$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b49bec95-e75d-4838-ba12-33c2ccdde15c.roa File: b49bec95-e75d-4838-ba12-33c2ccdde15c.roa (raw, json) Hash identifier: QnIBToNP8k/5Zf+c3eQ6ErDIaAQzKxCosugUA/3HQnM= Subject key identifier: 5C:5F:0C:28:0B:DF:11:5B:51:1A:99:43:0A:2A:86:24:93:E5:14:7D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2EDF6BE81F8E43AC6117624BEB829431844A6A5E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b49bec95-e75d-4838-ba12-33c2ccdde15c.roa Signing time: Thu 16 Oct 2025 15:20:59 +0000 ROA not before: Thu 16 Oct 2025 15:20:59 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:df:6b:e8:1f:8e:43:ac:61:17:62:4b:eb:82:94:31:84:4a:6a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 15:20:59 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=0e4cc1ebfba9b922ec5960cb3bef3161a5b228c1e4c160b4c2ed542f0006c64f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:36:37:d4:81:0e:b1:a2:bc:a2:47:b5:ce:72: f5:36:fd:47:2e:15:f3:2d:a1:2e:a1:23:02:ea:7c: aa:17:ab:8d:fb:09:96:e8:67:3f:fe:72:91:6a:95: ea:a7:d1:9e:43:0a:3a:ee:86:00:bc:25:50:00:f1: 2c:53:ec:0e:23:6e:84:56:b5:06:2d:1f:f3:ec:6a: c6:33:ab:62:9f:28:6b:39:bd:be:06:5a:02:20:b2: 55:ab:86:d9:b1:65:b7:d7:41:c1:f8:d1:19:f6:4a: c1:a5:c8:08:c3:61:79:31:63:d7:71:41:9b:73:ed: 70:d1:39:ca:32:a3:5b:b5:4d:a5:90:0d:be:69:1f: 24:c6:b4:57:46:90:40:2d:19:f9:70:75:07:37:f7: 7d:5e:d0:3f:cb:10:a2:f2:f0:f2:1e:35:ea:1c:d8: 5c:9c:d3:33:4b:69:94:4e:33:06:b6:e0:3f:2f:f6: 58:95:d3:f7:73:02:2f:82:1d:8d:9b:69:a7:1c:4c: 5e:f7:43:af:a9:3d:d1:42:21:4a:01:61:d3:34:9d: ad:82:f5:4b:df:71:b4:b2:4a:7a:74:55:a6:d9:ce: 75:5a:0b:08:2a:95:2e:79:ff:a8:d3:e7:59:6a:48: a8:37:5a:9a:13:c2:0a:3d:a2:d0:30:d7:86:1b:8d: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5F:0C:28:0B:DF:11:5B:51:1A:99:43:0A:2A:86:24:93:E5:14:7D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b49bec95-e75d-4838-ba12-33c2ccdde15c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.144.0/24 Signature Algorithm: sha256WithRSAEncryption ac:d5:2a:d0:44:df:09:72:6b:2b:b8:ad:b1:2b:99:bc:a9:84: 50:75:ac:49:d6:21:15:7d:5d:4f:38:e3:14:14:52:1b:f9:08: 87:c1:40:d5:bc:82:76:bf:37:ee:92:7a:2a:26:b1:a1:97:0a: 85:a3:26:e6:4c:54:67:ea:59:27:e4:66:1d:10:97:40:bd:29: 1b:0d:07:a3:44:9a:8f:d8:e3:c1:24:0e:5c:07:b2:52:c8:6e: c6:c0:0a:13:5b:13:ea:cf:98:b1:64:cb:25:ab:54:fe:8f:9c: 96:99:ec:01:a2:78:e5:67:01:c0:0a:c7:e9:85:b0:fa:db:24: a8:44:22:b6:32:db:69:67:d9:6b:63:04:28:53:5a:70:89:d4: a3:a2:d5:41:b1:bd:cf:ed:54:99:b3:9b:2e:4c:8b:c6:7b:94: 02:9d:c8:6d:5f:f1:84:61:e3:53:91:5e:a8:3a:34:92:26:d9: 6a:0b:28:31:3b:c7:41:9e:33:c0:e4:67:eb:cd:61:80:c4:19: c7:63:ff:74:bf:d1:24:30:44:08:9d:c4:84:c2:14:dd:43:db: b7:d3:02:ed:7e:31:38:74:9b:b3:6d:a7:59:58:75:ba:3c:f3: 61:98:17:6c:3a:4f:16:b7:2f:75:75:f9:71:82:45:7e:99:dc: ec:ff:1c:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULt9r6B+OQ6xhF2JL64KUMYRKal4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTUyMDU5WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTRjYzFlYmZiYTliOTIyZWM1OTYwY2IzYmVmMzE2MWE1 YjIyOGMxZTRjMTYwYjRjMmVkNTQyZjAwMDZjNjRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnNjfUgQ6xoryiR7XOcvU2/UcuFfMtoS6hIwLqfKoXq437 CZboZz/+cpFqleqn0Z5DCjruhgC8JVAA8SxT7A4jboRWtQYtH/PsasYzq2KfKGs5 vb4GWgIgslWrhtmxZbfXQcH40Rn2SsGlyAjDYXkxY9dxQZtz7XDROcoyo1u1TaWQ Db5pHyTGtFdGkEAtGflwdQc3931e0D/LEKLy8PIeNeoc2Fyc0zNLaZROMwa24D8v 9liV0/dzAi+CHY2baaccTF73Q6+pPdFCIUoBYdM0na2C9UvfcbSySnp0VabZznVa CwgqlS55/6jT51lqSKg3WpoTwgo9otAw14YbjRAvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXF8MKAvfEVtRGplDCiqGJJPlFH0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I0OWJlYzk1LWU3NWQtNDgzOC1iYTEyLTMzYzJjY2RkZTE1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRJAwDQYJKoZIhvcNAQELBQADggEBAKzVKtBE3wlyayu4rbErmbyphFB1 rEnWIRV9XU844xQUUhv5CIfBQNW8gna/N+6SeiomsaGXCoWjJuZMVGfqWSfkZh0Q l0C9KRsNB6NEmo/Y48EkDlwHslLIbsbAChNbE+rPmLFkyyWrVP6PnJaZ7AGieOVn AcAKx+mFsPrbJKhEIrYy22ln2WtjBChTWnCJ1KOi1UGxvc/tVJmzmy5Mi8Z7lAKd yG1f8YRh41ORXqg6NJIm2WoLKDE7x0GeM8DkZ+vNYYDEGcdj/3S/0SQwRAidxITC FN1D27fTAu1+MTh0m7Ntp1lYdbo882GYF2w6Txa3L3V1+XGCRX6Z3Oz/HO4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:03:43 2025 by rpki-client