$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90d28841-e62b-4a7d-9efb-333aa85562fc.roa File: 90d28841-e62b-4a7d-9efb-333aa85562fc.roa (raw, json) Hash identifier: PmVWz8jVZUQAtw+TZi7I04FEhGd7YEi1oNOPAOpX/2k= Subject key identifier: 04:F6:A8:B6:52:A8:ED:03:36:55:C6:84:41:D3:85:9C:8C:63:2C:E4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3999553EAF45870B87708E31AB885FBF16145CA0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90d28841-e62b-4a7d-9efb-333aa85562fc.roa Signing time: Sat 18 Oct 2025 09:01:22 +0000 ROA not before: Sat 18 Oct 2025 09:01:22 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:99:55:3e:af:45:87:0b:87:70:8e:31:ab:88:5f:bf:16:14:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:01:22 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=87a7a1ea22c1abb3ee55a31f9ac0008af99906f1ea742be211964dc8c7026d4d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:a1:7c:b5:37:13:c3:96:49:fd:47:51:e8: 6f:03:d2:c5:12:e7:c5:f4:03:f2:97:41:cf:34:69: 00:b8:bd:ad:99:0f:4b:39:9d:e5:c0:9a:b2:4e:39: e5:b7:58:4f:9d:cf:8f:95:82:92:aa:c7:3a:d1:0e: 94:9e:5a:0f:0d:55:ef:d9:8b:f4:bb:9b:a9:ee:21: 01:bc:0c:f6:90:ac:b4:2e:69:2c:3d:e9:07:f8:72: 6b:29:38:67:85:ef:3a:d0:85:4e:c2:74:20:80:ee: a3:fe:16:14:cd:a9:5d:79:24:08:05:93:2a:ee:55: 4d:83:f6:7b:91:90:42:c2:d7:ef:93:1c:c1:bf:e9: b5:cb:81:f8:1c:83:a1:db:30:fc:dc:93:38:be:b5: 3d:61:bb:e9:f8:4b:c7:cb:6c:62:78:76:55:98:de: 3e:62:17:06:50:a4:a2:21:24:09:1b:8c:cf:ec:fd: c0:f0:6f:ee:16:36:b0:0c:63:99:32:a2:f2:98:d5: e9:08:2c:48:81:eb:69:a7:de:b4:14:9c:ae:ed:8f: 07:6b:a1:00:e1:70:67:2a:ec:11:ff:61:d1:06:09: 71:67:b2:94:49:90:94:9d:66:10:6b:0f:53:7c:ef: 61:16:86:e6:61:7f:73:47:23:ce:11:d8:e5:95:fc: 85:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F6:A8:B6:52:A8:ED:03:36:55:C6:84:41:D3:85:9C:8C:63:2C:E4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90d28841-e62b-4a7d-9efb-333aa85562fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.54.0/24 Signature Algorithm: sha256WithRSAEncryption 60:54:13:32:67:74:05:57:9a:64:75:1f:06:e8:a6:6a:66:b2: 60:64:31:f3:31:8b:7b:67:56:ad:22:0a:f3:12:be:bf:58:6b: b5:1d:eb:95:e3:03:53:f2:5a:3c:37:5b:a3:e8:cb:37:af:f5: b3:66:ac:86:a6:f7:fe:df:0b:6f:01:fd:bf:2f:6d:dd:27:0c: c6:a1:39:6c:00:91:d3:aa:39:11:fc:8b:04:d5:38:99:25:af: f2:58:9b:3a:90:e0:72:c3:b8:5f:79:58:d2:f1:7d:69:b2:75: 58:b5:74:fd:81:6e:52:e0:9c:0d:78:b4:47:a9:95:ed:ea:a9: aa:be:8f:5e:2b:17:5e:97:dd:a5:41:55:4b:5c:5a:79:02:f8: 25:bd:65:90:80:ba:47:0d:c1:c7:c5:e6:ac:9a:2a:e1:e9:00: 42:18:2d:78:cd:d2:a8:7a:3c:6b:3d:84:5b:8c:de:81:8c:ee: a7:8d:fd:ec:95:ce:db:3b:94:32:12:ce:73:54:e0:ab:89:d6: e0:a8:88:ab:28:28:0b:aa:82:f0:bf:ac:6e:27:b2:39:32:4a: 70:83:9c:72:9a:5f:ff:55:f6:7b:36:1c:4c:74:72:98:c6:99: 2c:be:ee:4e:54:f0:dd:ca:ec:35:1d:9d:92:21:cc:c0:43:d3: 8a:54:cc:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOZlVPq9FhwuHcI4xq4hfvxYUXKAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDkwMTIyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2E3YTFlYTIyYzFhYmIzZWU1NWEzMWY5YWMwMDA4YWY5 OTkwNmYxZWE3NDJiZTIxMTk2NGRjOGM3MDI2ZDRkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnuaF8tTcTw5ZJ/UdR6G8D0sUS58X0A/KXQc80aQC4va2Z D0s5neXAmrJOOeW3WE+dz4+VgpKqxzrRDpSeWg8NVe/Zi/S7m6nuIQG8DPaQrLQu aSw96Qf4cmspOGeF7zrQhU7CdCCA7qP+FhTNqV15JAgFkyruVU2D9nuRkELC1++T HMG/6bXLgfgcg6HbMPzckzi+tT1hu+n4S8fLbGJ4dlWY3j5iFwZQpKIhJAkbjM/s /cDwb+4WNrAMY5kyovKY1ekILEiB62mn3rQUnK7tjwdroQDhcGcq7BH/YdEGCXFn spRJkJSdZhBrD1N872EWhuZhf3NHI84R2OWV/IUzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBPaotlKo7QM2VcaEQdOFnIxjLOQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkwZDI4ODQxLWU2MmItNGE3ZC05ZWZiLTMzM2FhODU1NjJmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmzYwDQYJKoZIhvcNAQELBQADggEBAGBUEzJndAVXmmR1HwbopmpmsmBk MfMxi3tnVq0iCvMSvr9Ya7Ud65XjA1PyWjw3W6Poyzev9bNmrIam9/7fC28B/b8v bd0nDMahOWwAkdOqORH8iwTVOJklr/JYmzqQ4HLDuF95WNLxfWmydVi1dP2BblLg nA14tEeple3qqaq+j14rF16X3aVBVUtcWnkC+CW9ZZCAukcNwcfF5qyaKuHpAEIY LXjN0qh6PGs9hFuM3oGM7qeN/eyVzts7lDISznNU4KuJ1uCoiKsoKAuqgvC/rG4n sjkySnCDnHKaX/9V9ns2HEx0cpjGmSy+7k5U8N3K7DUdnZIhzMBD04pUzNc= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:42 2025 by rpki-client