$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5dddd1b-b4f9-45ec-912a-748daa20eaea.roa File: c5dddd1b-b4f9-45ec-912a-748daa20eaea.roa (raw, json) Hash identifier: 2KzYZoy4AsWAzeN3KskwHTjR9btP6r0WxZJcilllaa0= Subject key identifier: 6E:56:70:8B:F9:A1:11:19:DA:41:9E:15:37:27:19:5A:36:44:1D:EB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 50C0C559693AE61CB505CFABD57BDBFE177E5A88 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5dddd1b-b4f9-45ec-912a-748daa20eaea.roa Signing time: Sat 18 Oct 2025 11:30:16 +0000 ROA not before: Sat 18 Oct 2025 11:30:16 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c0:c5:59:69:3a:e6:1c:b5:05:cf:ab:d5:7b:db:fe:17:7e:5a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:30:16 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=8a1a2a41b276d13afd6e1f8bc95fbe2826eb37abb13aec4e7fa7f2220c5e7ef1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:80:27:e5:ab:57:eb:b1:b8:fc:81:e8:7a: 01:53:ef:17:32:eb:7a:8a:32:51:ab:0c:ef:fd:21: ae:46:43:78:b7:b0:55:e5:10:aa:5b:e9:98:c8:ec: 7a:cf:43:78:2d:17:0c:86:9f:5c:a5:18:5b:ca:d6: 97:be:a5:8b:5a:a9:f1:5d:0d:ac:db:bc:2a:a2:b3: 95:34:da:6a:70:3f:b6:fd:40:ba:14:11:05:4c:ec: a0:55:db:45:2a:08:c2:95:0a:89:a3:b7:af:71:05: 42:5b:1b:8c:be:a7:c6:30:22:26:0e:f9:fe:09:52: f5:79:0d:45:af:74:f7:d0:20:91:85:b8:e2:93:2a: 6a:2f:61:9d:ef:af:de:51:2e:91:7f:0f:b0:0b:45: e5:07:4b:5b:fb:70:56:9a:33:9c:af:f9:21:90:7b: 6a:1a:68:b7:8b:8d:41:79:05:89:b4:83:6f:8f:8f: ca:c7:c6:93:89:b5:0d:75:3c:dd:82:1f:62:10:09: e1:06:30:dd:dc:7b:a8:ce:1e:5a:a2:7f:2e:b9:60: 50:47:6c:f5:b2:57:b9:e2:77:3d:bd:14:2b:6b:f2: 2d:ad:4f:9e:fd:3f:b4:f5:e2:d7:92:48:e5:0a:d3: a1:9a:32:bf:b1:82:9c:ec:a8:fd:57:77:3e:dd:84: 63:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:56:70:8B:F9:A1:11:19:DA:41:9E:15:37:27:19:5A:36:44:1D:EB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5dddd1b-b4f9-45ec-912a-748daa20eaea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.196.0/23 Signature Algorithm: sha256WithRSAEncryption 29:2f:50:9a:98:d5:72:c3:7e:89:7b:e2:5e:24:7b:35:d6:13: 38:c7:7e:2b:56:80:22:ac:95:d9:08:39:0c:3e:a1:4e:53:53: 58:a3:68:4d:e6:8a:a7:91:78:9d:da:3c:fb:2d:e7:1d:45:b9: b4:f2:2f:a5:0d:0c:e6:ea:34:89:f6:1b:18:87:26:c2:83:fa: 2a:01:f9:36:28:8e:77:4b:4b:ec:88:2c:6d:36:2d:8d:0e:73: ec:ed:86:6c:27:b5:e2:9b:b5:3f:9a:4a:48:5a:95:fa:4d:4b: 2c:c6:9c:d5:c6:59:b5:68:c1:9c:04:1a:8c:36:7c:48:75:59: 4a:9d:a0:cd:02:a5:e5:d0:30:09:7a:28:47:61:35:9d:00:41: d4:83:66:d8:cb:a1:af:d2:58:59:af:c2:01:43:eb:c1:99:5b: 49:10:bf:7d:a0:8d:0b:f4:50:34:56:dd:c7:56:6c:8e:f9:b9: 53:8f:fe:be:d0:64:9a:b0:47:f2:37:44:96:7b:60:a6:56:50: b3:57:46:03:5a:32:66:ff:5e:f4:9e:f0:a9:cd:4e:cc:4a:73: 0f:13:ba:48:8a:fc:bd:b6:e2:23:27:b5:28:68:62:1b:1b:55: a8:33:8c:1d:93:23:40:0a:a8:21:05:f7:4c:ed:12:b7:52:fe: f8:ac:85:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUMDFWWk65hy1Bc+r1Xvb/hd+WogwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTEzMDE2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTFhMmE0MWIyNzZkMTNhZmQ2ZTFmOGJjOTVmYmUyODI2 ZWIzN2FiYjEzYWVjNGU3ZmE3ZjIyMjBjNWU3ZWYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwwoAn5atX67G4/IHoegFT7xcy63qKMlGrDO/9Ia5GQ3i3 sFXlEKpb6ZjI7HrPQ3gtFwyGn1ylGFvK1pe+pYtaqfFdDazbvCqis5U02mpwP7b9 QLoUEQVM7KBV20UqCMKVComjt69xBUJbG4y+p8YwIiYO+f4JUvV5DUWvdPfQIJGF uOKTKmovYZ3vr95RLpF/D7ALReUHS1v7cFaaM5yv+SGQe2oaaLeLjUF5BYm0g2+P j8rHxpOJtQ11PN2CH2IQCeEGMN3ce6jOHlqify65YFBHbPWyV7nidz29FCtr8i2t T579P7T14teSSOUK06GaMr+xgpzsqP1Xdz7dhGOjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUblZwi/mhERnaQZ4VNycZWjZEHeswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M1ZGRkZDFiLWI0ZjktNDVlYy05MTJhLTc0OGRhYTIwZWFlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrMQwDQYJKoZIhvcNAQELBQADggEBACkvUJqY1XLDfol74l4kezXWEzjH fitWgCKsldkIOQw+oU5TU1ijaE3miqeReJ3aPPst5x1FubTyL6UNDObqNIn2GxiH JsKD+ioB+TYojndLS+yILG02LY0Oc+zthmwnteKbtT+aSkhalfpNSyzGnNXGWbVo wZwEGow2fEh1WUqdoM0CpeXQMAl6KEdhNZ0AQdSDZtjLoa/SWFmvwgFD68GZW0kQ v32gjQv0UDRW3cdWbI75uVOP/r7QZJqwR/I3RJZ7YKZWULNXRgNaMmb/XvSe8KnN TsxKcw8TukiK/L224iMntShoYhsbVagzjB2TI0AKqCEF90ztErdS/vishTE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:06:35 2025 by rpki-client