$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1227177-98c6-4742-9506-ad82bdbdcc2a.roa File: e1227177-98c6-4742-9506-ad82bdbdcc2a.roa (raw, json) Hash identifier: Yws4ISygHGy8fnZGRmayIanf5OwFqgJg80K6WzHhwTo= Subject key identifier: 47:BB:CB:1B:8F:CB:2D:BD:AF:55:D3:6F:97:DB:0A:18:B5:4B:4D:C1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 557D7E6FF9958E5705529ACB66C72D5FB4C87509 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1227177-98c6-4742-9506-ad82bdbdcc2a.roa Signing time: Sat 18 Oct 2025 17:41:15 +0000 ROA not before: Sat 18 Oct 2025 17:41:15 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7d:7e:6f:f9:95:8e:57:05:52:9a:cb:66:c7:2d:5f:b4:c8:75:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:41:15 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=08d81215535faf05d88e27ea69db38f32b63c9b858141a755ed1dfd78a0685ac, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5f:68:b8:e6:e0:98:35:b9:55:f5:75:f7:3d: a4:88:3b:ab:91:9d:0a:fb:60:8c:c0:ed:90:1c:b8: 22:57:5d:59:9a:ac:0a:41:c7:54:bb:ea:9d:77:82: 0f:66:64:ff:f9:66:be:f6:1d:6b:39:1b:1e:66:d9: 96:84:e4:e2:48:19:fa:24:89:ab:95:cf:b3:d6:9c: 20:a1:fe:bd:7e:ac:96:41:36:e6:f4:2d:24:82:5a: 12:63:b4:28:b7:6b:df:ed:91:32:7b:84:68:75:37: 61:1c:73:39:4c:18:74:4c:38:d7:44:66:26:6b:87: e0:64:50:60:ea:c2:90:01:c3:d2:7d:f0:bb:e6:a5: 49:d6:04:83:11:d7:71:c9:25:1a:83:2b:b8:ba:6b: e8:56:ab:78:7c:45:fb:96:44:94:7c:83:8f:72:c9: 98:0a:9e:4e:03:6b:fd:d4:ca:50:c0:84:43:ac:cf: aa:eb:cf:af:ef:24:54:f2:64:2f:06:43:aa:82:16: 8b:86:26:39:15:36:cf:36:1f:3d:79:f9:d2:ad:44: 9c:ff:ea:75:f2:05:f6:34:fa:11:99:2f:e7:c8:5b: 36:1c:2c:78:13:8c:36:5c:7e:61:bb:14:bf:05:d0: ab:51:fe:f6:64:32:30:20:aa:3a:a1:4a:88:fa:43: db:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BB:CB:1B:8F:CB:2D:BD:AF:55:D3:6F:97:DB:0A:18:B5:4B:4D:C1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1227177-98c6-4742-9506-ad82bdbdcc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.140.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:92:5a:d2:02:ee:ad:e5:67:6e:4f:52:ac:53:3b:43:fd:dc: 13:77:80:b0:f3:8d:f4:3b:55:70:7e:ea:d3:6c:3d:e4:64:da: 72:d1:18:e5:ca:48:fd:6f:8f:0c:ed:60:bb:5b:cd:06:d1:69: e7:c6:1a:76:a8:54:3f:68:36:06:d9:2c:81:4b:3f:d7:f1:54: f2:bb:b9:fb:5d:e4:61:19:3b:2d:b7:88:57:45:06:26:81:77: da:dd:24:37:7f:44:b3:7e:7b:96:b6:f7:7e:bf:4d:f2:12:32: c1:ae:aa:20:95:0c:8e:51:ce:c1:47:99:ba:7b:82:61:3c:2d: 1d:10:ce:b3:13:0b:31:70:9f:d8:00:8a:df:89:b6:d6:00:13: a6:61:c2:23:b7:8e:cb:e4:49:15:8a:4c:8e:c1:95:43:8f:f4: 0f:37:e2:37:14:3d:9a:84:75:05:25:9a:e6:a0:09:fe:19:65: 5e:9b:bd:b2:b0:12:ce:01:e9:9f:96:4e:ef:ee:63:dd:e5:81: 30:b4:51:6f:aa:73:ea:b4:dd:22:fd:69:38:af:c1:54:37:99: 24:06:86:62:29:ed:09:c0:49:ad:a7:39:ef:9b:07:4c:e5:43: 87:63:7d:26:0a:8f:b3:79:32:32:5b:51:7d:51:0d:2a:31:a0: 99:ac:23:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVX1+b/mVjlcFUprLZsctX7TIdQkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTc0MTE1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGQ4MTIxNTUzNWZhZjA1ZDg4ZTI3ZWE2OWRiMzhmMzJi NjNjOWI4NTgxNDFhNzU1ZWQxZGZkNzhhMDY4NWFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDyX2i45uCYNblV9XX3PaSIO6uRnQr7YIzA7ZAcuCJXXVma rApBx1S76p13gg9mZP/5Zr72HWs5Gx5m2ZaE5OJIGfokiauVz7PWnCCh/r1+rJZB Nub0LSSCWhJjtCi3a9/tkTJ7hGh1N2EcczlMGHRMONdEZiZrh+BkUGDqwpABw9J9 8LvmpUnWBIMR13HJJRqDK7i6a+hWq3h8RfuWRJR8g49yyZgKnk4Da/3UylDAhEOs z6rrz6/vJFTyZC8GQ6qCFouGJjkVNs82Hz15+dKtRJz/6nXyBfY0+hGZL+fIWzYc LHgTjDZcfmG7FL8F0KtR/vZkMjAgqjqhSoj6Q9tjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUR7vLG4/LLb2vVdNvl9sKGLVLTcEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UxMjI3MTc3LTk4YzYtNDc0Mi05NTA2LWFkODJiZGJkY2MyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm4wwDQYJKoZIhvcNAQELBQADggEBAF+SWtIC7q3lZ25PUqxTO0P93BN3 gLDzjfQ7VXB+6tNsPeRk2nLRGOXKSP1vjwztYLtbzQbRaefGGnaoVD9oNgbZLIFL P9fxVPK7uftd5GEZOy23iFdFBiaBd9rdJDd/RLN+e5a2936/TfISMsGuqiCVDI5R zsFHmbp7gmE8LR0QzrMTCzFwn9gAit+JttYAE6ZhwiO3jsvkSRWKTI7BlUOP9A83 4jcUPZqEdQUlmuagCf4ZZV6bvbKwEs4B6Z+WTu/uY93lgTC0UW+qc+q03SL9aTiv wVQ3mSQGhmIp7QnASa2nOe+bB0zlQ4djfSYKj7N5MjJbUX1RDSoxoJmsIxE= -----END CERTIFICATE-----Generated at Mon Oct 20 19:39:21 2025 by rpki-client