$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34763b90-644e-4f90-9cbf-57cbcfef684f.roa File: 34763b90-644e-4f90-9cbf-57cbcfef684f.roa (raw, json) Hash identifier: +ypA807BKlmSCNdLlUV9+APqxlVSodgka2HFVR8NQKY= Subject key identifier: 60:16:F4:FE:83:85:57:F3:CA:81:D9:23:07:4F:43:82:22:33:E8:2B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 584586FF29EDE57EE2E53DDCA909BE6077A17FE4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34763b90-644e-4f90-9cbf-57cbcfef684f.roa Signing time: Sat 18 Oct 2025 23:43:20 +0000 ROA not before: Sat 18 Oct 2025 23:43:20 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:45:86:ff:29:ed:e5:7e:e2:e5:3d:dc:a9:09:be:60:77:a1:7f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 23:43:20 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=17d403f2cad136b4f79f3fb8da1455bbfd940f831f0fc1279fd0058778ba9f81, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e8:69:32:4b:10:89:6c:2b:dd:6d:86:16:29: f7:86:4a:2f:05:6d:9d:68:33:b1:a0:41:bd:8d:1d: 66:84:43:70:56:8f:69:ad:61:66:f2:3e:ad:0c:cc: 37:7d:b6:90:37:c6:7a:12:a4:16:87:dd:79:ec:1e: 5e:96:24:1f:60:16:77:f3:13:e3:d7:4d:1a:2d:f8: 99:ed:20:49:cd:a1:f7:ba:76:26:c9:cf:0e:4c:c1: 85:d0:74:7f:4c:4e:31:76:54:fc:dd:47:69:6b:7d: 88:2a:89:04:c4:b2:b0:06:50:4e:57:c7:e4:96:ff: 20:1a:13:9a:40:49:2f:93:5c:08:ae:10:6e:2c:dd: ce:b8:1f:d2:08:d2:d4:ab:4d:eb:95:44:70:6f:f0: 05:96:db:a3:6a:9a:17:b8:7f:18:12:3e:37:c5:03: 3f:f5:52:ba:3a:6f:e7:ab:54:32:37:9c:6f:03:26: 90:70:38:e3:16:86:00:87:44:fd:9e:a4:c9:49:8e: 4a:d9:f8:96:0c:88:3c:2d:07:af:32:ec:3f:68:cc: 71:bc:4b:8a:2d:f6:2d:9c:30:d1:91:66:11:09:25: ca:f8:5e:68:fb:18:dc:6e:ba:c1:e4:18:2a:4a:a9: 7b:4b:a3:c3:e3:43:48:f3:8a:16:e1:0e:a4:7c:9f: 2b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:16:F4:FE:83:85:57:F3:CA:81:D9:23:07:4F:43:82:22:33:E8:2B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34763b90-644e-4f90-9cbf-57cbcfef684f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.32.0/23 Signature Algorithm: sha256WithRSAEncryption 38:a2:f4:33:03:68:2a:71:fe:23:74:f6:71:7c:91:24:cd:38: 7a:55:ad:72:39:c8:48:52:59:dc:b6:66:88:e1:4f:d8:95:75: 56:10:f5:b0:7c:ff:43:15:12:95:45:80:33:1d:68:b0:22:ca: 85:b6:80:27:48:89:61:35:d1:fb:8d:dc:14:cd:ed:9a:e0:dd: cd:fb:e3:89:04:69:6d:39:66:94:41:f3:89:d5:2b:a7:1c:02: b0:be:a6:b9:77:84:a7:71:c7:b8:08:96:be:30:7b:3f:04:ff: 33:45:f8:d6:09:28:e2:77:49:2a:1d:69:3f:7c:ed:38:7b:4d: fd:fc:ba:19:dc:be:fb:bc:82:4e:75:0a:13:e6:78:1f:36:61: a2:ec:0b:86:12:ee:94:82:a1:19:96:9f:27:df:71:c1:81:d2: ad:be:b2:17:1e:20:93:84:e5:b9:59:04:4e:1e:4e:2f:e2:da: 57:f0:1c:d3:5e:d1:6d:a2:05:64:83:86:1a:4c:90:8c:15:8e: 10:69:55:76:a7:7d:0c:a7:8b:1f:1f:2f:09:26:c7:1b:99:e1: 79:24:78:02:4a:b1:12:03:7a:41:29:8f:1c:47:fe:ff:3b:06: b9:62:64:df:ed:2c:bf:c1:42:66:bd:fa:12:77:cb:d8:2c:61: d8:3a:24:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWEWG/ynt5X7i5T3cqQm+YHehf+QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjM0MzIwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2Q0MDNmMmNhZDEzNmI0Zjc5ZjNmYjhkYTE0NTViYmZk OTQwZjgzMWYwZmMxMjc5ZmQwMDU4Nzc4YmE5ZjgxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCL6GkySxCJbCvdbYYWKfeGSi8FbZ1oM7GgQb2NHWaEQ3BW j2mtYWbyPq0MzDd9tpA3xnoSpBaH3XnsHl6WJB9gFnfzE+PXTRot+JntIEnNofe6 dibJzw5MwYXQdH9MTjF2VPzdR2lrfYgqiQTEsrAGUE5Xx+SW/yAaE5pASS+TXAiu EG4s3c64H9II0tSrTeuVRHBv8AWW26Nqmhe4fxgSPjfFAz/1Uro6b+erVDI3nG8D JpBwOOMWhgCHRP2epMlJjkrZ+JYMiDwtB68y7D9ozHG8S4ot9i2cMNGRZhEJJcr4 Xmj7GNxuusHkGCpKqXtLo8PjQ0jzihbhDqR8nysLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYBb0/oOFV/PKgdkjB09DgiIz6CswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0NzYzYjkwLTY0NGUtNGY5MC05Y2JmLTU3Y2JjZmVmNjg0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESmyAwDQYJKoZIhvcNAQELBQADggEBADii9DMDaCpx/iN09nF8kSTNOHpV rXI5yEhSWdy2ZojhT9iVdVYQ9bB8/0MVEpVFgDMdaLAiyoW2gCdIiWE10fuN3BTN 7Zrg3c3744kEaW05ZpRB84nVK6ccArC+prl3hKdxx7gIlr4wez8E/zNF+NYJKOJ3 SSodaT987Th7Tf38uhncvvu8gk51ChPmeB82YaLsC4YS7pSCoRmWnyffccGB0q2+ shceIJOE5blZBE4eTi/i2lfwHNNe0W2iBWSDhhpMkIwVjhBpVXanfQynix8fLwkm xxuZ4XkkeAJKsRIDekEpjxxH/v87BrliZN/tLL/BQma9+hJ3y9gsYdg6JEE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:39 2025 by rpki-client