$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/658d698e-0d43-4b7c-859d-5fd1780bdad1.roa File: 658d698e-0d43-4b7c-859d-5fd1780bdad1.roa (raw, json) Hash identifier: J02kEM/GqugNYlhYF7/7gqPvBN4uK4cevI6P/B5brfg= Subject key identifier: 55:3A:A2:E5:48:56:89:1A:D6:F4:F0:98:3A:E3:36:A5:E2:DC:3C:03 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 39F627C204A17E0DF2C8DD46D5A6D463BDED2619 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/658d698e-0d43-4b7c-859d-5fd1780bdad1.roa Signing time: Sat 18 Oct 2025 21:31:36 +0000 ROA not before: Sat 18 Oct 2025 21:31:36 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f6:27:c2:04:a1:7e:0d:f2:c8:dd:46:d5:a6:d4:63:bd:ed:26:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 21:31:36 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=c19236ef667cff0a3bfbd57fd51a2a957971cbdb816cad629301ab46b68266b0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:3a:4e:90:ba:b1:20:98:63:e5:48:b7:ef: 8b:23:08:b0:84:9c:8a:b7:4c:53:73:20:3b:67:14: ed:6a:30:2d:9f:97:4c:eb:56:2d:01:16:c1:40:4a: 8d:47:20:47:43:7d:ad:87:34:2f:6d:a3:dc:f5:4c: 48:81:71:7d:e6:65:91:4c:8c:73:29:36:9a:b4:25: 0d:6e:e4:cf:2a:51:0d:4d:21:8f:87:5c:f0:97:d9: 1a:a9:1c:4d:40:d2:6b:56:76:d3:07:65:6b:8b:79: 72:c7:e7:8e:6f:ca:9e:79:15:ad:db:73:c3:04:bd: fa:bb:10:29:0f:77:96:7a:44:e1:10:6e:3c:76:45: 2b:64:a2:7c:fa:a3:68:65:bb:ad:c4:ce:14:5c:13: 67:32:98:19:3d:94:a5:ce:41:36:9a:a9:2f:0b:03: 47:71:d9:d6:66:38:bf:b7:80:42:00:da:fb:13:37: 65:d8:e6:43:ae:12:22:ef:96:25:2a:cb:bc:ed:9a: 36:c1:ed:3b:bf:e0:66:1a:a4:11:da:ed:62:0e:63: c2:9e:86:de:4c:9b:36:d4:ab:c2:ac:45:f0:e3:12: 9c:7f:12:d3:30:43:df:df:2c:9f:60:e5:67:a3:77: 1d:54:c2:97:49:80:4e:31:0c:3f:e0:a1:8f:01:6d: 2c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3A:A2:E5:48:56:89:1A:D6:F4:F0:98:3A:E3:36:A5:E2:DC:3C:03 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/658d698e-0d43-4b7c-859d-5fd1780bdad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.222.0/23 Signature Algorithm: sha256WithRSAEncryption 76:6a:a9:01:60:c3:21:8f:95:53:e9:62:b6:df:f5:83:b4:25: 72:63:6b:d6:62:c0:46:d2:34:66:be:1c:ba:57:a8:ae:78:4c: 1c:3b:d8:f8:28:29:71:6d:ff:65:7d:48:2b:5e:7b:7b:50:b4: 3c:8d:64:5d:2d:4d:37:89:86:fc:9f:5c:00:38:d7:fb:fe:05: 1b:09:bd:e6:db:21:e3:08:75:d9:30:d6:f2:99:05:62:eb:3a: 1d:f8:32:36:53:08:45:c9:29:48:ce:ec:71:23:32:a4:b5:e6: 11:44:d7:04:42:4b:98:4d:01:6b:ef:22:cb:a5:fb:2b:ad:df: 90:d9:3b:fe:b5:67:e6:40:93:55:9f:a5:fc:d7:22:24:6a:dc: 73:90:ca:c9:9e:e5:5f:30:89:e4:f7:5b:5b:a1:00:5b:b4:99: 3b:e0:5b:ac:8c:4a:ee:ea:06:26:e5:60:ea:ae:21:2f:b8:f4: 5f:de:57:cf:1b:da:19:c8:58:6c:4a:b9:ed:40:90:32:52:23: 89:b4:84:be:89:e1:25:76:78:8c:63:17:77:4b:d5:e6:b1:d7: 17:83:a3:25:b3:bf:d6:86:f6:34:50:9c:34:f6:df:a7:8d:96: f2:db:de:e8:5b:df:d3:b1:e2:73:5d:05:ca:c1:1e:06:4a:79: fe:63:ae:3a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOfYnwgShfg3yyN1G1abUY73tJhkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjEzMTM2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTkyMzZlZjY2N2NmZjBhM2JmYmQ1N2ZkNTFhMmE5NTc5 NzFjYmRiODE2Y2FkNjI5MzAxYWI0NmI2ODI2NmIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpCTpOkLqxIJhj5Ui374sjCLCEnIq3TFNzIDtnFO1qMC2f l0zrVi0BFsFASo1HIEdDfa2HNC9to9z1TEiBcX3mZZFMjHMpNpq0JQ1u5M8qUQ1N IY+HXPCX2RqpHE1A0mtWdtMHZWuLeXLH545vyp55Fa3bc8MEvfq7ECkPd5Z6ROEQ bjx2RStkonz6o2hlu63EzhRcE2cymBk9lKXOQTaaqS8LA0dx2dZmOL+3gEIA2vsT N2XY5kOuEiLvliUqy7ztmjbB7Tu/4GYapBHa7WIOY8Keht5MmzbUq8KsRfDjEpx/ EtMwQ9/fLJ9g5Wejdx1UwpdJgE4xDD/goY8BbSy/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVTqi5UhWiRrW9PCYOuM2peLcPAMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY1OGQ2OThlLTBkNDMtNGI3Yy04NTlkLTVmZDE3ODBiZGFkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESod4wDQYJKoZIhvcNAQELBQADggEBAHZqqQFgwyGPlVPpYrbf9YO0JXJj a9ZiwEbSNGa+HLpXqK54TBw72PgoKXFt/2V9SCtee3tQtDyNZF0tTTeJhvyfXAA4 1/v+BRsJvebbIeMIddkw1vKZBWLrOh34MjZTCEXJKUjO7HEjMqS15hFE1wRCS5hN AWvvIsul+yut35DZO/61Z+ZAk1WfpfzXIiRq3HOQysme5V8wieT3W1uhAFu0mTvg W6yMSu7qBiblYOquIS+49F/eV88b2hnIWGxKue1AkDJSI4m0hL6J4SV2eIxjF3dL 1eax1xeDoyWzv9aG9jRQnDT236eNlvLb3uhb39Ox4nNdBcrBHgZKef5jrjo= -----END CERTIFICATE-----Generated at Mon Oct 20 06:05:01 2025 by rpki-client