$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a02cd7a9-4510-480f-9a2b-992b6a602d3e.roa File: a02cd7a9-4510-480f-9a2b-992b6a602d3e.roa (raw, json) Hash identifier: RVS840xMYnez5i22uY63JdRUgUTiFhhxscymr56ITU0= Subject key identifier: 2A:46:9C:1B:66:91:24:5F:0E:0D:E1:FC:20:8A:BA:66:B7:0C:D7:CC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 075191531B11894BA83220B6A5C20BD70AA0D33B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a02cd7a9-4510-480f-9a2b-992b6a602d3e.roa Signing time: Sun 19 Oct 2025 22:51:17 +0000 ROA not before: Sun 19 Oct 2025 22:51:17 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:51:91:53:1b:11:89:4b:a8:32:20:b6:a5:c2:0b:d7:0a:a0:d3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 22:51:17 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=bf483ee9612d74759e41676b3411dddb9a72e0f66b0f26485de5dc0c3a3608da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f8:ba:b3:bf:43:be:73:92:e6:9d:f8:71:65: b2:92:e1:d8:23:f1:08:b5:18:87:17:78:4f:51:e1: 33:d6:54:b7:c6:9f:6d:44:a6:af:ca:12:d4:53:4d: ce:b9:d9:29:bf:b9:e9:5b:af:4c:72:be:79:3d:70: 7c:fa:48:bd:d4:a4:e1:35:9a:57:08:35:ac:92:0b: 42:2a:d3:58:12:35:e0:f2:8d:9f:0a:9b:10:91:5f: 30:4c:27:73:bd:f9:49:40:dd:9f:b4:7f:2a:c3:26: e5:fe:48:50:d0:44:62:e7:96:56:0d:36:09:6e:8d: ba:1a:0f:d6:dc:91:4b:37:a9:4b:28:8f:53:6e:60: 2f:5e:aa:14:fa:d6:c0:be:5e:f1:b7:4f:61:cd:b1: 61:53:7f:15:62:2b:3d:04:3d:df:40:3c:d5:b6:49: b2:2f:d9:ae:88:90:5e:1b:04:6f:3f:81:a2:53:e8: ae:cc:5e:87:ef:e2:90:bb:f1:5f:16:83:00:32:b0: 64:51:f0:0e:4a:c3:d8:b3:dd:0e:11:7e:f5:c4:56: dd:c8:5e:a9:78:5f:bb:f3:e7:73:52:22:6a:40:66: de:11:eb:24:b0:04:fc:65:73:da:f2:6e:8b:72:84: c9:e3:ba:3e:54:90:44:b8:1f:1f:7a:16:4f:81:19: 27:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:46:9C:1B:66:91:24:5F:0E:0D:E1:FC:20:8A:BA:66:B7:0C:D7:CC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a02cd7a9-4510-480f-9a2b-992b6a602d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.211.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:70:f7:d0:30:e6:80:70:6e:a9:76:7c:c6:13:52:de:11:74: 43:08:32:6d:b5:8e:72:3c:fb:4c:e2:e7:b6:ed:bb:9e:e9:20: 0c:a6:e7:2c:85:63:0e:79:58:89:99:88:c8:62:fc:35:a6:69: ee:31:09:7a:26:00:d9:ca:d6:cc:18:0d:9b:b3:fa:c5:77:cb: 5e:f5:19:bd:2d:a3:8d:2e:c8:7c:a5:c7:61:b5:4e:c2:4e:0d: 5c:b3:4b:bf:0b:c6:82:4d:a8:c5:fc:1c:38:cc:af:47:e8:fe: 8f:ae:ed:95:f0:f8:f4:ae:a4:d1:b2:97:08:4d:aa:66:e6:12: c7:f4:d7:c4:12:b8:5b:ce:0e:7b:16:c3:70:f0:29:e6:cc:2e: b3:e0:21:a7:27:ec:c8:c4:bf:ae:bd:b0:f1:29:51:4e:d5:22: 63:f0:26:02:27:6c:52:76:51:70:e9:4f:8b:97:46:a1:63:d0: 0c:87:d1:d2:58:7d:ae:97:aa:a5:20:20:49:89:17:2b:bb:6a: 1c:17:d2:6d:84:6a:4d:38:0b:df:a7:0f:b5:de:11:8c:bb:25: 0f:ed:a9:82:db:50:64:7f:21:51:cc:99:a5:cc:56:23:83:fd: 28:68:8c:0f:f9:4b:c4:f4:fb:20:c5:0f:ac:ff:1a:d3:cc:05: 1d:30:c1:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB1GRUxsRiUuoMiC2pcIL1wqg0zswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjI1MTE3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjQ4M2VlOTYxMmQ3NDc1OWU0MTY3NmIzNDExZGRkYjlh NzJlMGY2NmIwZjI2NDg1ZGU1ZGMwYzNhMzYwOGRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDf+Lqzv0O+c5LmnfhxZbKS4dgj8Qi1GIcXeE9R4TPWVLfG n21Epq/KEtRTTc652Sm/uelbr0xyvnk9cHz6SL3UpOE1mlcINaySC0Iq01gSNeDy jZ8KmxCRXzBMJ3O9+UlA3Z+0fyrDJuX+SFDQRGLnllYNNglujboaD9bckUs3qUso j1NuYC9eqhT61sC+XvG3T2HNsWFTfxViKz0EPd9APNW2SbIv2a6IkF4bBG8/gaJT 6K7MXofv4pC78V8WgwAysGRR8A5Kw9iz3Q4RfvXEVt3IXql4X7vz53NSImpAZt4R 6ySwBPxlc9rybotyhMnjuj5UkES4Hx96Fk+BGSeVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKkacG2aRJF8ODeH8IIq6ZrcM18wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EwMmNkN2E5LTQ1MTAtNDgwZi05YTJiLTk5MmI2YTYwMmQzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQdMwDQYJKoZIhvcNAQELBQADggEBAF1w99Aw5oBwbql2fMYTUt4RdEMI Mm21jnI8+0zi57btu57pIAym5yyFYw55WImZiMhi/DWmae4xCXomANnK1swYDZuz +sV3y171Gb0to40uyHylx2G1TsJODVyzS78LxoJNqMX8HDjMr0fo/o+u7ZXw+PSu pNGylwhNqmbmEsf018QSuFvODnsWw3DwKebMLrPgIacn7MjEv669sPEpUU7VImPw JgInbFJ2UXDpT4uXRqFj0AyH0dJYfa6XqqUgIEmJFyu7ahwX0m2Eak04C9+nD7Xe EYy7JQ/tqYLbUGR/IVHMmaXMViOD/ShojA/5S8T0+yDFD6z/GtPMBR0wwTk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:43 2025 by rpki-client