$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90a042e3-463a-4c78-b3b7-c9b7a3933de6.roa File: 90a042e3-463a-4c78-b3b7-c9b7a3933de6.roa (raw, json) Hash identifier: PW0LMhPaAQDh1NH5EBaqRihBRC0zEXp/h3O8Qvca2x4= Subject key identifier: 83:4D:D3:C7:EB:3F:B0:4C:D8:C9:7D:79:74:9C:B2:F6:50:98:D5:98 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 394566AC8E5DB38692EC8F19433A41186DB09DA0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90a042e3-463a-4c78-b3b7-c9b7a3933de6.roa Signing time: Sun 19 Oct 2025 09:33:58 +0000 ROA not before: Sun 19 Oct 2025 09:33:58 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:45:66:ac:8e:5d:b3:86:92:ec:8f:19:43:3a:41:18:6d:b0:9d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 09:33:58 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=b431e9736e2e76902a072da35170bb93406263b0ffb5f0fb1eb86959219f0a17, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:62:1e:a1:70:83:cc:b4:18:cf:60:40:f8:c7: dc:bf:82:af:42:19:af:b7:cd:35:12:27:13:3f:04: 6d:0f:77:9a:4a:cc:cf:68:35:e9:d4:0a:4e:1d:8b: 70:2c:a2:d9:4b:d4:da:2e:93:75:f9:42:fa:de:4b: 9e:5e:74:6d:81:f2:0f:a7:a4:44:4a:84:c7:33:34: 10:ea:d6:17:a5:40:0a:00:ee:aa:dd:c2:d7:61:3d: 45:ce:14:35:b6:d2:ad:e7:43:07:fa:8b:09:76:fa: 2d:f5:15:83:16:87:aa:b1:bb:37:fd:c5:2a:76:ed: 8d:d1:13:21:7b:12:c7:2a:de:76:31:b7:df:57:f7: e9:57:5b:b6:8b:19:fc:0d:83:78:9b:7c:f0:95:9a: c9:e0:3e:da:06:c5:86:50:72:1c:1d:5a:37:05:4d: a9:b5:ce:8c:60:08:59:02:98:87:ff:a9:e1:35:49: 01:bb:90:f6:d6:5a:13:1f:a6:37:27:62:65:05:66: 2a:80:ea:74:98:89:d9:2e:9d:83:25:31:25:05:b0: 9c:c1:ef:a0:ab:26:4f:cc:cf:23:17:1e:32:a5:37: 89:dc:04:7c:d8:34:61:2c:97:fb:ec:d5:59:8f:2a: 4f:9d:45:c4:1a:7b:b4:12:06:18:73:36:b7:19:78: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4D:D3:C7:EB:3F:B0:4C:D8:C9:7D:79:74:9C:B2:F6:50:98:D5:98 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90a042e3-463a-4c78-b3b7-c9b7a3933de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.194.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:76:c4:da:9f:de:2a:f8:de:33:78:50:e0:46:d5:b8:99:54: 20:37:51:51:20:5b:60:d9:c6:99:44:2a:d3:77:2f:1c:73:98: 13:f1:70:24:e1:54:22:1d:30:21:de:a9:59:b7:03:aa:07:4b: 42:e5:89:bd:41:b5:8f:ef:03:1a:5d:45:18:a0:74:2d:4a:dd: 6f:a7:3a:ff:bb:73:c7:7c:78:c2:fa:b1:f3:39:5e:2d:4a:5a: 2b:94:80:fa:7a:ef:40:7f:e8:1a:c3:d9:a1:bb:e5:f2:d9:18: 18:dd:e2:b7:47:3b:d8:c6:92:e7:b2:36:8a:e0:50:7d:d6:4e: 84:a5:d9:04:a0:7d:f6:8f:cc:75:65:89:5a:29:44:67:3f:08: 28:e9:69:02:70:cb:06:b6:8d:f7:31:a3:0b:29:f5:ec:b3:c4: ce:f1:b8:2a:7e:7d:ef:a5:3e:15:38:d0:54:26:5c:32:7e:9a: 86:3e:68:e9:26:b4:45:ce:11:07:f4:94:93:48:49:6f:48:cd: 27:50:46:e4:7b:bd:3a:81:d5:a1:99:74:d0:49:e0:56:fe:c5: e6:13:10:20:3f:14:20:74:30:85:a8:37:02:71:6f:10:27:b8: 34:7e:fc:cd:dd:77:a4:a0:ac:01:14:b5:cc:28:9a:16:7c:d5: 88:74:34:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOUVmrI5ds4aS7I8ZQzpBGG2wnaAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDkzMzU4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDMxZTk3MzZlMmU3NjkwMmEwNzJkYTM1MTcwYmI5MzQw NjI2M2IwZmZiNWYwZmIxZWI4Njk1OTIxOWYwYTE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaYh6hcIPMtBjPYED4x9y/gq9CGa+3zTUSJxM/BG0Pd5pK zM9oNenUCk4di3AsotlL1Nouk3X5QvreS55edG2B8g+npERKhMczNBDq1helQAoA 7qrdwtdhPUXOFDW20q3nQwf6iwl2+i31FYMWh6qxuzf9xSp27Y3REyF7Escq3nYx t99X9+lXW7aLGfwNg3ibfPCVmsngPtoGxYZQchwdWjcFTam1zoxgCFkCmIf/qeE1 SQG7kPbWWhMfpjcnYmUFZiqA6nSYidkunYMlMSUFsJzB76CrJk/MzyMXHjKlN4nc BHzYNGEsl/vs1VmPKk+dRcQae7QSBhhzNrcZeH/7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUg03Tx+s/sEzYyX15dJyy9lCY1ZgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkwYTA0MmUzLTQ2M2EtNGM3OC1iM2I3LWM5YjdhMzkzM2RlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQMIwDQYJKoZIhvcNAQELBQADggEBAI12xNqf3ir43jN4UOBG1biZVCA3 UVEgW2DZxplEKtN3LxxzmBPxcCThVCIdMCHeqVm3A6oHS0Llib1BtY/vAxpdRRig dC1K3W+nOv+7c8d8eML6sfM5Xi1KWiuUgPp670B/6BrD2aG75fLZGBjd4rdHO9jG kueyNorgUH3WToSl2QSgffaPzHVliVopRGc/CCjpaQJwywa2jfcxowsp9eyzxM7x uCp+fe+lPhU40FQmXDJ+moY+aOkmtEXOEQf0lJNISW9IzSdQRuR7vTqB1aGZdNBJ 4Fb+xeYTECA/FCB0MIWoNwJxbxAnuDR+/M3dd6SgrAEUtcwomhZ81Yh0NF0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:11:40 2025 by rpki-client