$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4087d846-1e41-48d0-b745-bce863f087e1.roa File: 4087d846-1e41-48d0-b745-bce863f087e1.roa (raw, json) Hash identifier: x5VpTSiFQVUYe1cAdM9CVW82aKaJaGYRtABCypM//Lo= Subject key identifier: 1E:B4:67:B6:D2:1F:F8:31:15:81:B7:A8:06:93:40:D2:CE:32:96:DA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08593F96CFDC3FD07A995CE57FE64986D4327E48 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4087d846-1e41-48d0-b745-bce863f087e1.roa Signing time: Sat 18 Oct 2025 17:33:54 +0000 ROA not before: Sat 18 Oct 2025 17:33:54 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:59:3f:96:cf:dc:3f:d0:7a:99:5c:e5:7f:e6:49:86:d4:32:7e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:33:54 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=c1c767eed7dd24858c6c629e2531ecd7f4dd40848b55c80b531c1f4abf9531af, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:67:80:0e:bf:b9:cd:bd:55:f5:c6:8e:2e:93: 7c:b0:64:90:9e:11:dc:2b:c4:00:1d:56:7f:b7:13: 74:2c:7a:2b:bb:81:fd:51:2a:07:cc:98:14:fb:47: 08:e4:e6:c4:f6:70:5b:11:f8:6d:8c:05:87:8c:f5: 49:49:29:06:d1:80:2a:d2:de:e0:46:65:3c:37:0c: 94:fa:ec:df:c4:08:40:c8:5c:67:94:28:36:b2:2f: e0:52:f3:4a:4b:31:7e:e3:e6:68:a0:6e:f1:e2:69: 15:f0:9a:39:a9:1c:00:d9:d1:d7:99:93:53:c9:56: 83:1d:87:f1:b7:a9:bc:df:eb:da:70:ba:bc:dc:0d: 4d:8a:97:5d:74:e4:db:05:cc:3e:00:65:57:53:ae: 25:71:2e:86:e9:65:c9:93:8a:7a:f9:69:1c:51:a0: c0:7b:96:a5:d8:61:f0:12:6f:aa:21:84:62:ea:b6: 12:19:18:56:6c:15:53:c8:02:6e:4e:c4:54:81:9b: 1a:85:d0:43:00:00:bb:fd:d2:c7:ba:82:9d:44:a1: 0d:33:63:7b:70:25:09:65:2c:13:1a:e5:dc:36:4d: ba:95:f8:b1:7d:26:c4:83:9a:3f:2f:52:4d:8b:fe: bc:46:73:2f:d6:0a:7c:44:76:69:64:49:6f:16:8f: e2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B4:67:B6:D2:1F:F8:31:15:81:B7:A8:06:93:40:D2:CE:32:96:DA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4087d846-1e41-48d0-b745-bce863f087e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.132.0/23 Signature Algorithm: sha256WithRSAEncryption af:a9:1e:77:30:79:d8:d2:bb:0f:97:48:94:da:fb:72:25:49: a2:52:11:41:57:82:f7:14:34:c6:33:05:78:02:a7:35:bb:2b: 7a:be:c4:5c:36:38:1d:d3:37:6c:80:62:e2:4e:02:1f:ca:fc: 2f:8d:04:55:12:64:4a:6d:ff:5e:43:d7:cf:97:22:a9:29:0d: 65:13:2f:2a:d4:8a:98:f4:3d:c1:c2:e4:16:a7:f8:9a:42:b1: 64:65:f6:bb:07:38:d3:34:7c:40:f4:80:2d:e8:94:8a:5e:ac: d3:14:22:b8:6b:b4:c6:70:d7:3f:87:cc:50:d7:8c:a3:a5:99: 6e:ba:e8:c1:80:6d:75:67:6d:e7:15:a5:a0:21:e8:a0:31:92: 30:54:c1:81:05:d1:23:49:58:e4:84:5c:5b:b7:37:1d:f9:c8: 64:a9:85:eb:31:ef:b2:6b:b8:9d:d1:b4:24:c0:8d:49:ea:a7: d0:c7:26:ae:31:53:eb:cb:40:43:49:d8:c4:f5:21:f0:b1:5a: b3:e3:01:e3:c8:ed:1b:72:7b:1d:bc:82:e1:02:76:80:b0:34: f3:9e:85:22:38:03:49:56:1f:c3:05:27:92:39:0e:41:60:ec: fb:43:ed:a1:40:a5:ca:9e:33:c7:62:66:12:10:8a:c6:70:22: 31:c9:b7:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCFk/ls/cP9B6mVzlf+ZJhtQyfkgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTczMzU0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWM3NjdlZWQ3ZGQyNDg1OGM2YzYyOWUyNTMxZWNkN2Y0 ZGQ0MDg0OGI1NWM4MGI1MzFjMWY0YWJmOTUzMWFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkZ4AOv7nNvVX1xo4uk3ywZJCeEdwrxAAdVn+3E3Qseiu7 gf1RKgfMmBT7Rwjk5sT2cFsR+G2MBYeM9UlJKQbRgCrS3uBGZTw3DJT67N/ECEDI XGeUKDayL+BS80pLMX7j5migbvHiaRXwmjmpHADZ0deZk1PJVoMdh/G3qbzf69pw urzcDU2Kl1105NsFzD4AZVdTriVxLobpZcmTinr5aRxRoMB7lqXYYfASb6ohhGLq thIZGFZsFVPIAm5OxFSBmxqF0EMAALv90se6gp1EoQ0zY3twJQllLBMa5dw2TbqV +LF9JsSDmj8vUk2L/rxGcy/WCnxEdmlkSW8Wj+LjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHrRnttIf+DEVgbeoBpNA0s4yltowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQwODdkODQ2LTFlNDEtNDhkMC1iNzQ1LWJjZTg2M2YwODdlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpIQwDQYJKoZIhvcNAQELBQADggEBAK+pHncwedjSuw+XSJTa+3IlSaJS EUFXgvcUNMYzBXgCpzW7K3q+xFw2OB3TN2yAYuJOAh/K/C+NBFUSZEpt/15D18+X IqkpDWUTLyrUipj0PcHC5Ban+JpCsWRl9rsHONM0fED0gC3olIperNMUIrhrtMZw 1z+HzFDXjKOlmW666MGAbXVnbecVpaAh6KAxkjBUwYEF0SNJWOSEXFu3Nx35yGSp hesx77JruJ3RtCTAjUnqp9DHJq4xU+vLQENJ2MT1IfCxWrPjAePI7Rtyex28guEC doCwNPOehSI4A0lWH8MFJ5I5DkFg7PtD7aFApcqeM8diZhIQisZwIjHJt8M= -----END CERTIFICATE-----Generated at Mon Oct 20 06:08:10 2025 by rpki-client