$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a2a0816-5eee-42c9-aaf7-db765a5e891e.roa File: 8a2a0816-5eee-42c9-aaf7-db765a5e891e.roa (raw, json) Hash identifier: aZHZz8FMxfIi2WHvCzF0jF2a/m/apChsFpXrujMRX3o= Subject key identifier: 8C:37:79:83:11:0F:6C:84:0E:E4:87:CF:11:52:D0:87:74:F8:13:87 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 590639A168FA9EE1E771931F20CB4A214D176406 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a2a0816-5eee-42c9-aaf7-db765a5e891e.roa Signing time: Sat 18 Oct 2025 23:52:35 +0000 ROA not before: Sat 18 Oct 2025 23:52:35 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:06:39:a1:68:fa:9e:e1:e7:71:93:1f:20:cb:4a:21:4d:17:64:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 23:52:35 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=6946153c8b1361422b45a58e82e9fbc03b85bec7e619b57aaf215114742d5cf9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:35:bd:54:4d:7e:71:90:ec:4b:62:4c:79: 35:b8:2a:39:31:bd:97:ab:06:77:09:21:49:83:26: 58:dd:e3:a9:38:4e:8d:8d:61:b9:63:e6:6a:26:0b: 42:9a:08:f0:1a:b6:03:b1:06:56:ef:42:d1:12:9f: bb:bf:ae:29:15:af:cc:2c:94:54:04:07:a1:6f:88: d2:d7:0a:0d:5a:fe:c2:d8:04:64:0e:5c:05:4b:19: 6c:75:93:0c:3a:98:c5:5f:eb:1a:a7:48:65:02:96: d2:1a:60:2d:01:2b:dc:a2:c8:89:29:97:e1:4b:66: f8:92:a4:97:37:b9:07:f3:30:e0:c9:2e:6d:0f:0b: b1:1b:22:2e:bb:e9:16:df:ab:ae:7e:84:ef:5e:d6: 41:6c:35:9b:01:05:0e:31:24:32:46:77:ad:0e:34: 3e:72:3e:95:34:88:25:b6:6f:91:fd:6a:09:b9:a8: a2:3f:a9:f2:8e:11:21:66:5c:5f:6c:c7:d5:6f:06: 8b:d0:05:12:23:20:2b:02:5b:8d:8d:97:b4:11:42: ef:41:df:87:c7:9f:4e:39:96:45:b9:c3:a3:dc:f1: c0:54:f6:67:cb:ac:36:36:ed:6a:40:5a:ed:e0:78: f6:b2:1f:78:2e:61:83:d0:2d:f1:d6:31:ac:27:07: 9c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:37:79:83:11:0F:6C:84:0E:E4:87:CF:11:52:D0:87:74:F8:13:87 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a2a0816-5eee-42c9-aaf7-db765a5e891e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.6.0/23 Signature Algorithm: sha256WithRSAEncryption 63:ac:0b:c6:b9:ed:e4:3e:03:72:fa:5c:2e:fd:d0:4e:40:e7: 41:dd:d9:e3:1a:4c:0d:ff:a1:0e:58:6a:3f:67:1d:83:d2:f2: 8e:df:9f:e8:ed:46:0e:34:0b:4c:f7:fe:21:37:1f:f7:8a:73: a0:e0:47:57:40:e4:06:dd:dd:a0:bb:8d:df:1a:0c:d3:c2:2e: 2e:f0:4d:27:ec:70:1f:77:26:3e:56:b4:10:81:9f:d5:cd:ee: 7a:d4:bb:bc:7e:ef:47:41:0e:3e:91:dc:03:e5:09:5b:63:07: 65:35:09:f1:b2:07:27:48:32:4e:39:5f:5e:03:a6:51:4b:65: 0d:66:b3:64:c5:cf:ef:9f:07:bb:c2:bb:41:48:cd:90:f4:03: 4c:81:b1:f1:68:4b:02:5d:fd:35:6a:b0:a8:5c:4b:88:30:37: b3:e8:a9:fd:33:3f:97:9a:4b:e5:3b:32:5d:b1:64:ac:ac:1c: 99:13:48:74:a7:49:5b:14:90:49:4c:49:c8:4a:26:81:76:03: 3c:2f:33:4b:6c:4a:ab:73:b3:14:a9:b7:f4:bc:8f:64:18:64: 64:7b:dd:50:ff:2a:27:eb:79:a7:de:52:e5:f9:9f:d1:ed:9d: 94:d5:e1:0c:1b:61:fe:7d:cf:c8:65:e1:dd:e9:b5:32:12:14: 4e:12:02:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWQY5oWj6nuHncZMfIMtKIU0XZAYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjM1MjM1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTQ2MTUzYzhiMTM2MTQyMmI0NWE1OGU4MmU5ZmJjMDNi ODViZWM3ZTYxOWI1N2FhZjIxNTExNDc0MmQ1Y2Y5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwqTW9VE1+cZDsS2JMeTW4KjkxvZerBncJIUmDJljd46k4 To2NYblj5momC0KaCPAatgOxBlbvQtESn7u/rikVr8wslFQEB6FviNLXCg1a/sLY BGQOXAVLGWx1kww6mMVf6xqnSGUCltIaYC0BK9yiyIkpl+FLZviSpJc3uQfzMODJ Lm0PC7EbIi676Rbfq65+hO9e1kFsNZsBBQ4xJDJGd60OND5yPpU0iCW2b5H9agm5 qKI/qfKOESFmXF9sx9VvBovQBRIjICsCW42Nl7QRQu9B34fHn045lkW5w6Pc8cBU 9mfLrDY27WpAWu3gePayH3guYYPQLfHWMawnB5xNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjDd5gxEPbIQO5IfPEVLQh3T4E4cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhMmEwODE2LTVlZWUtNDJjOS1hYWY3LWRiNzY1YTVlODkxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7gYwDQYJKoZIhvcNAQELBQADggEBAGOsC8a57eQ+A3L6XC790E5A50Hd 2eMaTA3/oQ5Yaj9nHYPS8o7fn+jtRg40C0z3/iE3H/eKc6DgR1dA5Abd3aC7jd8a DNPCLi7wTSfscB93Jj5WtBCBn9XN7nrUu7x+70dBDj6R3APlCVtjB2U1CfGyBydI Mk45X14DplFLZQ1ms2TFz++fB7vCu0FIzZD0A0yBsfFoSwJd/TVqsKhcS4gwN7Po qf0zP5eaS+U7Ml2xZKysHJkTSHSnSVsUkElMSchKJoF2AzwvM0tsSqtzsxSpt/S8 j2QYZGR73VD/KifreafeUuX5n9HtnZTV4QwbYf59z8hl4d3ptTISFE4SAj0= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:39 2025 by rpki-client