$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa5894e5-0cc2-4e8b-81bb-64ce451b842b.roa File: fa5894e5-0cc2-4e8b-81bb-64ce451b842b.roa (raw, json) Hash identifier: dqGc+pCHheJXJrYogUG7lKZnqJ9fY6SmUSpwME1yVl8= Subject key identifier: D4:D4:1D:7D:EF:70:FE:F0:7E:ED:7B:7B:9A:5A:FB:DC:FC:6E:F0:31 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 740D63524DA3FC70176A333A10C39634E408169D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa5894e5-0cc2-4e8b-81bb-64ce451b842b.roa Signing time: Sun 19 Oct 2025 09:41:22 +0000 ROA not before: Sun 19 Oct 2025 09:41:22 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0d:63:52:4d:a3:fc:70:17:6a:33:3a:10:c3:96:34:e4:08:16:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 09:41:22 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=9e1a4d92b9f54bbccbe33c3c3a358642e1d13b26415540a65cce641450cf152d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a9:95:22:8f:f7:01:d7:25:64:75:28:9f:67: 52:b6:52:3b:ed:88:a5:a4:80:9a:46:00:f6:41:ec: 19:0b:ca:2d:88:29:96:92:a8:11:db:fd:b5:4d:38: e3:09:34:ec:48:c5:74:18:24:39:95:98:e7:f6:7a: d0:47:13:12:b3:cf:44:26:28:0e:8b:e3:74:8a:88: f0:00:ca:1d:f5:08:c4:44:60:6d:73:1a:a5:96:b2: 22:d6:3d:a1:1e:e2:29:24:9e:c1:b9:f1:f4:df:4b: cb:72:39:42:87:8b:3b:c8:a5:ee:d3:51:78:82:78: 64:5f:c9:7e:17:ea:f0:d8:54:96:f7:ba:55:25:ac: 49:b4:28:2f:b9:f7:8f:e9:41:59:30:ca:e3:88:92: e7:a4:ea:1e:10:81:74:c5:78:d0:2f:ea:ad:fc:cd: b7:9b:e4:65:e6:94:f7:f4:80:e5:08:3d:48:ca:ac: 1b:a1:92:b1:9c:16:26:e9:86:78:d2:c6:31:41:c3: 01:93:4b:d2:1f:ab:c1:2e:f2:84:3e:bd:1c:ac:f2: d7:3c:1e:78:0b:cc:41:65:ee:9d:16:1f:77:00:8f: 58:e5:a6:73:d0:02:1f:03:d8:46:dc:52:b5:ae:40: 38:9b:f6:38:6c:32:d3:34:2c:e1:a7:1f:28:62:2b: cf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D4:1D:7D:EF:70:FE:F0:7E:ED:7B:7B:9A:5A:FB:DC:FC:6E:F0:31 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa5894e5-0cc2-4e8b-81bb-64ce451b842b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.160.0/24 Signature Algorithm: sha256WithRSAEncryption 74:62:27:df:11:dd:f1:2f:c9:15:9e:64:c8:1e:86:38:da:ba: 1c:2d:da:d9:48:74:da:ca:5e:72:5b:84:6e:28:a6:2f:b8:c6: f7:9a:5d:c6:a0:0c:00:de:91:ee:ad:0c:e9:7b:4f:85:b9:dc: 34:9b:64:2b:c7:72:ad:7f:4c:8c:61:ef:f6:bd:ae:ec:22:bf: 79:f7:8d:18:94:70:85:19:9c:c6:dd:10:13:7c:6c:c4:ef:03: 58:4b:56:6f:8a:1e:05:85:2e:67:6d:07:47:8d:1c:bb:70:cd: 3f:71:ab:7f:7c:ec:f7:a8:bf:46:db:1d:fd:0b:61:b0:f4:5c: e4:a1:4b:20:39:08:f9:11:3c:c4:85:4b:a9:2c:ea:70:c0:65: 11:04:2b:3e:f1:11:fe:6f:3f:0e:a3:9a:dc:f3:bf:2e:a3:64: 4f:22:3b:51:90:ed:ef:d4:f3:db:3f:d8:44:29:0d:53:2a:32: 6c:4b:11:d8:6e:86:36:c4:6a:c2:7b:0d:a0:1c:42:0e:c3:2f: 13:a4:2e:da:ff:bc:bc:6e:74:1a:b3:ca:32:c6:4b:84:b7:7b: 59:8f:e0:cf:0e:35:6d:6b:61:b4:71:03:d1:59:46:d5:41:3a: f2:36:47:f6:2e:e9:42:5d:bd:de:cb:c2:20:af:3d:11:86:45: 9b:e0:a3:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdA1jUk2j/HAXajM6EMOWNOQIFp0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDk0MTIyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTFhNGQ5MmI5ZjU0YmJjY2JlMzNjM2MzYTM1ODY0MmUx ZDEzYjI2NDE1NTQwYTY1Y2NlNjQxNDUwY2YxNTJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxqZUij/cB1yVkdSifZ1K2UjvtiKWkgJpGAPZB7BkLyi2I KZaSqBHb/bVNOOMJNOxIxXQYJDmVmOf2etBHExKzz0QmKA6L43SKiPAAyh31CMRE YG1zGqWWsiLWPaEe4ikknsG58fTfS8tyOUKHizvIpe7TUXiCeGRfyX4X6vDYVJb3 ulUlrEm0KC+594/pQVkwyuOIkuek6h4QgXTFeNAv6q38zbeb5GXmlPf0gOUIPUjK rBuhkrGcFibphnjSxjFBwwGTS9Ifq8Eu8oQ+vRys8tc8HngLzEFl7p0WH3cAj1jl pnPQAh8D2EbcUrWuQDib9jhsMtM0LOGnHyhiK8+nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1NQdfe9w/vB+7Xt7mlr73Pxu8DEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZhNTg5NGU1LTBjYzItNGU4Yi04MWJiLTY0Y2U0NTFiODQyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQKAwDQYJKoZIhvcNAQELBQADggEBAHRiJ98R3fEvyRWeZMgehjjauhwt 2tlIdNrKXnJbhG4opi+4xveaXcagDADeke6tDOl7T4W53DSbZCvHcq1/TIxh7/a9 ruwiv3n3jRiUcIUZnMbdEBN8bMTvA1hLVm+KHgWFLmdtB0eNHLtwzT9xq3987Peo v0bbHf0LYbD0XOShSyA5CPkRPMSFS6ks6nDAZREEKz7xEf5vPw6jmtzzvy6jZE8i O1GQ7e/U89s/2EQpDVMqMmxLEdhuhjbEasJ7DaAcQg7DLxOkLtr/vLxudBqzyjLG S4S3e1mP4M8ONW1rYbRxA9FZRtVBOvI2R/Yu6UJdvd7LwiCvPRGGRZvgo/c= -----END CERTIFICATE-----Generated at Mon Oct 20 13:17:21 2025 by rpki-client