$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/919ea4e9-a51d-4cd3-b6cc-5de0b2202318.roa File: 919ea4e9-a51d-4cd3-b6cc-5de0b2202318.roa (raw, json) Hash identifier: c/zlcDHolpWNA2ktMevfkIEW4wfO2S6BkOhoUhNvNtY= Subject key identifier: 15:95:44:75:5B:9F:78:D1:70:F9:9D:AF:89:70:28:85:AC:7A:28:C9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 185C2773F726637241C860B62CEFB66874F76502 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/919ea4e9-a51d-4cd3-b6cc-5de0b2202318.roa Signing time: Sun 19 Oct 2025 17:22:34 +0000 ROA not before: Sun 19 Oct 2025 17:22:34 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:5c:27:73:f7:26:63:72:41:c8:60:b6:2c:ef:b6:68:74:f7:65:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:22:34 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=970f45cb1cb76f2cd7097888139b7c8a6aeb24864c875b633cdd87177f64223b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6c:50:cc:d1:d8:d3:7a:fc:1d:45:a9:ec:32: 2a:3a:92:a8:a1:08:ac:b8:91:86:58:88:ac:74:be: 18:74:fb:a4:3f:65:31:72:d1:f4:ea:44:a4:a6:d1: b0:b6:e0:c0:22:ed:ac:ac:45:08:a8:a0:e0:86:95: 39:72:e1:f5:25:98:6f:8b:3a:c1:1e:f5:bb:1e:aa: b2:e5:ed:41:cf:57:68:8e:a2:77:50:0f:7c:dc:6f: af:d6:22:84:5a:72:3e:e4:1f:a1:74:18:dd:e9:27: 8f:3d:70:24:0e:3e:c0:c0:92:6b:2f:2c:33:c1:41: da:ce:81:1c:fc:3a:bd:40:e7:82:07:91:d7:74:09: 94:63:93:9c:05:b2:44:d4:a3:0c:50:c9:23:03:8f: c5:58:35:c3:38:d1:ec:55:ec:99:53:30:9a:27:22: 26:33:ad:7b:4e:01:3d:fe:73:d4:20:46:17:0c:62: 28:f7:53:b2:f4:b7:e0:63:69:c2:39:45:2e:7c:a4: 59:70:c1:d3:ec:7f:5b:d4:a5:15:01:59:69:5b:69: 89:6c:45:53:45:32:ec:ee:a2:b9:60:9e:73:43:bf: ec:e6:53:64:28:c3:bd:0b:e7:76:65:40:b6:69:86: c4:79:54:43:3a:27:41:4c:13:31:58:8b:47:38:82: df:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:95:44:75:5B:9F:78:D1:70:F9:9D:AF:89:70:28:85:AC:7A:28:C9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/919ea4e9-a51d-4cd3-b6cc-5de0b2202318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.140.0/24 Signature Algorithm: sha256WithRSAEncryption 86:10:e2:2d:b8:11:8d:33:7d:64:a1:f9:32:65:c7:c1:da:fe: 79:54:09:9f:35:17:5b:ff:0b:30:03:35:56:a8:c9:02:96:64: 77:66:3f:cb:15:83:03:55:0f:fd:2a:51:6b:6b:30:55:25:22: e7:9c:ce:4f:5a:fe:03:d6:88:59:b8:b0:3b:ef:f3:62:0a:be: 97:f9:a8:93:a6:c1:9a:74:9a:81:78:37:88:1c:0e:8f:09:d2: 99:5e:f0:27:85:bb:69:b4:e1:1d:57:dc:20:12:30:f5:00:56: 6a:83:8f:79:dd:4c:62:12:86:e9:20:8a:70:33:fc:57:0c:6b: 34:9f:6c:da:11:b1:8b:f5:0b:10:db:bb:eb:f2:f7:ce:bb:2f: 8f:55:a1:8c:bc:91:3d:71:b6:bf:d5:a1:85:79:dd:48:3e:2b: 4e:0f:45:48:47:2e:a0:68:ab:42:5a:22:28:84:de:b3:65:2a: b7:35:18:3a:8f:b0:c1:20:e2:69:99:d2:1d:bc:f2:ba:f1:e8: ea:63:b8:ab:b3:b7:41:bf:58:4f:56:da:8a:79:89:54:1a:7b: 95:65:1d:09:12:15:99:20:33:c4:2b:fa:48:29:42:f8:c3:aa: 1e:4a:28:0f:30:e3:67:95:58:53:b1:f5:1d:34:e1:3f:bc:b8: da:6a:f9:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGFwnc/cmY3JByGC2LO+2aHT3ZQIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTcyMjM0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzBmNDVjYjFjYjc2ZjJjZDcwOTc4ODgxMzliN2M4YTZh ZWIyNDg2NGM4NzViNjMzY2RkODcxNzdmNjQyMjNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhbFDM0djTevwdRansMio6kqihCKy4kYZYiKx0vhh0+6Q/ ZTFy0fTqRKSm0bC24MAi7aysRQiooOCGlTly4fUlmG+LOsEe9bseqrLl7UHPV2iO ondQD3zcb6/WIoRacj7kH6F0GN3pJ489cCQOPsDAkmsvLDPBQdrOgRz8Or1A54IH kdd0CZRjk5wFskTUowxQySMDj8VYNcM40exV7JlTMJonIiYzrXtOAT3+c9QgRhcM Yij3U7L0t+BjacI5RS58pFlwwdPsf1vUpRUBWWlbaYlsRVNFMuzuorlgnnNDv+zm U2Qow70L53ZlQLZphsR5VEM6J0FMEzFYi0c4gt8TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFZVEdVufeNFw+Z2viXAohax6KMkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkxOWVhNGU5LWE1MWQtNGNkMy1iNmNjLTVkZTBiMjIwMjMxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQ4wwDQYJKoZIhvcNAQELBQADggEBAIYQ4i24EY0zfWSh+TJlx8Ha/nlU CZ81F1v/CzADNVaoyQKWZHdmP8sVgwNVD/0qUWtrMFUlIueczk9a/gPWiFm4sDvv 82IKvpf5qJOmwZp0moF4N4gcDo8J0ple8CeFu2m04R1X3CASMPUAVmqDj3ndTGIS hukginAz/FcMazSfbNoRsYv1CxDbu+vy9867L49VoYy8kT1xtr/VoYV53Ug+K04P RUhHLqBoq0JaIiiE3rNlKrc1GDqPsMEg4mmZ0h288rrx6OpjuKuzt0G/WE9W2op5 iVQae5VlHQkSFZkgM8Qr+kgpQvjDqh5KKA8w42eVWFOx9R004T+8uNpq+cU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:12:21 2025 by rpki-client