$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62021919-b09f-4ce4-b6dc-aecc695d83d1.roa File: 62021919-b09f-4ce4-b6dc-aecc695d83d1.roa (raw, json) Hash identifier: wMOdqk/l+jSxEZVunwmQRKqG+cjb5yawLjmbt/qxivo= Subject key identifier: DB:26:F0:47:C2:3D:04:A1:15:33:85:3C:54:3E:45:C0:40:8F:91:75 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53993861159076D14A10201E7A525CD97F822FE5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62021919-b09f-4ce4-b6dc-aecc695d83d1.roa Signing time: Sat 18 Oct 2025 06:21:25 +0000 ROA not before: Sat 18 Oct 2025 06:21:25 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:99:38:61:15:90:76:d1:4a:10:20:1e:7a:52:5c:d9:7f:82:2f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:21:25 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=de6f87c0005cc1ea37dd995f26d007b08dc5037256a507347ff0af225c5f072d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:62:f1:e0:50:28:58:34:01:a8:80:74:79:77: a2:69:ef:e9:d1:34:15:04:cc:6f:3b:28:5c:52:fd: 32:9f:e7:db:e4:29:57:97:69:83:7c:ad:e1:2b:e7: 67:0e:a6:16:61:31:ac:be:29:fe:79:4f:1b:cc:4d: 4d:8b:d8:8e:d5:c2:75:7b:ad:a6:b2:33:68:92:63: e0:43:cc:7d:65:66:6f:58:5a:5c:cd:58:ce:b9:02: 5b:e1:ab:94:f0:94:1c:d3:58:41:1e:6c:d7:00:0e: e9:bf:96:ed:3a:91:35:09:3c:d1:17:95:5b:34:2c: e2:ef:7a:ec:90:94:b3:af:9f:98:df:f7:c3:29:b9: 89:72:57:2f:30:10:99:0b:b5:51:ff:16:dd:c1:50: f6:25:eb:27:d4:51:2b:cc:b1:b3:06:4f:22:ac:af: 37:47:bd:8b:3b:f7:a9:ab:14:79:2d:c7:aa:9e:8c: 34:f5:64:ab:fb:7b:75:13:e0:0e:8e:80:3a:92:54: ce:34:26:8d:0e:45:44:17:f0:74:f6:e8:f1:8f:f9: bb:b8:ea:bc:2a:d0:31:78:87:58:d4:97:76:38:c9: 76:a5:e1:d6:25:7a:73:1e:f0:b3:c6:a3:95:2d:90: e7:49:0a:1d:1a:83:ab:11:cb:c1:0b:22:66:c8:08: 3c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:26:F0:47:C2:3D:04:A1:15:33:85:3C:54:3E:45:C0:40:8F:91:75 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62021919-b09f-4ce4-b6dc-aecc695d83d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.6.0/23 Signature Algorithm: sha256WithRSAEncryption 18:62:99:f9:11:01:47:62:e3:f3:2e:0b:1c:ac:b8:9b:8c:1f: 1e:f0:50:22:c5:f4:81:84:01:1e:70:d0:37:e4:14:7b:f7:96: b2:7d:e9:81:9e:81:61:07:ea:94:ca:27:a8:b0:f9:3d:83:7e: c8:c3:cd:f6:c2:29:7e:9e:b0:e6:27:96:38:5c:b9:b9:21:60: 01:90:ee:a3:60:b6:25:bb:1e:e0:56:3d:33:75:39:00:d7:16: 20:7c:93:4c:17:0e:5c:7e:d0:76:48:5b:65:e6:e7:22:fd:f1: ea:3e:65:ca:f0:33:02:85:98:8c:4b:94:42:92:5b:bf:8d:02: d4:c3:7a:3f:42:a9:a2:67:60:64:20:80:0c:78:27:b7:6a:1d: c8:84:19:a4:8a:39:b9:f7:46:21:c1:29:5b:7d:8a:95:2f:cb: 73:ec:76:7d:40:89:3e:58:73:b4:48:b6:31:6d:0d:3d:cb:75: f7:ac:13:a8:f8:e7:35:5a:8f:68:ff:10:88:d0:b7:56:b0:0d: 8d:d7:a6:e6:03:2a:49:fe:eb:69:d0:91:23:ec:ee:82:0e:35: 33:38:cc:4d:64:cb:bd:40:4e:c4:49:1b:24:32:82:ac:58:12: 5b:9c:cd:8d:97:23:f1:64:27:32:56:14:70:b3:ff:5b:4f:37: 62:1b:2e:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU5k4YRWQdtFKECAeelJc2X+CL+UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYyMTI1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTZmODdjMDAwNWNjMWVhMzdkZDk5NWYyNmQwMDdiMDhk YzUwMzcyNTZhNTA3MzQ3ZmYwYWYyMjVjNWYwNzJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPYvHgUChYNAGogHR5d6Jp7+nRNBUEzG87KFxS/TKf59vk KVeXaYN8reEr52cOphZhMay+Kf55TxvMTU2L2I7VwnV7raayM2iSY+BDzH1lZm9Y WlzNWM65Alvhq5TwlBzTWEEebNcADum/lu06kTUJPNEXlVs0LOLveuyQlLOvn5jf 98MpuYlyVy8wEJkLtVH/Ft3BUPYl6yfUUSvMsbMGTyKsrzdHvYs796mrFHktx6qe jDT1ZKv7e3UT4A6OgDqSVM40Jo0ORUQX8HT26PGP+bu46rwq0DF4h1jUl3Y4yXal 4dYlenMe8LPGo5UtkOdJCh0ag6sRy8ELImbICDxTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2ybwR8I9BKEVM4U8VD5FwECPkXUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYyMDIxOTE5LWIwOWYtNGNlNC1iNmRjLWFlY2M2OTVkODNkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoQYwDQYJKoZIhvcNAQELBQADggEBABhimfkRAUdi4/MuCxysuJuMHx7w UCLF9IGEAR5w0DfkFHv3lrJ96YGegWEH6pTKJ6iw+T2DfsjDzfbCKX6esOYnljhc ubkhYAGQ7qNgtiW7HuBWPTN1OQDXFiB8k0wXDlx+0HZIW2Xm5yL98eo+ZcrwMwKF mIxLlEKSW7+NAtTDej9CqaJnYGQggAx4J7dqHciEGaSKObn3RiHBKVt9ipUvy3Ps dn1AiT5Yc7RItjFtDT3LdfesE6j45zVaj2j/EIjQt1awDY3XpuYDKkn+62nQkSPs 7oIONTM4zE1ky71ATsRJGyQygqxYEluczY2XI/FkJzJWFHCz/1tPN2IbLrE= -----END CERTIFICATE-----Generated at Mon Oct 20 19:16:26 2025 by rpki-client