$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/222e5664-caa6-4597-b687-46ba8bf025b0.roa File: 222e5664-caa6-4597-b687-46ba8bf025b0.roa (raw, json) Hash identifier: E2SDHfiIQX1Bqk2qAQBBbm3X57fkGkKfT737pDfQA8w= Subject key identifier: 54:FF:90:D8:AB:9D:67:80:A3:4F:C3:6E:8A:97:DB:75:5A:A4:E5:D7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 612C3E666AD750E19FAC1D53C050A8B20317A8DE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/222e5664-caa6-4597-b687-46ba8bf025b0.roa Signing time: Sat 18 Oct 2025 11:43:18 +0000 ROA not before: Sat 18 Oct 2025 11:43:18 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:2c:3e:66:6a:d7:50:e1:9f:ac:1d:53:c0:50:a8:b2:03:17:a8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:43:18 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=2719c96763dcf49652c7240323a7e46ba60c0d8f65ffe9177ae1487772820f05, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:2c:bc:75:a6:5c:09:96:37:30:42:01:eb: 72:3f:8a:50:e4:a8:f4:d3:63:6d:10:60:40:a7:7c: c4:a3:ed:79:ad:3f:57:1a:51:4f:d0:72:ae:c4:13: 9e:e3:e4:02:ce:9a:e9:e8:7c:c1:6a:d3:45:00:c6: fd:81:23:eb:cb:42:5d:d6:c6:97:e5:07:36:f3:95: 5e:a6:c9:5a:0a:85:4f:3a:21:8a:d0:10:89:9f:c3: 56:14:fc:25:61:e1:c1:b4:62:63:ee:69:eb:cc:d1: e0:55:40:e9:2c:5f:61:d7:24:fb:a4:80:c3:66:ba: 23:b8:d2:6b:28:9a:14:43:16:98:a6:c4:ce:e2:cb: 0d:6a:fe:d6:16:19:c9:17:73:1b:b7:0e:a0:57:25: 93:39:8c:fd:90:31:7d:91:60:cc:7c:a3:a6:a0:04: 02:49:9d:c0:e6:cc:65:18:45:22:d9:7b:ce:a9:81: c8:fa:8a:19:36:27:e2:31:c1:f4:a8:11:96:07:6b: 05:d9:59:78:d4:90:36:98:12:25:a3:7c:a6:da:17: 5f:66:8a:65:f6:7f:f9:51:60:c5:33:69:01:9f:d7: b3:37:0c:41:77:28:15:5b:ac:10:62:f5:0d:09:8d: a3:00:f9:a4:26:8f:cd:6d:56:ae:a1:b9:f1:a1:1c: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FF:90:D8:AB:9D:67:80:A3:4F:C3:6E:8A:97:DB:75:5A:A4:E5:D7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/222e5664-caa6-4597-b687-46ba8bf025b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.128.0/19 Signature Algorithm: sha256WithRSAEncryption 3a:4b:f0:9a:94:f0:4c:22:15:0e:0b:cf:30:40:b6:a0:e2:7e: 6e:bf:8c:0f:f3:7a:f8:26:ac:96:1b:a5:09:21:1c:fa:06:8b: ed:68:00:88:3f:b5:28:59:ab:7e:ce:15:ae:77:93:3b:46:8d: 85:00:26:07:30:ff:4d:45:80:e2:a1:6d:c1:00:f7:96:c4:82: c1:c0:af:17:be:83:d0:9c:7b:0e:5f:27:27:58:b7:55:81:63: 77:8b:d3:49:b3:7f:8a:62:d9:c6:21:7b:70:cf:e0:85:e3:ab: dc:d9:62:5d:56:54:91:37:f2:77:a0:5a:88:08:2f:11:37:59: e4:01:cb:b3:9c:36:20:b7:d1:98:9d:c2:74:18:50:c1:f9:38: 8f:65:91:e4:85:c9:cb:76:d1:c3:77:58:03:ce:ce:23:4f:7f: 78:0c:1e:69:8d:ed:24:85:de:3a:90:ce:21:c9:22:8f:2f:59: 50:c1:11:cc:2d:8f:3d:04:9f:7e:24:e2:49:4f:3f:2c:93:80: d1:a8:bf:4b:9f:0c:4e:a7:37:68:e5:1d:bf:ec:47:a9:1e:22: 5f:78:2c:32:e9:8a:68:10:4b:de:be:f1:cd:fa:f4:da:f8:09: 39:cf:5e:ac:de:ac:57:97:8e:84:6d:6c:a0:8b:95:31:c9:d1: 63:ea:5a:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYSw+ZmrXUOGfrB1TwFCosgMXqN4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTE0MzE4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzE5Yzk2NzYzZGNmNDk2NTJjNzI0MDMyM2E3ZTQ2YmE2 MGMwZDhmNjVmZmU5MTc3YWUxNDg3NzcyODIwZjA1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYcCy8daZcCZY3MEIB63I/ilDkqPTTY20QYECnfMSj7Xmt P1caUU/Qcq7EE57j5ALOmunofMFq00UAxv2BI+vLQl3WxpflBzbzlV6myVoKhU86 IYrQEImfw1YU/CVh4cG0YmPuaevM0eBVQOksX2HXJPukgMNmuiO40msomhRDFpim xM7iyw1q/tYWGckXcxu3DqBXJZM5jP2QMX2RYMx8o6agBAJJncDmzGUYRSLZe86p gcj6ihk2J+IxwfSoEZYHawXZWXjUkDaYEiWjfKbaF19mimX2f/lRYMUzaQGf17M3 DEF3KBVbrBBi9Q0JjaMA+aQmj81tVq6hufGhHEFxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVP+Q2KudZ4CjT8NuipfbdVqk5dcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIyMmU1NjY0LWNhYTYtNDU5Ny1iNjg3LTQ2YmE4YmYwMjViMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUS9YAwDQYJKoZIhvcNAQELBQADggEBADpL8JqU8EwiFQ4LzzBAtqDifm6/ jA/zevgmrJYbpQkhHPoGi+1oAIg/tShZq37OFa53kztGjYUAJgcw/01FgOKhbcEA 95bEgsHArxe+g9Ccew5fJydYt1WBY3eL00mzf4pi2cYhe3DP4IXjq9zZYl1WVJE3 8negWogILxE3WeQBy7OcNiC30ZidwnQYUMH5OI9lkeSFyct20cN3WAPOziNPf3gM HmmN7SSF3jqQziHJIo8vWVDBEcwtjz0En34k4klPPyyTgNGov0ufDE6nN2jlHb/s R6keIl94LDLpimgQS96+8c369Nr4CTnPXqzerFeXjoRtbKCLlTHJ0WPqWt0= -----END CERTIFICATE-----Generated at Mon Oct 20 11:13:45 2025 by rpki-client