$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbb4d87e-d3d6-4dbf-b55e-24534730feaa.roa File: cbb4d87e-d3d6-4dbf-b55e-24534730feaa.roa (raw, json) Hash identifier: DDinATSR2X17opQD64wAwXPGh6aweRgCOV0UVcCOojM= Subject key identifier: 9E:A6:24:6D:D8:C9:FE:AE:50:B8:8E:3E:E3:36:77:46:AF:97:93:2E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3E12950B345A6C53F13E227C2625FFC556E2B7A4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbb4d87e-d3d6-4dbf-b55e-24534730feaa.roa Signing time: Sat 18 Oct 2025 18:50:14 +0000 ROA not before: Sat 18 Oct 2025 18:50:14 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:12:95:0b:34:5a:6c:53:f1:3e:22:7c:26:25:ff:c5:56:e2:b7:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:50:14 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=29f3f10c1a16f6498ee075b4c8bb1e101bf4c34fe4f8473a33fe4f96578c56bc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:c3:20:ff:e5:c2:df:0a:02:99:5f:47:9c: fe:27:51:21:2d:57:7d:b4:2d:c4:3f:4e:a5:c8:08: d9:48:a0:de:8c:56:33:8d:6e:48:46:68:f9:5a:fe: 1e:79:82:a5:5a:d1:8f:7d:6b:4c:85:12:ab:31:ba: 27:ed:cf:d0:19:e7:58:90:b7:57:37:d0:bd:97:45: 20:49:11:49:60:80:c0:02:49:b2:40:c3:37:1c:94: a4:f6:87:21:28:2f:57:b6:be:f0:58:f9:a5:5e:0e: 11:9d:59:76:37:c7:ef:6b:57:38:56:d9:4c:4b:3c: 7e:f2:2d:33:89:bb:ad:63:6a:ac:c4:49:ee:f8:95: 00:99:f6:84:ed:d3:ce:98:bc:5c:4c:d0:57:23:c3: 04:49:e1:7c:5e:e2:fd:b5:e9:7d:ad:66:99:45:0c: df:1f:b8:cf:42:ca:2d:d3:70:e9:9b:a0:6f:2f:79: eb:0c:94:a0:9c:39:6e:7c:53:d5:da:a7:d1:7e:fc: 0c:28:9a:9b:0d:41:06:f5:a2:81:53:30:4e:09:4e: fc:8b:de:5d:de:72:9b:34:ed:57:b4:9a:a4:90:9f: be:f2:ff:40:8f:f9:7a:ca:74:fb:9e:a4:b3:d2:4f: 05:ee:aa:6c:72:e0:a8:55:c9:3f:33:6c:99:42:42: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A6:24:6D:D8:C9:FE:AE:50:B8:8E:3E:E3:36:77:46:AF:97:93:2E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbb4d87e-d3d6-4dbf-b55e-24534730feaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.4.0/22 Signature Algorithm: sha256WithRSAEncryption 76:53:c4:c3:16:f6:98:ba:fe:8e:06:e1:e9:c5:97:38:86:df: 41:11:8f:f9:ca:61:9c:c0:00:dc:e8:ea:28:41:3e:d1:59:c9: 7f:c4:47:ad:93:08:51:e4:81:6d:97:4b:d1:7e:c0:a6:2e:5e: 1c:e1:a9:00:a2:87:24:f2:d0:80:6b:4f:1a:ec:94:8a:15:07: ee:86:98:15:55:fb:a9:3f:23:28:af:de:01:d1:41:78:33:5b: 17:0c:4e:da:e9:e7:73:29:b4:67:83:39:3a:02:9d:83:9f:9e: af:08:b0:d8:50:19:59:f6:e7:f5:b0:bf:4c:cc:f1:4d:dd:95: 8f:62:22:2c:07:66:d8:7a:63:dc:74:39:62:7a:85:85:75:19: 11:d1:3e:8d:ea:f3:9d:bd:43:b4:1f:15:28:8f:4a:3b:b4:cd: ec:84:8f:ef:ab:54:f5:7b:68:56:8a:c6:2f:a0:66:e2:ed:91: 0e:88:e3:60:ae:80:07:32:0b:26:9b:8c:67:b6:11:7c:3c:5c: b4:dc:eb:dc:34:7b:5d:3a:af:df:8e:f8:2c:74:a3:9f:18:0b: 84:3a:a2:9f:89:92:5f:ce:df:9e:22:32:73:94:57:11:fb:84: cf:20:bc:ec:1c:0a:f3:68:67:a9:80:61:74:6c:8f:23:84:f0: bd:bc:2e:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPhKVCzRabFPxPiJ8JiX/xVbit6QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTg1MDE0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWYzZjEwYzFhMTZmNjQ5OGVlMDc1YjRjOGJiMWUxMDFi ZjRjMzRmZTRmODQ3M2EzM2ZlNGY5NjU3OGM1NmJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrZ8Mg/+XC3woCmV9HnP4nUSEtV320LcQ/TqXICNlIoN6M VjONbkhGaPla/h55gqVa0Y99a0yFEqsxuiftz9AZ51iQt1c30L2XRSBJEUlggMAC SbJAwzcclKT2hyEoL1e2vvBY+aVeDhGdWXY3x+9rVzhW2UxLPH7yLTOJu61jaqzE Se74lQCZ9oTt086YvFxM0FcjwwRJ4Xxe4v216X2tZplFDN8fuM9Cyi3TcOmboG8v eesMlKCcOW58U9Xap9F+/AwompsNQQb1ooFTME4JTvyL3l3ecps07Ve0mqSQn77y /0CP+XrKdPuepLPSTwXuqmxy4KhVyT8zbJlCQipPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnqYkbdjJ/q5QuI4+4zZ3Rq+Xky4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NiYjRkODdlLWQzZDYtNGRiZi1iNTVlLTI0NTM0NzMwZmVhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISrQQwDQYJKoZIhvcNAQELBQADggEBAHZTxMMW9pi6/o4G4enFlziG30ER j/nKYZzAANzo6ihBPtFZyX/ER62TCFHkgW2XS9F+wKYuXhzhqQCihyTy0IBrTxrs lIoVB+6GmBVV+6k/Iyiv3gHRQXgzWxcMTtrp53MptGeDOToCnYOfnq8IsNhQGVn2 5/Wwv0zM8U3dlY9iIiwHZth6Y9x0OWJ6hYV1GRHRPo3q8529Q7QfFSiPSju0zeyE j++rVPV7aFaKxi+gZuLtkQ6I42CugAcyCyabjGe2EXw8XLTc69w0e106r9+O+Cx0 o58YC4Q6op+Jkl/O354iMnOUVxH7hM8gvOwcCvNoZ6mAYXRsjyOE8L28LnA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:46:44 2025 by rpki-client