$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c0ea197-82b5-4bab-b19c-a32869ad8512.roa File: 4c0ea197-82b5-4bab-b19c-a32869ad8512.roa (raw, json) Hash identifier: Kk+5rgW8sRjk/ny6M+feQzF4zKI/nWb5gofiCoHZcQE= Subject key identifier: C5:EA:55:AA:89:5F:17:8F:5F:16:E2:8C:F6:A2:9C:16:33:71:4C:4C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 39ACDFE0E7C63E98D8035B5FD7F8915719F29DF7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c0ea197-82b5-4bab-b19c-a32869ad8512.roa Signing time: Sat 18 Oct 2025 16:01:26 +0000 ROA not before: Sat 18 Oct 2025 16:01:26 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ac:df:e0:e7:c6:3e:98:d8:03:5b:5f:d7:f8:91:57:19:f2:9d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:01:26 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=5c6dba0a44fb45738aa089c89f3bd5e518de6b85a6dc4ecc48d10bebe37062e8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f5:02:a0:c2:bb:69:36:86:0e:44:93:e5:11: 4f:ca:d9:bf:07:cc:aa:1e:81:b4:5f:58:c5:1e:27: f7:eb:04:36:d8:c8:b2:8c:38:13:60:e4:41:09:0b: 0b:a1:e3:f8:90:4b:57:ad:e6:cf:0a:2e:35:0d:f4: e3:e1:05:60:fc:ee:ab:73:6f:37:45:3c:b2:5d:b4: 2a:7f:80:ef:8e:c5:1f:e2:b5:9b:d0:36:79:0b:ca: 39:f8:d8:de:13:5a:31:e0:53:5f:4a:57:f6:57:53: b4:da:76:fe:9f:01:9c:5b:38:4e:84:25:85:12:65: fa:14:f6:6d:f0:6f:ea:5b:dc:42:7c:53:ee:3a:62: a2:98:21:bd:db:12:c2:61:7e:7a:95:60:ad:85:38: 06:f5:49:d9:72:54:ed:fa:71:13:43:7c:5d:42:8d: 8f:a7:19:8c:7a:9d:d8:35:88:65:71:b3:a2:75:33: 85:c7:81:97:71:88:7d:fe:f6:db:e0:3f:71:0a:ca: 7e:8f:d0:73:71:83:7c:3b:3f:18:a5:a4:7d:fc:04: f7:66:23:e0:95:46:f6:b4:34:6c:d5:94:e0:97:d4: 4b:b6:a8:13:1f:11:65:b1:08:20:6b:22:d8:96:fd: 98:ea:e4:a8:b9:ec:38:75:6e:ce:16:17:87:7e:5e: ec:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EA:55:AA:89:5F:17:8F:5F:16:E2:8C:F6:A2:9C:16:33:71:4C:4C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c0ea197-82b5-4bab-b19c-a32869ad8512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.84.0/24 Signature Algorithm: sha256WithRSAEncryption 66:4b:ed:b5:66:cc:07:8d:ea:f0:0f:9e:44:96:38:5e:4c:d6: 54:ab:48:43:45:75:d6:90:d4:79:90:d0:8d:a0:d9:ee:6d:b0: 0f:57:5f:82:93:04:bb:2a:79:19:1a:6f:cd:90:77:e0:df:cc: e5:8c:dc:29:4a:53:f8:85:ef:d4:b9:2a:54:b6:67:76:d2:e1: da:0d:e0:e6:da:58:57:9a:53:aa:3c:5b:2f:62:9b:40:fe:dc: 50:b5:94:06:bd:b8:48:de:d9:dc:3c:fc:f8:da:db:ed:0f:09: 19:08:20:98:a4:80:68:29:4b:2a:d8:f1:dd:72:57:3e:32:fa: ea:2d:df:a7:5c:16:55:28:e4:12:f0:b4:31:f1:87:c2:dc:b8: 6e:df:af:02:35:51:7c:b1:4e:44:cd:04:7e:3f:e0:bf:4d:31: 71:4e:9e:14:4a:26:31:f4:a0:68:d5:13:b3:93:de:a8:d8:43: b9:22:f4:33:b0:cd:50:bc:d5:2d:51:a0:da:d3:06:02:24:24: f3:dc:a2:86:01:60:bb:c8:2c:18:a8:45:4c:18:c2:f0:8e:ac: fe:db:fc:32:7b:5d:8c:ad:d4:f6:bb:86:17:08:50:e8:f6:a9: 2e:56:f3:62:30:18:de:4f:41:3e:fa:99:5e:1a:69:64:8d:06: 12:c3:a4:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOazf4OfGPpjYA1tf1/iRVxnynfcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTYwMTI2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzZkYmEwYTQ0ZmI0NTczOGFhMDg5Yzg5ZjNiZDVlNTE4 ZGU2Yjg1YTZkYzRlY2M0OGQxMGJlYmUzNzA2MmU4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ9QKgwrtpNoYORJPlEU/K2b8HzKoegbRfWMUeJ/frBDbY yLKMOBNg5EEJCwuh4/iQS1et5s8KLjUN9OPhBWD87qtzbzdFPLJdtCp/gO+OxR/i tZvQNnkLyjn42N4TWjHgU19KV/ZXU7Tadv6fAZxbOE6EJYUSZfoU9m3wb+pb3EJ8 U+46YqKYIb3bEsJhfnqVYK2FOAb1SdlyVO36cRNDfF1CjY+nGYx6ndg1iGVxs6J1 M4XHgZdxiH3+9tvgP3EKyn6P0HNxg3w7PxilpH38BPdmI+CVRva0NGzVlOCX1Eu2 qBMfEWWxCCBrItiW/Zjq5Ki57Dh1bs4WF4d+XuzbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxepVqolfF49fFuKM9qKcFjNxTEwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjMGVhMTk3LTgyYjUtNGJhYi1iMTljLWEzMjg2OWFkODUxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrFQwDQYJKoZIhvcNAQELBQADggEBAGZL7bVmzAeN6vAPnkSWOF5M1lSr SENFddaQ1HmQ0I2g2e5tsA9XX4KTBLsqeRkab82Qd+DfzOWM3ClKU/iF79S5KlS2 Z3bS4doN4ObaWFeaU6o8Wy9im0D+3FC1lAa9uEje2dw8/Pja2+0PCRkIIJikgGgp SyrY8d1yVz4y+uot36dcFlUo5BLwtDHxh8LcuG7frwI1UXyxTkTNBH4/4L9NMXFO nhRKJjH0oGjVE7OT3qjYQ7ki9DOwzVC81S1RoNrTBgIkJPPcooYBYLvILBioRUwY wvCOrP7b/DJ7XYyt1Pa7hhcIUOj2qS5W82IwGN5PQT76mV4aaWSNBhLDpPM= -----END CERTIFICATE-----Generated at Mon Oct 20 11:11:32 2025 by rpki-client