$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34e05071-18d5-4c3d-bed1-1fab48f32b0a.roa File: 34e05071-18d5-4c3d-bed1-1fab48f32b0a.roa (raw, json) Hash identifier: j3r5OhjNlSasNxdWzl93v938BOS74CN1MlAOm0BbWWo= Subject key identifier: 34:4B:4D:E2:FA:82:9E:D7:BC:5E:0E:85:E8:A0:E5:5E:08:4F:5C:BF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3BE6606BD14E529D0399EB4077B206C1BE0318D2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34e05071-18d5-4c3d-bed1-1fab48f32b0a.roa Signing time: Sat 18 Oct 2025 08:53:33 +0000 ROA not before: Sat 18 Oct 2025 08:53:33 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e6:60:6b:d1:4e:52:9d:03:99:eb:40:77:b2:06:c1:be:03:18:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:53:33 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=1c33c3b63a49bc4fb5759d2766aec696acc1985dd10e45f4534a8b286d5a2dde, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ad:54:d1:da:23:c1:6a:41:df:37:5c:1c:5b: 5d:ce:e7:50:34:9d:99:de:8f:86:a4:6e:87:96:71: 87:8f:47:64:f1:51:3e:a3:9f:f9:04:a0:87:0c:24: bb:4e:25:8a:2a:f2:cf:3f:f9:c2:ec:f4:f8:85:7a: 45:f8:f8:f7:0d:f8:d7:87:b9:9a:5f:5f:9a:b7:c4: d7:2b:b1:d6:bc:cb:ee:bf:c9:57:6e:72:5c:92:a7: 2c:1a:1e:44:7e:3c:fe:ff:ef:b1:0c:ac:61:d6:d9: 27:fd:7f:39:48:15:7a:e7:df:68:b9:98:cc:37:35: 69:60:53:36:e4:db:9d:1c:f2:1a:ea:3f:2c:94:2f: 7b:56:8d:57:21:9f:29:43:b4:5b:48:f0:41:c3:bc: 6a:ac:b7:2a:d7:ee:b5:21:80:4c:b1:d1:36:19:56: 46:d1:d2:bc:d5:77:da:d8:5d:44:7a:74:f9:fc:52: 7f:ab:0f:2c:5a:0b:59:9e:b9:56:c4:02:da:73:55: 2e:69:36:75:8d:52:ad:3f:0b:ab:35:47:12:29:cb: 02:07:98:7d:5d:45:84:9f:2d:a5:cb:e2:e2:9c:22: b9:3a:ba:8d:2f:e1:df:0a:4d:3b:c6:95:17:b5:54: 92:b7:d9:0a:7c:ab:4f:7f:81:6c:22:33:23:19:fe: 98:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4B:4D:E2:FA:82:9E:D7:BC:5E:0E:85:E8:A0:E5:5E:08:4F:5C:BF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34e05071-18d5-4c3d-bed1-1fab48f32b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.166.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:bf:c5:b6:4d:14:f0:97:eb:60:62:79:4d:f1:e4:06:19:04: 8d:74:3a:83:b6:fb:8c:22:ff:6b:70:1c:fe:da:54:25:5d:d3: be:3a:97:85:5d:d1:03:9e:f2:a9:c2:68:e0:93:f0:be:1f:aa: 41:12:90:02:83:9e:e6:44:16:e5:24:9f:de:a1:c5:0e:0c:9d: 30:de:65:f3:e2:fa:c8:58:14:c9:0f:17:d9:ad:6b:c6:93:1d: 4e:77:e4:c8:7c:7b:c4:50:2b:56:15:0b:86:c1:2e:0d:4c:b6: 8a:12:ef:4b:b2:15:9d:d8:c6:79:d9:d3:30:4d:b7:72:64:b2: e6:ca:11:06:f1:3d:13:54:69:a4:25:86:ee:9d:8d:e9:06:c1: 25:9c:26:82:33:aa:c7:77:5b:3f:9a:2a:d9:9c:24:a6:97:fe: d2:cd:91:0c:32:ce:e1:20:d1:b3:00:59:a9:c6:4c:72:92:3c: fc:81:0a:9d:26:51:a5:7c:3a:4d:99:b6:64:70:9f:41:cf:c2: 54:c0:5c:54:37:06:5d:5b:07:d6:26:2e:ae:1f:1f:b4:39:9f: 82:e9:29:94:a5:4b:32:91:83:cd:00:01:10:4b:e7:c4:41:88: b9:0c:2d:28:ec:05:2a:b0:5c:37:eb:37:df:bc:da:c8:63:fa: f4:bd:92:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO+Zga9FOUp0DmetAd7IGwb4DGNIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDg1MzMzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzMzYzNiNjNhNDliYzRmYjU3NTlkMjc2NmFlYzY5NmFj YzE5ODVkZDEwZTQ1ZjQ1MzRhOGIyODZkNWEyZGRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSrVTR2iPBakHfN1wcW13O51A0nZnej4akboeWcYePR2Tx UT6jn/kEoIcMJLtOJYoq8s8/+cLs9PiFekX4+PcN+NeHuZpfX5q3xNcrsda8y+6/ yVduclySpywaHkR+PP7/77EMrGHW2Sf9fzlIFXrn32i5mMw3NWlgUzbk250c8hrq PyyUL3tWjVchnylDtFtI8EHDvGqstyrX7rUhgEyx0TYZVkbR0rzVd9rYXUR6dPn8 Un+rDyxaC1meuVbEAtpzVS5pNnWNUq0/C6s1RxIpywIHmH1dRYSfLaXL4uKcIrk6 uo0v4d8KTTvGlRe1VJK32Qp8q09/gWwiMyMZ/pitAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNEtN4vqCnte8Xg6F6KDlXghPXL8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0ZTA1MDcxLTE4ZDUtNGMzZC1iZWQxLTFmYWI0OGYzMmIwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm6YwDQYJKoZIhvcNAQELBQADggEBAEq/xbZNFPCX62BieU3x5AYZBI10 OoO2+4wi/2twHP7aVCVd0746l4Vd0QOe8qnCaOCT8L4fqkESkAKDnuZEFuUkn96h xQ4MnTDeZfPi+shYFMkPF9mta8aTHU535Mh8e8RQK1YVC4bBLg1MtooS70uyFZ3Y xnnZ0zBNt3JksubKEQbxPRNUaaQlhu6djekGwSWcJoIzqsd3Wz+aKtmcJKaX/tLN kQwyzuEg0bMAWanGTHKSPPyBCp0mUaV8Ok2ZtmRwn0HPwlTAXFQ3Bl1bB9YmLq4f H7Q5n4LpKZSlSzKRg80AARBL58RBiLkMLSjsBSqwXDfrN9+82shj+vS9kgI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:30:08 2025 by rpki-client