$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40e653f6-4b5a-4b87-bf3e-45468508aa15.roa File: 40e653f6-4b5a-4b87-bf3e-45468508aa15.roa (raw, json) Hash identifier: DLRfHtgEGnQcBSLlVDG0GkBEUg4v7ZG3L7ughRENofQ= Subject key identifier: 79:24:88:81:25:73:42:3C:04:58:F6:E6:A3:19:B5:B1:92:21:F9:0B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4E8835B0A1BBA814C6272EA5968D67A3453B65C7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40e653f6-4b5a-4b87-bf3e-45468508aa15.roa Signing time: Sat 18 Oct 2025 08:40:10 +0000 ROA not before: Sat 18 Oct 2025 08:40:10 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:88:35:b0:a1:bb:a8:14:c6:27:2e:a5:96:8d:67:a3:45:3b:65:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:40:10 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=4316d06dc581b0be72918960d0e2ee0bf6634031bf2ac61a346bf95f9c5307de, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:aa:d0:cf:1b:39:bc:ac:5a:90:9f:96:d5: 6b:bc:10:82:39:96:ad:15:d6:17:27:91:13:e0:f9: 04:41:e4:14:e9:08:f2:c9:77:51:b0:a4:05:ed:bd: 0b:e0:48:31:e8:36:61:f9:ff:01:00:a1:4b:f4:37: 43:35:49:2d:ca:a2:bb:f6:98:e9:a7:fe:f6:4d:71: 63:d2:4d:e4:7c:c5:8a:e2:cb:97:21:05:01:ef:e1: 2c:ee:ff:1d:99:18:27:8d:13:79:73:e9:5f:4a:b2: 6c:f2:5f:ac:81:03:1e:7a:d6:08:69:b6:55:55:81: 6d:b3:82:8a:83:49:f4:36:c2:8b:14:cb:d9:ff:26: ed:98:7a:b8:ab:ab:83:fb:63:32:fd:c7:90:98:6b: 2f:1a:05:b6:36:e0:c3:23:cc:cf:c2:25:b7:a7:58: 41:f8:1b:54:7f:ea:4c:d6:2b:6d:fe:05:50:fa:8a: 0b:59:fb:6e:24:90:eb:29:4c:ff:4f:1d:72:47:fa: db:96:6e:9a:f6:69:f3:4a:44:b1:e8:e2:45:b6:40: 2a:9e:72:6b:2f:53:ac:d1:65:ba:31:c0:e3:57:2a: 9e:46:93:99:bc:32:8b:c7:ff:45:a4:1b:49:1b:70: 5e:15:e0:71:f9:5c:59:a8:0c:b4:79:aa:23:2e:a8: 00:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:24:88:81:25:73:42:3C:04:58:F6:E6:A3:19:B5:B1:92:21:F9:0B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40e653f6-4b5a-4b87-bf3e-45468508aa15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.192.0/23 Signature Algorithm: sha256WithRSAEncryption a7:d8:02:7c:4a:4a:cf:0a:28:8d:d5:46:07:5b:36:12:3b:42: 78:17:65:cf:9e:17:c9:4c:ec:bf:8c:5b:aa:80:67:09:89:b8: 45:1b:e3:31:06:ca:fa:5c:cd:65:25:df:14:a1:66:5a:c1:b9: 50:a9:d2:f1:5f:01:17:d7:22:82:b4:08:08:52:55:e4:4c:f1: 03:c7:1f:33:66:54:85:f9:e9:ae:8b:f2:1c:22:3e:68:91:d7: 1f:ac:35:f8:a0:18:5a:17:25:eb:c8:e0:17:2d:e7:75:18:a7: fd:ff:ce:b0:7e:6b:6b:25:92:3c:87:46:d5:a9:2e:9f:3f:65: ac:28:c5:46:7e:1a:55:f4:29:a9:44:43:be:4f:25:1b:e7:2e: 64:b0:ff:e8:52:3b:74:7b:07:0c:88:03:96:85:98:13:a8:21: 4c:44:e8:60:19:a3:90:f5:68:26:e8:5c:51:f3:3a:1e:5d:86: 57:aa:71:fe:36:37:b9:b8:94:f6:e6:92:67:f2:c5:0a:5e:c7: 30:2c:51:79:72:0d:a8:f6:7b:79:dd:cf:46:67:83:0f:8f:70: ff:10:9e:5f:aa:ce:ba:cb:66:48:50:ca:15:97:0e:7b:88:61: 79:3c:7c:5a:04:cf:d9:b8:80:5c:81:c1:a2:fe:98:99:bd:5e: fa:41:61:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTog1sKG7qBTGJy6llo1no0U7ZccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDg0MDEwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzE2ZDA2ZGM1ODFiMGJlNzI5MTg5NjBkMGUyZWUwYmY2 NjM0MDMxYmYyYWM2MWEzNDZiZjk1ZjljNTMwN2RlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM4qrQzxs5vKxakJ+W1Wu8EII5lq0V1hcnkRPg+QRB5BTp CPLJd1GwpAXtvQvgSDHoNmH5/wEAoUv0N0M1SS3Korv2mOmn/vZNcWPSTeR8xYri y5chBQHv4Szu/x2ZGCeNE3lz6V9KsmzyX6yBAx561ghptlVVgW2zgoqDSfQ2wosU y9n/Ju2Yerirq4P7YzL9x5CYay8aBbY24MMjzM/CJbenWEH4G1R/6kzWK23+BVD6 igtZ+24kkOspTP9PHXJH+tuWbpr2afNKRLHo4kW2QCqecmsvU6zRZboxwONXKp5G k5m8MovH/0WkG0kbcF4V4HH5XFmoDLR5qiMuqACBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeSSIgSVzQjwEWPbmoxm1sZIh+QswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQwZTY1M2Y2LTRiNWEtNGI4Ny1iZjNlLTQ1NDY4NTA4YWExNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESocAwDQYJKoZIhvcNAQELBQADggEBAKfYAnxKSs8KKI3VRgdbNhI7QngX Zc+eF8lM7L+MW6qAZwmJuEUb4zEGyvpczWUl3xShZlrBuVCp0vFfARfXIoK0CAhS VeRM8QPHHzNmVIX56a6L8hwiPmiR1x+sNfigGFoXJevI4Bct53UYp/3/zrB+a2sl kjyHRtWpLp8/ZawoxUZ+GlX0KalEQ75PJRvnLmSw/+hSO3R7BwyIA5aFmBOoIUxE 6GAZo5D1aCboXFHzOh5dhleqcf42N7m4lPbmkmfyxQpexzAsUXlyDaj2e3ndz0Zn gw+PcP8Qnl+qzrrLZkhQyhWXDnuIYXk8fFoEz9m4gFyBwaL+mJm9XvpBYcU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:01:18 2025 by rpki-client