$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ade8bba-3881-4acf-a011-72568bc6b17a.roa File: 4ade8bba-3881-4acf-a011-72568bc6b17a.roa (raw, json) Hash identifier: GklfeM5GAHbRT6ep8oG/EKfhAwTW9rbTz8OH9FvFXtI= Subject key identifier: F4:B5:83:68:FB:9C:EA:CE:35:A6:F5:E6:36:1A:14:5B:95:C8:49:C2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 330DE2CF8BEB409A0990B5DBFFE20519D9F60512 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ade8bba-3881-4acf-a011-72568bc6b17a.roa Signing time: Sat 18 Oct 2025 22:52:28 +0000 ROA not before: Sat 18 Oct 2025 22:52:28 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0d:e2:cf:8b:eb:40:9a:09:90:b5:db:ff:e2:05:19:d9:f6:05:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:52:28 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=0b77b7ec7e21e170c0b4f0d1506bb2a821d8a61087a2c5600a204336712aef2a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f9:a9:a9:9a:5e:bb:44:8f:e0:34:03:01:af: 7d:ad:64:22:aa:ba:38:3f:62:b4:38:13:2d:66:2b: 94:c6:30:3c:b7:85:eb:d7:27:89:39:47:17:82:4b: ac:44:d2:e4:a4:d7:2e:12:b1:f6:95:38:74:5c:dc: 57:c7:88:7b:08:eb:90:f4:e9:e6:99:50:2d:c0:e3: 38:17:39:91:de:32:9d:9a:9d:27:9c:a7:4a:84:bb: fa:4d:08:d9:aa:96:46:af:63:c3:b6:ab:9e:25:6a: d7:f6:ff:2e:0a:07:53:cc:71:23:24:93:46:87:09: be:c2:53:e5:0f:a8:87:2e:bc:65:59:a2:2b:55:1b: 99:bb:6f:16:b6:ed:32:32:af:be:e2:9a:04:2a:44: 9b:9e:84:39:dc:c5:44:56:9c:ab:3f:22:7d:4f:d9: 75:cf:f3:a7:7e:ab:a1:5e:03:7e:ae:ef:fe:40:9e: 31:c1:90:9d:5b:46:a6:2e:19:44:27:71:c4:8a:11: a2:fa:99:26:18:5c:d3:67:69:9d:e2:6a:a9:74:2a: 0e:57:4a:bc:95:ed:cc:22:b2:d4:bc:6c:f1:fe:32: 6b:90:ff:f2:a0:df:4a:1d:dc:be:e7:7a:6f:7a:6e: 2e:8f:61:3a:1c:0c:b7:cf:25:44:83:71:55:93:85: 05:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B5:83:68:FB:9C:EA:CE:35:A6:F5:E6:36:1A:14:5B:95:C8:49:C2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ade8bba-3881-4acf-a011-72568bc6b17a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.12.0/24 Signature Algorithm: sha256WithRSAEncryption 92:71:e8:f6:28:63:7c:37:38:00:c5:f7:a1:c6:b7:64:ab:ed: 34:1d:8a:20:3e:bb:d6:a3:cf:58:8c:36:50:35:dd:4e:96:38: 7e:c3:e3:b0:55:34:41:c5:54:1f:67:bc:13:33:46:e7:f4:97: 72:ee:a9:09:8e:c1:38:86:e7:4d:1c:3f:d5:1d:ff:77:6f:21: 45:58:d2:a2:ce:f7:6e:3a:74:32:ce:57:29:25:1e:da:5d:b2: fb:75:a4:b6:8a:7c:7e:0f:c8:7f:5f:8b:49:44:8a:d9:3a:41: e9:0e:aa:55:6a:c1:9f:f1:dc:f6:48:fb:aa:bf:60:08:8a:02: bd:49:50:fa:08:db:7c:6d:a2:67:55:79:64:7f:95:62:66:55: 1d:70:81:cd:32:77:2a:f0:3f:27:83:52:f4:d4:c6:1d:44:93: c0:95:3c:10:de:7e:9d:70:87:d7:81:9e:14:3a:a2:3c:67:d9: dd:d7:9f:24:3d:e2:e5:f3:4a:e3:f6:7a:cc:fe:75:5a:d9:93: 81:26:bb:87:ca:8c:04:8c:fd:2b:20:89:b4:ec:fe:da:2a:7d: 3e:15:35:a5:aa:23:12:6b:9d:46:ed:fc:76:7e:22:33:4a:87: 0f:e6:1c:cc:96:bf:10:7a:5c:12:2e:d7:14:5c:c8:c5:99:01: 83:63:bb:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMw3iz4vrQJoJkLXb/+IFGdn2BRIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjI1MjI4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjc3YjdlYzdlMjFlMTcwYzBiNGYwZDE1MDZiYjJhODIx ZDhhNjEwODdhMmM1NjAwYTIwNDMzNjcxMmFlZjJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCT+ampml67RI/gNAMBr32tZCKqujg/YrQ4Ey1mK5TGMDy3 hevXJ4k5RxeCS6xE0uSk1y4SsfaVOHRc3FfHiHsI65D06eaZUC3A4zgXOZHeMp2a nSecp0qEu/pNCNmqlkavY8O2q54latf2/y4KB1PMcSMkk0aHCb7CU+UPqIcuvGVZ oitVG5m7bxa27TIyr77imgQqRJuehDncxURWnKs/In1P2XXP86d+q6FeA36u7/5A njHBkJ1bRqYuGUQnccSKEaL6mSYYXNNnaZ3iaql0Kg5XSryV7cwistS8bPH+MmuQ //Kg30od3L7nem96bi6PYTocDLfPJUSDcVWThQVXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9LWDaPuc6s41pvXmNhoUW5XIScIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRhZGU4YmJhLTM4ODEtNGFjZi1hMDExLTcyNTY4YmM2YjE3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7gwwDQYJKoZIhvcNAQELBQADggEBAJJx6PYoY3w3OADF96HGt2Sr7TQd iiA+u9ajz1iMNlA13U6WOH7D47BVNEHFVB9nvBMzRuf0l3LuqQmOwTiG500cP9Ud /3dvIUVY0qLO9246dDLOVyklHtpdsvt1pLaKfH4PyH9fi0lEitk6QekOqlVqwZ/x 3PZI+6q/YAiKAr1JUPoI23xtomdVeWR/lWJmVR1wgc0ydyrwPyeDUvTUxh1Ek8CV PBDefp1wh9eBnhQ6ojxn2d3XnyQ94uXzSuP2esz+dVrZk4Emu4fKjASM/SsgibTs /toqfT4VNaWqIxJrnUbt/HZ+IjNKhw/mHMyWvxB6XBIu1xRcyMWZAYNju38= -----END CERTIFICATE-----Generated at Mon Oct 20 03:07:01 2025 by rpki-client