$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3714c84f-041e-46ee-9ebf-89090ace8157.roa File: 3714c84f-041e-46ee-9ebf-89090ace8157.roa (raw, json) Hash identifier: Nxmn19Qo1OXI3iMQ87v47tUWCfjTwtle/s1dyHmr6c8= Subject key identifier: AA:3B:B8:06:2F:A7:B0:D5:42:5E:B8:F0:0C:5F:8C:D7:AE:D3:5E:E4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 46CAEB1EBA6D120C8C1F0A94D8B6EF67A668C1D9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3714c84f-041e-46ee-9ebf-89090ace8157.roa Signing time: Sat 18 Oct 2025 17:36:22 +0000 ROA not before: Sat 18 Oct 2025 17:36:22 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ca:eb:1e:ba:6d:12:0c:8c:1f:0a:94:d8:b6:ef:67:a6:68:c1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:36:22 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=18d1b728d6ee62096273b19fb3d8df171107e0711ff9fd9253fe9ceec593ea1f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:aa:1c:90:f8:27:d8:82:62:b4:dc:78:25:e6: 30:48:a9:28:23:5f:a8:5b:9e:2b:91:35:ba:df:9a: c7:58:4e:80:1d:20:b8:d1:2b:4b:f0:c5:76:d4:2e: fb:ae:1c:7e:88:0a:95:af:e9:53:15:0d:b3:20:93: 4d:9e:a7:18:b7:2a:79:f9:51:c4:83:ca:95:9e:0f: b5:e4:d5:44:94:a8:7d:ba:6e:00:9e:f2:e9:6d:ed: dc:b4:05:45:bc:6d:0d:dc:28:2c:a6:05:0b:86:d9: bd:42:0c:d1:66:8a:8f:3a:8b:4a:12:da:17:51:34: 52:ee:3c:81:1d:3a:54:45:58:23:11:50:00:f2:16: e4:39:4b:54:fb:e0:6c:8b:f7:d4:d8:0e:2b:04:17: cf:82:6c:20:45:58:67:94:f7:b2:6c:8d:ef:cc:c6: b3:31:17:ad:8c:07:7f:eb:13:3f:71:8f:82:a1:58: 64:ce:b1:5b:02:b3:11:98:53:06:42:a9:48:ce:2e: 72:21:bb:4e:82:7f:37:98:bb:a9:82:c1:18:cf:f4: ae:2c:8a:9c:4b:af:d0:d5:1b:09:5b:a5:93:17:cb: 6b:3c:c8:a7:ef:38:d9:28:f9:09:65:bc:0e:05:3d: 08:94:2d:4d:21:e3:95:16:dd:5c:77:a0:a8:e0:75: 43:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3B:B8:06:2F:A7:B0:D5:42:5E:B8:F0:0C:5F:8C:D7:AE:D3:5E:E4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3714c84f-041e-46ee-9ebf-89090ace8157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.201.0/24 Signature Algorithm: sha256WithRSAEncryption 90:70:df:97:12:6a:6d:59:01:fa:ee:82:f4:58:2f:c2:fd:5e: d4:2f:13:fa:f6:d9:9d:3e:42:ff:89:c4:e1:37:40:2f:2f:e3: 8f:44:58:f6:99:24:88:86:54:2e:b3:4a:10:1e:17:28:93:d0: ee:53:f8:89:58:4c:b5:ae:d2:39:27:bd:cc:a9:55:1e:d1:6a: b1:eb:58:d0:33:3f:5c:67:fe:19:59:85:de:32:a3:fe:8d:81: 1b:e2:41:6f:34:f4:19:a5:16:bc:be:5f:b7:79:cf:d0:33:94: 05:f6:7b:d4:1a:43:8e:74:89:94:da:26:d6:c0:55:7a:43:74: f2:31:f9:57:f2:a1:16:8b:f2:99:1c:dd:38:b6:dc:e1:65:d1: a7:23:b6:81:cb:1b:fd:c3:9f:00:84:87:55:6f:7b:d4:d8:43: 87:72:4c:4f:59:f3:12:4b:31:aa:8f:a8:d1:9f:1a:eb:77:41: b6:f3:3e:db:0b:24:2b:90:15:b8:62:2b:0d:03:54:ae:ed:24: 9e:d8:a0:72:71:bf:9c:b0:49:64:e1:6d:0e:a6:55:ed:b0:48: 53:38:c0:d6:fc:4c:29:f9:a5:77:a3:db:db:5c:33:b2:b3:1d: b7:00:a3:9d:fa:b5:f4:5f:41:ba:57:58:ca:67:5d:2d:56:a4: 5f:f3:3e:d8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURsrrHrptEgyMHwqU2LbvZ6ZowdkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTczNjIyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOGQxYjcyOGQ2ZWU2MjA5NjI3M2IxOWZiM2Q4ZGYxNzEx MDdlMDcxMWZmOWZkOTI1M2ZlOWNlZWM1OTNlYTFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeqhyQ+CfYgmK03Hgl5jBIqSgjX6hbniuRNbrfmsdYToAd ILjRK0vwxXbULvuuHH6ICpWv6VMVDbMgk02epxi3Knn5UcSDypWeD7Xk1USUqH26 bgCe8ult7dy0BUW8bQ3cKCymBQuG2b1CDNFmio86i0oS2hdRNFLuPIEdOlRFWCMR UADyFuQ5S1T74GyL99TYDisEF8+CbCBFWGeU97Jsje/MxrMxF62MB3/rEz9xj4Kh WGTOsVsCsxGYUwZCqUjOLnIhu06CfzeYu6mCwRjP9K4sipxLr9DVGwlbpZMXy2s8 yKfvONko+QllvA4FPQiULU0h45UW3Vx3oKjgdUOhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqju4Bi+nsNVCXrjwDF+M167TXuQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM3MTRjODRmLTA0MWUtNDZlZS05ZWJmLTg5MDkwYWNlODE1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7skwDQYJKoZIhvcNAQELBQADggEBAJBw35cSam1ZAfrugvRYL8L9XtQv E/r22Z0+Qv+JxOE3QC8v449EWPaZJIiGVC6zShAeFyiT0O5T+IlYTLWu0jknvcyp VR7RarHrWNAzP1xn/hlZhd4yo/6NgRviQW809BmlFry+X7d5z9AzlAX2e9QaQ450 iZTaJtbAVXpDdPIx+VfyoRaL8pkc3Ti23OFl0acjtoHLG/3DnwCEh1Vve9TYQ4dy TE9Z8xJLMaqPqNGfGut3QbbzPtsLJCuQFbhiKw0DVK7tJJ7YoHJxv5ywSWThbQ6m Ve2wSFM4wNb8TCn5pXej29tcM7KzHbcAo536tfRfQbpXWMpnXS1WpF/zPtg= -----END CERTIFICATE-----Generated at Mon Oct 20 06:07:17 2025 by rpki-client