$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46668bb4-0197-4174-b6fa-910f798ad7c9.roa File: 46668bb4-0197-4174-b6fa-910f798ad7c9.roa (raw, json) Hash identifier: jeovgsIcVzJReymXk649MaB/G5wEep+9LYfzYaOM+7Q= Subject key identifier: 11:C8:77:35:20:A5:39:2A:58:39:D3:DB:62:AB:C7:69:F5:95:5C:FF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6F45515C9A047358C92B594DDAEEA02C0EEAD415 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46668bb4-0197-4174-b6fa-910f798ad7c9.roa Signing time: Sat 18 Oct 2025 06:40:13 +0000 ROA not before: Sat 18 Oct 2025 06:40:13 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:45:51:5c:9a:04:73:58:c9:2b:59:4d:da:ee:a0:2c:0e:ea:d4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:40:13 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=c41412a80cf6cbb2b89a4e9a3b280e5766894e8040dad8935bf4a8657041938e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2c:f2:0d:e1:6b:3d:77:a5:5a:27:1a:d0:34: 98:13:04:76:65:9b:96:0a:58:b6:a4:a3:5d:79:17: c5:11:51:49:30:25:48:f9:17:ff:7f:ee:ff:3a:b3: bd:6c:46:c0:6d:6f:a0:ef:ea:65:ab:40:38:03:8b: 98:dd:78:67:5b:9d:b3:a0:48:4f:89:09:07:6f:9f: 19:ac:3f:6c:0d:c8:7f:1c:40:de:a1:b4:62:7a:5f: fc:ff:eb:44:6b:14:ed:41:ac:a1:e9:cb:d4:b0:90: 9d:20:52:06:a6:18:a5:99:d5:57:36:70:1b:45:4e: 3e:25:ea:6e:07:35:7d:ef:33:cd:f0:71:7e:56:5b: 2d:4d:11:f4:19:c1:55:90:d4:1a:0e:cd:7b:6d:53: 93:cb:1f:14:c9:82:76:2c:56:90:71:9c:29:54:76: a8:3e:a7:da:3a:41:3e:2c:4c:eb:1a:52:ea:7f:1c: 40:37:4f:73:15:72:02:6a:0c:4b:b1:27:2f:f1:9a: ec:e0:90:f5:a0:49:74:98:2a:55:1f:d6:1c:33:07: 22:92:58:c9:71:a2:dd:85:5f:e7:ae:35:f6:45:00: 14:65:b8:59:e7:08:14:9a:4d:bf:ef:52:0c:86:ff: a9:f2:a0:fb:ac:84:ed:e0:72:80:be:ae:4f:07:31: 86:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C8:77:35:20:A5:39:2A:58:39:D3:DB:62:AB:C7:69:F5:95:5C:FF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46668bb4-0197-4174-b6fa-910f798ad7c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.112.0/22 Signature Algorithm: sha256WithRSAEncryption 48:51:46:cc:43:69:31:22:21:4e:9b:af:82:40:84:b0:d7:2e: 71:b9:51:ea:37:39:33:9f:42:c1:55:f8:8b:51:aa:5a:2a:70: 87:b3:6b:79:04:16:9c:f5:d8:2b:b4:13:43:f3:99:57:8e:8b: 43:0d:81:23:14:e6:fa:b2:01:22:6b:15:66:b2:d2:35:3d:6e: 6f:88:4e:9f:b3:c6:e7:f0:32:19:16:08:c6:07:a6:ec:9a:f6: 1e:ec:d4:1d:40:4d:26:0d:31:4e:3f:d4:f7:3e:c4:01:4f:d2: 8d:90:0f:d5:c4:e8:f0:ae:fe:6d:eb:1d:f1:34:a1:80:df:a2: f3:6e:bd:1f:bd:43:d7:0e:7c:a8:e0:cc:85:f0:d9:0b:50:bd: 73:b9:34:8d:74:10:2d:b0:ff:d4:49:fa:f7:48:12:94:f1:38: f8:03:b6:ac:cd:68:75:f7:b9:9d:95:ef:53:d7:26:7c:87:a8: 6d:14:39:f9:0a:27:ae:63:3e:16:a7:5f:c5:90:86:f1:62:4a: 79:b0:a7:06:36:c9:f9:53:65:19:4a:65:c5:10:8b:62:95:75: 24:30:6b:e8:f6:b0:33:6f:2b:de:c8:d9:e3:08:85:73:a9:1c: 02:e1:13:89:d5:7c:c5:04:e2:50:75:ce:1f:8f:54:d1:25:6d: fe:09:92:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb0VRXJoEc1jJK1lN2u6gLA7q1BUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDY0MDEzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDE0MTJhODBjZjZjYmIyYjg5YTRlOWEzYjI4MGU1NzY2 ODk0ZTgwNDBkYWQ4OTM1YmY0YTg2NTcwNDE5MzhlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOLPIN4Ws9d6VaJxrQNJgTBHZlm5YKWLako115F8URUUkw JUj5F/9/7v86s71sRsBtb6Dv6mWrQDgDi5jdeGdbnbOgSE+JCQdvnxmsP2wNyH8c QN6htGJ6X/z/60RrFO1BrKHpy9SwkJ0gUgamGKWZ1Vc2cBtFTj4l6m4HNX3vM83w cX5WWy1NEfQZwVWQ1BoOzXttU5PLHxTJgnYsVpBxnClUdqg+p9o6QT4sTOsaUup/ HEA3T3MVcgJqDEuxJy/xmuzgkPWgSXSYKlUf1hwzByKSWMlxot2FX+euNfZFABRl uFnnCBSaTb/vUgyG/6nyoPushO3gcoC+rk8HMYYjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEch3NSClOSpYOdPbYqvHafWVXP8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ2NjY4YmI0LTAxOTctNDE3NC1iNmZhLTkxMGY3OThhZDdjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS73AwDQYJKoZIhvcNAQELBQADggEBAEhRRsxDaTEiIU6br4JAhLDXLnG5 Ueo3OTOfQsFV+ItRqloqcIeza3kEFpz12Cu0E0PzmVeOi0MNgSMU5vqyASJrFWay 0jU9bm+ITp+zxufwMhkWCMYHpuya9h7s1B1ATSYNMU4/1Pc+xAFP0o2QD9XE6PCu /m3rHfE0oYDfovNuvR+9Q9cOfKjgzIXw2QtQvXO5NI10EC2w/9RJ+vdIEpTxOPgD tqzNaHX3uZ2V71PXJnyHqG0UOfkKJ65jPhanX8WQhvFiSnmwpwY2yflTZRlKZcUQ i2KVdSQwa+j2sDNvK97I2eMIhXOpHALhE4nVfMUE4lB1zh+PVNElbf4JkmE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:26 2025 by rpki-client