$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b192cfb-b696-40e6-8cc0-92e106354a68.roa File: 3b192cfb-b696-40e6-8cc0-92e106354a68.roa (raw, json) Hash identifier: ChwsRuFofa+oXjk824/S6mTpWo5JnwlRqIj5ROCUrZs= Subject key identifier: 05:90:89:CC:16:EB:F4:82:3A:85:E3:D7:CA:76:27:D9:2F:B8:3D:39 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5DE4273986E35203326C29F65CEC37A699B435AA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b192cfb-b696-40e6-8cc0-92e106354a68.roa Signing time: Sat 18 Oct 2025 17:26:53 +0000 ROA not before: Sat 18 Oct 2025 17:26:53 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e4:27:39:86:e3:52:03:32:6c:29:f6:5c:ec:37:a6:99:b4:35:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:26:53 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=b3b9afe7a8769307ede20448880a59bbc33a5ad80e39a3596934d8372b6186ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c0:cd:4d:a3:e2:79:12:52:73:02:b4:aa:05: 40:a7:a6:78:4a:9f:56:b4:80:ef:7e:b1:1e:4b:5f: c3:d5:0b:39:9d:c1:f8:16:52:b0:b9:b9:a9:d6:7e: 82:6e:9f:a0:f2:7d:69:d0:e2:11:a0:b9:44:22:5a: d6:39:06:e9:22:c6:48:32:8f:5e:8e:2e:f4:2c:f0: 3e:d5:0c:ed:9c:76:b7:3d:bb:2a:7c:4a:6f:45:bc: 41:e0:2d:f8:29:86:d3:0a:48:41:5a:fa:36:d3:cd: fa:75:97:57:80:4c:01:fb:ab:24:69:11:6b:16:35: 5e:e3:3e:9c:0f:ed:0f:8f:5d:b2:f9:97:74:0d:38: 23:77:2d:f6:fd:47:51:4c:3f:83:58:60:74:48:d8: 8e:28:63:06:39:37:f7:e4:58:ea:47:4c:16:4c:31: 3c:ea:e7:38:9c:8e:0c:9b:f0:e1:09:7a:fc:3a:5c: 88:a4:8b:ea:0c:69:15:6e:19:cc:2e:d1:79:8a:d9: de:71:3f:b6:df:87:e2:4e:ea:ef:e1:08:a0:57:a1: 4e:67:7f:7c:c5:ac:c8:75:ca:ce:65:78:4c:0f:73: 2a:e6:83:49:83:a9:5e:68:28:15:3b:46:ef:d1:42: 19:b7:d8:b1:7b:58:ac:af:58:d7:47:b0:bc:ea:32: 6c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:90:89:CC:16:EB:F4:82:3A:85:E3:D7:CA:76:27:D9:2F:B8:3D:39 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b192cfb-b696-40e6-8cc0-92e106354a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.196.0/22 Signature Algorithm: sha256WithRSAEncryption 22:30:1c:ad:13:34:da:bb:d1:99:38:5e:60:39:9c:95:2d:7c: 34:07:13:7d:99:a7:1f:c0:3e:3c:56:f0:86:f2:27:42:d4:6a: 47:c8:fc:c9:79:b6:10:cc:93:2d:de:1b:18:fb:7f:3e:40:51: c1:91:70:8c:ad:b1:93:ef:3c:07:d5:70:1d:64:cb:89:3e:66: 7e:c5:e3:84:b2:0d:37:95:73:8e:0a:82:a6:37:ef:f7:b0:fc: 44:a7:bf:46:c7:63:6d:dd:5d:ee:fb:9e:37:74:42:c6:16:26: 59:fe:ef:a7:36:d6:03:d3:9a:7b:9f:f1:3b:71:1f:e1:51:fa: 1c:e8:6d:65:cd:77:f3:fb:0d:21:f3:69:92:ec:14:99:ae:b8: c7:16:ce:26:f2:f4:0d:e2:a1:ad:df:8b:dc:bd:ea:bc:95:e0: 99:60:19:55:89:8f:2d:eb:f5:46:0c:5d:3b:f2:c4:a3:db:9e: 5c:20:51:ef:c1:2a:8e:0a:f0:c7:3e:fb:78:11:19:fd:de:f2: 1d:fe:b5:fa:20:94:55:5d:98:e2:be:5d:d2:eb:b2:ca:b0:9e: 0b:3a:ec:96:5a:c5:e8:12:fa:60:35:3f:d2:33:d0:a3:79:00: 11:fc:00:a5:29:ce:a4:ba:9e:a0:1f:31:fd:2e:4f:98:5a:28: 00:e4:a7:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXeQnOYbjUgMybCn2XOw3ppm0NaowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTcyNjUzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2I5YWZlN2E4NzY5MzA3ZWRlMjA0NDg4ODBhNTliYmMz M2E1YWQ4MGUzOWEzNTk2OTM0ZDgzNzJiNjE4NmNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMwM1No+J5ElJzArSqBUCnpnhKn1a0gO9+sR5LX8PVCzmd wfgWUrC5uanWfoJun6DyfWnQ4hGguUQiWtY5Bukixkgyj16OLvQs8D7VDO2cdrc9 uyp8Sm9FvEHgLfgphtMKSEFa+jbTzfp1l1eATAH7qyRpEWsWNV7jPpwP7Q+PXbL5 l3QNOCN3Lfb9R1FMP4NYYHRI2I4oYwY5N/fkWOpHTBZMMTzq5zicjgyb8OEJevw6 XIiki+oMaRVuGcwu0XmK2d5xP7bfh+JO6u/hCKBXoU5nf3zFrMh1ys5leEwPcyrm g0mDqV5oKBU7Ru/RQhm32LF7WKyvWNdHsLzqMmy3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBZCJzBbr9II6hePXynYn2S+4PTkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiMTkyY2ZiLWI2OTYtNDBlNi04Y2MwLTkyZTEwNjM1NGE2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISmsQwDQYJKoZIhvcNAQELBQADggEBACIwHK0TNNq70Zk4XmA5nJUtfDQH E32Zpx/APjxW8IbyJ0LUakfI/Ml5thDMky3eGxj7fz5AUcGRcIytsZPvPAfVcB1k y4k+Zn7F44SyDTeVc44KgqY37/ew/ESnv0bHY23dXe77njd0QsYWJln+76c21gPT mnuf8TtxH+FR+hzobWXNd/P7DSHzaZLsFJmuuMcWziby9A3ioa3fi9y96ryV4Jlg GVWJjy3r9UYMXTvyxKPbnlwgUe/BKo4K8Mc++3gRGf3e8h3+tfoglFVdmOK+XdLr ssqwngs67JZaxegS+mA1P9Iz0KN5ABH8AKUpzqS6nqAfMf0uT5haKADkp88= -----END CERTIFICATE-----Generated at Mon Oct 20 06:08:46 2025 by rpki-client