$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa04a7f8-5712-4d79-815d-4b68be4bafed.roa File: aa04a7f8-5712-4d79-815d-4b68be4bafed.roa (raw, json) Hash identifier: cwduEMZcbv3KA4A+wuzrCTw19silKXBRM43dJioynxQ= Subject key identifier: C6:3F:65:B3:57:CD:DC:6C:69:42:8D:D7:4C:42:80:0E:0A:96:0C:1D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44E799F0F95A27DDB51B2796A1A0C3BF61090B6B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa04a7f8-5712-4d79-815d-4b68be4bafed.roa Signing time: Sat 18 Oct 2025 08:52:31 +0000 ROA not before: Sat 18 Oct 2025 08:52:31 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e7:99:f0:f9:5a:27:dd:b5:1b:27:96:a1:a0:c3:bf:61:09:0b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:52:31 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=b4b5ef9d92a6719b673ac01e90f91e2133d46d3f49aefc3528b1001daaea4522, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:b8:e7:93:5f:50:c4:13:0f:4f:a5:b8:c1: 44:43:6a:8e:2d:26:c1:34:95:c8:18:6e:83:15:12: c6:e4:d2:59:d6:de:61:53:92:67:4e:79:e4:65:cc: da:a9:fd:72:74:c8:43:d8:db:10:7a:bd:b1:6f:9b: 59:13:43:2c:b0:d4:11:57:e1:b3:c0:bd:b4:48:e7: fb:84:da:6f:57:44:84:db:99:64:c3:c9:3f:4f:ac: 4e:a4:28:71:35:4c:7b:ee:58:d3:a2:d1:74:90:4b: a8:76:2a:78:55:3f:72:2c:1c:70:21:ec:5f:e9:b7: b0:4e:67:cf:02:71:fe:de:dc:a1:94:ec:c5:43:fe: 99:16:09:4f:fb:1e:84:f3:b5:f2:db:f5:b3:ba:78: c6:7c:d2:94:c2:1d:b2:68:dd:8b:a9:d1:f6:28:dc: 01:61:17:eb:2b:33:5e:14:81:a2:21:30:18:8e:b1: e1:07:bd:52:22:f5:84:fd:ef:93:31:9b:cd:84:ee: 8e:ce:6e:3a:32:01:90:6c:d0:cb:c8:56:00:4d:d8: f9:1c:39:1d:da:33:ac:2f:92:cd:71:22:df:54:aa: bb:10:5c:1b:0c:58:b9:43:f9:24:9e:6b:f5:e9:07: a8:32:5b:e0:4e:8d:cc:c1:6d:5c:e7:ad:21:30:f3: 3a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3F:65:B3:57:CD:DC:6C:69:42:8D:D7:4C:42:80:0E:0A:96:0C:1D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa04a7f8-5712-4d79-815d-4b68be4bafed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.200.0/22 Signature Algorithm: sha256WithRSAEncryption 58:e2:af:cb:98:6a:af:8b:84:31:93:58:96:96:98:0d:89:2c: a9:c6:74:0e:d6:67:87:dd:69:44:b0:cc:ef:c1:91:c2:db:52: 7a:6f:3b:a5:ba:24:ba:9c:83:a3:d0:01:e0:64:3c:8c:0c:f5: a9:31:45:3c:f6:6d:63:b9:d8:61:b8:fd:26:59:f2:f4:76:23: 04:93:77:03:2d:c1:dc:fb:c9:fe:bc:72:35:85:de:2a:21:ae: 95:83:a9:e6:4d:49:01:76:9e:7e:e1:3b:e1:24:52:2a:8f:c8: e3:07:39:a5:d8:b3:29:62:ca:b5:ee:81:00:75:38:84:cc:97: 56:37:ad:89:ed:77:ae:d9:85:5d:cc:87:62:49:9f:b5:86:ce: 25:fd:1d:6f:88:14:21:86:85:b4:23:f8:b2:bb:a6:a4:38:04: 22:ed:97:38:ec:4e:8d:56:4d:ff:0e:be:a1:2e:35:44:35:af: 4c:82:95:63:d9:8c:c7:59:4d:d1:50:7e:e4:ff:e6:01:9c:96: 02:99:39:81:d5:6c:e9:82:2c:87:3f:d1:70:a1:90:1b:69:12: 09:23:4b:56:f0:29:1e:d8:ba:75:a6:ba:05:07:26:8a:04:e2: 54:35:1b:72:23:91:4c:17:16:c8:d2:0d:5e:5b:b2:c9:c8:49: 7b:9f:49:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUROeZ8PlaJ921GyeWoaDDv2EJC2swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDg1MjMxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNGI1ZWY5ZDkyYTY3MTliNjczYWMwMWU5MGY5MWUyMTMz ZDQ2ZDNmNDlhZWZjMzUyOGIxMDAxZGFhZWE0NTIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBoLjnk19QxBMPT6W4wURDao4tJsE0lcgYboMVEsbk0lnW 3mFTkmdOeeRlzNqp/XJ0yEPY2xB6vbFvm1kTQyyw1BFX4bPAvbRI5/uE2m9XRITb mWTDyT9PrE6kKHE1THvuWNOi0XSQS6h2KnhVP3IsHHAh7F/pt7BOZ88Ccf7e3KGU 7MVD/pkWCU/7HoTztfLb9bO6eMZ80pTCHbJo3Yup0fYo3AFhF+srM14UgaIhMBiO seEHvVIi9YT975Mxm82E7o7ObjoyAZBs0MvIVgBN2PkcOR3aM6wvks1xIt9UqrsQ XBsMWLlD+SSea/XpB6gyW+BOjczBbVznrSEw8zr7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxj9ls1fN3GxpQo3XTEKADgqWDB0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhMDRhN2Y4LTU3MTItNGQ3OS04MTVkLTRiNjhiZTRiYWZlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS9cgwDQYJKoZIhvcNAQELBQADggEBAFjir8uYaq+LhDGTWJaWmA2JLKnG dA7WZ4fdaUSwzO/BkcLbUnpvO6W6JLqcg6PQAeBkPIwM9akxRTz2bWO52GG4/SZZ 8vR2IwSTdwMtwdz7yf68cjWF3iohrpWDqeZNSQF2nn7hO+EkUiqPyOMHOaXYsyli yrXugQB1OITMl1Y3rYntd67ZhV3Mh2JJn7WGziX9HW+IFCGGhbQj+LK7pqQ4BCLt lzjsTo1WTf8OvqEuNUQ1r0yClWPZjMdZTdFQfuT/5gGclgKZOYHVbOmCLIc/0XCh kBtpEgkjS1bwKR7YunWmugUHJooE4lQ1G3IjkUwXFsjSDV5bssnISXufSRQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:46:16 2025 by rpki-client