$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74c94213-a227-42b8-9787-b0360f42d286.roa File: 74c94213-a227-42b8-9787-b0360f42d286.roa (raw, json) Hash identifier: usPueKz3e/lTMLBk0RrTeer4wnT6PExrN/PZGKhWZdM= Subject key identifier: 3A:A6:18:48:65:F4:68:1B:9E:BA:5D:24:63:73:D6:8C:5D:17:F1:BA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 55ABCCCCE699924BE0E7F3DF7A3F081FA0017F81 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74c94213-a227-42b8-9787-b0360f42d286.roa Signing time: Sat 18 Oct 2025 18:12:21 +0000 ROA not before: Sat 18 Oct 2025 18:12:21 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ab:cc:cc:e6:99:92:4b:e0:e7:f3:df:7a:3f:08:1f:a0:01:7f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:12:21 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=a78efeff5b84d60d47aebaccf3d2d8d51e9ac31ccd230cef27ea6bd92b9977db, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:94:c9:eb:ae:be:e9:bd:d8:e3:41:68:c9:b8: e4:93:f9:39:ae:fd:89:7d:d9:a1:40:2c:22:50:ba: 6f:38:b3:29:3b:09:9b:ae:42:ed:41:1c:1d:87:17: 1a:99:5b:23:cd:ca:90:f4:ee:2b:55:54:29:80:cb: 14:f7:86:8f:b1:ad:f4:ee:f0:b3:3a:00:6d:1f:57: e1:5a:a0:86:2b:b4:b4:69:3f:b7:00:6f:e0:c7:5a: ea:8d:ba:2d:69:a2:67:f4:67:10:9c:e1:7d:b1:dd: 13:ad:c5:20:d3:92:af:7c:7c:23:59:05:f9:87:06: f0:c5:f6:9d:71:77:d0:3b:3f:9d:4f:dc:ef:d2:89: 97:3d:a3:7a:dd:c7:79:85:9d:b7:4a:85:30:c8:6c: 82:d8:4b:df:f2:8d:4e:82:92:75:d8:6a:7c:9b:3c: 8e:26:c0:84:4d:96:c9:1d:89:aa:14:4d:6a:8e:c6: 74:74:4b:ee:2c:bf:b3:15:46:52:2c:1d:84:28:1b: 1b:b0:bb:d9:ab:be:ac:52:fb:a5:1e:0e:cb:10:a7: a8:c8:c8:c0:db:3f:4b:c2:4e:22:48:25:f0:ae:d6: 20:50:80:57:c8:e1:25:a4:70:8b:79:c3:4f:fc:ec: ae:a8:13:ef:05:93:df:7f:0c:4a:90:11:86:4d:7c: f2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A6:18:48:65:F4:68:1B:9E:BA:5D:24:63:73:D6:8C:5D:17:F1:BA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74c94213-a227-42b8-9787-b0360f42d286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.194.0/23 Signature Algorithm: sha256WithRSAEncryption ad:8d:ab:e6:14:cb:f1:51:9b:f4:c6:f5:6a:57:01:5f:46:bc: f9:4b:10:57:31:64:b3:e2:b7:72:02:15:cd:4e:07:ca:e5:9b: 06:60:06:83:63:09:50:17:38:37:b4:10:56:2a:84:cc:47:db: a2:09:9a:2c:98:d3:ef:76:7a:38:a7:12:e0:03:94:ba:18:4b: d9:60:f7:9b:c4:0d:2a:0e:84:9b:03:51:6a:0f:92:86:7a:b2: 2e:01:09:7a:be:ae:05:ef:07:b0:e6:ca:12:62:c5:50:71:a9: 3e:1d:5e:df:e7:82:3c:b6:33:67:62:d1:be:c6:27:15:74:ed: ab:a4:1f:a1:72:b8:45:fd:1f:a4:b3:75:94:e4:99:40:8f:54: 17:63:37:fc:01:5f:f1:94:61:40:60:2b:f0:e8:d0:c3:09:37: ef:0a:36:d9:eb:b9:f6:d6:7d:58:88:1f:d2:15:0a:e3:43:dc: 4c:1d:9a:cb:53:0b:e3:e7:b7:0e:d3:a1:a0:27:77:6b:13:db: 4d:f5:91:d6:e0:46:d2:fb:9d:d5:4c:f4:8f:ad:b8:59:db:ff: 77:fe:a9:c5:0b:19:8c:0f:2e:70:f0:c1:d1:81:dd:60:e2:48: 04:a4:33:7e:3d:d1:ab:41:b6:44:3f:aa:17:1a:e4:aa:04:81: 7e:bf:04:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVavMzOaZkkvg5/Pfej8IH6ABf4EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTgxMjIxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzhlZmVmZjViODRkNjBkNDdhZWJhY2NmM2QyZDhkNTFl OWFjMzFjY2QyMzBjZWYyN2VhNmJkOTJiOTk3N2RiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvlMnrrr7pvdjjQWjJuOST+Tmu/Yl92aFALCJQum84syk7 CZuuQu1BHB2HFxqZWyPNypD07itVVCmAyxT3ho+xrfTu8LM6AG0fV+FaoIYrtLRp P7cAb+DHWuqNui1pomf0ZxCc4X2x3ROtxSDTkq98fCNZBfmHBvDF9p1xd9A7P51P 3O/SiZc9o3rdx3mFnbdKhTDIbILYS9/yjU6CknXYanybPI4mwIRNlskdiaoUTWqO xnR0S+4sv7MVRlIsHYQoGxuwu9mrvqxS+6UeDssQp6jIyMDbP0vCTiJIJfCu1iBQ gFfI4SWkcIt5w0/87K6oE+8Fk99/DEqQEYZNfPKJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOqYYSGX0aBueul0kY3PWjF0X8bowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc0Yzk0MjEzLWEyMjctNDJiOC05Nzg3LWIwMzYwZjQyZDI4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESocIwDQYJKoZIhvcNAQELBQADggEBAK2Nq+YUy/FRm/TG9WpXAV9GvPlL EFcxZLPit3ICFc1OB8rlmwZgBoNjCVAXODe0EFYqhMxH26IJmiyY0+92ejinEuAD lLoYS9lg95vEDSoOhJsDUWoPkoZ6si4BCXq+rgXvB7DmyhJixVBxqT4dXt/ngjy2 M2di0b7GJxV07aukH6FyuEX9H6SzdZTkmUCPVBdjN/wBX/GUYUBgK/Do0MMJN+8K NtnrufbWfViIH9IVCuND3EwdmstTC+Pntw7ToaAnd2sT2031kdbgRtL7ndVM9I+t uFnb/3f+qcULGYwPLnDwwdGB3WDiSASkM3490atBtkQ/qhca5KoEgX6/BDU= -----END CERTIFICATE-----Generated at Mon Oct 20 19:16:47 2025 by rpki-client