$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6244caab-6f66-4134-b825-3d8589c2ca4a.roa File: 6244caab-6f66-4134-b825-3d8589c2ca4a.roa (raw, json) Hash identifier: Z4XQMbNvtqCJE+XD6Rs9ZDXUhFp1P5ymkByO7HSy+Uw= Subject key identifier: 08:3F:95:BC:1F:E5:BE:7C:C4:51:8D:03:CF:81:18:2E:CB:AB:3C:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 023A5DC74183A52D18BB6ADB6EA9F941C651D083 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6244caab-6f66-4134-b825-3d8589c2ca4a.roa Signing time: Sat 18 Oct 2025 20:31:25 +0000 ROA not before: Sat 18 Oct 2025 20:31:25 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3a:5d:c7:41:83:a5:2d:18:bb:6a:db:6e:a9:f9:41:c6:51:d0:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 20:31:25 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=adcc4f66af2801271330a836b263f88825814b3c5f1c27dd288c7f89c2fc6dce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:05:0c:53:09:a3:a7:36:62:d4:e3:ab:54:8d: a8:03:31:d5:3c:cf:3e:08:92:4d:df:6b:1e:96:0d: e2:d0:d6:d5:5a:82:98:0c:cc:49:1d:9b:ad:1e:16: 26:a1:1b:02:49:56:59:c8:ae:ed:4c:c2:3a:de:2a: 13:38:69:6c:b9:df:cc:17:bc:8f:4d:ce:d2:76:72: ab:42:a6:53:9f:ba:d3:ec:ae:c9:a8:11:55:1f:15: 4d:2d:2e:61:55:dc:aa:b3:69:de:2b:c0:a4:67:d5: 09:4c:c4:21:ea:3b:58:9b:5b:64:f9:4f:1d:2a:ee: 48:11:99:70:6c:3b:b8:6a:8e:5f:a9:bd:00:b2:4f: 34:a4:62:f1:98:c1:7a:cd:d1:73:54:05:25:20:37: 25:fd:c4:31:6b:a2:fd:eb:cf:d8:03:15:a2:d7:79: 85:04:c9:92:29:3f:0a:d5:cc:07:be:87:fe:8e:03: 7b:af:01:05:06:9b:c1:51:ea:83:9e:e4:67:7f:58: b0:22:08:e5:31:d3:44:25:84:2b:18:6e:2b:f8:d0: 84:c5:e5:5d:7d:cc:7e:d5:7e:d6:2e:60:ab:72:e7: ce:06:c0:d7:ee:07:57:0b:f4:a2:bc:83:ed:98:c8: f4:ca:f2:84:eb:2e:0f:a0:54:8e:37:a9:1e:8e:de: aa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3F:95:BC:1F:E5:BE:7C:C4:51:8D:03:CF:81:18:2E:CB:AB:3C:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6244caab-6f66-4134-b825-3d8589c2ca4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.176.0/20 Signature Algorithm: sha256WithRSAEncryption 29:45:35:ae:85:a8:b1:31:1e:58:87:c4:91:12:85:e3:39:2b: 50:8c:a4:d5:fa:7d:00:ca:ec:76:a0:8e:da:4e:77:b1:49:55: b5:4d:d4:52:26:4a:47:b2:45:6d:4f:8e:ad:b3:e1:b1:ff:61: 93:bf:f0:e9:54:94:06:03:63:0c:4a:f7:aa:a3:65:1c:a2:75: e8:9b:d8:75:2f:fa:a8:a4:d9:3b:a7:d1:23:b2:40:c2:0a:04: 48:9d:5a:82:20:86:93:49:78:29:d2:d4:11:57:1c:fe:ac:f6: c9:7e:66:9b:d2:94:6f:69:0d:f1:88:6a:c1:7a:09:4e:4f:d0: 80:50:69:35:9c:93:c2:ce:e1:93:0d:43:13:69:32:ef:44:e7: 70:49:8d:0a:46:6a:d2:78:37:aa:71:7a:38:c8:06:51:68:0d: 1e:e6:64:9f:73:98:94:15:39:98:43:96:4d:bb:3b:b4:20:59: 62:36:9c:8c:fa:63:70:7e:40:e8:a9:1f:00:6d:46:8d:7e:eb: 30:cf:37:0a:83:f2:02:1a:7c:32:2c:77:48:39:35:38:0b:77: f2:aa:37:dc:ab:6b:00:86:7d:13:57:b5:ba:10:e5:1c:b9:88: 24:68:a9:5d:c8:15:7e:40:04:cf:a0:13:f6:10:75:ff:c0:b4: c0:bc:d1:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAjpdx0GDpS0Yu2rbbqn5QcZR0IMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjAzMTI1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZGNjNGY2NmFmMjgwMTI3MTMzMGE4MzZiMjYzZjg4ODI1 ODE0YjNjNWYxYzI3ZGQyODhjN2Y4OWMyZmM2ZGNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQBQxTCaOnNmLU46tUjagDMdU8zz4Ikk3fax6WDeLQ1tVa gpgMzEkdm60eFiahGwJJVlnIru1MwjreKhM4aWy538wXvI9NztJ2cqtCplOfutPs rsmoEVUfFU0tLmFV3Kqzad4rwKRn1QlMxCHqO1ibW2T5Tx0q7kgRmXBsO7hqjl+p vQCyTzSkYvGYwXrN0XNUBSUgNyX9xDFrov3rz9gDFaLXeYUEyZIpPwrVzAe+h/6O A3uvAQUGm8FR6oOe5Gd/WLAiCOUx00QlhCsYbiv40ITF5V19zH7VftYuYKty584G wNfuB1cL9KK8g+2YyPTK8oTrLg+gVI43qR6O3qorAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCD+VvB/lvnzEUY0Dz4EYLsurPMAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYyNDRjYWFiLTZmNjYtNDEzNC1iODI1LTNkODU4OWMyY2E0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQS9LAwDQYJKoZIhvcNAQELBQADggEBAClFNa6FqLExHliHxJESheM5K1CM pNX6fQDK7HagjtpOd7FJVbVN1FImSkeyRW1Pjq2z4bH/YZO/8OlUlAYDYwxK96qj ZRyideib2HUv+qik2Tun0SOyQMIKBEidWoIghpNJeCnS1BFXHP6s9sl+ZpvSlG9p DfGIasF6CU5P0IBQaTWck8LO4ZMNQxNpMu9E53BJjQpGatJ4N6pxejjIBlFoDR7m ZJ9zmJQVOZhDlk27O7QgWWI2nIz6Y3B+QOipHwBtRo1+6zDPNwqD8gIafDIsd0g5 NTgLd/KqN9yrawCGfRNXtboQ5Ry5iCRoqV3IFX5ABM+gE/YQdf/AtMC80Ys= -----END CERTIFICATE-----Generated at Mon Oct 20 03:10:58 2025 by rpki-client