$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b8c8fdf-a1d3-474b-95ff-f97d72b15510.roa File: 3b8c8fdf-a1d3-474b-95ff-f97d72b15510.roa (raw, json) Hash identifier: +h2/UDKDA553v3S2NP290EKLoxYQEYK1mbpx/xJcdJE= Subject key identifier: 6E:AC:C2:21:61:2B:AC:AC:F8:3F:AE:2B:98:55:15:C3:61:D3:87:E5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5001D5DC33B425CCE774B7809943833577A49078 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b8c8fdf-a1d3-474b-95ff-f97d72b15510.roa Signing time: Sat 18 Oct 2025 12:03:37 +0000 ROA not before: Sat 18 Oct 2025 12:03:37 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:01:d5:dc:33:b4:25:cc:e7:74:b7:80:99:43:83:35:77:a4:90:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:03:37 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=30508b749e54fa46a8573e72ff8bbea5808494986ac243500c9971de00e2637c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6b:40:65:ef:45:42:aa:f6:f8:02:3a:d4:7e: e6:64:46:75:74:2d:f5:df:65:c4:7e:b2:5c:bc:0b: 46:db:1f:66:95:ab:ee:95:a3:62:98:a4:a8:b5:c5: 95:7d:9f:38:64:0f:6a:62:48:6d:08:8c:e0:00:76: c2:ad:06:2b:94:7c:a0:bc:7e:ae:97:22:c2:ff:72: 06:9d:d4:d3:83:4c:ef:a3:6d:a0:5b:3b:8a:d5:c8: 96:c9:f0:d7:4d:c6:23:ee:25:bf:ac:74:d9:6d:29: d1:f4:6a:76:ee:06:ee:af:c2:58:bb:c8:2e:2d:a7: fb:23:86:df:08:2b:92:a6:f2:e9:1e:fa:a9:03:74: 65:f1:b4:e8:52:8f:f3:55:d0:84:ef:60:42:ff:13: 7a:54:9b:38:e4:c1:2d:dc:a3:43:9d:70:82:9c:26: 09:43:ad:81:49:3e:94:97:23:61:fc:aa:4d:34:78: 37:68:08:ef:7c:1b:a7:ce:89:35:d6:e4:b9:05:4d: 49:8c:ce:77:16:4a:27:53:f0:cf:a8:b7:60:ab:e0: e8:1b:b7:9c:52:46:28:69:9c:7e:9b:8e:40:88:17: 77:27:3e:d5:42:c4:2f:ea:b1:2d:21:f1:bb:c6:0f: 0c:85:00:80:55:52:00:14:cd:4e:43:5d:d7:c6:e6: 41:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AC:C2:21:61:2B:AC:AC:F8:3F:AE:2B:98:55:15:C3:61:D3:87:E5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b8c8fdf-a1d3-474b-95ff-f97d72b15510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.158.0/23 Signature Algorithm: sha256WithRSAEncryption 46:06:51:c4:d0:8d:bd:53:89:26:44:ef:9c:85:88:d5:50:56: e0:74:79:08:12:d5:fc:ce:61:3f:8c:0e:6f:9d:79:11:50:65: 0b:8e:1f:62:6d:6c:ff:70:c8:b9:3b:1e:6a:48:c9:1b:85:2b: c5:38:9a:f6:5c:44:0b:f1:c1:52:6f:87:6e:81:ac:d3:33:59: 5f:b7:95:36:90:8b:bd:d4:81:d1:e1:fa:f1:8d:f8:b1:f7:47: 52:c9:d9:58:fc:39:51:4e:93:68:dd:9d:fd:45:61:f7:4d:5e: a2:33:ba:e0:de:43:cc:bd:8e:01:ff:ec:d8:80:28:88:21:a6: ce:da:a8:67:22:39:80:b1:20:81:41:06:d2:1a:96:00:6e:cb: 73:e4:12:25:6a:6c:4d:49:33:4c:91:82:1e:5c:ea:00:b9:f1: e6:5f:1a:e7:a4:38:bc:41:ed:65:e6:44:1b:01:fd:9a:b2:5e: 52:e7:63:05:04:dc:d1:e9:1e:b8:17:be:f7:c5:4b:eb:6a:74: 67:c6:47:ee:7d:ff:41:d7:63:c9:43:a1:23:9e:32:d9:23:1b: 1e:1f:dc:61:0d:67:e8:5a:3f:89:bc:ae:e9:97:9f:56:d8:4c: 96:81:35:8d:ee:ec:79:69:a7:15:3c:a4:b8:22:6c:1b:af:87: 4f:1d:b6:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUAHV3DO0JczndLeAmUODNXekkHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTIwMzM3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDUwOGI3NDllNTRmYTQ2YTg1NzNlNzJmZjhiYmVhNTgw ODQ5NDk4NmFjMjQzNTAwYzk5NzFkZTAwZTI2MzdjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLa0Bl70VCqvb4AjrUfuZkRnV0LfXfZcR+sly8C0bbH2aV q+6Vo2KYpKi1xZV9nzhkD2piSG0IjOAAdsKtBiuUfKC8fq6XIsL/cgad1NODTO+j baBbO4rVyJbJ8NdNxiPuJb+sdNltKdH0anbuBu6vwli7yC4tp/sjht8IK5Km8uke +qkDdGXxtOhSj/NV0ITvYEL/E3pUmzjkwS3co0OdcIKcJglDrYFJPpSXI2H8qk00 eDdoCO98G6fOiTXW5LkFTUmMzncWSidT8M+ot2Cr4Ogbt5xSRihpnH6bjkCIF3cn PtVCxC/qsS0h8bvGDwyFAIBVUgAUzU5DXdfG5kGhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbqzCIWErrKz4P64rmFUVw2HTh+UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiOGM4ZmRmLWExZDMtNDc0Yi05NWZmLWY5N2Q3MmIxNTUxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9J4wDQYJKoZIhvcNAQELBQADggEBAEYGUcTQjb1TiSZE75yFiNVQVuB0 eQgS1fzOYT+MDm+deRFQZQuOH2JtbP9wyLk7HmpIyRuFK8U4mvZcRAvxwVJvh26B rNMzWV+3lTaQi73UgdHh+vGN+LH3R1LJ2Vj8OVFOk2jdnf1FYfdNXqIzuuDeQ8y9 jgH/7NiAKIghps7aqGciOYCxIIFBBtIalgBuy3PkEiVqbE1JM0yRgh5c6gC58eZf GuekOLxB7WXmRBsB/ZqyXlLnYwUE3NHpHrgXvvfFS+tqdGfGR+59/0HXY8lDoSOe MtkjGx4f3GENZ+haP4m8rumXn1bYTJaBNY3u7HlppxU8pLgibBuvh08dtlA= -----END CERTIFICATE-----Generated at Mon Oct 20 05:16:33 2025 by rpki-client