$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a50b2a3-37da-4f96-9906-e3bf667e22a2.roa File: 4a50b2a3-37da-4f96-9906-e3bf667e22a2.roa (raw, json) Hash identifier: t59Vwa2/9CWcwc5f2ag1RyUrs7pvj2ZfzWyNRB08dtU= Subject key identifier: 42:C4:B6:69:4B:8F:7C:0F:5F:6B:29:27:3A:5E:6D:22:20:57:C1:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0C04CA89D477C6DD3F50E23684A5CECA012120DB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a50b2a3-37da-4f96-9906-e3bf667e22a2.roa Signing time: Sat 18 Oct 2025 18:01:23 +0000 ROA not before: Sat 18 Oct 2025 18:01:23 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:04:ca:89:d4:77:c6:dd:3f:50:e2:36:84:a5:ce:ca:01:21:20:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:01:23 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=fff5d192934d96695ade4edf7a9e955a632712eb658c45cb2199d1d5eed69f1b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:a6:41:4f:b3:22:01:0f:c6:90:0d:1b:7d: c2:94:cb:55:6d:dc:b3:51:af:5f:fb:1d:5c:2c:6b: 3c:41:a6:78:d7:6c:60:25:e4:64:79:f9:a1:fb:4d: 94:9d:2c:8d:4f:44:23:1f:4e:ce:bf:18:36:67:18: 38:86:b7:c6:54:8e:44:80:93:9d:77:98:49:64:87: 02:37:0d:40:a0:f1:6e:3c:7e:60:f0:0d:88:b2:06: d8:51:64:9b:4a:29:05:6c:7d:3f:0e:ab:3c:da:a2: 5d:96:66:05:37:25:18:4e:8e:2f:6e:5a:f2:e9:87: 5c:41:b1:8a:91:6c:3d:25:17:36:e2:5f:d1:76:39: 1f:db:a5:c7:22:f7:bc:15:f3:92:17:9b:3d:06:24: 4e:c5:30:e5:22:40:2d:9f:0c:00:47:b0:0a:f0:92: a5:1e:be:77:9f:0c:8a:35:ea:4c:25:38:b1:69:b2: 6e:fd:c8:27:77:93:ed:bc:43:39:74:59:45:a8:9a: 41:4f:9c:03:59:c2:22:44:fa:ab:ff:ee:80:f3:cb: 94:90:d7:9f:ec:0f:58:fb:76:c4:c2:65:9d:36:78: d4:38:0c:4f:54:95:94:ee:dc:0d:34:4d:4a:1c:ca: e7:56:5d:18:86:97:a3:fb:85:a4:40:b7:58:d5:71: b3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C4:B6:69:4B:8F:7C:0F:5F:6B:29:27:3A:5E:6D:22:20:57:C1:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a50b2a3-37da-4f96-9906-e3bf667e22a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.128.0/23 Signature Algorithm: sha256WithRSAEncryption 91:9f:36:c9:aa:12:e1:5d:85:09:fc:cd:7a:4f:42:83:8f:4d: e9:e1:69:52:fa:88:96:ca:9e:00:fe:9b:5b:37:76:62:cb:2b: 67:80:d7:23:d0:00:ca:24:1d:e1:83:bb:d9:18:41:c6:6b:c0: 2b:3d:b7:64:fb:7a:af:fb:dc:7e:f0:91:e3:cd:61:1f:6f:43: 56:94:92:df:0c:9b:14:50:3b:20:8a:cb:2f:6b:b6:2a:77:b0: df:7b:99:d8:a3:40:78:29:30:a4:e4:45:66:87:6e:07:5c:43: 37:f2:4a:77:05:50:37:9a:cd:b3:12:da:94:40:be:4e:14:75: 3c:e1:ef:1c:f4:7d:2a:ea:ce:54:db:62:84:81:9e:eb:58:e7: 8e:fe:76:d5:53:a9:68:09:89:85:41:57:7a:ba:d2:c4:a4:1c: 82:35:c1:00:59:e3:39:97:b6:5e:e9:1f:2a:3f:bb:78:79:13: 45:f4:4a:d9:58:7f:d9:67:bb:a8:34:64:41:bb:c5:19:ce:f2: c5:e0:79:3c:3a:0e:75:9e:ef:f4:20:2b:f4:3c:c5:d8:98:bb: 57:7f:61:a0:96:86:71:2a:2e:d9:c4:d5:24:a8:68:9e:78:0c: d5:bf:a7:ea:d5:cb:b8:9c:2b:ed:43:45:4a:49:19:3c:e3:43: 4a:8f:04:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDATKidR3xt0/UOI2hKXOygEhINswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTgwMTIzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmY1ZDE5MjkzNGQ5NjY5NWFkZTRlZGY3YTllOTU1YTYz MjcxMmViNjU4YzQ1Y2IyMTk5ZDFkNWVlZDY5ZjFiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAx6ZBT7MiAQ/GkA0bfcKUy1Vt3LNRr1/7HVwsazxBpnjX bGAl5GR5+aH7TZSdLI1PRCMfTs6/GDZnGDiGt8ZUjkSAk513mElkhwI3DUCg8W48 fmDwDYiyBthRZJtKKQVsfT8Oqzzaol2WZgU3JRhOji9uWvLph1xBsYqRbD0lFzbi X9F2OR/bpcci97wV85IXmz0GJE7FMOUiQC2fDABHsArwkqUevnefDIo16kwlOLFp sm79yCd3k+28Qzl0WUWomkFPnANZwiJE+qv/7oDzy5SQ15/sD1j7dsTCZZ02eNQ4 DE9UlZTu3A00TUocyudWXRiGl6P7haRAt1jVcbM1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQsS2aUuPfA9fayknOl5tIiBXwX4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRhNTBiMmEzLTM3ZGEtNGY5Ni05OTA2LWUzYmY2NjdlMjJhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpIAwDQYJKoZIhvcNAQELBQADggEBAJGfNsmqEuFdhQn8zXpPQoOPTenh aVL6iJbKngD+m1s3dmLLK2eA1yPQAMokHeGDu9kYQcZrwCs9t2T7eq/73H7wkePN YR9vQ1aUkt8MmxRQOyCKyy9rtip3sN97mdijQHgpMKTkRWaHbgdcQzfySncFUDea zbMS2pRAvk4UdTzh7xz0fSrqzlTbYoSBnutY547+dtVTqWgJiYVBV3q60sSkHII1 wQBZ4zmXtl7pHyo/u3h5E0X0StlYf9lnu6g0ZEG7xRnO8sXgeTw6DnWe7/QgK/Q8 xdiYu1d/YaCWhnEqLtnE1SSoaJ54DNW/p+rVy7icK+1DRUpJGTzjQ0qPBGs= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:14 2025 by rpki-client