$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1014d66-cd24-4cf8-8c0f-cbac6d67e474.roa File: f1014d66-cd24-4cf8-8c0f-cbac6d67e474.roa (raw, json) Hash identifier: mAJlU2e9elzoRXwz4c4M8SkpfeL8XevsdvAXEN0b46w= Subject key identifier: 62:F0:B1:B8:8E:FB:64:EC:A7:9D:10:48:63:FC:45:F2:40:51:76:54 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6058C12CF87331A45A05C76B0FB1EFE615F520C9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1014d66-cd24-4cf8-8c0f-cbac6d67e474.roa Signing time: Sun 19 Oct 2025 14:35:05 +0000 ROA not before: Sun 19 Oct 2025 14:35:05 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:58:c1:2c:f8:73:31:a4:5a:05:c7:6b:0f:b1:ef:e6:15:f5:20:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:35:05 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=62ad904b7173183610cfff0bad77fb9aca4f6bf8dc4cd5053d22892c964b76c7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d4:a1:de:d7:b1:e4:ea:27:aa:7b:72:da:17: 5d:a6:6b:0d:f9:47:f9:e1:30:3e:ba:fc:db:96:23: 2d:95:54:3a:8f:45:4d:33:46:04:5e:5f:17:0e:69: 23:76:af:03:3e:7e:89:18:0b:4c:e3:9f:b4:f8:99: 57:a8:b3:97:3a:64:f0:04:44:a6:76:c9:ee:ba:4a: c0:49:cf:45:73:57:08:16:52:77:da:f5:98:96:be: 9c:28:d4:a7:f5:04:67:ad:f6:95:f2:be:2d:1f:55: 2b:2b:1c:a6:ea:89:8e:8e:fd:08:a3:e9:93:6e:f1: 1a:39:7c:5e:a8:13:52:91:c7:e2:f8:02:32:2e:0f: fc:37:37:a0:b3:da:8c:d4:0e:85:79:16:28:39:fc: c9:ba:cd:6e:ba:63:73:90:a4:74:14:b1:6a:ef:34: 93:86:80:81:75:38:b1:1b:d1:b3:c2:24:c5:e0:d1: 45:18:69:9f:1e:21:34:d1:3e:36:60:79:55:34:e8: b4:a6:24:d8:d9:7f:e1:81:ad:b0:47:34:7a:c0:36: 6f:f4:0b:d5:70:dc:32:c8:9c:bd:11:a2:02:1e:ff: ab:52:87:f8:6f:91:d3:b4:eb:7a:57:a7:5a:6c:f4: f9:e7:86:25:d1:75:2c:13:09:92:0d:a2:9e:f8:bc: 48:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F0:B1:B8:8E:FB:64:EC:A7:9D:10:48:63:FC:45:F2:40:51:76:54 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1014d66-cd24-4cf8-8c0f-cbac6d67e474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.148.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:e9:09:15:f4:8d:1e:45:a4:16:f6:7d:0a:2b:ac:c6:6a:7d: b7:ea:28:6b:4e:70:ba:98:a0:6d:7e:b7:23:59:54:02:3e:35: 96:2e:3d:45:cc:84:58:c9:aa:76:6c:c2:bb:cf:14:72:6f:ca: 73:cc:ab:d8:c8:0f:24:42:18:2e:47:ba:a1:e3:b9:75:5a:b2: 9f:10:20:9f:a3:b4:be:b1:f7:c3:c4:79:98:fd:2d:a5:92:47: 2f:06:4a:94:ca:b3:81:10:d6:9e:35:13:cd:50:3f:46:74:e7: 23:e7:ca:0e:42:87:5b:1e:cf:07:65:08:a9:16:fd:8f:bd:73: 07:e5:8d:da:06:c7:48:d3:6a:17:e0:3d:d1:6a:75:c5:da:15: 67:f9:57:18:08:8e:d2:46:81:29:7b:a3:e6:7b:78:01:b9:6f: ce:4d:66:47:80:be:c6:03:00:58:52:a6:c7:ef:f5:2f:25:44: f8:fc:ba:43:20:9f:78:9a:c5:ae:2d:b5:62:c4:df:bd:ff:d5: 7f:7c:20:ed:29:bd:8f:70:28:98:8b:da:59:08:f7:28:80:18: 22:44:44:5e:7c:af:e1:54:d9:d5:a9:8f:a5:3f:3c:8f:13:0f: 24:fe:1e:36:b1:1c:86:28:f3:47:82:15:e9:a3:a1:b0:0a:53: 4f:99:11:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYFjBLPhzMaRaBcdrD7Hv5hX1IMkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQzNTA1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MmFkOTA0YjcxNzMxODM2MTBjZmZmMGJhZDc3ZmI5YWNh NGY2YmY4ZGM0Y2Q1MDUzZDIyODkyYzk2NGI3NmM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZ1KHe17Hk6ieqe3LaF12maw35R/nhMD66/NuWIy2VVDqP RU0zRgReXxcOaSN2rwM+fokYC0zjn7T4mVeos5c6ZPAERKZ2ye66SsBJz0VzVwgW Unfa9ZiWvpwo1Kf1BGet9pXyvi0fVSsrHKbqiY6O/Qij6ZNu8Ro5fF6oE1KRx+L4 AjIuD/w3N6Cz2ozUDoV5Fig5/Mm6zW66Y3OQpHQUsWrvNJOGgIF1OLEb0bPCJMXg 0UUYaZ8eITTRPjZgeVU06LSmJNjZf+GBrbBHNHrANm/0C9Vw3DLInL0RogIe/6tS h/hvkdO063pXp1ps9PnnhiXRdSwTCZINop74vEhnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYvCxuI77ZOynnRBIY/xF8kBRdlQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YxMDE0ZDY2LWNkMjQtNGNmOC04YzBmLWNiYWM2ZDY3ZTQ3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQJQwDQYJKoZIhvcNAQELBQADggEBACrpCRX0jR5FpBb2fQorrMZqfbfq KGtOcLqYoG1+tyNZVAI+NZYuPUXMhFjJqnZswrvPFHJvynPMq9jIDyRCGC5HuqHj uXVasp8QIJ+jtL6x98PEeZj9LaWSRy8GSpTKs4EQ1p41E81QP0Z05yPnyg5Ch1se zwdlCKkW/Y+9cwfljdoGx0jTahfgPdFqdcXaFWf5VxgIjtJGgSl7o+Z7eAG5b85N ZkeAvsYDAFhSpsfv9S8lRPj8ukMgn3iaxa4ttWLE373/1X98IO0pvY9wKJiL2lkI 9yiAGCJERF58r+FU2dWpj6U/PI8TDyT+HjaxHIYo80eCFemjobAKU0+ZEaw= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:23 2025 by rpki-client