$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/559b4e5f-7a69-4c7c-a7be-093f1d184465.roa File: 559b4e5f-7a69-4c7c-a7be-093f1d184465.roa (raw, json) Hash identifier: 5vTF8CwGpqhH3ykxyYkcU3bFTX3sV47fDmJm/nc52eY= Subject key identifier: 61:7A:EC:7E:B8:61:8C:F0:B0:42:D1:28:65:51:AC:BB:3C:E3:1B:12 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 058453CF701D8224707F0CD1EDA3FEDC92650584 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/559b4e5f-7a69-4c7c-a7be-093f1d184465.roa Signing time: Sat 18 Oct 2025 10:13:26 +0000 ROA not before: Sat 18 Oct 2025 10:13:26 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:84:53:cf:70:1d:82:24:70:7f:0c:d1:ed:a3:fe:dc:92:65:05:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 10:13:26 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=a29be6fc225344b9b80a5c8344bdb7048256531dacf0755f10ca9c73a660f72b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:16:73:a7:ee:57:02:f3:75:b4:43:fa:7c: 84:1d:99:b2:f2:c3:95:27:1b:26:04:30:a4:2c:29: 5b:8f:49:ff:ff:f9:f3:34:2d:06:a9:4c:8a:26:92: 1e:cf:27:da:a7:52:54:82:32:5f:fc:7a:e4:88:24: c9:d0:2c:ed:fc:d5:0a:6a:2d:91:a6:f8:6d:ab:f3: 63:65:c2:01:39:8e:49:15:1c:24:ed:1f:50:76:10: cb:a1:66:62:05:fb:74:65:34:18:a7:d9:a2:94:8a: f3:1f:96:0a:2b:ad:cb:6e:4a:71:74:31:fc:d0:fe: f8:9a:64:0e:75:c5:f0:bd:be:72:fa:8b:c9:56:fe: ec:73:19:c3:2f:67:e0:77:b1:d2:c7:e5:ec:58:36: 6c:23:73:77:d4:bb:ce:e4:97:3c:2a:57:a1:69:c6: 46:c1:c2:f5:5a:a0:66:7a:a6:c5:20:94:e9:b9:4b: 78:91:8e:39:31:6a:00:94:8a:1b:e2:2a:34:8d:1f: be:1e:86:14:5c:c4:ae:98:92:19:ee:e5:3d:81:0e: d8:f1:21:5c:3b:cb:34:34:20:e4:52:70:03:b6:2d: 4a:5c:9f:64:67:ee:ce:40:3b:a3:ce:b5:a3:59:f7: f5:d7:7f:ef:a2:18:29:97:0c:f8:9a:41:cf:ac:e6: 08:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7A:EC:7E:B8:61:8C:F0:B0:42:D1:28:65:51:AC:BB:3C:E3:1B:12 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/559b4e5f-7a69-4c7c-a7be-093f1d184465.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.53.0/24 Signature Algorithm: sha256WithRSAEncryption 48:b4:63:80:3c:e2:e9:a7:de:1c:ec:39:34:ee:e1:25:46:57: 25:e5:77:9b:1e:98:87:8d:a5:36:1e:89:f4:66:3e:c2:08:4a: cf:97:6c:25:6c:9a:28:c1:6d:46:03:a8:59:ac:78:e3:6f:80: d9:17:33:d9:29:8a:c4:6b:64:2d:6a:b1:53:6a:fa:f8:4a:9a: e9:45:a5:b0:2f:ca:4d:b5:50:bf:de:72:4a:79:00:34:c6:2b: 80:bd:38:8e:34:53:64:07:e3:21:32:17:52:f1:58:e5:7f:2d: eb:7c:73:80:3f:a9:8b:ae:30:e2:52:d8:fb:81:0d:79:ec:df: 14:a9:58:55:64:12:a7:be:46:d0:26:e0:8e:c9:3f:67:26:18: 99:1e:1f:60:21:d6:eb:ad:9a:5d:67:35:5d:80:cc:35:86:96: 7c:1a:f5:a5:ff:91:8b:ee:82:11:0a:86:47:32:3f:51:94:14: e5:a6:31:80:86:d8:1b:ee:78:36:af:df:56:e5:5b:26:7f:0e: 6a:fa:04:31:da:bb:c1:1e:15:ee:84:61:16:03:ba:5e:5d:fb: ae:5d:f2:e3:52:10:e2:71:1b:13:01:c7:54:a2:26:e7:47:1f: 1d:09:45:ad:7f:04:d4:dc:5f:f3:53:84:b5:a9:bb:e7:de:8a: 3f:fc:49:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBYRTz3AdgiRwfwzR7aP+3JJlBYQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTAxMzI2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjliZTZmYzIyNTM0NGI5YjgwYTVjODM0NGJkYjcwNDgy NTY1MzFkYWNmMDc1NWYxMGNhOWM3M2E2NjBmNzJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAiRZzp+5XAvN1tEP6fIQdmbLyw5UnGyYEMKQsKVuPSf// +fM0LQapTIomkh7PJ9qnUlSCMl/8euSIJMnQLO381QpqLZGm+G2r82NlwgE5jkkV HCTtH1B2EMuhZmIF+3RlNBin2aKUivMflgorrctuSnF0MfzQ/viaZA51xfC9vnL6 i8lW/uxzGcMvZ+B3sdLH5exYNmwjc3fUu87klzwqV6FpxkbBwvVaoGZ6psUglOm5 S3iRjjkxagCUihviKjSNH74ehhRcxK6Ykhnu5T2BDtjxIVw7yzQ0IORScAO2LUpc n2Rn7s5AO6POtaNZ9/XXf++iGCmXDPiaQc+s5ggFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYXrsfrhhjPCwQtEoZVGsuzzjGxIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU1OWI0ZTVmLTdhNjktNGM3Yy1hN2JlLTA5M2YxZDE4NDQ2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrDUwDQYJKoZIhvcNAQELBQADggEBAEi0Y4A84umn3hzsOTTu4SVGVyXl d5semIeNpTYeifRmPsIISs+XbCVsmijBbUYDqFmseONvgNkXM9kpisRrZC1qsVNq +vhKmulFpbAvyk21UL/eckp5ADTGK4C9OI40U2QH4yEyF1LxWOV/Let8c4A/qYuu MOJS2PuBDXns3xSpWFVkEqe+RtAm4I7JP2cmGJkeH2Ah1uutml1nNV2AzDWGlnwa 9aX/kYvughEKhkcyP1GUFOWmMYCG2BvueDav31blWyZ/Dmr6BDHau8EeFe6EYRYD ul5d+65d8uNSEOJxGxMBx1SiJudHHx0JRa1/BNTcX/NThLWpu+feij/8SWw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:21:19 2025 by rpki-client