$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e23b89f-7eaa-4fca-901c-c3c125314194.roa File: 4e23b89f-7eaa-4fca-901c-c3c125314194.roa (raw, json) Hash identifier: HIAv8z5NvC/30v2BBelq0Lv7kYzRDacLaaqDrV3MCX0= Subject key identifier: D1:CB:EA:62:D8:63:8C:9A:89:83:3B:05:69:78:25:56:2D:35:CD:F5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6970EB2F40CB1CBF212D00F788E193DEE9323E32 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e23b89f-7eaa-4fca-901c-c3c125314194.roa Signing time: Sat 18 Oct 2025 15:40:07 +0000 ROA not before: Sat 18 Oct 2025 15:40:07 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:70:eb:2f:40:cb:1c:bf:21:2d:00:f7:88:e1:93:de:e9:32:3e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 15:40:07 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=3bc042824dcca7b6c0cd95cb635b8022a650cec59de443e4dea7dae3d5e75805, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:37:b0:1a:9f:d7:70:fd:56:1a:f0:67:c8:12: 61:e7:66:f5:a5:7a:0b:c2:ce:37:8b:1b:a0:12:00: 44:08:fd:4d:88:2e:c6:9d:38:ff:d5:bd:53:21:36: cb:60:a8:a6:a2:83:d0:d1:89:22:6f:5c:b8:6c:a7: 87:53:45:2e:57:38:1d:23:45:73:c1:5c:df:69:a4: 0c:29:8a:01:f5:31:8c:7c:bc:4e:9a:9c:f5:5c:35: 4e:62:e1:37:a2:c2:ac:17:9d:57:95:7f:a6:86:b6: 97:de:2d:3f:21:4d:4b:94:52:88:53:14:95:7a:cc: d5:71:74:ae:5f:15:4d:3e:7c:be:2b:35:08:f1:0a: d0:b7:98:b4:19:a2:9e:e2:73:f4:4e:80:07:a7:db: 8e:ee:5d:d4:dd:17:74:09:9f:9a:bc:dd:ee:d6:1e: 62:62:94:98:4e:d8:da:c4:bb:06:33:1d:e3:56:ff: 0d:5a:49:45:9e:39:9e:d8:9c:b6:71:ec:bf:3a:bd: 4b:bc:d8:8a:eb:8e:f2:d2:32:82:7d:57:2d:a6:67: fd:6b:3e:fe:27:c1:fb:b0:db:c1:08:c7:2e:a0:3c: 70:ef:43:bd:37:4f:cf:b2:50:ee:9c:1c:4e:8a:4a: 95:e1:b1:b4:b5:e9:a3:7b:a2:e1:89:13:1b:d3:09: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CB:EA:62:D8:63:8C:9A:89:83:3B:05:69:78:25:56:2D:35:CD:F5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e23b89f-7eaa-4fca-901c-c3c125314194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.169.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:2d:81:4c:e6:80:a2:69:ed:f0:00:a7:2c:03:f6:66:d3:7a: 3f:e4:a1:f4:1e:4b:8e:2d:31:27:50:51:98:08:a0:a6:9a:2f: f4:87:c6:9b:4e:64:c3:d8:cc:75:83:6c:b1:23:41:30:60:ef: 1b:63:f6:13:2e:87:ca:ea:51:a7:d5:2c:d2:42:5b:03:bd:ba: ec:70:b6:3e:47:44:4f:87:09:5f:b7:e2:ce:11:a6:38:20:db: da:20:11:06:f0:a9:ab:f7:ad:49:d6:56:70:bb:c4:7b:fd:c5: a5:f1:8a:b9:ad:7d:2b:4b:83:6f:0e:35:97:83:c8:4f:65:71: cd:8c:b0:18:0c:58:61:31:b1:1d:d3:45:75:5a:a1:a9:13:c8: 0a:93:0b:23:3a:09:b0:08:1c:29:ba:8f:9f:20:32:37:a4:a9: 31:f5:3b:95:f3:5a:b1:1b:12:cc:c7:68:01:1a:51:e1:07:b0: 22:09:19:90:b6:2f:72:05:5a:5d:b3:62:38:41:40:bf:4b:ef: 81:ab:81:e2:e7:d5:49:fe:ed:3f:ec:14:f5:38:bd:d4:7f:c4: ae:b3:6b:ab:28:03:60:80:1b:3e:9b:36:a7:e5:b3:67:0c:5d: 8e:05:dc:8c:3f:d2:46:b9:90:f6:aa:1d:85:e1:5c:41:bc:34: 0a:08:3a:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaXDrL0DLHL8hLQD3iOGT3ukyPjIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTU0MDA3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYmMwNDI4MjRkY2NhN2I2YzBjZDk1Y2I2MzViODAyMmE2 NTBjZWM1OWRlNDQzZTRkZWE3ZGFlM2Q1ZTc1ODA1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmN7Aan9dw/VYa8GfIEmHnZvWlegvCzjeLG6ASAEQI/U2I LsadOP/VvVMhNstgqKaig9DRiSJvXLhsp4dTRS5XOB0jRXPBXN9ppAwpigH1MYx8 vE6anPVcNU5i4TeiwqwXnVeVf6aGtpfeLT8hTUuUUohTFJV6zNVxdK5fFU0+fL4r NQjxCtC3mLQZop7ic/ROgAen247uXdTdF3QJn5q83e7WHmJilJhO2NrEuwYzHeNW /w1aSUWeOZ7YnLZx7L86vUu82IrrjvLSMoJ9Vy2mZ/1rPv4nwfuw28EIxy6gPHDv Q703T8+yUO6cHE6KSpXhsbS16aN7ouGJExvTCam3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0cvqYthjjJqJgzsFaXglVi01zfUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRlMjNiODlmLTdlYWEtNGZjYS05MDFjLWMzYzEyNTMxNDE5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm6kwDQYJKoZIhvcNAQELBQADggEBAJotgUzmgKJp7fAApywD9mbTej/k ofQeS44tMSdQUZgIoKaaL/SHxptOZMPYzHWDbLEjQTBg7xtj9hMuh8rqUafVLNJC WwO9uuxwtj5HRE+HCV+34s4Rpjgg29ogEQbwqav3rUnWVnC7xHv9xaXxirmtfStL g28ONZeDyE9lcc2MsBgMWGExsR3TRXVaoakTyAqTCyM6CbAIHCm6j58gMjekqTH1 O5XzWrEbEszHaAEaUeEHsCIJGZC2L3IFWl2zYjhBQL9L74GrgeLn1Un+7T/sFPU4 vdR/xK6za6soA2CAGz6bNqfls2cMXY4F3Iw/0ka5kPaqHYXhXEG8NAoIOh4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:09:42 2025 by rpki-client