$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f5c1775-dfa1-4b56-ab36-69547adc8da0.roa File: 3f5c1775-dfa1-4b56-ab36-69547adc8da0.roa (raw, json) Hash identifier: 2UZWfW3OgGY8NEczgZiLOsnrzcqVH/IbZT3uB+W8HW4= Subject key identifier: 0A:5A:BC:34:3E:4E:C7:94:04:93:FC:75:C6:D0:CD:51:E0:94:39:29 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A4C76AC65DC74C5C5AE5215CC89C45D9158EB4B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f5c1775-dfa1-4b56-ab36-69547adc8da0.roa Signing time: Sun 19 Oct 2025 11:20:11 +0000 ROA not before: Sun 19 Oct 2025 11:20:11 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:4c:76:ac:65:dc:74:c5:c5:ae:52:15:cc:89:c4:5d:91:58:eb:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:20:11 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=40da6932e5dac0d05cd2ac2623939ff66e84c2cf491da7f0c25a2675af9fa353, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:50:f3:d7:06:8c:5b:89:84:0c:9e:99:19: d4:57:fc:c1:ca:c3:c5:a1:ba:b4:2b:81:20:53:81: b2:88:5f:b7:6e:64:6d:9e:20:70:cf:7e:fe:d5:cd: bb:7a:36:a7:23:cf:f7:6e:38:9b:cc:2e:81:2c:0f: de:9b:bb:f0:c8:25:b3:10:55:ea:2d:89:32:a3:20: 13:73:40:89:85:ac:18:07:63:92:85:a1:b6:09:95: 8c:a2:6b:6f:60:00:78:8d:1b:3f:48:da:59:6c:c8: f2:6d:fc:51:27:5a:c3:b6:42:d3:7c:38:1d:45:d9: 88:c8:58:32:81:fa:17:4c:04:dc:a8:e1:4a:67:a2: c4:27:16:c6:3c:b8:78:c1:b0:7a:5b:e3:73:0e:b7: f9:7f:d5:e5:c7:1e:7f:48:72:bd:34:8b:f6:78:0c: 47:19:86:ed:4b:5c:c7:88:09:26:b4:8c:db:86:34: 25:fb:54:9f:29:85:5f:7a:00:46:94:c3:33:df:a1: d7:c9:9a:01:4a:24:cc:03:41:24:4b:af:39:20:b3: 46:68:af:d2:fe:78:ac:bb:37:79:b5:27:95:dd:75: 7a:46:93:b8:64:eb:00:bc:2d:e5:41:60:31:e4:40: 9a:cb:05:82:e8:a0:24:3d:09:2a:0a:5a:92:88:f6: 39:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5A:BC:34:3E:4E:C7:94:04:93:FC:75:C6:D0:CD:51:E0:94:39:29 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f5c1775-dfa1-4b56-ab36-69547adc8da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.16.0/23 Signature Algorithm: sha256WithRSAEncryption 84:43:3c:fb:be:30:0d:76:bb:6b:71:86:df:f1:cc:3c:35:cb: 07:9f:9d:07:ea:c0:04:0b:fe:75:73:eb:fd:69:35:18:09:da: 9d:22:dd:8e:ed:a0:6c:fd:60:4a:f5:67:c5:7b:83:5c:98:12: 4c:de:96:e2:7a:48:d3:e7:d2:89:18:26:25:a8:a5:ff:f6:b6: 14:9c:15:58:62:3d:4a:91:e7:0f:73:e3:01:d2:a6:af:92:9a: 8e:b3:62:78:48:7d:df:fd:86:6a:9f:53:d1:86:44:53:f5:0a: 13:06:54:80:b4:95:44:4e:2c:2e:67:0a:83:c9:f7:16:5f:f0: b7:9f:2e:b2:b7:a0:24:de:5e:36:d7:1f:28:6e:eb:10:39:1e: 82:43:d0:15:c9:3b:22:0b:55:a0:ae:7b:dc:d3:16:eb:3f:c7: 73:02:99:a1:05:da:9b:93:ef:98:83:13:ce:2b:11:37:e4:32: 85:23:b9:4c:34:29:f5:20:cf:06:01:29:b6:3a:77:ac:8c:bb: ef:b5:f3:a3:e6:80:c5:c8:0f:3f:01:f4:f6:64:1a:b1:c1:7f: c2:97:0c:2e:3b:0b:fe:b2:ca:66:e1:e5:20:f2:96:d6:20:eb: e7:c4:ef:d7:1a:5e:fb:81:0a:c6:04:e8:d9:02:66:b0:10:47: 9a:ce:bf:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKkx2rGXcdMXFrlIVzInEXZFY60swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTEyMDExWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGRhNjkzMmU1ZGFjMGQwNWNkMmFjMjYyMzkzOWZmNjZl ODRjMmNmNDkxZGE3ZjBjMjVhMjY3NWFmOWZhMzUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3YFDz1waMW4mEDJ6ZGdRX/MHKw8WhurQrgSBTgbKIX7du ZG2eIHDPfv7Vzbt6Nqcjz/duOJvMLoEsD96bu/DIJbMQVeotiTKjIBNzQImFrBgH Y5KFobYJlYyia29gAHiNGz9I2llsyPJt/FEnWsO2QtN8OB1F2YjIWDKB+hdMBNyo 4UpnosQnFsY8uHjBsHpb43MOt/l/1eXHHn9Icr00i/Z4DEcZhu1LXMeICSa0jNuG NCX7VJ8phV96AEaUwzPfodfJmgFKJMwDQSRLrzkgs0Zor9L+eKy7N3m1J5XddXpG k7hk6wC8LeVBYDHkQJrLBYLooCQ9CSoKWpKI9jlnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUClq8ND5Ox5QEk/x1xtDNUeCUOSkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNmNWMxNzc1LWRmYTEtNGI1Ni1hYjM2LTY5NTQ3YWRjOGRhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQxAwDQYJKoZIhvcNAQELBQADggEBAIRDPPu+MA12u2txht/xzDw1ywef nQfqwAQL/nVz6/1pNRgJ2p0i3Y7toGz9YEr1Z8V7g1yYEkzeluJ6SNPn0okYJiWo pf/2thScFVhiPUqR5w9z4wHSpq+Smo6zYnhIfd/9hmqfU9GGRFP1ChMGVIC0lURO LC5nCoPJ9xZf8LefLrK3oCTeXjbXHyhu6xA5HoJD0BXJOyILVaCue9zTFus/x3MC maEF2puT75iDE84rETfkMoUjuUw0KfUgzwYBKbY6d6yMu++186PmgMXIDz8B9PZk GrHBf8KXDC47C/6yymbh5SDyltYg6+fE79caXvuBCsYE6NkCZrAQR5rOvxU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:51 2025 by rpki-client