$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35a0c425-e120-4ca6-b6bb-00e0b9db3246.roa File: 35a0c425-e120-4ca6-b6bb-00e0b9db3246.roa (raw, json) Hash identifier: /56QC2Q3zgc/nB+UVTQVWGRdC02cV6uzAJzLDXm1q4Q= Subject key identifier: 6F:0E:8A:F4:F6:73:01:E8:A5:2F:DA:08:A8:F2:3B:89:61:75:D8:5C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2DFB30D67E234522F6F623387C71B44812D9C42D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35a0c425-e120-4ca6-b6bb-00e0b9db3246.roa Signing time: Sat 18 Oct 2025 15:23:50 +0000 ROA not before: Sat 18 Oct 2025 15:23:50 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:fb:30:d6:7e:23:45:22:f6:f6:23:38:7c:71:b4:48:12:d9:c4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 15:23:50 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=e34aad57ce6a4609217e8aebc9d37153b451a3f504a0d9805989b7b77faf4400, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bc:23:b4:af:0f:da:35:6d:21:e7:f4:c3:e5: c2:05:e1:f7:01:14:12:8b:cd:43:15:9d:0d:59:c5: 06:3d:a1:7c:24:bd:0a:ab:d3:e1:50:98:a1:15:bd: 9b:0f:f4:c7:0e:af:c4:ba:27:d4:40:dd:c6:8e:41: cb:23:98:be:d7:65:6f:4a:d5:1b:7a:18:04:d0:24: 3f:ee:c3:17:32:91:8a:0d:4e:1f:b0:9e:1b:55:fa: 73:2d:4f:b4:9b:1f:31:e8:92:93:3f:4e:87:67:24: c9:fa:62:0f:19:c0:3c:86:bf:90:85:a0:cb:54:31: 61:69:cb:ae:d7:88:5e:ff:8c:5f:9c:a2:9e:d0:d9: ff:77:c4:15:57:b5:c5:8f:a2:d1:db:4e:53:93:b0: 71:43:2c:15:67:06:92:df:3a:25:de:4b:51:25:59: d9:93:48:66:a7:e6:b1:34:86:23:23:99:6e:11:a4: 1a:0b:18:99:82:0a:dd:62:34:a1:8b:8a:ac:df:de: fc:9f:4e:8e:70:fd:2b:2b:87:41:f5:be:0a:00:43: bd:6c:51:b9:a5:46:a6:d0:8c:87:d1:37:6a:07:6b: 70:f5:5c:30:31:17:8d:ca:06:41:38:05:76:5a:00: ad:b7:b8:23:dc:f0:c4:0b:06:05:fc:3e:bf:7b:fb: 0a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0E:8A:F4:F6:73:01:E8:A5:2F:DA:08:A8:F2:3B:89:61:75:D8:5C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35a0c425-e120-4ca6-b6bb-00e0b9db3246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.128.0/18 Signature Algorithm: sha256WithRSAEncryption 28:2c:64:11:9e:dd:da:4d:dc:0d:c0:01:de:f5:8a:79:66:9a: e4:82:93:c0:d0:b0:d3:8a:8b:6d:2c:f4:70:19:11:e1:d7:76: 5a:9e:d1:27:43:c8:ba:13:d6:13:61:4e:14:88:45:1f:50:96: 2a:a0:57:bc:9b:a4:fd:68:4f:57:14:ea:94:cb:7a:7b:23:9f: 9e:03:16:a3:e2:d4:37:39:ab:ef:f8:d7:15:3f:d7:8f:15:f2: 11:4e:d5:d7:6e:a2:da:01:2e:b5:fe:cc:ae:61:13:17:90:f7: 30:a9:f5:68:6c:96:e4:07:76:95:e3:24:1e:9f:c5:48:85:46: 3a:dd:87:db:a0:de:0f:51:b9:a1:9e:32:53:e3:d1:95:4b:63: 92:12:a3:19:94:32:fe:c5:6c:68:8c:39:2f:7a:fd:d9:3c:28: 3f:28:f2:7c:14:7b:87:f8:6a:97:35:fb:cd:d3:7a:0a:80:1e: f2:11:09:26:8b:0e:02:9f:92:21:7b:eb:fa:23:a4:b1:64:5b: 6d:b7:10:10:65:94:45:5a:38:3d:9c:8c:85:84:99:bf:3f:76: fe:c6:27:2f:92:f0:a8:3a:37:a0:1d:b4:74:4a:22:b8:a9:e7: a0:94:64:3d:17:bd:fd:3a:ab:2e:e9:aa:e8:51:2f:39:72:ef: 7e:0a:aa:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULfsw1n4jRSL29iM4fHG0SBLZxC0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTUyMzUwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzRhYWQ1N2NlNmE0NjA5MjE3ZThhZWJjOWQzNzE1M2I0 NTFhM2Y1MDRhMGQ5ODA1OTg5YjdiNzdmYWY0NDAwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFvCO0rw/aNW0h5/TD5cIF4fcBFBKLzUMVnQ1ZxQY9oXwk vQqr0+FQmKEVvZsP9McOr8S6J9RA3caOQcsjmL7XZW9K1Rt6GATQJD/uwxcykYoN Th+wnhtV+nMtT7SbHzHokpM/TodnJMn6Yg8ZwDyGv5CFoMtUMWFpy67XiF7/jF+c op7Q2f93xBVXtcWPotHbTlOTsHFDLBVnBpLfOiXeS1ElWdmTSGan5rE0hiMjmW4R pBoLGJmCCt1iNKGLiqzf3vyfTo5w/Ssrh0H1vgoAQ71sUbmlRqbQjIfRN2oHa3D1 XDAxF43KBkE4BXZaAK23uCPc8MQLBgX8Pr97+wq1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbw6K9PZzAeilL9oIqPI7iWF12FwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1YTBjNDI1LWUxMjAtNGNhNi1iNmJiLTAwZTBiOWRiMzI0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYSoIAwDQYJKoZIhvcNAQELBQADggEBACgsZBGe3dpN3A3AAd71inlmmuSC k8DQsNOKi20s9HAZEeHXdlqe0SdDyLoT1hNhThSIRR9QliqgV7ybpP1oT1cU6pTL ensjn54DFqPi1Dc5q+/41xU/148V8hFO1dduotoBLrX+zK5hExeQ9zCp9WhsluQH dpXjJB6fxUiFRjrdh9ug3g9RuaGeMlPj0ZVLY5ISoxmUMv7FbGiMOS96/dk8KD8o 8nwUe4f4apc1+83TegqAHvIRCSaLDgKfkiF76/ojpLFkW223EBBllEVaOD2cjIWE mb8/dv7GJy+S8Kg6N6AdtHRKIrip56CUZD0Xvf06qy7pquhRLzly734KqqI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:06:17 2025 by rpki-client