$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3722b002-77b1-40f0-bd64-12289ff3cfaf.roa File: 3722b002-77b1-40f0-bd64-12289ff3cfaf.roa (raw, json) Hash identifier: NgURrJ/8b/PqlJRKk9xDrebUo52lG5X+2+mbt+hwy+o= Subject key identifier: A1:D7:E7:51:DE:15:60:C6:C0:71:35:64:C6:D6:F8:6A:CC:23:4E:B8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 748A4251A9C8E98084AE267939104F3BDA2315EE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3722b002-77b1-40f0-bd64-12289ff3cfaf.roa Signing time: Sat 18 Oct 2025 13:20:08 +0000 ROA not before: Sat 18 Oct 2025 13:20:08 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8a:42:51:a9:c8:e9:80:84:ae:26:79:39:10:4f:3b:da:23:15:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 13:20:08 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=35718a38f672325a77514809b1045935c99bef515e3a24d566a6fffffd42ce2c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:11:cc:ac:9c:09:32:39:db:92:9d:6d:c3: a8:57:39:31:67:b5:f5:62:42:9a:4c:2f:ab:08:90: bb:a1:fd:aa:44:95:6b:a3:8b:ea:2f:6f:bd:21:e6: 22:ac:68:27:ea:e5:e7:9c:15:55:89:e1:3a:c5:a0: c1:d7:77:19:99:95:32:8b:d9:52:42:13:be:95:1a: 38:3b:f8:bf:d4:bd:94:d6:61:8a:9c:15:a4:88:66: 82:46:15:79:45:af:d3:5c:f8:bc:31:ef:60:f7:bc: 06:84:c1:e4:24:aa:89:5c:ea:41:4b:ca:e7:f0:e6: 05:5a:46:d0:6e:e8:53:ac:7c:32:4d:0f:0e:4e:db: ce:cf:44:bc:fb:d2:79:0e:0f:7e:c0:8b:6d:74:26: 59:0e:9f:06:ac:3e:e8:23:2f:93:c0:10:ee:73:a8: b1:14:4f:5b:cf:8e:03:d0:94:b2:27:f5:b9:80:03: 0a:8c:61:67:e6:85:ec:0b:40:42:28:e7:ff:af:00: 27:da:f9:a7:78:25:25:48:77:f0:2e:d7:48:eb:a0: 25:a9:63:7e:07:4b:e8:0d:28:a6:6d:3b:19:f7:fb: a4:d7:e2:97:92:30:df:fa:89:4e:de:ad:22:e3:f0: 37:72:71:80:cb:55:b7:79:e9:ba:dd:36:6c:e0:b0: 59:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D7:E7:51:DE:15:60:C6:C0:71:35:64:C6:D6:F8:6A:CC:23:4E:B8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3722b002-77b1-40f0-bd64-12289ff3cfaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.136.0/22 Signature Algorithm: sha256WithRSAEncryption 63:de:d8:2a:37:2d:48:cc:77:c9:c2:69:4c:da:8c:b4:af:fc: e3:80:29:eb:45:bc:49:1b:fe:e6:a4:1e:83:4a:ac:60:e3:44: 0a:ba:67:3e:32:4b:ba:b0:8d:1e:bb:26:75:0f:df:23:18:bd: f0:66:a0:79:3f:cf:e8:d3:cd:24:66:67:5b:9c:5e:0c:1c:17: 46:cc:f3:1c:03:cd:f4:79:00:a9:98:4f:1f:5f:ad:17:de:d1: c7:7e:c5:cf:b6:29:2a:5e:96:94:7e:c2:61:23:79:b7:c9:be: 72:33:79:53:38:45:f4:ba:21:32:95:38:5d:73:9e:1d:dd:50: eb:a1:50:aa:64:41:e8:e8:3c:44:b9:8b:26:52:7d:a3:98:e2: 65:09:a4:26:ad:22:df:e8:5c:63:d3:c7:a4:02:dc:1b:2f:aa: 7b:7c:7e:19:57:00:b7:50:a3:ba:49:f6:64:8c:2e:5d:f5:b8: 42:e5:69:b3:9c:6c:99:0f:1e:85:a6:2b:1c:38:1c:33:12:f3: d5:e9:7b:78:de:f5:ed:82:c5:7a:64:b2:a2:2a:93:ce:4d:a4: da:65:d7:84:d9:89:98:34:cf:0e:3e:7f:28:55:15:9c:59:1f: 5b:6e:13:b0:61:70:f1:cf:b6:7f:68:43:86:ee:24:b1:95:1a: 20:2a:81:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdIpCUanI6YCEriZ5ORBPO9ojFe4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTMyMDA4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTcxOGEzOGY2NzIzMjVhNzc1MTQ4MDliMTA0NTkzNWM5 OWJlZjUxNWUzYTI0ZDU2NmE2ZmZmZmZkNDJjZTJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChpBHMrJwJMjnbkp1tw6hXOTFntfViQppML6sIkLuh/apE lWuji+ovb70h5iKsaCfq5eecFVWJ4TrFoMHXdxmZlTKL2VJCE76VGjg7+L/UvZTW YYqcFaSIZoJGFXlFr9Nc+Lwx72D3vAaEweQkqolc6kFLyufw5gVaRtBu6FOsfDJN Dw5O287PRLz70nkOD37Ai210JlkOnwasPugjL5PAEO5zqLEUT1vPjgPQlLIn9bmA AwqMYWfmhewLQEIo5/+vACfa+ad4JSVId/Au10jroCWpY34HS+gNKKZtOxn3+6TX 4peSMN/6iU7erSLj8DdycYDLVbd56brdNmzgsFlNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUodfnUd4VYMbAcTVkxtb4aswjTrgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM3MjJiMDAyLTc3YjEtNDBmMC1iZDY0LTEyMjg5ZmYzY2ZhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISm4gwDQYJKoZIhvcNAQELBQADggEBAGPe2Co3LUjMd8nCaUzajLSv/OOA KetFvEkb/uakHoNKrGDjRAq6Zz4yS7qwjR67JnUP3yMYvfBmoHk/z+jTzSRmZ1uc XgwcF0bM8xwDzfR5AKmYTx9frRfe0cd+xc+2KSpelpR+wmEjebfJvnIzeVM4RfS6 ITKVOF1znh3dUOuhUKpkQejoPES5iyZSfaOY4mUJpCatIt/oXGPTx6QC3Bsvqnt8 fhlXALdQo7pJ9mSMLl31uELlabOcbJkPHoWmKxw4HDMS89Xpe3je9e2CxXpksqIq k85NpNpl14TZiZg0zw4+fyhVFZxZH1tuE7BhcPHPtn9oQ4buJLGVGiAqgQk= -----END CERTIFICATE-----Generated at Mon Oct 20 06:12:13 2025 by rpki-client