$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68f12b2e-9e1f-44be-9d7b-f056dfb78252.roa File: 68f12b2e-9e1f-44be-9d7b-f056dfb78252.roa (raw, json) Hash identifier: jkihzef2eCMuheoMV77r5A52NLchZbFFXm14W2cYc1w= Subject key identifier: BB:CC:F4:3C:28:AA:83:15:2F:5A:E9:30:1B:9F:F9:F5:0D:DA:95:80 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 12909FF2239526E31B58136661D891C0B5B6B53C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68f12b2e-9e1f-44be-9d7b-f056dfb78252.roa Signing time: Sat 18 Oct 2025 19:31:23 +0000 ROA not before: Sat 18 Oct 2025 19:31:23 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:90:9f:f2:23:95:26:e3:1b:58:13:66:61:d8:91:c0:b5:b6:b5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:31:23 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=fb7eb788a6d5da169331c8e969702dae1e3e755c9b8aee95e31d19b5e2613200, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:47:87:f8:aa:58:54:6d:d5:5a:b5:15:4e:77: 5d:d9:cb:2e:20:43:80:73:f4:2f:84:b2:25:96:9c: 4a:34:ca:0c:31:05:bb:e9:4a:b2:64:06:3a:88:ef: a6:b6:0d:e5:95:68:06:ad:df:f9:8b:7b:ef:f8:e6: 42:a1:78:db:e5:ce:75:39:7a:e9:62:b7:7a:2d:f1: ea:55:cb:2e:1f:45:b8:1a:44:8b:0e:4e:6d:b4:a5: 88:78:0f:a8:5c:fe:ae:f3:af:7d:6a:ab:60:45:f5: 1e:32:07:bf:66:19:92:d4:07:7b:83:aa:9a:6a:c8: 8c:dd:9e:04:cf:41:ec:3b:bc:16:bd:73:5e:47:d0: b1:16:d9:be:95:1d:c7:1e:e7:89:a8:97:9f:c1:af: 8a:91:94:96:d6:07:6f:1f:70:8d:1f:66:99:c0:eb: d8:51:b4:78:65:bf:68:6c:69:33:80:30:75:36:1c: de:b8:7f:80:01:85:6b:2c:22:e0:f9:5f:ef:5a:4b: ea:94:cc:68:11:a6:78:e4:fa:c6:4b:7a:4e:7e:49: ac:d6:e1:3c:11:f7:b6:43:6a:f8:8f:d2:62:3e:42: 0d:8e:a4:77:35:3c:46:b2:fb:2a:1b:01:f0:03:e7: c6:ec:6e:ff:9c:87:5e:99:f7:f4:1e:21:01:0e:dd: 52:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CC:F4:3C:28:AA:83:15:2F:5A:E9:30:1B:9F:F9:F5:0D:DA:95:80 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68f12b2e-9e1f-44be-9d7b-f056dfb78252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.10.0/23 Signature Algorithm: sha256WithRSAEncryption 10:9a:0f:c0:e3:bb:05:0b:1d:ed:70:89:0e:15:0a:ca:1c:27: 1a:15:64:89:69:35:fc:c2:2f:ff:c3:e6:55:6f:13:65:b2:32: 2c:95:55:cb:b2:a0:e8:54:65:95:f5:41:bc:5e:b0:ac:43:cb: cb:9d:19:1a:5e:2d:e6:b2:27:85:0d:75:df:72:d6:9f:b0:e6: 1b:fa:3b:e6:16:70:29:47:e4:0d:20:4f:5c:16:93:9b:85:f2: 08:c3:46:b3:bd:25:3a:9d:44:5b:01:49:52:d2:22:3b:12:75: 84:9e:bd:0a:23:00:af:18:7f:15:b1:dd:32:f9:b7:14:a9:e5: d3:7d:e8:9a:80:a6:67:1b:38:59:95:fa:7e:d5:5d:8c:c0:2e: 9d:e2:5a:1e:64:4d:50:fd:76:c3:80:bd:5b:cb:65:f0:59:c4: 66:e8:28:49:65:20:59:35:20:cb:91:1c:24:2a:3f:b7:ad:0a: 3a:82:0b:24:ce:63:ef:56:75:7e:a5:b8:32:5e:6b:7e:79:4c: 9e:42:2f:e0:0f:63:1e:4d:ee:ee:3c:d3:c1:d8:ad:59:4e:de: aa:f3:fd:4d:2f:a5:62:5f:ef:9f:87:55:12:bb:83:63:cf:54: 30:43:7d:d1:f8:bd:13:bb:80:95:3e:24:9d:19:f0:3d:d9:1e: fb:94:14:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEpCf8iOVJuMbWBNmYdiRwLW2tTwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTkzMTIzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjdlYjc4OGE2ZDVkYTE2OTMzMWM4ZTk2OTcwMmRhZTFl M2U3NTVjOWI4YWVlOTVlMzFkMTliNWUyNjEzMjAwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAR4f4qlhUbdVatRVOd13Zyy4gQ4Bz9C+EsiWWnEo0ygwx BbvpSrJkBjqI76a2DeWVaAat3/mLe+/45kKheNvlznU5eulit3ot8epVyy4fRbga RIsOTm20pYh4D6hc/q7zr31qq2BF9R4yB79mGZLUB3uDqppqyIzdngTPQew7vBa9 c15H0LEW2b6VHcce54mol5/Br4qRlJbWB28fcI0fZpnA69hRtHhlv2hsaTOAMHU2 HN64f4ABhWssIuD5X+9aS+qUzGgRpnjk+sZLek5+SazW4TwR97ZDaviP0mI+Qg2O pHc1PEay+yobAfAD58bsbv+ch16Z9/QeIQEO3VJNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu8z0PCiqgxUvWukwG5/59Q3alYAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4ZjEyYjJlLTllMWYtNDRiZS05ZDdiLWYwNTZkZmI3ODI1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9AowDQYJKoZIhvcNAQELBQADggEBABCaD8DjuwULHe1wiQ4VCsocJxoV ZIlpNfzCL//D5lVvE2WyMiyVVcuyoOhUZZX1QbxesKxDy8udGRpeLeayJ4UNdd9y 1p+w5hv6O+YWcClH5A0gT1wWk5uF8gjDRrO9JTqdRFsBSVLSIjsSdYSevQojAK8Y fxWx3TL5txSp5dN96JqApmcbOFmV+n7VXYzALp3iWh5kTVD9dsOAvVvLZfBZxGbo KEllIFk1IMuRHCQqP7etCjqCCyTOY+9WdX6luDJea355TJ5CL+APYx5N7u4808HY rVlO3qrz/U0vpWJf75+HVRK7g2PPVDBDfdH4vRO7gJU+JJ0Z8D3ZHvuUFCA= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:55 2025 by rpki-client