$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a099941-2c45-47d2-96d5-80fc3e469173.roa File: 4a099941-2c45-47d2-96d5-80fc3e469173.roa (raw, json) Hash identifier: VAtT5uuJtzvM0UbBcx2Bwohk6oAfjCkid/29Hqulrn4= Subject key identifier: C8:EA:84:F0:42:50:92:5B:D3:59:A2:31:70:3F:37:2A:BF:29:0E:AC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 742225B264F2F924EC76DA110411A4F967F8DD61 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a099941-2c45-47d2-96d5-80fc3e469173.roa Signing time: Sun 19 Oct 2025 11:30:19 +0000 ROA not before: Sun 19 Oct 2025 11:30:19 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:22:25:b2:64:f2:f9:24:ec:76:da:11:04:11:a4:f9:67:f8:dd:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:30:19 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=8334e92ff738167d2faafe66bc63bc7bbb7ab5b90132934ff41a5250419fd602, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7f:ce:1a:2c:d5:c5:e0:de:f2:d7:d9:90:d6: 2d:4b:86:be:01:2a:5c:44:ad:ac:4a:e7:c2:e5:1e: 40:29:fc:c4:7e:73:d4:13:8c:6e:4c:6d:01:ac:30: cf:98:b7:5d:51:24:64:31:1f:9f:fd:8d:f5:11:41: de:d2:6f:d9:bf:ae:32:2c:48:c6:d1:24:dc:9b:d9: 65:ca:69:02:38:58:a7:e2:dc:60:f8:e1:4e:e5:35: 50:67:c6:f0:69:04:f7:08:94:90:f2:10:85:80:5e: b2:5e:17:5c:76:4d:d9:dd:a5:42:b6:78:d2:49:e1: 91:ed:19:fd:8f:3f:8e:97:3d:08:35:b1:3b:39:86: fa:b3:91:f7:70:3e:56:6b:13:16:96:ee:9f:be:0a: 74:ec:a1:87:4d:47:bf:35:85:ea:3f:cb:3e:e3:a8: 5d:4f:4b:7b:95:3f:be:bc:02:7b:31:95:c8:c1:22: 71:83:fa:15:12:8e:ca:9f:6d:d1:e1:12:41:3b:7a: a5:12:64:7e:d6:a5:2b:a0:69:7b:d6:6f:6b:69:65: 9c:0f:ce:80:74:e1:63:19:6e:e5:bf:0f:cf:03:f3: 32:46:f1:ca:c4:c5:f3:6c:d2:e4:e2:58:c9:6e:67: f4:1e:13:b6:7e:ca:e3:e4:eb:49:fc:ba:52:ba:4e: 7c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EA:84:F0:42:50:92:5B:D3:59:A2:31:70:3F:37:2A:BF:29:0E:AC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a099941-2c45-47d2-96d5-80fc3e469173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.70.0/23 Signature Algorithm: sha256WithRSAEncryption ae:40:e7:63:8f:05:b9:c1:9a:30:5f:dd:b4:66:a2:85:07:f8: c3:26:85:74:08:4c:59:c9:5a:f3:19:e8:57:c6:33:5c:d9:26: 66:cb:5d:89:36:b7:39:8c:94:b2:84:46:75:78:b0:3c:79:29: 4d:03:2b:5d:5a:59:7a:68:b7:4c:91:da:3a:0f:54:94:74:f4: a3:d9:eb:c8:e2:2c:4f:ee:38:45:44:58:58:7f:8b:05:53:ad: de:ba:69:93:7b:4f:5b:3f:97:46:a3:26:ed:7a:07:55:3d:d3: 79:29:df:7a:c9:f4:ad:d6:db:4b:e6:44:f4:3e:69:18:03:38: 34:46:6d:0e:34:c2:bd:97:04:59:ca:6c:d0:b7:22:ec:ab:d8: 2f:c7:ac:26:dc:00:71:64:99:6a:66:cc:06:fb:35:7e:af:1a: 38:0e:b7:68:71:cc:ac:53:43:2e:ee:ce:d6:19:ca:30:6c:5f: 3f:4a:56:f1:d0:40:16:46:45:6e:1d:4b:fa:76:a2:b0:08:d9: 7b:ef:1d:cd:f6:b2:0b:8b:89:5c:ba:4b:87:f2:89:3e:25:11: bb:6b:41:c6:3e:7f:7e:e2:e2:9f:23:25:db:1b:4b:36:11:bc: 66:d6:e6:ff:62:39:89:85:65:95:21:52:47:47:17:72:fc:1c: 27:78:19:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdCIlsmTy+STsdtoRBBGk+Wf43WEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTEzMDE5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzM0ZTkyZmY3MzgxNjdkMmZhYWZlNjZiYzYzYmM3YmJi N2FiNWI5MDEzMjkzNGZmNDFhNTI1MDQxOWZkNjAyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlf84aLNXF4N7y19mQ1i1Lhr4BKlxEraxK58LlHkAp/MR+ c9QTjG5MbQGsMM+Yt11RJGQxH5/9jfURQd7Sb9m/rjIsSMbRJNyb2WXKaQI4WKfi 3GD44U7lNVBnxvBpBPcIlJDyEIWAXrJeF1x2TdndpUK2eNJJ4ZHtGf2PP46XPQg1 sTs5hvqzkfdwPlZrExaW7p++CnTsoYdNR781heo/yz7jqF1PS3uVP768AnsxlcjB InGD+hUSjsqfbdHhEkE7eqUSZH7WpSugaXvWb2tpZZwPzoB04WMZbuW/D88D8zJG 8crExfNs0uTiWMluZ/QeE7Z+yuPk60n8ulK6TnzdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyOqE8EJQklvTWaIxcD83Kr8pDqwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRhMDk5OTQxLTJjNDUtNDdkMi05NmQ1LTgwZmMzZTQ2OTE3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQEYwDQYJKoZIhvcNAQELBQADggEBAK5A52OPBbnBmjBf3bRmooUH+MMm hXQITFnJWvMZ6FfGM1zZJmbLXYk2tzmMlLKERnV4sDx5KU0DK11aWXpot0yR2joP VJR09KPZ68jiLE/uOEVEWFh/iwVTrd66aZN7T1s/l0ajJu16B1U903kp33rJ9K3W 20vmRPQ+aRgDODRGbQ40wr2XBFnKbNC3Iuyr2C/HrCbcAHFkmWpmzAb7NX6vGjgO t2hxzKxTQy7uztYZyjBsXz9KVvHQQBZGRW4dS/p2orAI2XvvHc32sguLiVy6S4fy iT4lEbtrQcY+f37i4p8jJdsbSzYRvGbW5v9iOYmFZZUhUkdHF3L8HCd4GVQ= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:39 2025 by rpki-client