$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f5db4ecc-038a-4f3f-8466-92039b78a05e.roa File: f5db4ecc-038a-4f3f-8466-92039b78a05e.roa (raw, json) Hash identifier: pY0fsSbZz9exoWUKTWZucAzVCt8K5WePD6tnjdhucus= Subject key identifier: 3F:76:F0:23:31:B4:72:9C:53:2F:D9:F3:6C:1D:2D:00:2E:75:CF:67 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 16B0B548837BEAE3912BEBC516AB26040347FA62 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f5db4ecc-038a-4f3f-8466-92039b78a05e.roa Signing time: Sat 18 Oct 2025 23:22:20 +0000 ROA not before: Sat 18 Oct 2025 23:22:20 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b0:b5:48:83:7b:ea:e3:91:2b:eb:c5:16:ab:26:04:03:47:fa:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 23:22:20 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=a12a114aab20fb45c5fc8253e4e05b430f13b707687ff38e4069c332a3c5bea4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:75:80:29:eb:1a:4f:41:64:0b:29:28:97:be: 6c:46:fe:5f:45:36:3e:75:83:16:b5:e7:b8:7b:13: ee:c8:bd:65:7b:55:ae:40:6f:fc:46:ca:bb:f0:1f: 72:dd:a2:e5:07:01:2b:3f:f7:23:77:82:a0:e9:ea: 22:b9:43:e8:fe:a8:ed:b4:0b:df:fd:d9:90:cf:05: 5c:f9:4b:2f:27:b2:18:76:56:df:4a:88:f8:c1:d0: 48:3c:a7:3f:f4:39:b2:b9:57:83:8a:7f:35:66:1c: 0c:7c:4e:a0:24:be:1b:66:53:ff:83:d5:b9:ad:2f: af:58:19:17:92:00:e1:5f:06:dc:85:f2:54:12:06: d0:df:7f:d0:2d:cb:df:a0:46:26:b2:f4:e5:3c:b5: 90:9f:b9:9d:b8:17:33:db:77:b2:b3:f6:dc:d0:1c: 0e:2e:b2:fc:60:42:da:51:ec:79:3a:2e:c9:9e:72: ad:b5:3e:6c:eb:4f:d4:c6:84:0f:14:9f:a8:72:13: ef:b3:30:9b:32:b7:19:d0:89:ff:e2:13:e0:d8:0c: e8:5c:5e:98:64:4e:4a:44:c8:17:3f:42:81:1e:59: 4c:73:97:98:fc:91:b5:82:0a:59:41:e5:e2:f1:bb: 90:32:3e:6c:17:1a:f9:65:a5:1e:26:35:99:51:50: 16:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:76:F0:23:31:B4:72:9C:53:2F:D9:F3:6C:1D:2D:00:2E:75:CF:67 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f5db4ecc-038a-4f3f-8466-92039b78a05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.0.0/23 Signature Algorithm: sha256WithRSAEncryption 50:3f:dc:ce:66:21:68:f4:ce:50:4b:1f:e6:21:e9:da:37:8f: 07:92:3a:ff:53:ab:b6:50:bc:ee:d6:d7:23:c0:76:7f:7f:27: 88:be:f0:5e:29:5a:83:21:b7:40:21:5b:09:cb:bd:89:fa:ea: ad:62:23:b8:23:ca:b1:6a:40:3a:e3:fe:04:f2:eb:28:d3:cf: 7f:fb:62:d3:02:ae:90:57:38:16:fc:43:20:68:8c:79:41:fa: 97:f8:2d:0a:ee:01:b8:e0:b3:ec:69:5b:c9:e7:4c:29:52:54: 19:d1:07:fc:3a:b7:7b:b8:2a:a4:73:71:4f:d8:cd:81:b6:f5: 90:86:09:76:22:85:30:95:c9:0f:42:14:b3:19:d2:47:06:24: 0e:c9:64:8f:0b:4f:6a:c3:60:81:1f:65:25:3f:66:35:90:6a: 49:ca:b6:36:1a:10:26:31:cd:56:ac:cc:b1:a0:1b:d5:42:ee: fd:25:a8:ce:df:47:fb:81:c7:cc:fc:06:3e:29:6e:ea:fa:b5: 76:44:ed:5f:81:ed:23:4d:a9:84:df:98:19:d2:88:0e:6c:09: 77:dc:07:53:0c:c2:7e:20:d4:83:89:4f:ac:20:13:3c:59:6d: ee:c4:48:6a:86:e4:32:d7:a8:3c:b6:bd:45:46:86:e5:b8:f9: cd:ec:c4:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFrC1SIN76uORK+vFFqsmBANH+mIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjMyMjIwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTJhMTE0YWFiMjBmYjQ1YzVmYzgyNTNlNGUwNWI0MzBm MTNiNzA3Njg3ZmYzOGU0MDY5YzMzMmEzYzViZWE0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOdYAp6xpPQWQLKSiXvmxG/l9FNj51gxa157h7E+7IvWV7 Va5Ab/xGyrvwH3LdouUHASs/9yN3gqDp6iK5Q+j+qO20C9/92ZDPBVz5Sy8nshh2 Vt9KiPjB0Eg8pz/0ObK5V4OKfzVmHAx8TqAkvhtmU/+D1bmtL69YGReSAOFfBtyF 8lQSBtDff9Aty9+gRiay9OU8tZCfuZ24FzPbd7Kz9tzQHA4usvxgQtpR7Hk6Lsme cq21PmzrT9TGhA8Un6hyE++zMJsytxnQif/iE+DYDOhcXphkTkpEyBc/QoEeWUxz l5j8kbWCCllB5eLxu5AyPmwXGvllpR4mNZlRUBalAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP3bwIzG0cpxTL9nzbB0tAC51z2cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y1ZGI0ZWNjLTAzOGEtNGYzZi04NDY2LTkyMDM5Yjc4YTA1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoQAwDQYJKoZIhvcNAQELBQADggEBAFA/3M5mIWj0zlBLH+Yh6do3jweS Ov9Tq7ZQvO7W1yPAdn9/J4i+8F4pWoMht0AhWwnLvYn66q1iI7gjyrFqQDrj/gTy 6yjTz3/7YtMCrpBXOBb8QyBojHlB+pf4LQruAbjgs+xpW8nnTClSVBnRB/w6t3u4 KqRzcU/YzYG29ZCGCXYihTCVyQ9CFLMZ0kcGJA7JZI8LT2rDYIEfZSU/ZjWQaknK tjYaECYxzVaszLGgG9VC7v0lqM7fR/uBx8z8Bj4pbur6tXZE7V+B7SNNqYTfmBnS iA5sCXfcB1MMwn4g1IOJT6wgEzxZbe7ESGqG5DLXqDy2vUVGhuW4+c3sxCE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:08 2025 by rpki-client