$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a30c260-ce1b-417c-a482-16cd8e4d2ddd.roa File: 1a30c260-ce1b-417c-a482-16cd8e4d2ddd.roa (raw, json) Hash identifier: /Pri5wqNksE2KnejEuARcHBzt8ETjiRThIH6Pn1qfds= Subject key identifier: 8C:CA:14:54:94:A8:A3:A4:AD:2C:02:68:A7:E6:20:A7:34:F6:7A:91 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3672BEFC4596A60E65C3C2CA78E7BBF41FD6BAFF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a30c260-ce1b-417c-a482-16cd8e4d2ddd.roa Signing time: Sun 19 Oct 2025 23:50:07 +0000 ROA not before: Sun 19 Oct 2025 23:50:07 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:72:be:fc:45:96:a6:0e:65:c3:c2:ca:78:e7:bb:f4:1f:d6:ba:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 23:50:07 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=a5e4d77b375aa7961a2804a6e9d772893ec90ab593bb21c76bbe2e9b3b74b05d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:cb:b1:9a:c1:3f:8c:13:08:f8:95:0e:30: 26:10:5d:df:fb:50:48:b2:60:07:d9:6f:67:d1:7f: fc:4a:54:91:44:53:f1:6d:0a:0d:66:86:ee:4b:7d: 72:2a:12:0b:be:f0:d1:3c:12:2a:e8:2e:f8:5e:9c: d4:a1:1d:0e:fd:27:7b:84:da:b1:80:3d:63:cc:d6: 5d:60:7f:f0:73:50:c3:c9:91:f8:c8:05:a0:a6:f6: 17:1a:17:3c:f9:3e:cf:c0:ca:69:8a:32:a5:47:5c: 6c:85:20:02:cb:a1:f6:44:5d:3c:25:fe:d5:1f:5c: 40:1f:f1:a9:57:e2:64:5d:70:97:6f:2b:c9:6c:9d: 1f:ac:61:89:64:a6:36:aa:51:d7:f6:71:a8:56:fb: e8:58:fb:30:ee:f7:b0:41:da:af:2b:1f:e8:8c:19: 18:1c:e9:c7:2d:db:cd:ec:58:3c:1b:ce:b5:05:4b: ea:af:1b:fc:1a:3a:76:b5:c3:0d:65:db:1d:5e:71: ec:0d:bf:15:6b:ae:b2:94:de:91:d8:b4:a0:50:72: 06:ab:4e:fc:a2:a8:d1:ab:0b:ec:41:33:72:2d:ef: 39:77:c1:9c:62:dc:80:f1:37:21:39:8d:71:61:c1: fe:a3:42:6f:71:e0:50:7d:f3:d2:f1:ea:12:7f:c7: 19:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CA:14:54:94:A8:A3:A4:AD:2C:02:68:A7:E6:20:A7:34:F6:7A:91 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a30c260-ce1b-417c-a482-16cd8e4d2ddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.136.0/24 Signature Algorithm: sha256WithRSAEncryption a2:45:6b:da:78:db:f9:04:af:1a:62:53:51:73:2f:8e:2c:fa: f4:fa:cd:10:65:ef:d8:08:1d:c4:64:3d:f3:69:c4:1a:44:71: fb:63:ab:e4:d9:9d:1d:40:45:09:7b:27:8c:7b:30:b6:d1:58: 0c:8c:3d:67:d5:56:52:26:70:6e:ea:ed:35:0c:c4:d5:ae:c2: 0d:8a:59:3e:49:af:73:1f:c6:cb:8a:40:b9:c1:cd:4b:71:01: 2f:4d:d4:4e:ad:af:91:5c:f4:94:c6:c2:22:a1:5d:ed:95:04: 1a:a1:f5:c5:cd:66:75:f0:87:0b:47:96:f2:ab:c4:d4:0c:b9: a3:65:c7:f7:20:03:69:d8:fb:a0:89:0e:0a:75:76:ff:9e:84: af:67:d8:d5:a1:e8:90:ea:c4:71:69:d8:36:ff:bd:fd:ba:28: cf:5f:1f:9a:ad:20:86:67:1b:d3:8f:97:79:55:52:14:07:77: d3:61:c4:d1:39:fc:bc:ab:e7:1c:1b:c6:36:46:53:7e:bd:0b: c2:c1:79:81:25:f2:7a:d6:db:50:6d:b8:7c:30:14:10:05:59: 51:9e:5b:fa:f3:01:db:82:21:fc:4b:74:22:3a:a8:6a:cc:36: cf:0f:12:91:22:cf:6e:1b:dc:c8:56:7d:7d:00:2f:0e:5b:24: 66:d1:1b:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNnK+/EWWpg5lw8LKeOe79B/Wuv8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjM1MDA3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNWU0ZDc3YjM3NWFhNzk2MWEyODA0YTZlOWQ3NzI4OTNl YzkwYWI1OTNiYjIxYzc2YmJlMmU5YjNiNzRiMDVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIPMuxmsE/jBMI+JUOMCYQXd/7UEiyYAfZb2fRf/xKVJFE U/FtCg1mhu5LfXIqEgu+8NE8EiroLvhenNShHQ79J3uE2rGAPWPM1l1gf/BzUMPJ kfjIBaCm9hcaFzz5Ps/AymmKMqVHXGyFIALLofZEXTwl/tUfXEAf8alX4mRdcJdv K8lsnR+sYYlkpjaqUdf2cahW++hY+zDu97BB2q8rH+iMGRgc6cct283sWDwbzrUF S+qvG/waOna1ww1l2x1ecewNvxVrrrKU3pHYtKBQcgarTvyiqNGrC+xBM3It7zl3 wZxi3IDxNyE5jXFhwf6jQm9x4FB989Lx6hJ/xxn3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjMoUVJSoo6StLAJop+YgpzT2epEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhMzBjMjYwLWNlMWItNDE3Yy1hNDgyLTE2Y2Q4ZTRkMmRkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQIgwDQYJKoZIhvcNAQELBQADggEBAKJFa9p42/kErxpiU1FzL44s+vT6 zRBl79gIHcRkPfNpxBpEcftjq+TZnR1ARQl7J4x7MLbRWAyMPWfVVlImcG7q7TUM xNWuwg2KWT5Jr3MfxsuKQLnBzUtxAS9N1E6tr5Fc9JTGwiKhXe2VBBqh9cXNZnXw hwtHlvKrxNQMuaNlx/cgA2nY+6CJDgp1dv+ehK9n2NWh6JDqxHFp2Db/vf26KM9f H5qtIIZnG9OPl3lVUhQHd9NhxNE5/Lyr5xwbxjZGU369C8LBeYEl8nrW21BtuHww FBAFWVGeW/rzAduCIfxLdCI6qGrMNs8PEpEiz24b3MhWfX0ALw5bJGbRGyE= -----END CERTIFICATE-----Generated at Mon Oct 20 15:47:14 2025 by rpki-client