$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f18b6a77-d3d0-49a7-8e66-918ed3154226.roa File: f18b6a77-d3d0-49a7-8e66-918ed3154226.roa (raw, json) Hash identifier: xWtaUA5dVzaAQG0suJF+fQnv7sv35qd58KcaDPkDlk4= Subject key identifier: 46:F7:AF:09:87:0F:90:E2:EA:78:2F:00:5E:0A:3A:50:0A:2D:4C:80 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 542D91F4C857675A555BF871E53014165C821CF2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f18b6a77-d3d0-49a7-8e66-918ed3154226.roa Signing time: Sun 19 Oct 2025 12:19:14 +0000 ROA not before: Sun 19 Oct 2025 12:19:14 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.224.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2d:91:f4:c8:57:67:5a:55:5b:f8:71:e5:30:14:16:5c:82:1c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 12:19:14 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=4818b09fcdfc2a30a88060ce30c111a924d055c359453b8d9a9249050a0d09e4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:51:9c:ea:90:ed:e7:45:70:7c:0c:bc:fe: df:b4:f6:8a:da:e1:b1:f4:7e:55:81:90:79:e9:6f: 70:a2:49:5c:1b:1f:2b:da:84:fb:8c:5c:98:ff:23: 9e:94:a3:b4:e8:ff:2f:fc:a3:8d:53:0b:b8:99:13: 59:6a:5c:b2:5d:b6:dd:3c:f7:21:4f:a5:16:63:d9: d7:ab:91:c4:b4:87:c1:b5:52:a2:87:97:f5:97:bb: d6:86:2a:22:22:4b:1a:d9:45:f5:25:04:88:08:aa: 4e:30:d1:12:7e:54:b9:d7:bf:4a:f3:7f:91:3b:de: dc:d4:4e:54:d3:4c:65:6e:5d:1f:71:ba:b8:3d:41: 80:5a:f4:e3:88:a2:4a:d5:5a:e8:5e:a1:47:ee:f4: a1:cc:0e:a7:f9:62:01:9a:59:8f:94:88:04:56:74: 3c:3a:1a:63:2b:da:0a:aa:ed:ad:10:a0:50:b1:ed: 8e:4f:c2:b7:c3:e7:12:39:00:20:18:9e:f7:89:9e: 55:63:13:c2:2c:e8:38:89:6f:23:34:74:3a:ba:45: 61:94:f0:8b:c6:41:78:07:88:c4:af:f7:9a:27:dd: 76:67:a1:a1:e1:6f:c0:eb:30:12:f5:91:95:79:73: a3:a4:87:c8:f0:2e:cf:e9:7b:38:ce:73:fa:3f:25: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F7:AF:09:87:0F:90:E2:EA:78:2F:00:5E:0A:3A:50:0A:2D:4C:80 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f18b6a77-d3d0-49a7-8e66-918ed3154226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.224.183.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:a7:86:f3:10:97:ef:03:70:ac:eb:66:bb:d9:1c:a2:7a:8d: 9e:e1:a8:28:f1:0c:68:4a:97:28:2d:83:7b:05:ab:7e:a0:75: af:70:6a:3b:5f:4a:47:2d:66:6e:25:f7:0b:d5:0c:d1:b7:d8: 4e:22:84:b2:07:2d:2c:d2:87:de:ca:56:ab:fa:19:65:ba:ce: 76:8f:63:0a:35:1b:94:33:fa:3a:0a:82:49:bd:42:6a:d1:27: 5b:9a:cf:3c:e5:2e:b0:d5:64:fe:a5:2a:8d:e0:13:af:4f:40: 5d:4a:07:2d:0c:49:5e:14:ec:1c:cb:2a:18:62:3b:9e:5a:15: 59:69:8c:bf:4c:8b:e5:8c:a8:25:37:b6:6b:a0:68:b1:a6:6a: b7:41:c1:fc:e8:4f:fc:df:b7:d1:9b:fc:cf:87:b0:36:37:4a: af:29:40:ea:5b:c9:0f:5e:44:a8:e6:eb:ab:a1:f3:94:55:41: ff:76:2d:a4:df:45:34:a7:63:c3:e4:c7:d8:42:05:12:3e:26: a5:b6:08:01:9b:39:ea:25:b8:5e:6f:a3:56:f9:37:5c:07:2c: af:82:87:3a:d1:db:9e:f0:dd:eb:24:6a:2a:8b:5e:87:3b:b2: ad:7d:74:5a:31:77:3e:9d:2c:76:a2:2e:2c:6b:a7:9f:4f:d8: da:05:dd:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVC2R9MhXZ1pVW/hx5TAUFlyCHPIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTIxOTE0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODE4YjA5ZmNkZmMyYTMwYTg4MDYwY2UzMGMxMTFhOTI0 ZDA1NWMzNTk0NTNiOGQ5YTkyNDkwNTBhMGQwOWU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC64FGc6pDt50VwfAy8/t+09ora4bH0flWBkHnpb3CiSVwb HyvahPuMXJj/I56Uo7To/y/8o41TC7iZE1lqXLJdtt089yFPpRZj2derkcS0h8G1 UqKHl/WXu9aGKiIiSxrZRfUlBIgIqk4w0RJ+VLnXv0rzf5E73tzUTlTTTGVuXR9x urg9QYBa9OOIokrVWuheoUfu9KHMDqf5YgGaWY+UiARWdDw6GmMr2gqq7a0QoFCx 7Y5PwrfD5xI5ACAYnveJnlVjE8Is6DiJbyM0dDq6RWGU8IvGQXgHiMSv95on3XZn oaHhb8DrMBL1kZV5c6Okh8jwLs/pezjOc/o/JdinAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURvevCYcPkOLqeC8AXgo6UAotTIAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YxOGI2YTc3LWQzZDAtNDlhNy04ZTY2LTkxOGVkMzE1NDIyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN4LcwDQYJKoZIhvcNAQELBQADggEBAD2nhvMQl+8DcKzrZrvZHKJ6jZ7h qCjxDGhKlygtg3sFq36gda9wajtfSkctZm4l9wvVDNG32E4ihLIHLSzSh97KVqv6 GWW6znaPYwo1G5Qz+joKgkm9QmrRJ1uazzzlLrDVZP6lKo3gE69PQF1KBy0MSV4U 7BzLKhhiO55aFVlpjL9Mi+WMqCU3tmugaLGmardBwfzoT/zft9Gb/M+HsDY3Sq8p QOpbyQ9eRKjm66uh85RVQf92LaTfRTSnY8Pkx9hCBRI+JqW2CAGbOeoluF5vo1b5 N1wHLK+ChzrR257w3eskaiqLXoc7sq19dFoxdz6dLHaiLixrp59P2NoF3c8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:21 2025 by rpki-client