$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34b02df3-483f-4b61-abb6-269d70961d5f.roa File: 34b02df3-483f-4b61-abb6-269d70961d5f.roa (raw, json) Hash identifier: RFmfDRUlAJPEihAwMBiKcwZqUlAXxjDrD12Am+TX2Nc= Subject key identifier: 90:19:7C:A9:4D:D8:7D:FE:4E:E8:76:98:30:B4:84:62:5F:B4:8F:05 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1FF22BA6125ECA9B72CA10FE318544C8048A3F39 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34b02df3-483f-4b61-abb6-269d70961d5f.roa Signing time: Sat 18 Oct 2025 21:13:42 +0000 ROA not before: Sat 18 Oct 2025 21:13:42 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f2:2b:a6:12:5e:ca:9b:72:ca:10:fe:31:85:44:c8:04:8a:3f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 21:13:42 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=3905b8d51d35d78d32dbcbbb1c1c33a3222119588998a46e84aef8d521e35d6f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7c:57:86:7d:b6:72:8d:40:d0:2f:e0:26:2b: bd:78:28:f6:a7:42:b3:b5:bc:23:4f:14:14:62:a1: 19:d7:c3:b6:a2:c0:50:64:56:50:cf:fa:27:8f:ee: fc:b7:31:aa:ef:e0:c6:e2:71:b8:24:8f:26:77:4a: 9b:5e:2d:0c:8c:64:45:c8:2b:94:48:5b:46:a1:15: dd:a9:7e:a2:38:9a:14:11:55:1c:6e:fa:98:46:0b: 9d:63:6a:07:27:11:78:fc:fe:d8:b7:bf:9d:97:5a: 95:f1:c3:34:db:1f:81:88:5d:05:b7:cc:6e:39:02: ca:97:16:95:7b:da:d6:5c:da:2d:44:6f:ff:12:e6: 24:9b:ee:19:61:8c:b4:0f:10:57:f7:f9:28:c5:9e: e9:ee:6f:b5:74:a7:c0:70:9f:f8:6e:99:b0:80:e7: 61:1f:77:87:6f:03:cb:f9:06:49:37:8f:95:c5:a3: 85:cb:bf:e9:fd:20:e4:d9:23:a4:bd:b5:8e:46:34: 17:92:97:3f:2e:d8:1f:75:ae:76:85:4e:0c:ab:02: c6:a1:59:7a:2c:b3:6f:95:4e:e6:dc:8a:38:d1:89: 48:63:51:91:49:b2:73:f6:66:1b:9c:67:df:40:19: ca:ab:c6:e3:6e:f1:17:87:20:25:9a:23:f9:51:75: 46:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:19:7C:A9:4D:D8:7D:FE:4E:E8:76:98:30:B4:84:62:5F:B4:8F:05 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34b02df3-483f-4b61-abb6-269d70961d5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.41.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:ee:81:15:a1:d5:09:95:fb:66:af:2f:23:1d:15:b6:be:92: d2:40:c4:d8:cd:ad:7f:fc:4a:0f:56:b0:af:15:0c:ec:09:2a: bd:6a:5b:ef:b3:5e:46:08:35:28:9c:2c:03:28:26:ea:ac:40: 6a:9e:c5:f6:5e:fe:48:70:27:d5:24:55:c3:6b:8d:e8:55:f7: a4:40:6b:02:02:a6:13:96:a0:42:ad:9f:7a:9a:a5:46:9d:83: 2a:ce:52:6d:77:c5:ba:3b:55:ca:2a:f0:7a:95:3b:5d:c3:37: 6b:a9:a5:3a:24:21:b2:c1:71:1a:50:0a:0b:7c:9b:4a:4d:d9: 78:98:1a:89:d8:5f:3b:e6:a7:88:d9:b0:7e:dd:95:28:3f:c8: ae:4d:ee:76:20:c4:c6:a7:58:9c:ac:39:a4:94:af:9f:7a:e7: c6:7b:be:91:c9:fc:35:11:9f:5a:54:fe:bd:75:57:39:b9:1c: 41:d5:a0:f5:d3:14:61:06:1f:3b:1e:c6:5b:ed:f8:66:e2:88: 18:8c:a6:39:7e:c7:15:7e:5e:82:97:17:c7:df:89:b2:ee:8e: ad:11:42:c5:4d:4c:72:46:f8:58:e6:37:40:69:99:17:cc:ee: a4:5e:fa:25:d3:7b:06:62:ec:0c:18:cd:fa:48:8f:d8:40:33: 20:26:5b:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH/IrphJeyptyyhD+MYVEyASKPzkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjExMzQyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTA1YjhkNTFkMzVkNzhkMzJkYmNiYmIxYzFjMzNhMzIy MjExOTU4ODk5OGE0NmU4NGFlZjhkNTIxZTM1ZDZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWfFeGfbZyjUDQL+AmK714KPanQrO1vCNPFBRioRnXw7ai wFBkVlDP+ieP7vy3Marv4MbicbgkjyZ3SpteLQyMZEXIK5RIW0ahFd2pfqI4mhQR VRxu+phGC51jagcnEXj8/ti3v52XWpXxwzTbH4GIXQW3zG45AsqXFpV72tZc2i1E b/8S5iSb7hlhjLQPEFf3+SjFnunub7V0p8Bwn/humbCA52Efd4dvA8v5Bkk3j5XF o4XLv+n9IOTZI6S9tY5GNBeSlz8u2B91rnaFTgyrAsahWXoss2+VTubcijjRiUhj UZFJsnP2ZhucZ99AGcqrxuNu8ReHICWaI/lRdUYxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkBl8qU3Yff5O6HaYMLSEYl+0jwUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0YjAyZGYzLTQ4M2YtNGI2MS1hYmI2LTI2OWQ3MDk2MWQ1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrCkwDQYJKoZIhvcNAQELBQADggEBAI/ugRWh1QmV+2avLyMdFba+ktJA xNjNrX/8Sg9WsK8VDOwJKr1qW++zXkYINSicLAMoJuqsQGqexfZe/khwJ9UkVcNr jehV96RAawICphOWoEKtn3qapUadgyrOUm13xbo7Vcoq8HqVO13DN2uppTokIbLB cRpQCgt8m0pN2XiYGonYXzvmp4jZsH7dlSg/yK5N7nYgxManWJysOaSUr59658Z7 vpHJ/DURn1pU/r11Vzm5HEHVoPXTFGEGHzsexlvt+GbiiBiMpjl+xxV+XoKXF8ff ibLujq0RQsVNTHJG+FjmN0BpmRfM7qRe+iXTewZi7AwYzfpIj9hAMyAmW00= -----END CERTIFICATE-----Generated at Mon Oct 20 03:07:50 2025 by rpki-client