$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f974aab-d62d-4a71-9935-64f4271e1293.roa File: 4f974aab-d62d-4a71-9935-64f4271e1293.roa (raw, json) Hash identifier: v5aiNwREXB93etu5GjehuA/m0Ass6R+t92DzwDJSMcc= Subject key identifier: 85:5D:26:05:69:F9:6B:10:45:C5:F3:85:93:D3:BF:9F:1B:92:2C:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A87CD5D5384481F0E88BFC72DC78DE4836D3987 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f974aab-d62d-4a71-9935-64f4271e1293.roa Signing time: Sat 18 Oct 2025 22:52:24 +0000 ROA not before: Sat 18 Oct 2025 22:52:24 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:87:cd:5d:53:84:48:1f:0e:88:bf:c7:2d:c7:8d:e4:83:6d:39:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:52:24 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=ee4f8b758fd11bb1d5897bc641837641fccc44fdd0d96379d5951c20202f93cf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:f1:3f:9c:42:3a:df:e3:8d:be:29:c2:6e: a9:59:82:26:2c:cf:64:fe:0b:9c:4d:49:0d:ad:8e: 6a:c4:68:bb:93:31:06:de:ab:80:15:df:c1:4b:92: 85:49:f8:fa:bf:02:11:63:85:b9:32:14:76:c5:51: bd:82:de:1a:2b:99:01:03:f9:82:6e:f1:4e:73:db: 53:50:46:2e:18:c5:af:d9:12:ff:5c:9e:b4:36:85: d8:fb:a7:98:9e:35:4b:ce:5b:67:76:84:d9:a6:f8: 77:9a:ad:06:61:33:0f:2a:98:29:04:c4:22:48:b7: af:cf:b9:f2:1d:74:28:c0:17:91:bd:77:21:bf:33: 9a:bd:03:a8:53:b8:43:b0:0a:fa:dc:57:fd:27:1f: 08:95:a4:dc:b2:a0:48:82:43:7a:0c:bc:0b:f0:0b: 2b:ac:3f:dd:55:89:c1:23:ae:7c:0d:81:a3:e3:a2: 1d:c4:7e:94:f3:c6:67:88:2e:2c:27:f9:21:a4:f3: 63:27:f3:17:4c:d8:9f:4f:ae:56:68:ec:3e:b1:96: 39:7a:0c:6e:00:71:57:c2:24:7e:0d:90:33:98:e1: 48:97:9d:a6:91:46:09:46:e6:f6:4b:46:d0:13:08: 4f:f1:55:b6:b6:cc:a7:51:d1:b6:fb:86:48:30:dd: 4e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5D:26:05:69:F9:6B:10:45:C5:F3:85:93:D3:BF:9F:1B:92:2C:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f974aab-d62d-4a71-9935-64f4271e1293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.198.0/24 Signature Algorithm: sha256WithRSAEncryption 33:17:19:fe:19:25:3c:d3:ea:8c:fc:88:39:08:57:1d:29:62: bb:9a:38:cb:00:38:63:30:89:82:d8:a2:f2:86:5f:6d:71:9c: 38:bf:63:29:e1:43:73:ec:11:a4:c9:ca:7d:b0:dc:bb:e6:a8: 1e:a2:d0:1d:57:0d:f2:bb:c8:24:65:ff:3e:5f:a6:3f:a7:64: b7:d4:c4:83:90:e7:cf:76:dd:a2:f1:7a:63:44:7b:48:22:bd: bc:70:ff:09:bb:1a:5d:d9:f8:63:31:9f:b0:b0:d8:86:3a:e1: 0a:be:9f:74:cf:43:5d:61:bf:19:ed:5d:f3:d3:19:58:f2:65: b3:43:b8:8b:32:48:6f:dc:59:46:b9:2c:a7:c3:f0:d4:fd:f1: 0f:af:e2:bf:7f:25:ff:df:3b:3a:19:e2:87:1d:cb:27:28:da: 03:e6:59:69:74:85:1a:13:1e:f5:2d:b9:0f:d1:75:19:56:48: fb:79:30:ec:f4:27:49:73:ca:48:79:de:6d:fa:16:b4:72:3d: 99:7f:33:bc:b1:87:88:b9:a2:f9:42:54:58:76:a3:35:01:48: 63:dd:3c:84:0a:69:9c:ea:3a:ee:86:a3:fc:95:76:ab:19:12: 7c:10:69:7e:e0:77:0b:cd:fe:c6:51:46:dd:b9:52:ad:80:cb: 6a:66:31:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSofNXVOESB8OiL/HLceN5INtOYcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjI1MjI0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTRmOGI3NThmZDExYmIxZDU4OTdiYzY0MTgzNzY0MWZj Y2M0NGZkZDBkOTYzNzlkNTk1MWMyMDIwMmY5M2NmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCJPE/nEI63+ONvinCbqlZgiYsz2T+C5xNSQ2tjmrEaLuT MQbeq4AV38FLkoVJ+Pq/AhFjhbkyFHbFUb2C3hormQED+YJu8U5z21NQRi4Yxa/Z Ev9cnrQ2hdj7p5ieNUvOW2d2hNmm+HearQZhMw8qmCkExCJIt6/PufIddCjAF5G9 dyG/M5q9A6hTuEOwCvrcV/0nHwiVpNyyoEiCQ3oMvAvwCyusP91VicEjrnwNgaPj oh3EfpTzxmeILiwn+SGk82Mn8xdM2J9PrlZo7D6xljl6DG4AcVfCJH4NkDOY4UiX naaRRglG5vZLRtATCE/xVba2zKdR0bb7hkgw3U57AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhV0mBWn5axBFxfOFk9O/nxuSLE8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRmOTc0YWFiLWQ2MmQtNGE3MS05OTM1LTY0ZjQyNzFlMTI5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmsYwDQYJKoZIhvcNAQELBQADggEBADMXGf4ZJTzT6oz8iDkIVx0pYrua OMsAOGMwiYLYovKGX21xnDi/YynhQ3PsEaTJyn2w3LvmqB6i0B1XDfK7yCRl/z5f pj+nZLfUxIOQ58923aLxemNEe0givbxw/wm7Gl3Z+GMxn7Cw2IY64Qq+n3TPQ11h vxntXfPTGVjyZbNDuIsySG/cWUa5LKfD8NT98Q+v4r9/Jf/fOzoZ4ocdyyco2gPm WWl0hRoTHvUtuQ/RdRlWSPt5MOz0J0lzykh53m36FrRyPZl/M7yxh4i5ovlCVFh2 ozUBSGPdPIQKaZzqOu6Go/yVdqsZEnwQaX7gdwvN/sZRRt25Uq2Ay2pmMSg= -----END CERTIFICATE-----Generated at Mon Oct 20 11:13:53 2025 by rpki-client