$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28b28ab1-dca5-4e14-9825-dce2a7442f14.roa File: 28b28ab1-dca5-4e14-9825-dce2a7442f14.roa (raw, json) Hash identifier: b837LJJuxJw9vI5uNemV9nJJExRHJQc7nqSO8XJzAA0= Subject key identifier: 38:FF:D4:B6:88:29:DD:08:95:83:71:CD:27:BC:1A:13:B7:A7:6A:0F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4208C8CCC0F946392072AD0DD66FEC15647720BB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28b28ab1-dca5-4e14-9825-dce2a7442f14.roa Signing time: Sun 19 Oct 2025 04:41:14 +0000 ROA not before: Sun 19 Oct 2025 04:41:14 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:08:c8:cc:c0:f9:46:39:20:72:ad:0d:d6:6f:ec:15:64:77:20:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 04:41:14 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=6efb01c2d94b2c25a91cbce0b06009d272e3f572ae3e803eca5e744c0d04b7a1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:98:fc:ce:b3:3a:99:59:74:80:b4:43:99: 7d:ff:b3:d1:a2:fc:54:1f:a2:61:87:ed:ca:fe:7d: 29:b7:59:16:93:fe:46:67:02:b2:b6:c2:04:a1:95: f8:7f:82:01:d6:06:d1:17:12:4f:8d:f3:12:e4:fa: 0a:70:6e:2c:13:3b:a1:40:d1:0f:ab:f0:1c:ed:0e: d1:ee:bd:60:41:ad:43:d8:c2:5a:eb:d5:75:19:2e: 6c:0a:11:e5:59:0a:ab:01:44:f5:30:30:dd:8d:60: 3d:4a:e0:3d:0f:fe:36:f6:13:37:b3:ff:9e:03:83: 91:fe:ce:93:0d:33:9f:b0:cb:0a:43:8d:8b:6a:04: 70:a7:c5:01:f8:72:86:a0:4e:5d:e1:2c:fa:22:d3: a8:61:00:fb:aa:20:b1:0c:62:5d:4d:19:27:45:8f: 3d:02:e3:46:42:f7:8d:e3:34:16:06:1f:6a:a3:8b: ef:73:b1:29:3f:20:67:82:ad:53:17:38:e2:56:67: c2:8d:34:73:f2:2b:96:af:aa:35:63:31:d4:5b:8d: 54:8e:6b:93:1f:ab:4d:04:f5:4a:4b:0d:e5:28:e1: ee:98:bb:3a:9b:58:f8:d7:30:7e:5b:6f:b8:a9:f8: 14:4f:05:f1:14:10:7b:ce:27:d4:4b:e6:8f:c6:a6: 11:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FF:D4:B6:88:29:DD:08:95:83:71:CD:27:BC:1A:13:B7:A7:6A:0F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28b28ab1-dca5-4e14-9825-dce2a7442f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.186.0/24 Signature Algorithm: sha256WithRSAEncryption 22:e7:c9:36:6c:3c:d0:28:f6:03:fa:c2:52:0e:ac:62:c4:30: ac:6a:82:c8:41:7e:1f:7f:f7:28:b3:d6:97:34:40:03:21:1d: 90:13:69:b5:1f:c5:bb:92:20:16:20:ef:ff:0a:bf:47:61:69: f4:5e:46:e1:39:2b:db:56:b5:93:08:57:19:4e:a5:39:05:8b: 8b:20:f6:c2:f9:b7:48:84:ab:61:dd:1c:60:5e:8e:9a:ad:ce: 23:ad:9d:9c:2a:06:28:0e:4a:8d:96:74:67:88:e8:9a:b5:a1: b9:cd:99:36:95:90:9a:65:e7:73:59:6a:a0:b2:42:c6:be:1f: bf:fe:8d:41:59:02:76:a1:ea:17:a4:d7:98:0e:59:8e:a4:08: c5:a6:ec:c2:b1:61:8a:10:92:e9:bd:a4:38:ab:5a:21:68:b3: a9:a6:96:a6:48:51:cd:ab:2b:aa:6f:1b:f7:de:51:dc:f5:0a: d5:fc:3a:c6:0f:4b:06:98:42:00:61:89:a6:f1:42:df:c0:0a: 02:ed:9a:53:02:96:43:09:2e:67:4f:23:7c:98:c2:4f:96:26: 6a:66:49:99:c1:0b:83:00:e9:70:34:51:dd:4b:65:0b:d5:3b: 49:86:d3:41:3c:ab:1b:c1:b6:32:2f:38:e4:76:3a:03:c5:8a: 71:4f:da:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQgjIzMD5Rjkgcq0N1m/sFWR3ILswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDQ0MTE0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZWZiMDFjMmQ5NGIyYzI1YTkxY2JjZTBiMDYwMDlkMjcy ZTNmNTcyYWUzZTgwM2VjYTVlNzQ0YzBkMDRiN2ExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvG5j8zrM6mVl0gLRDmX3/s9Gi/FQfomGH7cr+fSm3WRaT /kZnArK2wgShlfh/ggHWBtEXEk+N8xLk+gpwbiwTO6FA0Q+r8BztDtHuvWBBrUPY wlrr1XUZLmwKEeVZCqsBRPUwMN2NYD1K4D0P/jb2Ezez/54Dg5H+zpMNM5+wywpD jYtqBHCnxQH4coagTl3hLPoi06hhAPuqILEMYl1NGSdFjz0C40ZC943jNBYGH2qj i+9zsSk/IGeCrVMXOOJWZ8KNNHPyK5avqjVjMdRbjVSOa5Mfq00E9UpLDeUo4e6Y uzqbWPjXMH5bb7ip+BRPBfEUEHvOJ9RL5o/GphH1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOP/Utogp3QiVg3HNJ7waE7enag8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI4YjI4YWIxLWRjYTUtNGUxNC05ODI1LWRjZTJhNzQ0MmYxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASobowDQYJKoZIhvcNAQELBQADggEBACLnyTZsPNAo9gP6wlIOrGLEMKxq gshBfh9/9yiz1pc0QAMhHZATabUfxbuSIBYg7/8Kv0dhafReRuE5K9tWtZMIVxlO pTkFi4sg9sL5t0iEq2HdHGBejpqtziOtnZwqBigOSo2WdGeI6Jq1obnNmTaVkJpl 53NZaqCyQsa+H7/+jUFZAnah6hek15gOWY6kCMWm7MKxYYoQkum9pDirWiFos6mm lqZIUc2rK6pvG/feUdz1CtX8OsYPSwaYQgBhiabxQt/ACgLtmlMClkMJLmdPI3yY wk+WJmpmSZnBC4MA6XA0Ud1LZQvVO0mG00E8qxvBtjIvOOR2OgPFinFP2q4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:40:33 2025 by rpki-client