$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/497794a0-c732-4dea-a98a-0ac9e531f950.roa File: 497794a0-c732-4dea-a98a-0ac9e531f950.roa (raw, json) Hash identifier: n/VEBj7KomnEhzLenR6TyvhOsHhFIA/3BXOtkmHETjg= Subject key identifier: A9:5F:20:2B:D4:52:5A:B2:C8:B3:74:D5:3B:98:88:FA:A7:91:2E:46 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 364A60F311D6C8F7B2BF3A6BBFF28CE8A137DDA5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/497794a0-c732-4dea-a98a-0ac9e531f950.roa Signing time: Sun 19 Oct 2025 16:23:32 +0000 ROA not before: Sun 19 Oct 2025 16:23:32 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4a:60:f3:11:d6:c8:f7:b2:bf:3a:6b:bf:f2:8c:e8:a1:37:dd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 16:23:32 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=a0e95b2ae6be6def18b19e1fbcf28ca5d1f62f083772ee4ff6edae50716df5e9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:19:e3:65:ec:d0:28:36:b1:58:b6:8e:9d:02: 47:f0:35:21:d1:77:eb:ea:10:a2:88:f7:74:4f:23: e9:51:ef:b7:3d:5b:a8:80:9b:1e:48:c1:a9:f0:47: cb:bb:47:79:70:92:46:c0:6c:d4:5a:f0:4d:99:6d: 8e:18:b7:8f:d1:cf:28:cd:30:4e:47:a4:99:f0:59: b4:9d:72:4b:a4:b2:5e:94:bf:98:38:b9:81:e2:d3: e9:91:81:e9:82:cd:c8:89:7a:3c:f5:a4:bf:1b:26: 40:ba:41:6c:41:a6:cc:aa:c1:5f:4a:e0:46:09:bc: 39:f3:92:b0:a6:0f:a4:d4:da:dd:51:ce:8a:61:4f: 10:74:e7:15:ae:88:b0:df:0d:8c:54:cb:ed:00:2b: 74:59:db:11:b1:32:35:b7:e1:f0:81:73:1b:24:46: 33:8c:ac:82:50:3d:04:a8:40:a2:51:fa:24:bb:bc: fe:41:93:b5:7e:66:9c:b4:ed:0f:b1:4c:ca:6e:8f: 26:c8:84:7f:a0:3a:c9:20:a3:c2:7c:be:41:c1:b8: d8:e1:93:c7:7c:b6:a1:f5:96:9a:37:64:e9:f3:b2: 02:62:c6:1e:3b:af:72:d2:f0:92:44:a0:81:6c:46: 02:c2:44:03:74:00:90:29:b3:97:f1:7e:cc:8a:3f: 7a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5F:20:2B:D4:52:5A:B2:C8:B3:74:D5:3B:98:88:FA:A7:91:2E:46 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/497794a0-c732-4dea-a98a-0ac9e531f950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.154.0/24 Signature Algorithm: sha256WithRSAEncryption 10:4a:a7:44:a3:de:06:a2:cd:86:b4:f0:f8:84:8c:6c:22:1b: f4:34:ab:ae:e7:11:fb:86:15:25:f6:54:57:94:6e:6a:b1:ad: 68:d9:8b:84:3d:af:15:78:d3:83:c3:07:ca:60:31:dd:ee:a3: 7c:03:42:77:48:02:28:24:ba:df:f8:41:6b:bd:8d:30:56:b8: 4b:ab:34:99:34:d3:c4:63:9b:0b:51:38:8a:39:d7:4b:4f:5a: c6:16:f9:c2:12:3b:ef:0a:ac:a3:7a:08:82:73:6d:ce:23:6f: e1:d9:1e:8e:5f:57:ea:d2:30:85:12:c6:7a:e4:0d:ec:43:54: 1b:a6:67:b3:81:45:ad:03:e8:a2:81:44:cf:e5:cd:f6:71:94: a3:af:9c:90:c7:28:2e:ae:5c:ed:ce:b2:16:24:4a:53:35:85: 03:7c:61:ff:14:e4:9c:29:db:2f:f7:c8:f2:6d:7e:c9:cc:41: 94:b6:18:b3:a6:e8:8d:25:f3:3a:d3:99:eb:12:c2:d0:fc:a7: 3b:e3:59:bf:d2:9b:51:d9:ce:47:5b:cc:4a:00:57:2a:9a:1e: 1b:b6:37:60:51:88:9e:4a:a8:ef:86:e2:fa:78:4b:fc:e4:0f: 77:06:d5:93:0f:06:3b:8b:7c:48:03:d2:07:f1:c2:f7:0e:55: bf:ab:59:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNkpg8xHWyPeyvzprv/KM6KE33aUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTYyMzMyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGU5NWIyYWU2YmU2ZGVmMThiMTllMWZiY2YyOGNhNWQx ZjYyZjA4Mzc3MmVlNGZmNmVkYWU1MDcxNmRmNWU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOGeNl7NAoNrFYto6dAkfwNSHRd+vqEKKI93RPI+lR77c9 W6iAmx5IwanwR8u7R3lwkkbAbNRa8E2ZbY4Yt4/RzyjNME5HpJnwWbSdckuksl6U v5g4uYHi0+mRgemCzciJejz1pL8bJkC6QWxBpsyqwV9K4EYJvDnzkrCmD6TU2t1R zophTxB05xWuiLDfDYxUy+0AK3RZ2xGxMjW34fCBcxskRjOMrIJQPQSoQKJR+iS7 vP5Bk7V+Zpy07Q+xTMpujybIhH+gOskgo8J8vkHBuNjhk8d8tqH1lpo3ZOnzsgJi xh47r3LS8JJEoIFsRgLCRAN0AJAps5fxfsyKP3rZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqV8gK9RSWrLIs3TVO5iI+qeRLkYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ5Nzc5NGEwLWM3MzItNGRlYS1hOThhLTBhYzllNTMxZjk1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQpowDQYJKoZIhvcNAQELBQADggEBABBKp0Sj3gaizYa08PiEjGwiG/Q0 q67nEfuGFSX2VFeUbmqxrWjZi4Q9rxV404PDB8pgMd3uo3wDQndIAigkut/4QWu9 jTBWuEurNJk008RjmwtROIo510tPWsYW+cISO+8KrKN6CIJzbc4jb+HZHo5fV+rS MIUSxnrkDexDVBumZ7OBRa0D6KKBRM/lzfZxlKOvnJDHKC6uXO3OshYkSlM1hQN8 Yf8U5Jwp2y/3yPJtfsnMQZS2GLOm6I0l8zrTmesSwtD8pzvjWb/Sm1HZzkdbzEoA VyqaHhu2N2BRiJ5KqO+G4vp4S/zkD3cG1ZMPBjuLfEgD0gfxwvcOVb+rWVA= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:26 2025 by rpki-client