$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5de07ec4-ce90-493d-9c95-1f09bfff6719.roa File: 5de07ec4-ce90-493d-9c95-1f09bfff6719.roa (raw, json) Hash identifier: ig/2P5r4UVjqTnMqdvu0XQLl1KvRLK7bfza2S10ghs8= Subject key identifier: 54:2E:E3:86:93:85:4C:5C:81:FE:83:D6:6B:D4:EE:7A:85:29:57:B5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7D1854B6545CD2EAD601C2862BD53B071C47FCB3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5de07ec4-ce90-493d-9c95-1f09bfff6719.roa Signing time: Sat 18 Oct 2025 16:52:26 +0000 ROA not before: Sat 18 Oct 2025 16:52:26 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:18:54:b6:54:5c:d2:ea:d6:01:c2:86:2b:d5:3b:07:1c:47:fc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:52:26 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=be0df2a734aa663396025fd507d74011c3d4861834acbd808817543d40f3d2d2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:a8:2b:d7:ea:36:d6:4e:4d:5a:8f:63:9d: bb:d5:90:7d:61:95:d2:37:b7:da:27:3e:63:fe:d6: 45:5b:68:04:73:43:b7:f7:fc:58:40:ec:1f:ff:c8: c6:d8:18:b9:ae:4b:28:17:9d:d3:32:44:68:14:7c: 8d:bf:39:c6:2e:29:57:c8:21:47:ab:a7:13:77:60: 5a:82:8e:70:7a:a2:57:e8:86:e7:ae:33:d7:09:0f: f5:41:dc:4a:6f:0e:ab:09:86:5c:7d:65:a8:3a:04: 25:8f:aa:8e:5c:e4:bd:c2:76:bc:f3:13:d0:32:e3: 16:85:8b:e0:70:1f:13:7c:77:17:dc:b3:cb:c8:db: 4f:61:fa:3a:12:f7:0e:14:a0:6d:e5:4d:4b:c2:fc: d5:9d:d9:ec:80:81:f5:99:6c:e5:4c:c4:3a:d1:0d: a3:29:ad:c1:af:cf:37:04:19:99:53:fc:54:24:31: d2:fa:97:3f:de:c7:94:9f:ff:81:a4:0b:97:3d:22: 8a:29:20:32:80:fd:b1:0d:c4:26:b4:5e:0d:f4:2d: cb:48:94:0f:a4:13:0f:09:60:81:16:b3:54:54:f2: fa:a2:40:02:2d:3b:2e:75:f4:a2:08:74:d5:73:96: aa:15:74:e9:31:01:3a:f7:81:da:5c:1c:0b:d4:a6: 68:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2E:E3:86:93:85:4C:5C:81:FE:83:D6:6B:D4:EE:7A:85:29:57:B5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5de07ec4-ce90-493d-9c95-1f09bfff6719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.120.0/22 Signature Algorithm: sha256WithRSAEncryption b3:35:80:54:fd:32:af:9a:b6:9d:7f:de:df:7b:ee:aa:c9:ce: a0:35:65:11:cb:4b:a6:c4:21:a1:4a:be:78:9e:cf:a0:cb:c3: 08:79:f8:ea:74:4f:b6:31:bc:4f:06:c3:c6:62:d9:a0:81:d4: ca:21:83:63:18:7d:13:a8:20:67:a7:f8:73:34:81:f6:4a:22: b7:66:f0:65:07:89:5c:44:45:f0:5d:24:13:2a:56:70:b4:02: b6:9d:3e:4b:b1:e1:c8:d3:e2:75:9c:7f:14:56:2c:98:f9:a8: 96:5f:87:97:50:46:6d:56:44:ca:39:b8:2f:0b:01:0c:28:f5: 4d:24:5a:af:9b:e5:bd:de:f2:e3:a4:ce:c4:1e:f3:d7:b0:23: ee:e3:b0:83:c0:81:97:a7:73:d9:05:6c:3b:30:73:18:0b:34: 36:e4:38:d6:fe:37:e0:3b:c7:44:c0:40:5d:f6:66:51:9a:0a: e7:68:5a:e2:cc:29:da:b5:b6:fe:69:35:6d:0f:58:16:0f:a0: aa:5d:e9:f8:92:0c:24:0e:49:01:8a:8b:83:d3:5d:aa:13:c2: 4c:97:b0:5d:01:e3:34:d1:88:ea:04:15:d3:e8:63:8b:cd:86: 2a:5c:c2:ca:93:17:1f:7e:a2:9c:d6:4d:9b:70:e0:63:bb:33: 5e:0d:bb:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfRhUtlRc0urWAcKGK9U7BxxH/LMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTY1MjI2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTBkZjJhNzM0YWE2NjMzOTYwMjVmZDUwN2Q3NDAxMWMz ZDQ4NjE4MzRhY2JkODA4ODE3NTQzZDQwZjNkMmQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoaqgr1+o21k5NWo9jnbvVkH1hldI3t9onPmP+1kVbaARz Q7f3/FhA7B//yMbYGLmuSygXndMyRGgUfI2/OcYuKVfIIUerpxN3YFqCjnB6olfo hueuM9cJD/VB3EpvDqsJhlx9Zag6BCWPqo5c5L3CdrzzE9Ay4xaFi+BwHxN8dxfc s8vI209h+joS9w4UoG3lTUvC/NWd2eyAgfWZbOVMxDrRDaMprcGvzzcEGZlT/FQk MdL6lz/ex5Sf/4GkC5c9IoopIDKA/bENxCa0Xg30LctIlA+kEw8JYIEWs1RU8vqi QAItOy519KIIdNVzlqoVdOkxATr3gdpcHAvUpmilAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVC7jhpOFTFyB/oPWa9TueoUpV7UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVkZTA3ZWM0LWNlOTAtNDkzZC05Yzk1LTFmMDliZmZmNjcxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS7ngwDQYJKoZIhvcNAQELBQADggEBALM1gFT9Mq+atp1/3t977qrJzqA1 ZRHLS6bEIaFKvniez6DLwwh5+Op0T7YxvE8Gw8Zi2aCB1Mohg2MYfROoIGen+HM0 gfZKIrdm8GUHiVxERfBdJBMqVnC0AradPkux4cjT4nWcfxRWLJj5qJZfh5dQRm1W RMo5uC8LAQwo9U0kWq+b5b3e8uOkzsQe89ewI+7jsIPAgZenc9kFbDswcxgLNDbk ONb+N+A7x0TAQF32ZlGaCudoWuLMKdq1tv5pNW0PWBYPoKpd6fiSDCQOSQGKi4PT XaoTwkyXsF0B4zTRiOoEFdPoY4vNhipcwsqTFx9+opzWTZtw4GO7M14Nu78= -----END CERTIFICATE-----Generated at Mon Oct 20 06:08:23 2025 by rpki-client