$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/357721bc-bcf3-4e46-8e72-c938c8e64244.roa File: 357721bc-bcf3-4e46-8e72-c938c8e64244.roa (raw, json) Hash identifier: 5YQEGqq1vcz+BFYLcApraYo64rjd+PGA6G/+ttlwf80= Subject key identifier: A3:8F:5C:4D:79:AD:F8:1A:CF:FD:40:61:D2:B7:82:BA:53:39:37:71 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1BFEB2025C17E53D0A52C7073D5D3F7971C9BDF4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/357721bc-bcf3-4e46-8e72-c938c8e64244.roa Signing time: Sat 18 Oct 2025 08:02:30 +0000 ROA not before: Sat 18 Oct 2025 08:02:30 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fe:b2:02:5c:17:e5:3d:0a:52:c7:07:3d:5d:3f:79:71:c9:bd:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:02:30 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=77fe4206e6f0f1d634dce35214776891919c731629aa0a90f93d4f3f0676bd5a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:ec:d3:e0:96:43:f2:56:81:99:ba:e5:34: 7c:0f:44:00:ac:30:b9:b2:08:40:4d:9e:68:6a:2d: fa:89:06:5c:d2:c8:73:c2:a3:0e:78:54:25:bb:16: 29:e7:bb:82:49:2e:f2:68:34:70:23:95:ec:30:ce: 11:79:20:b1:68:a1:22:22:c8:4e:69:2b:b6:c4:3a: fc:ac:a6:95:3b:8b:55:d2:f7:a8:a9:2c:43:8a:e6: c7:00:16:a4:51:59:83:83:e8:2e:47:4d:90:05:83: 0a:ad:74:17:57:ba:b2:30:72:8f:f2:3a:31:ee:01: a7:22:a9:a9:ba:f5:e4:6e:5e:46:3f:d0:8b:64:63: 4e:81:d7:0b:19:c6:af:80:a2:39:c5:c6:22:0c:e9: 22:24:ed:27:71:94:18:0d:8d:da:0c:76:47:cf:ba: a4:22:ea:d8:5f:d5:90:88:b9:14:c4:a2:44:37:a9: 5a:69:74:45:48:c2:e3:c7:02:ae:41:cb:8d:85:ac: 7f:c9:0d:4a:70:54:1b:f5:ed:3f:57:e8:6c:b2:27: 43:24:78:69:20:23:df:ed:31:4a:fa:8c:9f:f5:d3: 8b:85:f3:bd:d6:5d:f2:02:5a:b5:ef:ef:7b:a2:c5: a7:60:5f:f3:f9:30:cc:d2:9f:45:9a:4e:e9:09:f8: 6a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8F:5C:4D:79:AD:F8:1A:CF:FD:40:61:D2:B7:82:BA:53:39:37:71 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/357721bc-bcf3-4e46-8e72-c938c8e64244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.103.0/24 Signature Algorithm: sha256WithRSAEncryption 68:53:11:ef:53:36:fe:92:12:de:6b:c8:56:68:c1:10:c5:dc: 6b:dd:fe:2e:ec:7d:80:94:b4:52:57:2e:3e:f1:52:12:6e:3b: 30:fa:67:e7:34:e4:8d:29:f6:ae:a5:4b:cb:d5:46:2b:75:0c: cf:b3:54:0b:3c:f5:82:eb:62:fe:c6:3b:a8:ea:01:49:d6:f0: 1a:49:0d:78:21:8e:45:f4:86:80:33:a8:af:ba:a3:da:fe:30: 13:dc:17:04:76:88:6f:76:39:40:13:27:af:f0:d4:0c:99:21: 8b:71:12:22:44:58:75:3e:50:79:b4:d3:e6:23:45:5a:b2:47: b0:5b:5d:9e:bb:8c:2e:7b:06:f6:ad:fc:81:4b:be:30:e3:f0: 7f:2d:e7:7a:03:0b:2e:5b:de:22:2f:96:b0:16:85:be:a6:45: 08:44:bc:48:d4:0c:31:97:e3:53:33:a6:09:85:87:d6:73:43: 2a:b7:01:74:27:29:c7:a0:1f:ad:2f:e1:df:8d:59:1b:1a:44: 36:e8:39:8a:f1:ff:2e:2b:76:0a:c3:bf:77:40:91:f9:1a:80: 77:55:19:2e:e5:24:f5:16:a1:f0:1c:65:b5:60:c3:6b:9d:ba: 2c:5b:25:93:ad:04:fc:be:eb:fd:55:0d:1c:cc:2b:72:1c:de: c7:91:cf:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG/6yAlwX5T0KUscHPV0/eXHJvfQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDgwMjMwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3N2ZlNDIwNmU2ZjBmMWQ2MzRkY2UzNTIxNDc3Njg5MTkx OWM3MzE2MjlhYTBhOTBmOTNkNGYzZjA2NzZiZDVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8vOzT4JZD8laBmbrlNHwPRACsMLmyCEBNnmhqLfqJBlzS yHPCow54VCW7Finnu4JJLvJoNHAjlewwzhF5ILFooSIiyE5pK7bEOvysppU7i1XS 96ipLEOK5scAFqRRWYOD6C5HTZAFgwqtdBdXurIwco/yOjHuAaciqam69eRuXkY/ 0ItkY06B1wsZxq+AojnFxiIM6SIk7SdxlBgNjdoMdkfPuqQi6thf1ZCIuRTEokQ3 qVppdEVIwuPHAq5By42FrH/JDUpwVBv17T9X6GyyJ0MkeGkgI9/tMUr6jJ/104uF 873WXfICWrXv73uixadgX/P5MMzSn0WaTukJ+Gr5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUo49cTXmt+BrP/UBh0reCulM5N3EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1NzcyMWJjLWJjZjMtNGU0Ni04ZTcyLWM5MzhjOGU2NDI0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrGcwDQYJKoZIhvcNAQELBQADggEBAGhTEe9TNv6SEt5ryFZowRDF3Gvd /i7sfYCUtFJXLj7xUhJuOzD6Z+c05I0p9q6lS8vVRit1DM+zVAs89YLrYv7GO6jq AUnW8BpJDXghjkX0hoAzqK+6o9r+MBPcFwR2iG92OUATJ6/w1AyZIYtxEiJEWHU+ UHm00+YjRVqyR7BbXZ67jC57Bvat/IFLvjDj8H8t53oDCy5b3iIvlrAWhb6mRQhE vEjUDDGX41MzpgmFh9ZzQyq3AXQnKcegH60v4d+NWRsaRDboOYrx/y4rdgrDv3dA kfkagHdVGS7lJPUWofAcZbVgw2uduixbJZOtBPy+6/1VDRzMK3Ic3seRzz4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:08:13 2025 by rpki-client