$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5af43e1-1a36-4355-8122-3a48bac9f039.roa File: d5af43e1-1a36-4355-8122-3a48bac9f039.roa (raw, json) Hash identifier: vbavI1+YiXYJ4Ag/cDhSL75EGKWYqgK1YdQQeOhKR7U= Subject key identifier: 90:BC:3A:DF:41:56:63:71:D7:E7:1D:EF:FE:FF:D3:61:7F:62:CB:80 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5269177F526B50C3898A7314C1706EB48859A6F6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5af43e1-1a36-4355-8122-3a48bac9f039.roa Signing time: Sat 18 Oct 2025 12:41:29 +0000 ROA not before: Sat 18 Oct 2025 12:41:29 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:69:17:7f:52:6b:50:c3:89:8a:73:14:c1:70:6e:b4:88:59:a6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:41:29 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=0d8682a588c4daa65ad5b7471bc2e10b58b219cc8846ef25f1fd1e0deb945400, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:0e:e8:ea:9c:ac:28:4e:d8:c0:98:e3:81: c4:85:0a:43:0d:d7:9a:81:5e:86:f3:f7:c0:83:e3: b0:03:58:7b:8d:94:9b:8a:47:1d:83:8f:de:e7:0f: f1:d0:c9:6c:66:35:34:d3:df:24:54:a1:bb:2c:8f: 64:44:98:67:83:2b:81:7f:70:75:ac:5d:21:4d:9b: 7b:7c:e2:a4:a8:c5:b7:9a:c8:f6:e5:b2:0a:3d:ec: e4:6a:0f:21:a0:13:2e:1e:b4:7c:c8:55:b0:22:4e: c9:71:5e:2f:92:c0:ab:ca:0f:61:a5:07:98:22:b5: 31:98:4e:45:6d:67:d3:99:52:32:77:d6:b8:22:56: 87:4f:b3:1d:7d:75:f2:f1:69:07:2d:ee:53:4a:e6: cd:60:20:8c:1f:cc:1a:d2:fd:cc:a3:d0:7b:65:57: 19:3a:21:29:d7:7e:08:31:79:6e:2f:02:32:55:6f: 39:61:48:5f:91:58:9d:4a:c2:d0:c1:f0:aa:fa:f2: e9:53:13:be:ef:9b:84:76:5a:a7:34:f5:23:b3:1c: 59:80:dd:83:d6:0d:8b:77:b4:26:c6:d0:7c:81:57: 76:8d:79:34:92:fe:8f:a7:cc:8c:64:4c:12:8d:5b: bf:57:42:a9:4f:88:b3:83:4b:ec:a8:0f:fe:45:29: ff:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BC:3A:DF:41:56:63:71:D7:E7:1D:EF:FE:FF:D3:61:7F:62:CB:80 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5af43e1-1a36-4355-8122-3a48bac9f039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.160.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:1f:f5:44:24:c2:d2:b3:85:f3:6e:a4:52:c0:ed:df:e1:98: 5b:7b:21:b1:f8:03:c1:7e:0e:38:85:ff:d9:67:64:53:09:d2: fa:59:19:8d:78:06:b9:06:3a:40:19:6b:f9:d0:ed:22:02:5d: 18:8e:da:4c:bc:69:a9:a8:89:5e:b5:be:01:4a:51:12:24:0b: c9:cc:89:2d:6a:2f:b5:d9:0d:6a:be:ef:86:b9:22:1b:27:0e: aa:6f:7e:2c:e8:1d:f1:b8:86:32:af:c1:64:c0:b2:4d:66:01: 46:9b:99:4f:d6:2e:10:06:c1:e3:bb:94:f8:aa:d1:7e:55:49: ab:65:b8:a1:0f:63:40:e1:bd:8c:96:e3:36:92:d2:ba:f8:9b: 11:5a:4d:dd:61:46:bb:cc:4e:40:82:4c:07:92:b6:e2:40:f1: e4:55:5c:f4:9b:f0:3b:04:d9:2f:c6:88:fe:29:da:65:0a:b6: 1a:c3:cc:cc:60:4c:a3:91:4d:1d:94:6b:7c:2b:b6:ff:cb:db: 69:d7:38:c1:6f:5c:60:6d:d1:0c:32:47:59:02:af:74:e1:57: 38:04:d1:48:b5:af:db:6b:25:ec:a4:6e:86:7e:e9:d5:87:ec: 4b:e7:87:db:49:1c:b6:51:e9:13:ce:06:70:79:be:5a:b2:13: 47:4d:52:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUmkXf1JrUMOJinMUwXButIhZpvYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTI0MTI5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDg2ODJhNTg4YzRkYWE2NWFkNWI3NDcxYmMyZTEwYjU4 YjIxOWNjODg0NmVmMjVmMWZkMWUwZGViOTQ1NDAwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5lA7o6pysKE7YwJjjgcSFCkMN15qBXobz98CD47ADWHuN lJuKRx2Dj97nD/HQyWxmNTTT3yRUobssj2REmGeDK4F/cHWsXSFNm3t84qSoxbea yPblsgo97ORqDyGgEy4etHzIVbAiTslxXi+SwKvKD2GlB5gitTGYTkVtZ9OZUjJ3 1rgiVodPsx19dfLxaQct7lNK5s1gIIwfzBrS/cyj0HtlVxk6ISnXfggxeW4vAjJV bzlhSF+RWJ1KwtDB8Kr68ulTE77vm4R2Wqc09SOzHFmA3YPWDYt3tCbG0HyBV3aN eTSS/o+nzIxkTBKNW79XQqlPiLODS+yoD/5FKf+FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkLw630FWY3HX5x3v/v/TYX9iy4AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q1YWY0M2UxLTFhMzYtNDM1NS04MTIyLTNhNDhiYWM5ZjAzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQS76AwDQYJKoZIhvcNAQELBQADggEBAC0f9UQkwtKzhfNupFLA7d/hmFt7 IbH4A8F+DjiF/9lnZFMJ0vpZGY14BrkGOkAZa/nQ7SICXRiO2ky8aamoiV61vgFK URIkC8nMiS1qL7XZDWq+74a5IhsnDqpvfizoHfG4hjKvwWTAsk1mAUabmU/WLhAG weO7lPiq0X5VSatluKEPY0DhvYyW4zaS0rr4mxFaTd1hRrvMTkCCTAeStuJA8eRV XPSb8DsE2S/GiP4p2mUKthrDzMxgTKORTR2Ua3wrtv/L22nXOMFvXGBt0QwyR1kC r3ThVzgE0Ui1r9trJeykboZ+6dWH7Evnh9tJHLZR6RPOBnB5vlqyE0dNUvE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:08:15 2025 by rpki-client