$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c872b3d-0788-40ab-844f-d74aa133bef8.roa File: 5c872b3d-0788-40ab-844f-d74aa133bef8.roa (raw, json) Hash identifier: gWvkGWqrXOeVPAyDPNzPP3VSSOkuLIjsNvYNc68lXG8= Subject key identifier: 32:C4:7A:A9:B1:8D:D3:60:47:50:4D:F0:4D:75:4B:B4:79:96:F6:69 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 02701091FB7A25BD6057AE2D00827DD91C6FFE47 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c872b3d-0788-40ab-844f-d74aa133bef8.roa Signing time: Sat 18 Oct 2025 22:53:26 +0000 ROA not before: Sat 18 Oct 2025 22:53:26 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:70:10:91:fb:7a:25:bd:60:57:ae:2d:00:82:7d:d9:1c:6f:fe:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:53:26 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=b10a31c88dfc28b72311aa4efefc92f62727d355c1e7d7e9552449538f8dfbdc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:64:0c:f1:80:b0:05:c5:35:f8:c1:6d:d1: fb:ee:3a:e5:09:65:46:c4:65:1a:bf:0f:35:85:ba: 74:37:b1:09:00:3c:a9:36:44:62:1e:f6:e3:47:76: da:54:c2:a7:ce:82:5e:45:56:b6:27:63:be:b2:85: 53:6a:af:09:8f:13:30:b8:cb:bf:c4:34:9b:c6:e1: f9:f3:5c:70:28:50:01:24:b0:28:26:b8:49:e8:90: a9:42:ed:ab:7f:a4:76:f4:1b:ab:06:d4:c2:28:78: fe:e0:97:af:9b:39:6c:70:06:2f:36:4e:e6:bb:90: 5f:7c:af:d8:7c:0f:8d:55:4f:f2:f2:3a:b0:89:1b: 08:ac:82:c7:2e:09:4f:d7:20:aa:89:15:b5:55:aa: 9a:f9:44:fb:d3:9e:ed:a9:d0:80:cc:3c:2a:cd:b8: d0:a5:f1:e7:a6:8b:ff:62:0c:84:40:6c:b5:f1:a0: 03:d4:91:0d:b0:1a:4f:68:88:9b:fc:04:0b:d2:eb: c4:b1:0a:58:00:22:6c:1f:d4:60:bb:8f:d7:f1:d1: 6d:ec:95:e2:b8:81:70:80:e3:c8:9c:23:d4:91:c0: ee:22:1b:9a:de:3e:d8:a6:20:c2:9a:ae:c4:53:97: 5c:45:4d:17:4c:d7:e2:8f:f7:9e:65:7e:8e:4c:64: 21:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C4:7A:A9:B1:8D:D3:60:47:50:4D:F0:4D:75:4B:B4:79:96:F6:69 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c872b3d-0788-40ab-844f-d74aa133bef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.20.0/24 Signature Algorithm: sha256WithRSAEncryption 66:0b:9c:51:ea:4f:39:87:45:1a:01:a7:b0:f9:03:f7:55:93: 6d:0d:de:4f:62:65:e1:72:3b:2e:33:97:7d:cb:f7:87:87:fa: e3:4d:4e:01:b9:ef:f8:0c:ba:cf:7a:f1:48:3b:ec:9d:1a:80: 56:d0:90:b4:c3:67:4a:48:2f:6c:34:a0:39:72:68:ed:5f:5b: ba:ea:0d:ab:12:b8:89:b6:3d:f2:3f:9b:c3:b3:9b:16:84:98: 19:20:65:35:f2:48:5a:ef:0b:0d:64:c3:7f:d7:79:60:ed:a0: 18:a6:16:4e:25:6e:16:01:f1:e6:11:67:e6:ff:cd:b5:7a:47: 62:1a:0a:ab:4e:69:16:45:ae:f6:df:c8:23:7d:30:d7:fa:77: c2:ec:f7:85:fd:d0:83:89:59:e4:2b:5e:79:cf:1d:81:ee:ba: 1a:71:2c:a1:6a:a4:41:2e:f7:67:b9:06:95:f4:57:2f:5f:b4: dd:bf:fc:13:f2:69:cd:81:7b:11:c8:d2:c2:eb:ec:c5:5f:1e: e2:d4:2d:83:b6:28:8f:18:e0:1a:c8:80:91:96:7f:65:65:c5: 37:4b:9c:bd:4e:6c:56:a6:91:0f:2c:38:d9:37:fa:94:5c:a1: 2f:66:46:75:cd:b4:c4:0c:36:9a:b5:d0:1e:e0:78:bd:0b:01: 4a:0b:c9:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAnAQkft6Jb1gV64tAIJ92Rxv/kcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjI1MzI2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTBhMzFjODhkZmMyOGI3MjMxMWFhNGVmZWZjOTJmNjI3 MjdkMzU1YzFlN2Q3ZTk1NTI0NDk1MzhmOGRmYmRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw72QM8YCwBcU1+MFt0fvuOuUJZUbEZRq/DzWFunQ3sQkA PKk2RGIe9uNHdtpUwqfOgl5FVrYnY76yhVNqrwmPEzC4y7/ENJvG4fnzXHAoUAEk sCgmuEnokKlC7at/pHb0G6sG1MIoeP7gl6+bOWxwBi82Tua7kF98r9h8D41VT/Ly OrCJGwisgscuCU/XIKqJFbVVqpr5RPvTnu2p0IDMPCrNuNCl8eemi/9iDIRAbLXx oAPUkQ2wGk9oiJv8BAvS68SxClgAImwf1GC7j9fx0W3sleK4gXCA48icI9SRwO4i G5rePtimIMKarsRTl1xFTRdM1+KP955lfo5MZCFFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMsR6qbGN02BHUE3wTXVLtHmW9mkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVjODcyYjNkLTA3ODgtNDBhYi04NDRmLWQ3NGFhMTMzYmVmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmhQwDQYJKoZIhvcNAQELBQADggEBAGYLnFHqTzmHRRoBp7D5A/dVk20N 3k9iZeFyOy4zl33L94eH+uNNTgG57/gMus968Ug77J0agFbQkLTDZ0pIL2w0oDly aO1fW7rqDasSuIm2PfI/m8OzmxaEmBkgZTXySFrvCw1kw3/XeWDtoBimFk4lbhYB 8eYRZ+b/zbV6R2IaCqtOaRZFrvbfyCN9MNf6d8Ls94X90IOJWeQrXnnPHYHuuhpx LKFqpEEu92e5BpX0Vy9ftN2//BPyac2BexHI0sLr7MVfHuLULYO2KI8Y4BrIgJGW f2VlxTdLnL1ObFamkQ8sONk3+pRcoS9mRnXNtMQMNpq10B7geL0LAUoLybQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:44:06 2025 by rpki-client