$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/caa229d4-dac7-4b7a-bc65-8a806f933a9a.roa File: caa229d4-dac7-4b7a-bc65-8a806f933a9a.roa (raw, json) Hash identifier: tb3xhl42TPh2+azEdwT2ocbV/ybTIXCufCEL9+GCSLE= Subject key identifier: BF:37:9E:B9:CD:CA:53:F2:4E:50:10:11:CA:1B:FF:D3:DE:E3:2C:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 400C19246A4908BF43CFBEDB9788C00A6E39F47E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/caa229d4-dac7-4b7a-bc65-8a806f933a9a.roa Signing time: Sat 18 Oct 2025 08:23:49 +0000 ROA not before: Sat 18 Oct 2025 08:23:49 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:0c:19:24:6a:49:08:bf:43:cf:be:db:97:88:c0:0a:6e:39:f4:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:23:49 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=3399934f462fdf79b5699337a84f9296cb4165722d2454d18acf582d7b6baf4e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c8:c5:f9:9a:d9:50:1a:81:1e:17:26:ac:18: 1e:54:69:11:9d:54:84:a7:dc:68:97:5f:b7:2c:3d: 71:82:03:24:89:fe:88:39:b2:7e:6d:8e:5b:7c:35: c7:2f:f6:78:7f:ad:7e:4f:97:b8:48:45:41:64:10: 5a:91:c7:1b:80:b4:28:86:4c:0b:78:de:95:9c:4e: f0:3f:8e:58:8f:96:c5:6b:79:9b:b2:78:0f:bb:6d: 52:c0:0e:9b:04:b4:49:2f:8b:02:d1:c7:75:c6:b2: 41:cc:a1:78:bb:a3:d7:75:34:d3:75:09:08:32:2b: 2c:df:a0:d8:5e:8b:6f:ae:dc:73:06:04:6e:c0:64: b4:42:da:a0:a3:ed:6d:ff:d2:d4:f9:bb:95:ca:92: f2:db:fb:41:48:9e:48:29:01:3c:dc:09:05:8d:9f: e9:02:f4:91:ff:a4:70:28:9b:ff:fe:c9:12:bb:f1: f7:92:87:16:a7:e1:a0:64:65:df:27:68:89:ae:c4: c7:f0:a7:8a:03:1a:a7:f5:b5:3d:9d:80:84:f4:5a: 89:88:ed:23:27:ab:ef:5d:94:be:a4:69:b0:cf:db: 0e:12:4b:f4:89:69:80:ee:0a:c1:dd:4b:4a:ca:b1: b8:44:99:52:dc:8e:ec:3f:07:c5:64:e0:c2:ba:d7: 5f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:37:9E:B9:CD:CA:53:F2:4E:50:10:11:CA:1B:FF:D3:DE:E3:2C:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/caa229d4-dac7-4b7a-bc65-8a806f933a9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.47.0/24 Signature Algorithm: sha256WithRSAEncryption 80:42:d5:08:1f:18:f5:52:e7:3e:26:5c:1e:cc:76:99:5b:dc: a9:a6:ed:b0:0f:28:7b:b6:b2:1c:8e:67:3b:27:ae:f9:b8:94: 88:88:25:dc:6c:97:06:5f:67:82:2f:9b:c9:71:44:bc:07:05: d5:71:f6:3e:a9:4d:07:2f:2d:85:3a:53:a1:6c:ce:cb:4d:28: 49:56:ed:25:9f:11:cc:8d:30:fa:4c:cd:cc:75:59:c1:2f:74: 07:a1:26:3f:1f:85:a1:14:ea:d9:75:ed:5d:0f:f8:fe:a8:68: 5d:1d:d1:50:2f:3f:7a:83:35:db:d9:6e:28:67:bb:6a:a4:df: c5:8e:9c:ea:b6:64:bc:be:45:a8:8f:14:40:5e:e0:62:14:fe: 27:a6:1c:7a:23:d9:c2:75:b4:f0:63:a6:b9:9c:10:11:c5:7c: c0:4b:84:f3:ae:59:6a:f2:a5:9e:89:ed:82:3a:b5:7a:5e:2d: 8f:75:37:a0:b5:65:f6:a0:ea:e1:90:02:c1:1b:02:92:2f:ec: 98:6b:e6:4d:46:0a:d0:4a:96:9f:ca:6f:9e:0f:b6:25:d4:22: 28:82:d7:4d:25:73:8a:6f:58:a1:60:9a:28:89:e5:72:16:ed: db:1b:78:cd:9a:a7:40:45:35:b4:aa:17:76:c7:c6:73:c6:05: 54:b4:a5:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQAwZJGpJCL9Dz77bl4jACm459H4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDgyMzQ5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzk5OTM0ZjQ2MmZkZjc5YjU2OTkzMzdhODRmOTI5NmNi NDE2NTcyMmQyNDU0ZDE4YWNmNTgyZDdiNmJhZjRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxyMX5mtlQGoEeFyasGB5UaRGdVISn3GiXX7csPXGCAySJ /og5sn5tjlt8Nccv9nh/rX5Pl7hIRUFkEFqRxxuAtCiGTAt43pWcTvA/jliPlsVr eZuyeA+7bVLADpsEtEkviwLRx3XGskHMoXi7o9d1NNN1CQgyKyzfoNhei2+u3HMG BG7AZLRC2qCj7W3/0tT5u5XKkvLb+0FInkgpATzcCQWNn+kC9JH/pHAom//+yRK7 8feShxan4aBkZd8naImuxMfwp4oDGqf1tT2dgIT0WomI7SMnq+9dlL6kabDP2w4S S/SJaYDuCsHdS0rKsbhEmVLcjuw/B8Vk4MK6118zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvzeeuc3KU/JOUBARyhv/097jLI8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NhYTIyOWQ0LWRhYzctNGI3YS1iYzY1LThhODA2ZjkzM2E5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7i8wDQYJKoZIhvcNAQELBQADggEBAIBC1QgfGPVS5z4mXB7Mdplb3Kmm 7bAPKHu2shyOZzsnrvm4lIiIJdxslwZfZ4Ivm8lxRLwHBdVx9j6pTQcvLYU6U6Fs zstNKElW7SWfEcyNMPpMzcx1WcEvdAehJj8fhaEU6tl17V0P+P6oaF0d0VAvP3qD NdvZbihnu2qk38WOnOq2ZLy+RaiPFEBe4GIU/iemHHoj2cJ1tPBjprmcEBHFfMBL hPOuWWrypZ6J7YI6tXpeLY91N6C1Zfag6uGQAsEbApIv7Jhr5k1GCtBKlp/Kb54P tiXUIiiC100lc4pvWKFgmiiJ5XIW7dsbeM2ap0BFNbSqF3bHxnPGBVS0pUk= -----END CERTIFICATE-----Generated at Mon Oct 20 18:11:51 2025 by rpki-client