$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/619230dc-d2d3-4bd6-8e83-869c5e66a5a6.roa File: 619230dc-d2d3-4bd6-8e83-869c5e66a5a6.roa (raw, json) Hash identifier: aywO35vpHCuylGpuE2AT3c8ah1AE9xEbxXhH0llaDqs= Subject key identifier: 1A:84:9D:B7:92:CF:4E:DF:94:D2:85:AE:71:79:B2:7E:0C:C9:2F:42 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1BC507585917E5ABDA3B866C8D4517D2F6632F99 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/619230dc-d2d3-4bd6-8e83-869c5e66a5a6.roa Signing time: Sat 18 Oct 2025 09:50:12 +0000 ROA not before: Sat 18 Oct 2025 09:50:12 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c5:07:58:59:17:e5:ab:da:3b:86:6c:8d:45:17:d2:f6:63:2f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:50:12 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=6ab879d28a929858167fa758551be9925827502c0ae7bf042dc834761fc7bbc4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d9:75:91:b9:ea:90:3e:9d:2f:1e:96:ab:b2: f4:5e:ef:4a:fe:50:b5:22:a3:33:11:18:bc:10:ce: 78:8e:43:45:3e:5e:c0:53:2d:8d:d0:c9:0e:f7:e7: 4f:35:eb:6c:3a:45:5d:2b:e5:22:aa:ec:fb:79:45: 9a:05:d4:b3:ce:39:0a:25:2e:31:93:5a:31:00:2f: 90:85:37:40:ff:d4:57:12:11:8d:b9:cf:00:0f:80: 4a:97:80:09:b7:8c:9e:c0:7e:d9:5c:f4:3c:6a:4f: e4:e2:17:86:ea:70:cf:3d:1e:03:2f:88:e2:4a:14: 02:a8:d3:f7:cc:76:ac:da:6b:91:e0:58:43:34:34: 1e:9e:4c:a6:1a:95:02:a6:18:51:b2:9c:3c:0f:a1: a6:ac:a7:a6:f2:61:3e:87:e6:be:0a:a7:5c:b8:9b: 12:41:81:c1:30:80:99:15:b8:a2:46:12:2a:8a:a3: ff:71:7c:85:86:1c:b3:4a:ff:e3:0c:ed:48:f4:ed: 11:1f:41:b3:f2:dd:5c:d3:4a:3c:c9:01:f0:35:d7: 09:a6:60:33:83:b9:b0:5b:53:8e:b7:86:e4:01:86: 1f:f3:93:c3:97:e7:26:c2:b9:6f:e0:78:25:fd:51: 08:3e:a1:e4:ba:05:0f:54:aa:16:e0:6e:cd:94:22: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:84:9D:B7:92:CF:4E:DF:94:D2:85:AE:71:79:B2:7E:0C:C9:2F:42 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/619230dc-d2d3-4bd6-8e83-869c5e66a5a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.48.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:49:e7:0b:28:f8:f0:b6:7a:88:46:8a:ed:0d:54:eb:9b:ef: af:f2:52:b3:01:87:1e:55:81:6a:7b:c6:77:e9:6b:97:bd:2c: 22:34:47:7f:0b:1e:9a:b2:d5:8c:c1:d8:80:cb:50:eb:86:3c: 29:33:17:41:b2:aa:b7:a7:81:f7:fc:62:64:50:cc:31:80:5a: a7:d8:7d:9b:5f:28:de:39:bf:cd:c6:d1:71:46:fe:6d:1d:95: 62:3f:f6:3f:a6:41:ae:37:db:1b:bd:a6:48:ab:5f:0a:48:a8: 61:66:8b:5f:67:8b:ef:26:9a:7a:a5:ef:b9:b8:03:9b:f5:c7: ee:db:0c:55:a0:64:6d:b1:ec:52:3b:92:f3:2c:dc:85:2c:e7: 5c:42:86:ab:b3:d5:27:a4:39:87:0a:eb:72:81:48:c9:a7:a1: 15:1f:3a:40:f1:a3:2b:65:48:43:41:38:39:98:74:d6:63:8c: a4:2b:c1:d8:86:6e:4a:7d:10:62:30:ec:e3:5d:ca:3e:b7:36: 8d:34:1a:47:d1:38:78:e7:eb:f9:1d:e6:4d:81:d4:28:51:8b: bc:6d:39:00:cb:18:cd:55:cd:69:af:51:0c:92:77:74:bb:88: 54:14:0e:eb:c2:bf:c7:fb:f3:71:4c:55:3d:4d:85:76:e8:fd: 8a:7a:5b:fc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG8UHWFkX5avaO4ZsjUUX0vZjL5kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDk1MDEyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YWI4NzlkMjhhOTI5ODU4MTY3ZmE3NTg1NTFiZTk5MjU4 Mjc1MDJjMGFlN2JmMDQyZGM4MzQ3NjFmYzdiYmM0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDg2XWRueqQPp0vHparsvRe70r+ULUiozMRGLwQzniOQ0U+ XsBTLY3QyQ73508162w6RV0r5SKq7Pt5RZoF1LPOOQolLjGTWjEAL5CFN0D/1FcS EY25zwAPgEqXgAm3jJ7Aftlc9DxqT+TiF4bqcM89HgMviOJKFAKo0/fMdqzaa5Hg WEM0NB6eTKYalQKmGFGynDwPoaasp6byYT6H5r4Kp1y4mxJBgcEwgJkVuKJGEiqK o/9xfIWGHLNK/+MM7Uj07REfQbPy3VzTSjzJAfA11wmmYDODubBbU463huQBhh/z k8OX5ybCuW/geCX9UQg+oeS6BQ9Uqhbgbs2UIqXDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGoSdt5LPTt+U0oWucXmyfgzJL0IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYxOTIzMGRjLWQyZDMtNGJkNi04ZTgzLTg2OWM1ZTY2YTVhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISoDAwDQYJKoZIhvcNAQELBQADggEBAHtJ5wso+PC2eohGiu0NVOub76/y UrMBhx5VgWp7xnfpa5e9LCI0R38LHpqy1YzB2IDLUOuGPCkzF0Gyqrengff8YmRQ zDGAWqfYfZtfKN45v83G0XFG/m0dlWI/9j+mQa432xu9pkirXwpIqGFmi19ni+8m mnql77m4A5v1x+7bDFWgZG2x7FI7kvMs3IUs51xChquz1SekOYcK63KBSMmnoRUf OkDxoytlSENBODmYdNZjjKQrwdiGbkp9EGIw7ONdyj63No00GkfROHjn6/kd5k2B 1ChRi7xtOQDLGM1VzWmvUQySd3S7iFQUDuvCv8f783FMVT1NhXbo/Yp6W/w= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:44 2025 by rpki-client