$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b500cc4c-403b-4c78-bb9d-7b7a90a00224.roa File: b500cc4c-403b-4c78-bb9d-7b7a90a00224.roa (raw, json) Hash identifier: EvjSqTfxVs6Sg+iOvm1hXPbEfxwzk8o+M9pwb3NersE= Subject key identifier: 70:5C:48:57:C4:4E:74:2A:CA:10:FA:7C:5E:2F:AB:1C:17:8D:A9:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 556A0A2AF5B85D5421DA5FD907937B65E6BBF1D1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b500cc4c-403b-4c78-bb9d-7b7a90a00224.roa Signing time: Sat 18 Oct 2025 20:30:13 +0000 ROA not before: Sat 18 Oct 2025 20:30:13 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:6a:0a:2a:f5:b8:5d:54:21:da:5f:d9:07:93:7b:65:e6:bb:f1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 20:30:13 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=cead584c3961f4c543f7704930692704a8baa87b4654709e4c024c89e9928d93, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:88:50:dc:80:5c:cc:21:9f:0a:11:cb:b6:1b: 4a:19:02:12:9f:d8:30:ca:24:65:a7:f1:ba:f0:4b: 13:b1:20:a1:c7:fa:ac:d1:02:fb:4a:69:48:be:d0: be:4c:b5:78:01:76:61:97:da:92:63:0c:36:a3:ce: 04:92:78:ac:a8:cb:a2:b5:45:70:67:9a:2e:64:f1: 98:1f:63:1f:59:53:b6:f9:c5:c2:9e:5d:32:08:09: 9a:f3:76:f0:c8:03:0a:92:4e:10:4b:7a:dd:1c:57: be:a5:78:b4:60:33:96:70:d8:96:35:26:02:95:a7: fa:dc:fc:82:39:f1:32:85:7b:be:49:3f:33:02:d7: ca:13:50:fe:26:35:63:a1:05:1c:da:e3:5b:a3:66: 69:68:df:65:65:66:8c:8b:d1:9c:8b:6c:1d:53:ce: e9:67:22:67:3c:ef:5f:fc:da:c1:ac:ff:da:01:bb: a7:a8:2d:7c:4e:09:99:0e:bd:ab:7a:c6:f9:0b:c3: 1d:9d:fb:b4:ce:fe:43:5d:4f:ff:8a:af:27:bd:b7: 9e:f7:d7:ab:f7:68:c3:28:70:5a:08:90:9c:f0:9c: 14:cc:41:20:74:38:5f:fd:0c:67:af:6c:92:bd:88: 03:4f:65:11:89:d0:71:f3:15:6a:22:9c:ff:72:af: 48:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5C:48:57:C4:4E:74:2A:CA:10:FA:7C:5E:2F:AB:1C:17:8D:A9:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b500cc4c-403b-4c78-bb9d-7b7a90a00224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.54.0/23 Signature Algorithm: sha256WithRSAEncryption 35:f3:50:48:ba:45:24:62:00:7f:cf:9b:db:eb:63:5c:60:21: 7a:44:a5:2e:43:04:1e:36:5a:c8:f3:1c:0f:a9:ed:c6:21:c2: cb:d5:e2:fe:fc:eb:0d:fc:d6:63:7a:63:08:33:54:7e:a5:4c: 16:81:39:09:40:aa:1c:9c:d6:9a:d3:aa:1f:dc:b6:85:89:a7: dd:c4:90:f9:da:e7:d5:a0:c5:79:94:8b:07:ae:1c:58:14:0b: 27:0d:bf:45:fc:71:d2:fc:bd:91:60:a3:b7:bb:e9:b8:f2:95: c3:bc:8e:82:1d:de:49:bd:b3:db:57:21:9a:86:84:68:63:f4: fc:71:73:0c:a9:ed:15:66:36:e2:f9:0d:e4:46:f8:6e:80:a8: 1c:31:9b:66:fb:5f:ec:c7:5d:68:22:09:e4:cb:eb:7f:1a:b8: 99:3d:6d:7f:06:71:9d:c1:9c:cd:bf:95:96:13:91:eb:d4:e0: 09:f0:56:cc:25:25:af:f0:a2:94:82:b6:87:b6:ca:21:8e:68: 6d:73:75:fe:4a:2f:b1:bc:fd:bf:32:a3:a7:af:69:25:c9:3e: 60:07:8e:a0:e3:ab:08:6c:49:82:92:c3:0c:d0:91:24:f9:cb: bc:4d:3e:42:26:2b:3e:e3:c4:3a:5c:d0:2e:87:e0:dc:70:aa: ec:d4:c7:da -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVWoKKvW4XVQh2l/ZB5N7Zea78dEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjAzMDEzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWFkNTg0YzM5NjFmNGM1NDNmNzcwNDkzMDY5MjcwNGE4 YmFhODdiNDY1NDcwOWU0YzAyNGM4OWU5OTI4ZDkzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCriFDcgFzMIZ8KEcu2G0oZAhKf2DDKJGWn8brwSxOxIKHH +qzRAvtKaUi+0L5MtXgBdmGX2pJjDDajzgSSeKyoy6K1RXBnmi5k8ZgfYx9ZU7b5 xcKeXTIICZrzdvDIAwqSThBLet0cV76leLRgM5Zw2JY1JgKVp/rc/II58TKFe75J PzMC18oTUP4mNWOhBRza41ujZmlo32VlZoyL0ZyLbB1TzulnImc871/82sGs/9oB u6eoLXxOCZkOvat6xvkLwx2d+7TO/kNdT/+Krye9t57316v3aMMocFoIkJzwnBTM QSB0OF/9DGevbJK9iANPZRGJ0HHzFWoinP9yr0jlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcFxIV8ROdCrKEPp8Xi+rHBeNqWYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1MDBjYzRjLTQwM2ItNGM3OC1iYjlkLTdiN2E5MGEwMDIyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoDYwDQYJKoZIhvcNAQELBQADggEBADXzUEi6RSRiAH/Pm9vrY1xgIXpE pS5DBB42WsjzHA+p7cYhwsvV4v786w381mN6YwgzVH6lTBaBOQlAqhyc1prTqh/c toWJp93EkPna59WgxXmUiweuHFgUCycNv0X8cdL8vZFgo7e76bjylcO8joId3km9 s9tXIZqGhGhj9Pxxcwyp7RVmNuL5DeRG+G6AqBwxm2b7X+zHXWgiCeTL638auJk9 bX8GcZ3BnM2/lZYTkevU4AnwVswlJa/wopSCtoe2yiGOaG1zdf5KL7G8/b8yo6ev aSXJPmAHjqDjqwhsSYKSwwzQkST5y7xNPkImKz7jxDpc0C6H4NxwquzUx9o= -----END CERTIFICATE-----Generated at Mon Oct 20 05:16:51 2025 by rpki-client