$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47836356-8fd6-4ebc-9744-8e2456707df0.roa File: 47836356-8fd6-4ebc-9744-8e2456707df0.roa (raw, json) Hash identifier: KX//rtjIrEMTYGvpgFOe7Vu1erQBdWhprgDCrbnd4SY= Subject key identifier: F3:D4:7B:1D:00:6F:16:8B:7B:D9:F9:A9:11:7F:4F:A1:39:B0:4A:05 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5151BC817A4552C433BDF38877A4AD5FF5F1F1A2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47836356-8fd6-4ebc-9744-8e2456707df0.roa Signing time: Sat 18 Oct 2025 09:11:16 +0000 ROA not before: Sat 18 Oct 2025 09:11:16 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:51:bc:81:7a:45:52:c4:33:bd:f3:88:77:a4:ad:5f:f5:f1:f1:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:11:16 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=a04227be48a155d0ab4fe0ffa0e2761e158f8b52bd76fb28aed2dfa0cf829152, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:c5:e0:b9:31:22:d0:35:db:ce:4b:53:a6: 5f:47:7a:e1:e1:01:4b:87:2c:2f:fc:79:59:6c:20: 0e:78:ef:9b:af:70:ce:6c:a6:b1:d6:e5:68:9f:0b: ad:38:44:93:eb:96:59:22:7c:79:33:cd:06:d3:c8: 59:e3:43:3c:20:09:b1:0d:cd:77:2c:54:80:03:d7: 7d:13:55:9a:b9:04:55:86:dc:f0:bb:cd:ab:46:cc: dd:f6:08:01:9a:68:ed:66:3d:8e:2e:59:33:c7:89: 06:61:ae:64:25:c3:94:25:ff:b3:b5:fb:94:74:89: 5a:b2:86:bc:75:7c:3e:d2:0b:9f:58:f1:1a:80:b3: 78:10:17:71:19:e1:13:49:59:ec:68:4d:dc:7f:12: 9e:95:13:92:67:d3:fa:b4:eb:d7:a1:9a:53:00:e5: fb:1d:89:3c:40:72:21:a4:ea:9a:2c:9b:38:a0:9b: 29:3c:7b:54:88:bd:59:58:94:a5:ca:29:c4:4d:1e: a9:0a:7d:e1:15:17:31:61:19:4f:59:45:93:f8:57: 47:e7:41:21:76:9a:fd:ad:f1:97:e7:08:f0:37:ef: f1:a5:df:39:46:72:17:c6:11:d0:bb:17:bc:09:ff: 56:f6:3b:06:93:90:4c:f9:60:eb:77:6e:bb:76:5d: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D4:7B:1D:00:6F:16:8B:7B:D9:F9:A9:11:7F:4F:A1:39:B0:4A:05 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47836356-8fd6-4ebc-9744-8e2456707df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.16.0/20 Signature Algorithm: sha256WithRSAEncryption ae:72:98:c0:60:41:bc:c2:a3:55:38:0f:07:e1:8a:ff:06:2a: 32:aa:bb:df:82:db:91:a9:09:10:b0:cf:ab:57:ec:dd:ef:45: 3c:b3:6a:6e:0a:f8:b0:76:0a:e6:d2:5d:7f:c0:64:0d:d1:8f: a2:9b:bc:8b:f6:4a:b5:85:26:8d:fe:b1:05:9f:eb:a9:79:91: 1e:13:e3:1c:2d:05:9c:de:48:f0:06:e0:de:56:b8:b8:a9:46: 97:38:0b:27:80:ed:df:a2:48:3e:ef:b8:c9:d6:5d:2d:03:c4: 8e:b8:31:b3:30:c4:d1:fb:27:d7:99:29:9c:a9:fb:6e:c0:73: a6:18:a8:95:50:46:36:0f:33:98:ff:96:0a:44:61:8d:cc:82: 36:73:68:c2:4a:ff:09:cb:6c:b5:b1:8e:e5:fd:9e:8e:36:bb: c6:3e:0c:01:21:df:09:0b:31:86:4b:72:82:60:66:78:8c:d3: 60:ad:e9:38:7e:1c:02:07:6d:46:f5:03:cd:80:90:9f:ab:d0: 5f:6a:69:5b:63:6a:a3:49:ea:d9:26:d8:4c:ac:10:e2:ef:14: 38:81:4d:56:c8:18:72:1b:94:3f:73:a6:7e:fd:6a:de:b7:0b: a8:46:76:1b:b7:d6:9e:d7:fa:42:3d:e9:48:23:7a:21:53:64: c3:c3:6d:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUVG8gXpFUsQzvfOId6StX/Xx8aIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDkxMTE2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDQyMjdiZTQ4YTE1NWQwYWI0ZmUwZmZhMGUyNzYxZTE1 OGY4YjUyYmQ3NmZiMjhhZWQyZGZhMGNmODI5MTUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChUsXguTEi0DXbzktTpl9HeuHhAUuHLC/8eVlsIA5475uv cM5sprHW5WifC604RJPrllkifHkzzQbTyFnjQzwgCbENzXcsVIAD130TVZq5BFWG 3PC7zatGzN32CAGaaO1mPY4uWTPHiQZhrmQlw5Ql/7O1+5R0iVqyhrx1fD7SC59Y 8RqAs3gQF3EZ4RNJWexoTdx/Ep6VE5Jn0/q069ehmlMA5fsdiTxAciGk6posmzig myk8e1SIvVlYlKXKKcRNHqkKfeEVFzFhGU9ZRZP4V0fnQSF2mv2t8ZfnCPA37/Gl 3zlGchfGEdC7F7wJ/1b2OwaTkEz5YOt3brt2XaxnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU89R7HQBvFot72fmpEX9PoTmwSgUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ3ODM2MzU2LThmZDYtNGViYy05NzQ0LThlMjQ1NjcwN2RmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSmhAwDQYJKoZIhvcNAQELBQADggEBAK5ymMBgQbzCo1U4Dwfhiv8GKjKq u9+C25GpCRCwz6tX7N3vRTyzam4K+LB2CubSXX/AZA3Rj6KbvIv2SrWFJo3+sQWf 66l5kR4T4xwtBZzeSPAG4N5WuLipRpc4CyeA7d+iSD7vuMnWXS0DxI64MbMwxNH7 J9eZKZyp+27Ac6YYqJVQRjYPM5j/lgpEYY3MgjZzaMJK/wnLbLWxjuX9no42u8Y+ DAEh3wkLMYZLcoJgZniM02Ct6Th+HAIHbUb1A82AkJ+r0F9qaVtjaqNJ6tkm2Eys EOLvFDiBTVbIGHIblD9zpn79at63C6hGdhu31p7X+kI96UgjeiFTZMPDbXw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:09:20 2025 by rpki-client