$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/422fb51f-d5e0-4b9f-b16c-657ec732e11e.roa File: 422fb51f-d5e0-4b9f-b16c-657ec732e11e.roa (raw, json) Hash identifier: hhtparo6Y5np+AeqsLJK6EVF4Akk8Oej739NGEu3ogk= Subject key identifier: E8:6A:74:2E:19:FB:CE:E9:59:B1:DB:EA:4F:6C:E7:E3:50:B2:86:13 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 18CE3DB3EF166F61BC0E20FE0328CAADE3CDD738 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/422fb51f-d5e0-4b9f-b16c-657ec732e11e.roa Signing time: Sat 18 Oct 2025 12:33:40 +0000 ROA not before: Sat 18 Oct 2025 12:33:40 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ce:3d:b3:ef:16:6f:61:bc:0e:20:fe:03:28:ca:ad:e3:cd:d7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:33:40 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=0e5f1bc4686907494373bd9ed30a4b42499683749f00ba1f8d1febe6f4ea2aa7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:3e:33:f9:24:cf:b0:02:12:03:b5:ba:aa: 7e:95:5a:cb:a9:da:5c:0a:76:d4:07:a4:bd:b2:ab: 5a:61:6f:cd:93:6c:61:8c:07:73:9e:4f:31:cf:5d: c6:4b:cf:6d:d9:a8:0e:1b:c2:59:76:6a:c8:fc:5b: df:68:6a:3d:cc:ce:2d:45:6e:c5:99:af:b1:e1:60: f6:e3:1b:19:5f:64:5a:0d:ba:03:23:28:45:8d:8c: bf:5e:7d:c9:ca:5e:86:2d:ea:b8:ea:f2:0a:dd:41: d0:74:0c:42:0e:ba:0a:6e:5d:b1:9e:89:22:3e:52: 82:7a:22:5d:40:03:59:5b:aa:e5:49:12:25:79:6d: c8:a7:98:db:1e:c2:e8:4c:09:ac:f8:9e:75:c7:6f: aa:38:46:fc:3d:2b:49:e4:66:d5:ae:60:b0:50:16: 7f:27:54:39:82:f3:96:55:01:e1:9f:d3:de:ab:fb: f9:e4:c1:cf:93:8c:c2:8c:34:6a:a9:71:91:6c:9f: b0:10:f1:9c:bf:5f:4a:3b:a8:b8:fe:be:fd:a6:54: cf:2a:79:f5:8e:a4:0e:af:e0:53:10:ff:cb:9e:5d: 78:90:cf:ea:b1:4d:15:e1:8d:39:27:71:ef:73:4f: 78:9e:a1:0c:b8:63:03:5a:b1:33:77:ea:fd:7e:e2: c9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6A:74:2E:19:FB:CE:E9:59:B1:DB:EA:4F:6C:E7:E3:50:B2:86:13 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/422fb51f-d5e0-4b9f-b16c-657ec732e11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.195.0/24 Signature Algorithm: sha256WithRSAEncryption 82:c1:90:99:0a:43:ab:44:9f:ab:bc:d1:1b:43:eb:df:1a:3f: 1e:bb:e5:2c:1e:f3:69:41:0a:92:87:ce:af:c6:e1:93:3e:c1: 57:24:7f:ee:e9:1b:84:18:64:13:8e:e6:31:30:45:08:b2:e5: 8f:1f:02:b5:69:e4:7c:a6:85:95:a8:e8:68:05:7d:2e:7d:cd: ae:d4:dc:0e:a4:0b:47:02:5d:2b:ac:47:74:47:ba:38:15:fb: a2:83:66:1e:9b:d6:b9:56:71:c4:c6:70:fa:29:41:2f:f4:84: a3:7e:17:fd:35:73:06:9a:96:60:dc:53:0b:9c:e0:d6:f5:f5: 17:6e:54:17:d6:ef:56:d6:2c:98:0b:1e:0a:98:bf:42:60:e4: a3:c6:1b:96:53:a4:72:70:ce:03:59:4e:ed:b0:39:3e:87:18: b0:d3:89:3b:c5:d1:01:fb:ee:fa:13:a7:b9:ec:1f:17:6e:56: 1d:9d:cf:7e:ff:4b:ba:32:f3:2e:33:48:21:52:e5:a6:19:b4: c7:85:f6:14:4f:a2:99:25:21:6c:b5:37:69:33:58:25:4e:77: 82:c2:f4:37:a1:df:ad:68:3e:10:ed:9b:65:07:04:3b:2d:55: dc:7c:4c:35:ba:45:40:ad:76:00:89:a1:a9:56:c4:ed:f6:74: c5:e9:ba:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGM49s+8Wb2G8DiD+AyjKrePN1zgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTIzMzQwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTVmMWJjNDY4NjkwNzQ5NDM3M2JkOWVkMzBhNGI0MjQ5 OTY4Mzc0OWYwMGJhMWY4ZDFmZWJlNmY0ZWEyYWE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC83D4z+STPsAISA7W6qn6VWsup2lwKdtQHpL2yq1phb82T bGGMB3OeTzHPXcZLz23ZqA4bwll2asj8W99oaj3Mzi1FbsWZr7HhYPbjGxlfZFoN ugMjKEWNjL9efcnKXoYt6rjq8grdQdB0DEIOugpuXbGeiSI+UoJ6Il1AA1lbquVJ EiV5bcinmNsewuhMCaz4nnXHb6o4Rvw9K0nkZtWuYLBQFn8nVDmC85ZVAeGf096r +/nkwc+TjMKMNGqpcZFsn7AQ8Zy/X0o7qLj+vv2mVM8qefWOpA6v4FMQ/8ueXXiQ z+qxTRXhjTknce9zT3ieoQy4YwNasTN36v1+4sn7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6Gp0Lhn7zulZsdvqT2zn41CyhhMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQyMmZiNTFmLWQ1ZTAtNGI5Zi1iMTZjLTY1N2VjNzMyZTExZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpcMwDQYJKoZIhvcNAQELBQADggEBAILBkJkKQ6tEn6u80RtD698aPx67 5Swe82lBCpKHzq/G4ZM+wVckf+7pG4QYZBOO5jEwRQiy5Y8fArVp5HymhZWo6GgF fS59za7U3A6kC0cCXSusR3RHujgV+6KDZh6b1rlWccTGcPopQS/0hKN+F/01cwaa lmDcUwuc4Nb19RduVBfW71bWLJgLHgqYv0Jg5KPGG5ZTpHJwzgNZTu2wOT6HGLDT iTvF0QH77voTp7nsHxduVh2dz37/S7oy8y4zSCFS5aYZtMeF9hRPopklIWy1N2kz WCVOd4LC9Deh361oPhDtm2UHBDstVdx8TDW6RUCtdgCJoalWxO32dMXpusQ= -----END CERTIFICATE-----Generated at Tue Oct 21 04:21:15 2025 by rpki-client