$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06a6eb25-0dd5-4f7f-8f2b-f15075019b55.roa File: 06a6eb25-0dd5-4f7f-8f2b-f15075019b55.roa (raw, json) Hash identifier: ksPbgY6rIuYMk7vaJVKxrCK/p1bAVrTwYB74ok7gNSs= Subject key identifier: AF:2A:32:11:F8:2D:98:19:1E:70:73:4A:86:DE:80:93:70:D3:B9:61 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 701695B462CE2289DEA1FEF6473A63B4FB0C82E1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06a6eb25-0dd5-4f7f-8f2b-f15075019b55.roa Signing time: Wed 24 Sep 2025 22:02:28 +0000 ROA not before: Wed 24 Sep 2025 22:02:28 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:16:95:b4:62:ce:22:89:de:a1:fe:f6:47:3a:63:b4:fb:0c:82:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:02:28 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=05405911a93e04b45d2be5238387b84bf10619d2e8d1a2f4b1e1033a3214dc43, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:67:42:94:40:c2:4c:0b:07:cc:51:f6:a0:6a: 45:51:59:9b:16:db:b4:78:ea:8d:94:0e:8f:02:82: ac:6c:c6:66:e7:d7:d3:7e:73:91:d6:69:fa:8a:d0: e5:c6:5b:a6:5b:cc:68:c6:2d:d3:90:51:a5:d5:bb: e6:a4:a0:a2:31:0d:a0:a5:38:b2:56:08:b6:b8:ff: 70:d4:b8:cf:02:dd:17:6e:07:73:2e:5b:f5:1b:dd: c6:5e:d4:a6:aa:c3:ab:0f:bb:77:e9:41:4b:9f:f1: 6d:22:5c:80:9c:74:6f:5c:79:8d:f5:07:66:4c:37: d7:5f:9f:4b:88:7d:71:db:ce:26:bd:64:98:e2:63: 00:29:43:d6:2a:52:de:09:be:2c:b8:f2:d5:e1:e0: 91:a3:43:4e:ca:93:e0:60:28:33:96:1f:ba:bc:6a: bc:b2:58:15:1c:4d:c1:6d:d2:51:4a:bb:fa:4a:ba: fc:df:36:6f:08:14:73:73:78:28:8c:ba:a9:b9:5a: ed:11:75:0d:4c:6d:e9:cb:0c:6b:70:ee:6b:9a:3b: 2f:84:35:2a:9d:79:62:63:4b:45:33:8e:4d:6a:92: d9:22:31:33:b0:af:2c:82:7d:f2:eb:ae:8b:cd:59: e5:e9:24:9b:ca:72:ce:a1:a4:c9:47:2e:b0:86:5d: f4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2A:32:11:F8:2D:98:19:1E:70:73:4A:86:DE:80:93:70:D3:B9:61 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06a6eb25-0dd5-4f7f-8f2b-f15075019b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.186.0/24 Signature Algorithm: sha256WithRSAEncryption 96:50:f1:03:61:84:10:c8:a3:a5:58:a3:45:22:05:cc:e7:e1: 8d:6a:78:85:cf:3b:f6:45:10:cf:ad:45:58:b1:f2:8b:17:8b: be:ab:08:53:63:f3:c2:0b:89:9b:8e:ad:f1:21:39:c7:9a:1b: 9e:3a:2a:68:74:1d:ff:c0:51:6e:fa:7a:bf:5a:31:54:7a:2e: c8:d8:c8:d8:f3:5b:10:cc:5a:a3:d7:b7:9d:a9:5c:5c:f6:26: ea:35:18:0a:f5:e3:e6:49:6d:f2:00:c9:19:7f:10:ef:f3:7c: 44:56:58:f4:3e:c6:fb:ad:25:2a:29:1a:bb:5d:ff:01:34:dd: b4:83:1c:f6:bd:42:48:f0:c7:c6:12:c4:21:c7:81:9b:8c:91: 4b:54:f9:4b:b0:8c:9c:4a:80:58:d6:67:72:5d:ca:99:61:d1: b0:70:8a:b0:90:28:cb:22:d5:e9:2f:f5:94:3c:00:51:d8:ce: 8d:68:30:38:a2:bc:83:37:94:29:44:0d:11:d5:2d:b2:2b:9b: 56:e8:41:46:49:f4:74:1a:d7:ff:1d:a7:81:37:61:df:b4:2f: fc:56:27:81:64:38:e3:6e:07:c9:1d:10:24:28:b5:68:3c:fc: 4d:8a:02:d9:45:77:08:a2:fb:08:ef:e4:24:f9:58:ee:15:cb: 33:1d:5d:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcBaVtGLOIoneof72RzpjtPsMguEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjIwMjI4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTQwNTkxMWE5M2UwNGI0NWQyYmU1MjM4Mzg3Yjg0YmYx MDYxOWQyZThkMWEyZjRiMWUxMDMzYTMyMTRkYzQzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVZ0KUQMJMCwfMUfagakVRWZsW27R46o2UDo8Cgqxsxmbn 19N+c5HWafqK0OXGW6ZbzGjGLdOQUaXVu+akoKIxDaClOLJWCLa4/3DUuM8C3Rdu B3MuW/Ub3cZe1Kaqw6sPu3fpQUuf8W0iXICcdG9ceY31B2ZMN9dfn0uIfXHbzia9 ZJjiYwApQ9YqUt4Jviy48tXh4JGjQ07Kk+BgKDOWH7q8aryyWBUcTcFt0lFKu/pK uvzfNm8IFHNzeCiMuqm5Wu0RdQ1MbenLDGtw7muaOy+ENSqdeWJjS0Uzjk1qktki MTOwryyCffLrrovNWeXpJJvKcs6hpMlHLrCGXfS3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUryoyEfgtmBkecHNKht6Ak3DTuWEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA2YTZlYjI1LTBkZDUtNGY3Zi04ZjJiLWYxNTA3NTAxOWI1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQ7owDQYJKoZIhvcNAQELBQADggEBAJZQ8QNhhBDIo6VYo0UiBczn4Y1q eIXPO/ZFEM+tRVix8osXi76rCFNj88ILiZuOrfEhOceaG546Kmh0Hf/AUW76er9a MVR6LsjYyNjzWxDMWqPXt52pXFz2Juo1GAr14+ZJbfIAyRl/EO/zfERWWPQ+xvut JSopGrtd/wE03bSDHPa9Qkjwx8YSxCHHgZuMkUtU+UuwjJxKgFjWZ3Jdyplh0bBw irCQKMsi1ekv9ZQ8AFHYzo1oMDiivIM3lClEDRHVLbIrm1boQUZJ9HQa1/8dp4E3 Yd+0L/xWJ4FkOONuB8kdECQotWg8/E2KAtlFdwii+wjv5CT5WO4VyzMdXZA= -----END CERTIFICATE-----Generated at Fri Oct 17 22:14:34 2025 by rpki-client