$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb4fde2e-3ae6-4618-8a7a-10cc991069f6.roa File: cb4fde2e-3ae6-4618-8a7a-10cc991069f6.roa (raw, json) Hash identifier: XPxFIC19INM01IPA7iaSSPIo/FWdQAK+VGxFz6kw0JY= Subject key identifier: 7D:55:AD:0E:06:0A:67:F5:5A:D6:4B:A1:72:18:8F:A8:84:75:60:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 48E04956CE0BCA2E28413B5AA5B541DD44B5B8DA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb4fde2e-3ae6-4618-8a7a-10cc991069f6.roa Signing time: Thu 16 Oct 2025 15:48:30 +0000 ROA not before: Thu 16 Oct 2025 15:48:30 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e0:49:56:ce:0b:ca:2e:28:41:3b:5a:a5:b5:41:dd:44:b5:b8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 15:48:30 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=46ce7722f1868c1ec26ef55f5d20b99233fc7786290b67d97986737d7f1b0fda, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:d0:1d:d1:51:e0:f8:e2:cc:4b:57:fc:6c: 65:8e:87:70:8b:cb:62:a6:94:2c:2e:5e:a6:2d:af: d9:06:11:e7:80:6f:71:23:33:8e:77:2b:95:c9:85: 58:15:6b:4f:b4:49:75:6f:35:2c:ad:8f:59:0e:16: 46:50:ea:33:ca:50:6d:03:af:55:d3:fd:13:cf:57: 12:b8:a6:07:d0:27:b2:52:e8:dd:1f:d6:78:dd:fb: 9b:28:4f:6e:1e:07:c4:5e:ca:6a:c9:22:87:0e:3f: 7e:6f:e4:aa:f5:87:4e:0f:f4:78:16:4a:46:f5:82: b7:d7:ff:b2:af:d7:aa:7d:4e:94:40:55:8b:6c:59: 6a:8b:b9:2f:08:92:cb:02:ef:c2:4d:94:7f:fd:0f: 4b:f8:fd:4c:85:08:2d:41:1b:24:68:37:20:66:a8: 36:d8:f4:1e:bc:69:15:4d:2d:c8:f0:fb:f2:fe:3b: b8:be:a9:ed:87:0a:1b:8d:2a:4e:77:e0:01:48:f3: cc:c6:c0:03:09:e3:5c:68:06:f5:72:42:e2:cf:99: 45:29:b8:47:a8:0c:ef:a8:c2:59:e4:cd:51:5c:62: b0:b7:59:d2:46:9d:55:ed:61:0e:15:60:88:67:27: ec:76:63:36:44:29:d2:bf:4d:47:cc:45:25:8a:b6: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:55:AD:0E:06:0A:67:F5:5A:D6:4B:A1:72:18:8F:A8:84:75:60:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb4fde2e-3ae6-4618-8a7a-10cc991069f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.218.0/24 Signature Algorithm: sha256WithRSAEncryption 71:96:7c:b7:50:95:16:4e:90:6a:e6:e0:bb:71:92:0a:97:3b: 0c:82:95:3b:65:65:79:48:84:ff:ef:98:de:62:48:b9:ea:b9: b2:4f:ea:a3:a1:dc:e4:b8:b3:f6:47:78:94:89:3c:d8:71:5d: 64:c8:4a:23:77:bd:a6:c0:d2:4a:a1:59:4d:8c:af:b5:cd:b2: 1f:71:f1:b5:55:3a:e3:47:e5:4b:c3:13:38:8d:3c:a3:e2:ba: 2e:64:2e:66:2b:5b:87:b6:35:7c:81:1b:1d:3c:34:61:c3:55: 32:12:f6:67:0e:c1:7a:f1:32:9a:3f:cf:0a:87:81:9d:3c:f6: eb:99:39:18:04:ac:af:f6:e3:25:d9:3c:40:cd:ab:04:ae:e1: 8f:a8:58:85:e4:35:f2:5d:74:aa:4d:ca:94:e7:45:66:81:62: b7:05:73:fc:0d:47:61:9d:2a:a9:9f:0d:20:4f:72:d1:46:ed: d0:83:ce:0e:7f:17:48:43:27:b1:59:2b:d0:36:1d:04:d2:64: a5:58:70:fb:b0:47:4a:88:76:70:61:b2:ad:b0:a0:ab:f5:73: 2f:92:72:9c:c7:ab:ca:96:5b:20:f8:a5:9d:21:32:28:e3:56: 65:46:8d:52:87:15:9e:5b:5c:60:56:3d:10:14:ca:1a:ef:18: aa:a4:4f:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSOBJVs4Lyi4oQTtapbVB3US1uNowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTU0ODMwWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmNlNzcyMmYxODY4YzFlYzI2ZWY1NWY1ZDIwYjk5MjMz ZmM3Nzg2MjkwYjY3ZDk3OTg2NzM3ZDdmMWIwZmRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqI9Ad0VHg+OLMS1f8bGWOh3CLy2KmlCwuXqYtr9kGEeeA b3EjM453K5XJhVgVa0+0SXVvNSytj1kOFkZQ6jPKUG0Dr1XT/RPPVxK4pgfQJ7JS 6N0f1njd+5soT24eB8ReymrJIocOP35v5Kr1h04P9HgWSkb1grfX/7Kv16p9TpRA VYtsWWqLuS8IkssC78JNlH/9D0v4/UyFCC1BGyRoNyBmqDbY9B68aRVNLcjw+/L+ O7i+qe2HChuNKk534AFI88zGwAMJ41xoBvVyQuLPmUUpuEeoDO+owlnkzVFcYrC3 WdJGnVXtYQ4VYIhnJ+x2YzZEKdK/TUfMRSWKtn5RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfVWtDgYKZ/Va1kuhchiPqIR1YDwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NiNGZkZTJlLTNhZTYtNDYxOC04YTdhLTEwY2M5OTEwNjlmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRNowDQYJKoZIhvcNAQELBQADggEBAHGWfLdQlRZOkGrm4LtxkgqXOwyC lTtlZXlIhP/vmN5iSLnqubJP6qOh3OS4s/ZHeJSJPNhxXWTISiN3vabA0kqhWU2M r7XNsh9x8bVVOuNH5UvDEziNPKPiui5kLmYrW4e2NXyBGx08NGHDVTIS9mcOwXrx Mpo/zwqHgZ089uuZORgErK/24yXZPEDNqwSu4Y+oWIXkNfJddKpNypTnRWaBYrcF c/wNR2GdKqmfDSBPctFG7dCDzg5/F0hDJ7FZK9A2HQTSZKVYcPuwR0qIdnBhsq2w oKv1cy+ScpzHq8qWWyD4pZ0hMijjVmVGjVKHFZ5bXGBWPRAUyhrvGKqkT3o= -----END CERTIFICATE-----Generated at Mon Oct 20 11:09:46 2025 by rpki-client