$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d500782-fcd6-4783-a187-3224f7a3bd25.roa File: 3d500782-fcd6-4783-a187-3224f7a3bd25.roa (raw, json) Hash identifier: dAN9IPkIvqbqnx04kLEW+vkkXMHemAHu1/EwEM5zbVs= Subject key identifier: 66:B0:28:A3:44:72:02:1A:FB:BA:53:CF:8D:11:07:CC:1B:5A:25:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 065D1C410C76572FD82FB6F82261DF75D5D0C651 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d500782-fcd6-4783-a187-3224f7a3bd25.roa Signing time: Sat 18 Oct 2025 09:33:49 +0000 ROA not before: Sat 18 Oct 2025 09:33:49 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5d:1c:41:0c:76:57:2f:d8:2f:b6:f8:22:61:df:75:d5:d0:c6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:33:49 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=0437a93246dd8dcb257d1c3665a2fbf7f805f8496fe51db33a9961acfa536dab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:f5:18:43:3a:bb:62:4a:95:f1:4e:65:2c: c1:95:d1:51:c9:5f:34:35:a3:d7:f2:d4:77:3f:af: c9:4d:d8:1e:44:5c:c1:3a:8d:2c:72:3b:06:da:9c: b2:94:cd:ce:cd:88:1d:bd:33:b5:e8:4d:2e:7a:e2: 40:04:7e:f6:14:52:56:59:a9:0f:bc:6e:52:57:ab: d6:2b:a9:8d:08:4d:bf:a1:30:73:d4:6e:73:b5:bd: 61:eb:6d:c3:a2:51:67:83:6c:6d:b8:61:68:b1:4d: d0:1f:1b:a9:14:3b:33:e2:38:05:4e:b9:ac:85:67: 9c:8a:26:69:c3:c3:e8:1e:b7:da:6d:7e:9e:bb:9f: 6c:49:dd:c2:1b:86:d3:e5:75:0a:51:9c:cc:01:53: 2b:e1:19:fc:0a:aa:ef:83:d6:93:78:84:5b:38:ff: 8a:a5:c4:eb:fc:2a:c4:28:b5:a9:cf:f5:70:05:93: 47:e1:62:cf:b1:f5:b4:79:f6:de:a9:5a:5e:7a:73: d0:86:3a:84:d5:db:14:b6:44:fc:27:85:e9:ef:d3: 0a:af:6a:9d:c1:c9:89:da:90:ba:7d:92:c1:64:d4: 12:61:a5:bb:95:85:1b:4e:2c:be:0b:4c:f5:f8:3f: 90:97:ac:a2:18:be:1b:76:ca:48:50:f1:96:0b:8b: 37:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B0:28:A3:44:72:02:1A:FB:BA:53:CF:8D:11:07:CC:1B:5A:25:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d500782-fcd6-4783-a187-3224f7a3bd25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.240.0/22 Signature Algorithm: sha256WithRSAEncryption 41:ec:f2:e1:6d:56:be:0b:07:55:4f:af:cd:43:92:56:5e:c2: d7:d5:3b:79:d4:c0:d0:e7:25:b7:97:7d:fd:dd:dd:5b:6f:5e: 4f:af:19:b4:10:ba:c3:cc:ad:16:fd:af:61:ee:b8:d4:4e:59: 0e:b2:dc:b2:98:b2:54:a8:55:9c:47:95:07:8e:f9:91:52:d2: f3:b4:1d:c2:6d:de:11:2d:fb:2d:b0:1c:51:2c:61:55:da:0d: 65:f8:55:49:9f:d4:c8:1a:ba:47:cd:6a:2c:9a:9e:5e:7e:f5: a1:84:24:c6:22:04:4c:44:3e:5f:cd:bb:08:86:54:62:3e:0d: 43:a9:2b:c7:ef:8d:68:83:58:32:d5:95:7d:a0:85:43:27:55: 1e:6b:5a:da:47:d3:aa:37:9c:47:23:e4:c4:41:e5:14:35:74: 4e:8c:86:0c:f7:e9:4d:dd:2e:a3:13:23:65:5f:7c:30:1e:d2: 08:22:44:8a:46:a2:2b:b2:73:5c:f5:48:90:84:3e:b6:35:e6: 1e:27:99:40:92:15:93:a4:22:13:f1:4c:5f:9a:4b:1e:e9:6c: df:49:dc:c8:11:ca:dc:e0:fd:2d:ca:7f:34:45:cd:60:af:95: 42:e5:57:8b:e4:26:46:a5:c8:10:ca:99:45:e0:2f:ba:a8:34: a6:fd:50:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBl0cQQx2Vy/YL7b4ImHfddXQxlEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDkzMzQ5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDM3YTkzMjQ2ZGQ4ZGNiMjU3ZDFjMzY2NWEyZmJmN2Y4 MDVmODQ5NmZlNTFkYjMzYTk5NjFhY2ZhNTM2ZGFiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXjPUYQzq7YkqV8U5lLMGV0VHJXzQ1o9fy1Hc/r8lN2B5E XME6jSxyOwbanLKUzc7NiB29M7XoTS564kAEfvYUUlZZqQ+8blJXq9YrqY0ITb+h MHPUbnO1vWHrbcOiUWeDbG24YWixTdAfG6kUOzPiOAVOuayFZ5yKJmnDw+get9pt fp67n2xJ3cIbhtPldQpRnMwBUyvhGfwKqu+D1pN4hFs4/4qlxOv8KsQotanP9XAF k0fhYs+x9bR59t6pWl56c9CGOoTV2xS2RPwnhenv0wqvap3ByYnakLp9ksFk1BJh pbuVhRtOLL4LTPX4P5CXrKIYvht2ykhQ8ZYLizddAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZrAoo0RyAhr7ulPPjREHzBtaJR8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNkNTAwNzgyLWZjZDYtNDc4My1hMTg3LTMyMjRmN2EzYmQyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS7vAwDQYJKoZIhvcNAQELBQADggEBAEHs8uFtVr4LB1VPr81DklZewtfV O3nUwNDnJbeXff3d3VtvXk+vGbQQusPMrRb9r2HuuNROWQ6y3LKYslSoVZxHlQeO +ZFS0vO0HcJt3hEt+y2wHFEsYVXaDWX4VUmf1MgaukfNaiyanl5+9aGEJMYiBExE Pl/NuwiGVGI+DUOpK8fvjWiDWDLVlX2ghUMnVR5rWtpH06o3nEcj5MRB5RQ1dE6M hgz36U3dLqMTI2VffDAe0ggiRIpGoiuyc1z1SJCEPrY15h4nmUCSFZOkIhPxTF+a Sx7pbN9J3MgRytzg/S3KfzRFzWCvlULlV4vkJkalyBDKmUXgL7qoNKb9UDI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:06:43 2025 by rpki-client