$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41edaaf4-25cf-41bd-a49c-83e5f0d410dd.roa File: 41edaaf4-25cf-41bd-a49c-83e5f0d410dd.roa (raw, json) Hash identifier: PX5pczvlHkE3+1kpDPi4YT/Gu6mGlv7FBKJ0kOkblYo= Subject key identifier: 12:BC:F3:15:7C:A1:E3:09:23:6E:52:FC:61:7F:91:CA:A7:47:07:7B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 170C20BAE213544D2A917A9992024527F6353984 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41edaaf4-25cf-41bd-a49c-83e5f0d410dd.roa Signing time: Sat 18 Oct 2025 22:32:39 +0000 ROA not before: Sat 18 Oct 2025 22:32:39 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0c:20:ba:e2:13:54:4d:2a:91:7a:99:92:02:45:27:f6:35:39:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:32:39 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=47a6a3a3f2892377a7c7461c9c043d0762bc78e9b87c626df081ac0ad8625116, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:c5:91:c0:96:05:a0:5e:5c:77:ec:6e:c4: da:7a:1f:0f:b4:28:78:90:7a:76:29:46:8b:b7:b9: b1:c4:dc:81:b5:7c:2a:39:c9:93:1c:80:be:e3:be: 29:20:41:f7:ca:b6:c8:6f:da:95:38:d0:35:47:9d: c0:f2:ff:ac:c4:e3:98:e8:c8:b6:d3:72:a8:72:c8: 9e:a0:3a:63:b3:18:dc:58:eb:c7:44:17:4b:90:09: 34:ba:e8:2f:15:46:a3:1b:40:b1:0e:9a:83:50:71: 0f:90:70:c1:a1:81:39:b7:0c:b4:85:35:49:73:a7: 70:1b:0e:93:c0:8c:a3:34:34:4c:43:ff:a1:c4:b6: dd:2a:12:b0:be:71:84:9e:0d:4d:fa:ab:b8:56:a5: ca:3b:ee:8c:f3:4d:ad:f0:8d:0b:a4:86:63:c4:ae: 62:b2:fd:4e:c6:0e:6c:30:22:4d:aa:23:7d:98:e2: 77:97:62:1e:73:b5:08:0b:5c:73:68:8b:cf:77:00: 79:b3:fe:5b:00:c6:2c:ce:2a:6c:f7:11:cd:b7:b2: 5f:f2:cb:94:a1:a7:6a:ce:91:54:65:22:1e:7d:47: 02:84:75:31:7b:17:55:81:ff:0e:52:7b:d7:6b:57: 84:e8:0e:c9:82:56:75:60:69:87:ef:19:f8:f4:13: a7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BC:F3:15:7C:A1:E3:09:23:6E:52:FC:61:7F:91:CA:A7:47:07:7B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41edaaf4-25cf-41bd-a49c-83e5f0d410dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.250.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:63:1f:0b:8c:25:30:cf:a0:5c:25:e8:3f:4e:fb:48:a3:98: 88:67:b0:a9:48:2e:de:5c:33:db:b2:f2:4a:76:c3:fd:13:4a: 60:19:eb:dc:a4:c2:a6:04:5d:75:8c:7e:8e:7c:b0:6f:ca:a7: 5c:28:c3:22:69:f4:99:5e:58:02:96:9e:c0:fe:1b:4d:d1:e0: ef:92:43:8a:ec:94:37:32:1a:50:b8:da:61:d5:4f:df:9e:f9: 24:15:d0:d8:61:72:d4:ed:9e:32:cc:6c:a5:26:8a:88:98:d8: 71:e1:41:94:f6:55:c2:5f:e2:04:61:9d:96:37:65:10:b3:51: c7:ab:f5:db:b8:fa:0b:64:01:4f:b2:9e:6a:aa:ba:a4:cd:c3: 3d:15:17:09:13:0e:e7:36:b5:39:dd:27:8a:2d:3c:36:23:40: 4c:f9:32:9a:b6:44:32:72:a7:de:46:14:d6:55:eb:a2:0d:98: 19:61:78:be:48:a2:59:e3:dd:c6:96:92:a3:18:da:6b:2e:ce: e8:1a:e7:dd:2e:03:dd:03:62:c9:14:8c:a9:c9:d6:fe:9c:90: b7:01:62:1b:8a:e6:36:e8:4e:9c:fb:63:be:72:43:00:cc:81: 2b:2c:d7:4a:cb:a1:bf:1a:c0:0d:1d:5f:62:b6:c5:a6:31:9f: 32:d5:cf:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFwwguuITVE0qkXqZkgJFJ/Y1OYQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjIzMjM5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2E2YTNhM2YyODkyMzc3YTdjNzQ2MWM5YzA0M2QwNzYy YmM3OGU5Yjg3YzYyNmRmMDgxYWMwYWQ4NjI1MTE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1nsWRwJYFoF5cd+xuxNp6Hw+0KHiQenYpRou3ubHE3IG1 fCo5yZMcgL7jvikgQffKtshv2pU40DVHncDy/6zE45joyLbTcqhyyJ6gOmOzGNxY 68dEF0uQCTS66C8VRqMbQLEOmoNQcQ+QcMGhgTm3DLSFNUlzp3AbDpPAjKM0NExD /6HEtt0qErC+cYSeDU36q7hWpco77ozzTa3wjQukhmPErmKy/U7GDmwwIk2qI32Y 4neXYh5ztQgLXHNoi893AHmz/lsAxizOKmz3Ec23sl/yy5Shp2rOkVRlIh59RwKE dTF7F1WB/w5Se9drV4ToDsmCVnVgaYfvGfj0E6dzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUErzzFXyh4wkjblL8YX+RyqdHB3swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQxZWRhYWY0LTI1Y2YtNDFiZC1hNDljLTgzZTVmMGQ0MTBkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoPowDQYJKoZIhvcNAQELBQADggEBAC1jHwuMJTDPoFwl6D9O+0ijmIhn sKlILt5cM9uy8kp2w/0TSmAZ69ykwqYEXXWMfo58sG/Kp1wowyJp9JleWAKWnsD+ G03R4O+SQ4rslDcyGlC42mHVT9+e+SQV0NhhctTtnjLMbKUmioiY2HHhQZT2VcJf 4gRhnZY3ZRCzUcer9du4+gtkAU+ynmqquqTNwz0VFwkTDuc2tTndJ4otPDYjQEz5 Mpq2RDJyp95GFNZV66INmBlheL5Iolnj3caWkqMY2msuzuga590uA90DYskUjKnJ 1v6ckLcBYhuK5jboTpz7Y75yQwDMgSss10rLob8awA0dX2K2xaYxnzLVzyY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:11:59 2025 by rpki-client