$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e153880-1c44-4d4f-9935-615a4dbd06a5.roa File: 4e153880-1c44-4d4f-9935-615a4dbd06a5.roa (raw, json) Hash identifier: tBUbS62pw25057vz/mZcup8SBumWjCrWT11+FTe3dyY= Subject key identifier: BC:E1:9C:A0:11:35:C8:C8:B5:74:14:C3:DF:67:FC:49:23:3B:3A:31 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A9848FE1787B240F33E376751BAFA4287FEC047 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e153880-1c44-4d4f-9935-615a4dbd06a5.roa Signing time: Sat 18 Oct 2025 22:42:35 +0000 ROA not before: Sat 18 Oct 2025 22:42:35 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:98:48:fe:17:87:b2:40:f3:3e:37:67:51:ba:fa:42:87:fe:c0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:42:35 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=7455ff8b6f00d105e483ad8085a236fb23a0d71f7eaccb3923b1d02c6847cafc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d8:65:03:bc:c1:99:67:6d:60:21:48:db:7f: 95:a5:de:f6:6f:80:2f:af:50:5a:2d:6c:89:f4:14: fa:fc:47:6f:73:91:63:26:c2:e1:49:70:bb:05:fe: d1:60:9b:ea:33:9b:fc:26:a0:aa:82:e9:47:a2:2b: 38:fc:e2:23:d1:64:3c:f9:3d:78:56:ef:ec:e2:50: 0f:ea:14:7d:d8:3b:f8:73:7b:d6:f0:85:5c:19:80: 37:fb:4f:8c:e8:56:32:81:9c:c2:7d:68:48:5f:d5: ad:de:ce:3b:31:9f:d9:e4:e6:0d:2f:a9:1d:11:07: aa:56:c1:73:23:81:4c:52:2a:72:f6:bd:38:07:a3: 9d:76:b6:7e:8d:28:b0:31:43:e7:bd:90:45:71:d0: f6:5b:2c:3b:6a:dd:2e:67:28:83:a1:77:0a:d7:4e: da:97:e0:0f:f7:67:92:05:ec:53:db:e5:7b:b1:d2: d4:43:4c:01:49:c2:b5:25:c8:d9:10:59:1e:2a:1e: 3f:6d:39:1e:7d:3e:cd:63:5e:ab:b3:90:76:14:c1: 5d:c0:3c:3e:38:46:a2:d5:c2:28:33:ab:49:ff:c0: 55:1b:59:8b:58:05:f3:57:26:11:f3:4b:4e:aa:4f: c7:00:e8:8b:a6:0f:8d:d1:af:00:45:e5:a2:40:58: 7d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E1:9C:A0:11:35:C8:C8:B5:74:14:C3:DF:67:FC:49:23:3B:3A:31 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e153880-1c44-4d4f-9935-615a4dbd06a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.96.0/23 Signature Algorithm: sha256WithRSAEncryption ab:8f:91:9c:90:bd:e4:ac:f8:7c:c3:71:70:13:0b:49:85:53: 2c:a7:01:44:03:3c:ec:c1:48:2d:c2:1f:77:9b:b4:bb:05:ee: e4:fe:bf:de:67:40:3e:b9:1a:ba:ee:5f:12:b4:07:fd:c3:7c: 6b:7b:5c:76:dc:ac:84:29:ef:c2:63:f6:c9:10:f2:52:88:38: b7:fc:fd:ba:a2:aa:b1:ff:2c:36:b8:11:62:f6:61:da:1b:b2: 20:d1:3c:d2:ac:1b:6a:4b:f9:4c:ee:4d:fa:3b:16:41:a7:45: 52:2c:a6:99:a8:89:d5:17:fe:f7:bd:c5:76:d8:de:da:a2:b3: a0:89:af:4a:42:76:9a:77:3e:14:80:91:0c:6d:b9:6e:b2:d2: 5a:ab:e5:ae:7a:dc:0c:e3:81:b9:6e:b2:39:02:52:62:99:8f: 78:2d:da:45:47:75:99:e9:25:ee:75:93:e0:b6:92:72:7c:05: 73:32:6b:00:09:1c:c1:a7:ed:ee:eb:7a:c4:6e:e1:a8:1a:46: 38:a9:20:4a:3e:8b:7b:b1:27:ae:23:f7:8b:51:d5:ff:4e:be: 60:79:09:b2:5c:c5:26:92:73:63:4a:04:a8:49:93:ba:c5:f2: e1:a9:59:74:64:2d:e3:47:83:8f:48:7b:e7:38:54:23:06:f0: 96:b9:68:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSphI/heHskDzPjdnUbr6Qof+wEcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjI0MjM1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDU1ZmY4YjZmMDBkMTA1ZTQ4M2FkODA4NWEyMzZmYjIz YTBkNzFmN2VhY2NiMzkyM2IxZDAyYzY4NDdjYWZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo2GUDvMGZZ21gIUjbf5Wl3vZvgC+vUFotbIn0FPr8R29z kWMmwuFJcLsF/tFgm+ozm/wmoKqC6UeiKzj84iPRZDz5PXhW7+ziUA/qFH3YO/hz e9bwhVwZgDf7T4zoVjKBnMJ9aEhf1a3ezjsxn9nk5g0vqR0RB6pWwXMjgUxSKnL2 vTgHo512tn6NKLAxQ+e9kEVx0PZbLDtq3S5nKIOhdwrXTtqX4A/3Z5IF7FPb5Xux 0tRDTAFJwrUlyNkQWR4qHj9tOR59Ps1jXquzkHYUwV3APD44RqLVwigzq0n/wFUb WYtYBfNXJhHzS06qT8cA6IumD43RrwBF5aJAWH1PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvOGcoBE1yMi1dBTD32f8SSM7OjEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRlMTUzODgwLTFjNDQtNGQ0Zi05OTM1LTYxNWE0ZGJkMDZhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9WAwDQYJKoZIhvcNAQELBQADggEBAKuPkZyQveSs+HzDcXATC0mFUyyn AUQDPOzBSC3CH3ebtLsF7uT+v95nQD65GrruXxK0B/3DfGt7XHbcrIQp78Jj9skQ 8lKIOLf8/bqiqrH/LDa4EWL2YdobsiDRPNKsG2pL+UzuTfo7FkGnRVIsppmoidUX /ve9xXbY3tqis6CJr0pCdpp3PhSAkQxtuW6y0lqr5a563AzjgblusjkCUmKZj3gt 2kVHdZnpJe51k+C2knJ8BXMyawAJHMGn7e7resRu4agaRjipIEo+i3uxJ64j94tR 1f9OvmB5CbJcxSaSc2NKBKhJk7rF8uGpWXRkLeNHg49Ie+c4VCMG8Ja5aAI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:06:49 2025 by rpki-client