$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f42cd747-1d11-4500-9276-811dce421b17.roa File: f42cd747-1d11-4500-9276-811dce421b17.roa (raw, json) Hash identifier: TSA4uoTaAf+7cIoiIu9IHXpZUDGAXXd90GZzjRfij+Q= Subject key identifier: 55:BD:4B:1D:68:8E:54:E9:52:EA:37:BF:D9:2F:B1:BE:BA:E8:81:2C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6E4A6161B0BA24E23A8109C1C5503DEA6FB48F59 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f42cd747-1d11-4500-9276-811dce421b17.roa Signing time: Sun 19 Oct 2025 19:03:57 +0000 ROA not before: Sun 19 Oct 2025 19:03:57 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:4a:61:61:b0:ba:24:e2:3a:81:09:c1:c5:50:3d:ea:6f:b4:8f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:03:57 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=061edfb50acd4a6a277a0548bbdab0b21498f8129997bca7927ee884c4060d52, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:74:64:0a:ab:36:f5:d3:5f:a7:2d:7c:2c:d2: 3b:e5:77:70:d1:f7:60:76:ce:bc:84:d8:c1:e4:c4: a5:6a:ba:e0:e9:59:38:86:83:10:04:4e:0d:e3:8e: c0:a6:c8:cc:ea:f9:e5:7c:95:2f:6d:02:f3:6d:1a: c8:7c:63:7b:3a:f9:fa:8a:2e:75:78:6d:e4:62:87: 62:4d:6b:ad:18:9c:03:92:03:24:3b:df:2b:0d:e6: 08:36:dd:c5:bb:c2:39:a5:85:73:dd:66:37:0e:50: cc:46:3b:b6:59:2b:2a:1e:19:67:7e:59:01:4a:b3: d8:9a:26:ac:e5:3e:95:87:00:21:a7:22:3c:c7:d5: 1c:3b:83:cf:fa:99:8d:a1:7d:37:86:0e:3b:a5:be: d0:5e:93:da:3f:9f:89:44:40:63:92:27:be:f4:2b: 17:cf:ff:df:2e:cb:59:bd:72:71:69:c1:2b:62:ba: b1:1c:86:dc:d4:b3:48:85:12:64:46:50:13:4b:81: f0:b7:d8:0d:e0:dd:04:49:50:ff:aa:18:9a:f9:7f: 20:3c:57:b6:5f:98:3f:2c:d0:0e:28:49:df:71:47: cb:3d:27:07:27:9d:ab:b1:11:3a:37:f0:34:c1:2c: a4:51:81:22:2e:0d:a0:64:77:39:0d:9e:1f:f5:bd: 1e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BD:4B:1D:68:8E:54:E9:52:EA:37:BF:D9:2F:B1:BE:BA:E8:81:2C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f42cd747-1d11-4500-9276-811dce421b17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.44.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:49:01:04:40:39:4a:80:54:19:91:e8:03:d6:3c:da:91:b7: c2:9d:c6:b2:d2:6f:1d:13:3f:42:9d:4d:76:ac:61:0d:8d:c6: ba:f0:e5:56:e5:35:78:ac:0e:e1:74:c9:36:8e:58:6e:59:f3: e6:7e:10:5a:45:4e:e3:bb:ec:42:e1:fe:e5:7f:54:1c:33:9f: b0:17:71:39:4a:94:43:e3:a9:9c:9b:1b:3b:ed:00:af:c1:e9: 24:f8:f2:ee:a8:4c:24:65:ce:8e:3b:26:72:8e:5c:a8:d3:b1: fb:c7:ec:96:eb:a5:3d:bd:b3:06:74:53:e1:2e:f8:0d:f1:c0: a9:2e:5d:e8:40:cd:d4:b9:d0:a5:6b:df:1e:5d:dc:bf:c6:f2: a3:50:91:0d:ff:cc:7f:c7:12:d7:4a:bc:54:fc:08:03:b1:df: 87:df:20:55:b5:b8:f4:24:d0:e1:bc:b4:7e:9e:b0:94:ed:ea: a6:48:09:6d:f9:54:03:f6:11:f2:71:64:6c:62:1a:ac:2b:a5: d9:24:6c:ed:3d:b8:c2:be:5f:cd:72:83:d5:f0:2a:41:c5:e8: 89:92:77:64:e9:d1:60:0d:78:6a:48:02:a7:8c:d4:59:a6:d4: 69:6f:48:be:9d:df:a6:31:4a:cc:82:ca:61:58:e7:c3:00:9f: 15:60:46:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbkphYbC6JOI6gQnBxVA96m+0j1kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkwMzU3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjFlZGZiNTBhY2Q0YTZhMjc3YTA1NDhiYmRhYjBiMjE0 OThmODEyOTk5N2JjYTc5MjdlZTg4NGM0MDYwZDUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLdGQKqzb101+nLXws0jvld3DR92B2zryE2MHkxKVquuDp WTiGgxAETg3jjsCmyMzq+eV8lS9tAvNtGsh8Y3s6+fqKLnV4beRih2JNa60YnAOS AyQ73ysN5gg23cW7wjmlhXPdZjcOUMxGO7ZZKyoeGWd+WQFKs9iaJqzlPpWHACGn IjzH1Rw7g8/6mY2hfTeGDjulvtBek9o/n4lEQGOSJ770KxfP/98uy1m9cnFpwSti urEchtzUs0iFEmRGUBNLgfC32A3g3QRJUP+qGJr5fyA8V7ZfmD8s0A4oSd9xR8s9 JwcnnauxETo38DTBLKRRgSIuDaBkdzkNnh/1vR5rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVb1LHWiOVOlS6je/2S+xvrrogSwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y0MmNkNzQ3LTFkMTEtNDUwMC05Mjc2LTgxMWRjZTQyMWIxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQCwwDQYJKoZIhvcNAQELBQADggEBAC1JAQRAOUqAVBmR6APWPNqRt8Kd xrLSbx0TP0KdTXasYQ2Nxrrw5VblNXisDuF0yTaOWG5Z8+Z+EFpFTuO77ELh/uV/ VBwzn7AXcTlKlEPjqZybGzvtAK/B6ST48u6oTCRlzo47JnKOXKjTsfvH7JbrpT29 swZ0U+Eu+A3xwKkuXehAzdS50KVr3x5d3L/G8qNQkQ3/zH/HEtdKvFT8CAOx34ff IFW1uPQk0OG8tH6esJTt6qZICW35VAP2EfJxZGxiGqwrpdkkbO09uMK+X81yg9Xw KkHF6ImSd2Tp0WANeGpIAqeM1Fmm1GlvSL6d36YxSsyCymFY58MAnxVgRoA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:08:24 2025 by rpki-client