$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d2140f3-1fe6-491c-bc97-0f65e8f3bf73.roa File: 6d2140f3-1fe6-491c-bc97-0f65e8f3bf73.roa (raw, json) Hash identifier: VVi9Ix6M+shVggsXxwF+r+lTYfyCOMmMk5pd4wafyt4= Subject key identifier: EF:22:9E:A8:97:F5:FB:70:77:BB:49:49:E2:8A:68:B6:BD:04:D0:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4AFADCAB6418F6E67A8DAC9ABDA9497D17DEE3DC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d2140f3-1fe6-491c-bc97-0f65e8f3bf73.roa Signing time: Sat 18 Oct 2025 10:01:31 +0000 ROA not before: Sat 18 Oct 2025 10:01:31 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fa:dc:ab:64:18:f6:e6:7a:8d:ac:9a:bd:a9:49:7d:17:de:e3:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 10:01:31 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=8db7dc874c5147811a9e47cbe2c5cd93572f22c4c64abb41474feab93476c9cb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:8e:80:eb:5e:c0:86:7a:9c:85:1a:70:05: eb:1a:78:3f:ab:84:bf:48:55:d3:0e:f3:bf:f2:ea: 8e:4c:6c:74:2e:2f:c0:e6:55:84:77:00:81:59:fa: 7a:a2:92:00:dc:c8:4e:ed:50:b1:c9:e1:91:c3:fb: c2:23:ef:68:59:bb:2d:bd:77:75:ae:60:37:aa:79: 4c:c3:26:c1:01:32:0b:64:01:75:9f:0e:5d:71:e0: ba:74:97:80:1a:e6:e2:dc:5a:21:c6:3c:e2:f5:01: 86:ef:b7:06:17:0a:d9:6d:4d:b3:3c:6b:b9:7b:2e: 68:b1:45:94:a0:ea:5d:c4:f8:8a:1e:54:c2:06:92: bd:3e:0b:c4:53:6f:8f:45:4d:35:14:a4:71:11:de: 95:c0:ff:46:f0:6c:4b:ea:09:fa:3f:bd:5a:7d:4f: 0a:b3:9b:4e:b4:e6:7b:6c:0d:13:7e:88:2b:76:bd: 9e:a3:a4:9a:5a:2b:2e:05:9a:86:3a:b1:a4:e5:56: 30:fb:37:1b:8d:7c:f5:b9:66:17:39:c9:c2:b4:ef: 4f:8e:a4:36:f1:c9:1d:d4:3a:66:bf:d5:32:6e:9b: 1a:0c:18:eb:ba:30:df:3c:f4:f5:dd:be:d2:e2:52: 8f:66:99:ed:94:4e:92:03:a8:40:c5:f9:00:b5:56: 6b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:22:9E:A8:97:F5:FB:70:77:BB:49:49:E2:8A:68:B6:BD:04:D0:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d2140f3-1fe6-491c-bc97-0f65e8f3bf73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.112.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:de:cc:f7:42:f7:64:09:73:dd:f9:d3:b3:ea:2c:94:73:46: 17:90:00:e8:62:4e:d5:88:03:13:0a:60:c2:bc:52:8e:47:ac: 8d:98:d4:1c:a3:a2:e3:43:de:ef:05:88:83:c8:fa:34:a0:3d: d5:7d:ad:5a:c0:fe:91:0d:a9:56:c5:0f:e9:bf:f0:ef:83:4d: d5:7d:d9:f5:2f:a7:16:d2:a6:31:bf:50:bb:59:67:a7:0d:94: 1c:55:3b:69:46:49:31:de:94:f5:24:8a:0e:47:46:7f:96:4c: 96:49:91:ce:f6:1f:25:af:48:af:6a:b5:79:04:8b:52:6d:4d: dd:a6:18:2c:74:2c:56:e1:36:cf:46:d0:fb:65:f0:ef:48:42: 27:ce:27:07:7d:cb:d6:d0:f1:be:15:86:b5:f0:c4:8b:4f:91: 87:b5:36:de:43:9b:0b:21:6b:f3:4b:4c:1a:69:f8:cb:5f:b0: 03:86:01:8d:de:ad:8e:69:5f:1c:27:88:00:e3:49:e4:b0:86: f5:bd:e2:4b:9e:f8:bd:f2:aa:13:d2:df:c9:98:bc:43:30:97: 1e:2e:56:68:4e:fe:e7:3d:31:f8:42:f4:01:bb:7b:b0:1a:8f: af:18:1e:4e:90:0e:1d:a5:e8:63:8b:4a:2a:87:ca:9c:4c:ed: 60:0a:7b:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSvrcq2QY9uZ6jayavalJfRfe49wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTAwMTMxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGI3ZGM4NzRjNTE0NzgxMWE5ZTQ3Y2JlMmM1Y2Q5MzU3 MmYyMmM0YzY0YWJiNDE0NzRmZWFiOTM0NzZjOWNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIJI6A617AhnqchRpwBesaeD+rhL9IVdMO87/y6o5MbHQu L8DmVYR3AIFZ+nqikgDcyE7tULHJ4ZHD+8Ij72hZuy29d3WuYDeqeUzDJsEBMgtk AXWfDl1x4Lp0l4Aa5uLcWiHGPOL1AYbvtwYXCtltTbM8a7l7LmixRZSg6l3E+Ioe VMIGkr0+C8RTb49FTTUUpHER3pXA/0bwbEvqCfo/vVp9Twqzm0605ntsDRN+iCt2 vZ6jpJpaKy4FmoY6saTlVjD7NxuNfPW5Zhc5ycK070+OpDbxyR3UOma/1TJumxoM GOu6MN889PXdvtLiUo9mme2UTpIDqEDF+QC1VmtfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7yKeqJf1+3B3u0lJ4opotr0E0IkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZkMjE0MGYzLTFmZTYtNDkxYy1iYzk3LTBmNjVlOGYzYmY3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISm3AwDQYJKoZIhvcNAQELBQADggEBAA/ezPdC92QJc93507PqLJRzRheQ AOhiTtWIAxMKYMK8Uo5HrI2Y1ByjouND3u8FiIPI+jSgPdV9rVrA/pENqVbFD+m/ 8O+DTdV92fUvpxbSpjG/ULtZZ6cNlBxVO2lGSTHelPUkig5HRn+WTJZJkc72HyWv SK9qtXkEi1JtTd2mGCx0LFbhNs9G0Ptl8O9IQifOJwd9y9bQ8b4VhrXwxItPkYe1 Nt5Dmwsha/NLTBpp+MtfsAOGAY3erY5pXxwniADjSeSwhvW94kue+L3yqhPS38mY vEMwlx4uVmhO/uc9MfhC9AG7e7Aaj68YHk6QDh2l6GOLSiqHypxM7WAKe08= -----END CERTIFICATE-----Generated at Mon Oct 20 10:58:58 2025 by rpki-client