$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8d14d0a-350f-416f-a491-85638832d1fc.roa File: d8d14d0a-350f-416f-a491-85638832d1fc.roa (raw, json) Hash identifier: qphvTBE1+n1ZQjXhIoj39SEYP47GpBCRMD7s3gqPdIA= Subject key identifier: 78:85:F3:FF:1B:B1:99:B2:F9:A3:E4:31:70:23:E9:E2:E5:89:05:EF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 55125CCF711EEE5127F4ADAF7711EB574CAF3ED2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8d14d0a-350f-416f-a491-85638832d1fc.roa Signing time: Sat 18 Oct 2025 21:13:39 +0000 ROA not before: Sat 18 Oct 2025 21:13:39 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:12:5c:cf:71:1e:ee:51:27:f4:ad:af:77:11:eb:57:4c:af:3e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 21:13:39 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=d89476468c885d0d94eaf0dcdccf3655adfc62784215f1a7118cfc844e6b413a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:72:9a:27:8a:ce:98:06:ae:1b:00:85:cd:1d: 5f:98:d9:49:22:b6:94:c9:68:3f:0b:f7:99:bb:ea: ac:e9:cc:7f:66:37:a5:f9:45:94:ee:39:83:31:1f: c8:97:f4:b0:b3:78:88:df:24:ad:c3:39:c6:20:d7: 99:e5:4b:e4:a6:14:f5:12:5f:df:9f:b4:26:33:94: a4:3b:ef:13:68:85:c1:d6:49:e2:b5:c2:a4:4d:09: 0d:b4:0d:8b:f4:66:48:a3:9a:2b:5a:84:b6:21:5f: d3:bd:cd:49:25:86:39:ef:1e:b8:ff:de:45:99:a4: 3d:c8:03:3c:70:57:f1:89:41:4f:26:61:a8:d2:5a: b4:b2:08:0a:e7:fa:d2:25:7f:26:23:94:1c:9a:3b: eb:42:88:d8:f7:10:10:a9:8d:66:c5:62:79:b2:c0: e5:d4:f3:0e:ae:a2:1e:c4:5f:63:78:26:41:e9:c9: c4:2e:d6:39:69:1c:ef:fc:f1:8c:eb:6a:2c:fa:aa: 36:f2:ee:c6:22:3f:ae:6e:2f:e0:30:37:85:6c:44: 13:51:0f:83:f4:c3:48:37:ac:f8:be:ac:4a:e6:4a: c8:45:46:0c:b4:48:8d:61:98:df:4d:d7:5b:ff:72: f6:ce:b1:e7:67:54:0e:b0:68:8b:2e:20:e8:ad:08: ff:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:85:F3:FF:1B:B1:99:B2:F9:A3:E4:31:70:23:E9:E2:E5:89:05:EF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8d14d0a-350f-416f-a491-85638832d1fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.12.0/23 Signature Algorithm: sha256WithRSAEncryption 56:f7:6f:1a:79:83:88:6d:f2:7b:c6:a7:0f:ef:ca:7b:e6:d2: 88:41:8c:20:e4:ba:a6:68:ff:46:13:9a:87:c2:df:97:14:fa: 61:8a:e3:0e:e7:64:b3:4a:b9:c4:0e:4c:ab:fd:79:58:e6:d2: ee:e6:ac:a6:52:c3:ce:f5:2f:92:a9:ed:ca:b3:20:80:6d:5b: 8f:ef:13:2f:4e:7d:ba:66:e3:38:e7:fe:7f:ae:cc:07:9b:23: 68:9e:13:2b:a3:c7:2d:8b:12:1b:ca:de:31:3a:4c:11:eb:96: 0c:4a:38:9f:9f:c5:57:61:e8:4d:9e:a1:ea:f2:06:46:5c:9b: c9:e4:89:d9:a7:09:01:df:bc:d7:51:e0:91:0b:f1:c6:3d:90: e7:6d:9d:d2:0c:80:81:97:1a:3a:46:2d:4f:27:48:0f:05:ed: 71:d3:77:4f:ef:9e:93:49:0c:85:9d:e2:f7:46:43:16:52:e4: 2a:88:7f:04:85:f6:4d:d4:89:35:c3:03:01:a5:14:5e:df:2c: b4:55:f0:ce:58:bb:0c:43:af:8a:55:81:94:03:bd:b5:86:da: ff:2f:3a:d6:d9:e7:95:20:d9:41:63:17:67:16:b1:eb:ec:32: 08:2a:a5:d4:7c:bb:01:aa:2c:e4:74:91:f2:46:20:6a:60:42: 53:08:0c:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVRJcz3Ee7lEn9K2vdxHrV0yvPtIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjExMzM5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkODk0NzY0NjhjODg1ZDBkOTRlYWYwZGNkY2NmMzY1NWFk ZmM2Mjc4NDIxNWYxYTcxMThjZmM4NDRlNmI0MTNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCscponis6YBq4bAIXNHV+Y2UkitpTJaD8L95m76qzpzH9m N6X5RZTuOYMxH8iX9LCzeIjfJK3DOcYg15nlS+SmFPUSX9+ftCYzlKQ77xNohcHW SeK1wqRNCQ20DYv0ZkijmitahLYhX9O9zUklhjnvHrj/3kWZpD3IAzxwV/GJQU8m YajSWrSyCArn+tIlfyYjlByaO+tCiNj3EBCpjWbFYnmywOXU8w6uoh7EX2N4JkHp ycQu1jlpHO/88Yzraiz6qjby7sYiP65uL+AwN4VsRBNRD4P0w0g3rPi+rErmSshF Rgy0SI1hmN9N11v/cvbOsednVA6waIsuIOitCP9dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeIXz/xuxmbL5o+QxcCPp4uWJBe8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q4ZDE0ZDBhLTM1MGYtNDE2Zi1hNDkxLTg1NjM4ODMyZDFmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESmwwwDQYJKoZIhvcNAQELBQADggEBAFb3bxp5g4ht8nvGpw/vynvm0ohB jCDkuqZo/0YTmofC35cU+mGK4w7nZLNKucQOTKv9eVjm0u7mrKZSw871L5Kp7cqz IIBtW4/vEy9Ofbpm4zjn/n+uzAebI2ieEyujxy2LEhvK3jE6TBHrlgxKOJ+fxVdh 6E2eoeryBkZcm8nkidmnCQHfvNdR4JEL8cY9kOdtndIMgIGXGjpGLU8nSA8F7XHT d0/vnpNJDIWd4vdGQxZS5CqIfwSF9k3UiTXDAwGlFF7fLLRV8M5YuwxDr4pVgZQD vbWG2v8vOtbZ55Ug2UFjF2cWsevsMggqpdR8uwGqLOR0kfJGIGpgQlMIDDI= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:45 2025 by rpki-client