0260c210505b59ef9e9db8add00ee632b0575ebf434b9f2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:32:49:ca:23:dc:65:52:da:2d:24:01:37:ae: 1f:2a:fa:36:ce:7d:50:93:c1:de:08:d3:4a:63:f2: 40:53:bd:39:79:97:bd:d1:c3:72:3e:61:6c:fd:3c: 6c:7d:be:33:66:00:92:a5:58:fb:04:a5:7d:11:cf: fa:d1:5c:fc:99:ba:3b:78:84:47:13:d0:cc:58:9a: 58:d3:50:47:c9:ae:ed:52:e8:6b:3b:db:a9:93:71: 46:72:6b:a4:ba:40:d5:1a:af:93:81:4b:86:ae:d4: 65:77:41:f6:82:58:6f:21:3d:21:47:39:2c:01:9d: 3c:32:c1:5a:b8:3b:3b:66:83:2a:c5:3f:60:25:72: 9c:5e:f7:28:a7:f7:e7:eb:75:67:09:cd:99:1e:38: 97:26:bc:99:a5:92:69:3c:78:20:a4:99:28:a8:0e: 69:34:e0:26:57:56:0a:68:25:5b:c4:3b:71:01:9f: cb:7b:70:c6:f7:eb:2d:d2:74:9c:9e:ea:4d:7f:7c: fc:2a:83:b7:f4:94:d8:b9:9a:56:fb:90:f4:32:53: 30:95:18:51:4d:47:09:f5:2e:a4:ef:58:73:83:5a: 26:25:96:90:63:14:81:18:90:a1:02:00:df:b4:55: f2:ee:5b:7f:b1:19:b2:86:01:17:52:40:4f:24:c3: 68:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CA:01:AB:49:3E:B1:13:8A:BB:16:97:F4:FA:9C:28:B3:6F:B5:65 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/185c34b5-f51c-45bb-8a53-751b98d70e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.152.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:42:5c:1f:4e:11:e3:20:22:0a:e5:7a:1a:53:d0:96:7f:04: c4:65:a1:4a:ba:10:fd:f9:99:90:4a:9c:8c:bc:58:46:a3:b8: b5:e0:03:ce:e1:08:52:67:a9:73:97:5e:4d:65:57:73:88:82: 23:52:bb:63:22:3c:ba:f6:3a:00:22:7c:c1:6e:cf:08:0a:86: 58:ac:45:3e:25:d9:50:a0:24:e0:f0:bf:14:f1:2a:db:38:16: 66:3f:5c:c3:ab:85:89:55:ac:f5:26:e4:aa:35:99:e7:a6:29: c5:b6:ee:59:1e:28:84:a2:18:e5:15:ea:b6:9e:30:72:66:b8: 5c:29:a4:d1:22:10:0e:f3:64:6c:9d:d3:88:38:d1:74:af:cd: 20:8e:4d:e5:be:bc:48:1f:77:69:2c:d2:02:d7:dd:29:2f:81: 6b:a7:f0:4b:f1:29:40:f4:f6:91:95:8e:72:2f:f1:7d:91:a7: 8c:af:e8:68:73:e6:98:fa:f1:38:cb:76:ab:10:aa:56:8a:8f: d0:47:68:57:bc:ab:4e:a7:cf:c6:50:f7:fb:8a:8c:47:b6:eb: c9:e9:1c:ee:c2:2e:83:98:db:24:c7:85:26:a4:4e:e6:33:0b: c9:d1:9b:8b:d8:19:e8:89:b5:cb:1d:92:f9:91:74:64:8e:3d: 83:8e:1f:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNiznSDootepufVTG1v1Na7fxDGAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDkwMTI0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYWZlNjJhODgwMTY4MTQzYzAyNjBjMjEwNTA1YjU5ZWY5 ZTlkYjhhZGQwMGVlNjMyYjA1NzVlYmY0MzRiOWYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNMknKI9xlUtotJAE3rh8q+jbOfVCTwd4I00pj8kBTvTl5 l73Rw3I+YWz9PGx9vjNmAJKlWPsEpX0Rz/rRXPyZujt4hEcT0MxYmljTUEfJru1S 6Gs726mTcUZya6S6QNUar5OBS4au1GV3QfaCWG8hPSFHOSwBnTwywVq4OztmgyrF P2Alcpxe9yin9+frdWcJzZkeOJcmvJmlkmk8eCCkmSioDmk04CZXVgpoJVvEO3EB n8t7cMb36y3SdJye6k1/fPwqg7f0lNi5mlb7kPQyUzCVGFFNRwn1LqTvWHODWiYl lpBjFIEYkKECAN+0VfLuW3+xGbKGARdSQE8kw2jfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY8oBq0k+sROKuxaX9PqcKLNvtWUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE4NWMzNGI1LWY1MWMtNDViYi04YTUzLTc1MWI5OGQ3MGUyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpJgwDQYJKoZIhvcNAQELBQADggEBAF9CXB9OEeMgIgrlehpT0JZ/BMRl oUq6EP35mZBKnIy8WEajuLXgA87hCFJnqXOXXk1lV3OIgiNSu2MiPLr2OgAifMFu zwgKhlisRT4l2VCgJODwvxTxKts4FmY/XMOrhYlVrPUm5Ko1meemKcW27lkeKISi GOUV6raeMHJmuFwppNEiEA7zZGyd04g40XSvzSCOTeW+vEgfd2ks0gLX3SkvgWun 8EvxKUD09pGVjnIv8X2Rp4yv6Ghz5pj68TjLdqsQqlaKj9BHaFe8q06nz8ZQ9/uK jEe268npHO7CLoOY2yTHhSakTuYzC8nRm4vYGeiJtcsdkvmRdGSOPYOOH7E= -----END CERTIFICATE-----Generated at Mon Oct 20 18:11:43 2025 by rpki-client