$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20ecd85d-9bae-4b41-a7d7-d330037c11c9.roa File: 20ecd85d-9bae-4b41-a7d7-d330037c11c9.roa (raw, json) Hash identifier: dn+SDT0HP5OQkEInYNwpY8O+aOvT8QEhlXtoknpt71Q= Subject key identifier: 52:76:16:56:AE:61:55:FA:3B:DA:0D:8A:BD:F4:D9:0A:04:50:CF:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70060687033F3F9F08277751D528DF3AD7E15F4C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20ecd85d-9bae-4b41-a7d7-d330037c11c9.roa Signing time: Sat 18 Oct 2025 11:12:35 +0000 ROA not before: Sat 18 Oct 2025 11:12:35 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:06:06:87:03:3f:3f:9f:08:27:77:51:d5:28:df:3a:d7:e1:5f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:12:35 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=6ca9bbd416d5fdc3ef1442a152cba94f7bbcb6e227f53fc7b4343347479bb13a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:85:f4:63:f7:84:28:df:a2:fb:6f:b1:12: d6:ce:cc:a8:b2:dd:89:bc:4d:94:f8:d8:74:f5:bf: 4e:27:50:f5:a0:6c:bb:23:6d:04:ad:00:24:3b:d5: e4:cf:f6:a8:aa:ce:af:15:49:61:d4:b1:6d:f4:ce: 2d:79:0f:50:11:eb:ec:57:d0:f9:b4:8c:d7:f6:82: 37:4e:7e:9b:57:5f:50:9d:90:59:9f:f8:4e:36:77: 57:0c:92:63:f2:4d:4b:10:c0:95:5a:fb:0b:a4:da: d7:d0:68:ad:10:a6:ed:9a:1e:6f:14:a0:a6:29:e8: 0d:f5:b3:99:0d:ff:1f:ad:26:49:1e:cd:83:e2:ad: 60:02:e4:62:9b:e1:85:d9:d1:d1:43:42:f1:27:22: 3a:06:25:6d:e0:0f:0e:09:86:95:f0:2c:a9:0a:2a: bd:00:60:73:e5:fa:e6:73:4d:60:04:c6:e3:b9:49: 88:42:4a:3b:bb:58:79:05:1d:8c:88:2a:c0:5b:72: 2d:13:0f:06:20:42:2e:30:bd:dc:ca:3f:3c:33:5d: f2:f5:c3:d8:2a:38:69:6b:c5:6d:67:d0:20:69:24: b0:03:92:17:41:e1:0e:ce:71:76:58:b9:88:d9:3d: 18:c3:e5:1d:05:ea:a2:e5:f4:58:46:02:a0:d0:ad: 05:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:76:16:56:AE:61:55:FA:3B:DA:0D:8A:BD:F4:D9:0A:04:50:CF:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20ecd85d-9bae-4b41-a7d7-d330037c11c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.140.0/24 Signature Algorithm: sha256WithRSAEncryption 27:2e:3a:1a:df:06:a3:b2:75:09:a1:5c:f2:75:1f:2d:12:7a: 7d:7a:5e:d1:25:65:dd:80:35:97:45:28:31:7b:72:c7:6f:b2: ed:28:14:ed:7d:17:34:99:93:cc:19:99:55:91:cf:d8:e8:e5: ce:2d:af:b4:42:ab:9e:c7:ab:d2:3e:6e:78:54:ae:ed:fa:0d: d7:cf:fa:d9:68:dd:6b:59:87:a5:7c:7a:d9:4b:0c:09:6f:dd: 3b:78:d6:ff:ff:44:9c:c7:86:71:ba:ee:41:85:4c:38:a3:7d: fe:b5:3d:89:3b:c3:a9:ab:88:32:5a:06:ef:08:f7:f3:ff:ff: 84:ad:00:55:11:3b:f1:d1:71:f4:cc:b3:02:0a:f8:9c:ac:64: 4f:40:22:59:fc:03:72:43:93:7b:f0:a8:57:37:15:3a:82:51: 13:c1:8f:53:d5:db:b2:0c:fd:18:88:9b:85:a2:b9:32:1b:a8: 15:60:9d:b6:e0:d1:f3:06:00:d0:2a:03:d7:ee:38:c5:64:45: f0:33:65:c4:e8:59:9d:61:1c:6b:9e:45:3d:f7:5f:85:d1:6c: 5c:01:76:f3:d8:79:a3:15:c6:f2:ba:69:1b:12:f2:e8:02:54: 78:a0:75:e9:38:bf:0e:04:7c:57:79:40:ac:94:c2:d4:20:37: 2c:7f:20:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcAYGhwM/P58IJ3dR1SjfOtfhX0wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTExMjM1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2Y2E5YmJkNDE2ZDVmZGMzZWYxNDQyYTE1MmNiYTk0Zjdi YmNiNmUyMjdmNTNmYzdiNDM0MzM0NzQ3OWJiMTNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG04X0Y/eEKN+i+2+xEtbOzKiy3Ym8TZT42HT1v04nUPWg bLsjbQStACQ71eTP9qiqzq8VSWHUsW30zi15D1AR6+xX0Pm0jNf2gjdOfptXX1Cd kFmf+E42d1cMkmPyTUsQwJVa+wuk2tfQaK0Qpu2aHm8UoKYp6A31s5kN/x+tJkke zYPirWAC5GKb4YXZ0dFDQvEnIjoGJW3gDw4JhpXwLKkKKr0AYHPl+uZzTWAExuO5 SYhCSju7WHkFHYyIKsBbci0TDwYgQi4wvdzKPzwzXfL1w9gqOGlrxW1n0CBpJLAD khdB4Q7OcXZYuYjZPRjD5R0F6qLl9FhGAqDQrQXZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUnYWVq5hVfo72g2KvfTZCgRQz08wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIwZWNkODVkLTliYWUtNGI0MS1hN2Q3LWQzMzAwMzdjMTFjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpIwwDQYJKoZIhvcNAQELBQADggEBACcuOhrfBqOydQmhXPJ1Hy0Sen16 XtElZd2ANZdFKDF7csdvsu0oFO19FzSZk8wZmVWRz9jo5c4tr7RCq57Hq9I+bnhU ru36DdfP+tlo3WtZh6V8etlLDAlv3Tt41v//RJzHhnG67kGFTDijff61PYk7w6mr iDJaBu8I9/P//4StAFURO/HRcfTMswIK+JysZE9AIln8A3JDk3vwqFc3FTqCURPB j1PV27IM/RiIm4WiuTIbqBVgnbbg0fMGANAqA9fuOMVkRfAzZcToWZ1hHGueRT33 X4XRbFwBdvPYeaMVxvK6aRsS8ugCVHigdek4vw4EfFd5QKyUwtQgNyx/IOg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:28 2025 by rpki-client