$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6fb1bf9-63d2-4523-8489-342fff9685e7.roa File: c6fb1bf9-63d2-4523-8489-342fff9685e7.roa (raw, json) Hash identifier: Qlfj3nzipXP/vZqPgTbzrWCT9FvVp6W9fL5ZjsNHIjs= Subject key identifier: 49:E8:19:03:05:5C:DF:03:C5:12:A4:A3:20:92:25:35:AF:D9:85:37 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1A862353E46975B658AAA25838B4987EE850020E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6fb1bf9-63d2-4523-8489-342fff9685e7.roa Signing time: Sat 18 Oct 2025 22:32:39 +0000 ROA not before: Sat 18 Oct 2025 22:32:39 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:86:23:53:e4:69:75:b6:58:aa:a2:58:38:b4:98:7e:e8:50:02:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:32:39 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=25acb39bd8a97ce53ad25c861b5cc32a6e5ac067fc295e026e4898f9d5091c97, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f9:b8:0e:60:14:c1:ea:b4:21:05:d5:f8:7e: 68:d1:41:96:4d:6b:90:ac:8f:a1:ee:8b:b7:2d:79: 7a:71:72:c7:de:cb:e6:33:4f:9c:74:9d:ba:e7:d0: 5f:d5:00:48:10:a9:89:a9:4b:c0:ac:91:15:af:99: f8:53:da:30:3c:d6:39:f1:5b:bf:b5:d3:c1:38:45: b7:33:83:87:ce:78:88:47:25:d2:af:4b:9d:a2:45: a7:6a:32:a2:71:53:46:77:c3:a9:e7:73:b8:17:ed: 79:57:61:16:50:dc:cc:14:0b:93:4a:9d:05:f9:b3: c5:1b:89:5f:de:24:1b:44:fd:73:80:5d:85:33:48: d3:8a:6a:bb:0d:98:24:b2:1d:9e:d7:2b:b9:b5:f8: ca:84:e3:f7:6b:a7:d0:ab:21:ea:0e:8e:2e:b1:af: 3a:44:b5:65:2e:25:f3:5b:ec:c5:e8:8e:26:82:69: 79:3d:4e:17:cb:3f:f2:95:e2:51:0f:6b:0a:bf:7b: fb:1b:b2:f3:7f:ab:54:5f:37:ad:5e:fb:19:3d:8e: 12:54:a2:59:72:29:07:7c:d4:79:ec:ea:8e:d5:44: 3d:58:d5:5d:e4:ea:e0:70:32:fe:98:59:16:a0:d7: c3:64:a9:90:7f:c7:cc:56:1b:96:28:83:d7:c4:be: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E8:19:03:05:5C:DF:03:C5:12:A4:A3:20:92:25:35:AF:D9:85:37 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6fb1bf9-63d2-4523-8489-342fff9685e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.0.0/20 Signature Algorithm: sha256WithRSAEncryption 9f:20:2a:22:c1:f6:51:73:e7:04:ed:f9:40:cd:ae:29:32:6d: a0:f4:34:c1:cb:5b:38:d3:5b:46:7a:db:7d:9a:76:bd:0a:f9: a1:1b:d6:92:c3:e4:6b:11:79:f5:72:27:81:1d:e7:1e:be:db: c4:06:32:f2:f6:07:82:51:19:4a:02:40:23:c7:11:40:fb:51: 01:ad:2b:1d:d6:ae:9e:e7:5f:47:16:27:51:b6:f6:9c:61:e5: a0:ad:1c:86:3d:30:5d:48:52:73:25:9c:6e:05:86:44:84:a7: 79:81:b8:22:de:2f:4e:8b:93:84:64:92:a9:f0:44:31:6c:a8: 8c:60:c8:9a:af:5c:69:93:82:54:7c:2b:ed:e0:c1:b4:6c:74: 12:ee:82:ea:28:65:0c:93:cc:09:89:8f:64:c3:2a:4e:54:ad: 80:d3:85:a2:d6:68:c5:b7:06:d9:6b:db:1c:be:b9:f0:df:81: ed:1a:79:5d:c6:2e:b7:d9:44:62:1a:a2:01:68:30:0e:1a:e8: 09:80:9b:f4:90:89:48:e7:f3:4e:23:b7:16:d9:f9:1f:4d:0a: 63:ed:87:0e:8a:39:60:ae:d4:9d:0d:3c:70:6a:0e:42:7a:84: 22:55:bf:32:00:fa:e6:9a:35:9b:4b:0e:d8:e8:3c:a2:5d:dc: be:1b:3c:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGoYjU+RpdbZYqqJYOLSYfuhQAg4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjIzMjM5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWFjYjM5YmQ4YTk3Y2U1M2FkMjVjODYxYjVjYzMyYTZl NWFjMDY3ZmMyOTVlMDI2ZTQ4OThmOWQ1MDkxYzk3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDm+bgOYBTB6rQhBdX4fmjRQZZNa5Csj6Hui7cteXpxcsfe y+YzT5x0nbrn0F/VAEgQqYmpS8CskRWvmfhT2jA81jnxW7+108E4Rbczg4fOeIhH JdKvS52iRadqMqJxU0Z3w6nnc7gX7XlXYRZQ3MwUC5NKnQX5s8UbiV/eJBtE/XOA XYUzSNOKarsNmCSyHZ7XK7m1+MqE4/drp9CrIeoOji6xrzpEtWUuJfNb7MXojiaC aXk9ThfLP/KV4lEPawq/e/sbsvN/q1RfN61e+xk9jhJUollyKQd81Hns6o7VRD1Y 1V3k6uBwMv6YWRag18NkqZB/x8xWG5Yog9fEvjw/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSegZAwVc3wPFEqSjIJIlNa/ZhTcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M2ZmIxYmY5LTYzZDItNDUyMy04NDg5LTM0MmZmZjk2ODVlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSoQAwDQYJKoZIhvcNAQELBQADggEBAJ8gKiLB9lFz5wTt+UDNrikybaD0 NMHLWzjTW0Z6232adr0K+aEb1pLD5GsRefVyJ4Ed5x6+28QGMvL2B4JRGUoCQCPH EUD7UQGtKx3Wrp7nX0cWJ1G29pxh5aCtHIY9MF1IUnMlnG4FhkSEp3mBuCLeL06L k4RkkqnwRDFsqIxgyJqvXGmTglR8K+3gwbRsdBLuguooZQyTzAmJj2TDKk5UrYDT haLWaMW3Btlr2xy+ufDfge0aeV3GLrfZRGIaogFoMA4a6AmAm/SQiUjn804jtxbZ +R9NCmPthw6KOWCu1J0NPHBqDkJ6hCJVvzIA+uaaNZtLDtjoPKJd3L4bPD8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:42:14 2025 by rpki-client