$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed0bb5a7-752d-4259-8c1c-ec143421f8a0.roa File: ed0bb5a7-752d-4259-8c1c-ec143421f8a0.roa (raw, json) Hash identifier: ImPammOKtNRS0O3I0RGoKY3gGn/dj9xT3yvNa5VqBb0= Subject key identifier: 36:3C:03:FC:6B:6E:FC:8E:2E:20:B7:82:B7:A1:B4:B2:0A:6D:10:36 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 10988FA0434188BDD54DFF5B9D65281A8DD5ED45 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed0bb5a7-752d-4259-8c1c-ec143421f8a0.roa Signing time: Sat 18 Oct 2025 22:43:41 +0000 ROA not before: Sat 18 Oct 2025 22:43:41 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:98:8f:a0:43:41:88:bd:d5:4d:ff:5b:9d:65:28:1a:8d:d5:ed:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:43:41 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=9b8e04bf90872ede219762ddf5b61bfd3d3b9f535fa715e732ad0674378c4545, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:10:28:b9:03:18:ed:18:f6:ab:d6:0a:0e: 41:4a:ce:cc:e1:51:ae:5e:80:05:8c:5c:84:47:a5: 58:91:d9:b1:ed:b6:13:b9:4f:39:6d:5c:3d:ca:89: 05:7d:a7:08:16:ee:5f:87:11:36:51:50:22:27:5c: 1c:14:0c:93:8f:4a:57:63:6d:d8:bd:55:be:79:56: 7f:65:25:87:41:c3:87:05:f4:6b:42:da:6b:a8:9e: ed:d1:cd:92:8a:81:18:13:ce:4f:94:b4:45:29:a7: 3c:fe:b3:5e:72:31:b2:63:64:a2:2b:ff:23:76:94: fa:f0:e9:4c:62:e8:26:08:e2:98:3d:82:1f:5e:46: 76:b4:14:c3:74:c3:f5:3a:34:68:9c:27:73:40:3e: 92:f8:5e:13:e9:52:79:f5:f6:1a:cd:6d:b5:70:cb: 1d:ad:9f:aa:e6:8e:ec:59:30:4b:43:d3:db:9c:a8: 76:33:99:84:a1:ef:60:0b:f3:cc:43:56:1c:23:df: c6:11:90:b4:9f:3b:60:29:ea:71:4a:d4:0f:ba:64: 09:a4:53:44:ff:3e:eb:8f:02:49:ce:35:7d:c6:65: d4:1e:f1:be:85:45:d8:52:af:d5:c0:59:89:ea:80: 34:19:df:d1:64:25:9c:ec:b1:2d:e3:9d:57:06:0c: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3C:03:FC:6B:6E:FC:8E:2E:20:B7:82:B7:A1:B4:B2:0A:6D:10:36 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed0bb5a7-752d-4259-8c1c-ec143421f8a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.68.0/22 Signature Algorithm: sha256WithRSAEncryption 99:b8:ae:e2:54:bb:05:d4:13:cf:8f:fa:b9:db:93:9b:22:7d: 1a:d3:f3:70:23:94:b4:9d:46:dd:27:65:6d:4f:10:24:44:2f: 13:73:10:ce:15:20:fb:f8:d6:de:e4:d6:1a:1b:7d:a2:66:71: 46:b9:ba:3e:17:46:16:54:47:5f:aa:49:d1:18:39:ef:71:ec: 53:c5:78:79:8c:67:6e:3f:0b:8a:87:2d:bf:75:3e:ae:5c:33: af:9e:9a:15:ee:c7:70:72:c8:d4:d1:4d:c1:32:14:63:c6:fb: 9f:cc:9f:97:b7:23:b8:99:da:31:01:a4:62:ed:12:75:83:f2: c5:06:ae:33:6a:da:cf:ce:12:ca:86:13:23:9a:77:4f:33:14: b0:cf:e2:80:5b:69:14:b0:4c:2a:71:fe:99:f7:a5:e1:2e:47: 45:5c:83:e3:cd:25:0f:4c:a1:68:6c:19:3c:f9:fd:6e:72:2b: ae:e6:9a:0b:86:18:9b:ba:26:03:3b:1e:78:06:54:58:a2:3c: ad:4e:c8:d0:73:97:89:f8:94:b7:fa:7d:78:71:c0:c0:dc:a6: 9b:e9:82:56:8b:13:11:06:80:d6:e3:be:05:ca:90:fa:64:f8: 4c:56:b2:af:cc:a8:8e:ee:b8:01:74:50:11:ba:14:f8:0e:05: 80:ea:61:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEJiPoENBiL3VTf9bnWUoGo3V7UUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjI0MzQxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjhlMDRiZjkwODcyZWRlMjE5NzYyZGRmNWI2MWJmZDNk M2I5ZjUzNWZhNzE1ZTczMmFkMDY3NDM3OGM0NTQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+2hAouQMY7Rj2q9YKDkFKzszhUa5egAWMXIRHpViR2bHt thO5TzltXD3KiQV9pwgW7l+HETZRUCInXBwUDJOPSldjbdi9Vb55Vn9lJYdBw4cF 9GtC2muonu3RzZKKgRgTzk+UtEUppzz+s15yMbJjZKIr/yN2lPrw6Uxi6CYI4pg9 gh9eRna0FMN0w/U6NGicJ3NAPpL4XhPpUnn19hrNbbVwyx2tn6rmjuxZMEtD09uc qHYzmYSh72AL88xDVhwj38YRkLSfO2Ap6nFK1A+6ZAmkU0T/PuuPAknONX3GZdQe 8b6FRdhSr9XAWYnqgDQZ39FkJZzssS3jnVcGDPMRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNjwD/Gtu/I4uILeCt6G0sgptEDYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VkMGJiNWE3LTc1MmQtNDI1OS04YzFjLWVjMTQzNDIxZjhhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpUQwDQYJKoZIhvcNAQELBQADggEBAJm4ruJUuwXUE8+P+rnbk5sifRrT 83AjlLSdRt0nZW1PECRELxNzEM4VIPv41t7k1hobfaJmcUa5uj4XRhZUR1+qSdEY Oe9x7FPFeHmMZ24/C4qHLb91Pq5cM6+emhXux3ByyNTRTcEyFGPG+5/Mn5e3I7iZ 2jEBpGLtEnWD8sUGrjNq2s/OEsqGEyOad08zFLDP4oBbaRSwTCpx/pn3peEuR0Vc g+PNJQ9MoWhsGTz5/W5yK67mmguGGJu6JgM7HngGVFiiPK1OyNBzl4n4lLf6fXhx wMDcppvpglaLExEGgNbjvgXKkPpk+ExWsq/MqI7uuAF0UBG6FPgOBYDqYYM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:01:04 2025 by rpki-client