$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/428bb2a5-8b3b-4ae9-927b-c78a5b890f69.roa File: 428bb2a5-8b3b-4ae9-927b-c78a5b890f69.roa (raw, json) Hash identifier: xFyQGY0Os4hsAxF65jgVSxJhNa0+kr42AEOfHzw3E4w= Subject key identifier: 68:AB:FC:92:B8:FB:BC:35:9F:97:2C:E2:56:08:E8:EA:67:45:AB:07 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2470C8CF107F996A3E4B3281DE8E02E49AC57286 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/428bb2a5-8b3b-4ae9-927b-c78a5b890f69.roa Signing time: Sun 19 Oct 2025 10:42:39 +0000 ROA not before: Sun 19 Oct 2025 10:42:39 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:70:c8:cf:10:7f:99:6a:3e:4b:32:81:de:8e:02:e4:9a:c5:72:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 10:42:39 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=317f5afed590f76fca85dd0c33d44f7750e5d1caac43486fad39101cbb216e67, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:86:61:b6:49:28:49:79:43:34:e0:74:8e: ee:73:0d:49:53:84:3c:b9:c5:09:41:82:c2:33:93: b8:b0:bb:a2:26:db:6d:62:c0:ad:1c:67:af:27:21: 1d:43:74:ac:65:b6:98:a0:36:7a:b5:ec:ea:8c:b0: 3d:9f:a0:6e:e5:22:a8:a0:3d:e6:8f:2d:9e:11:ae: 73:6d:2f:7b:a1:c4:37:fa:aa:b2:83:e8:33:df:ef: e7:ef:29:73:f8:9b:48:fb:9b:2b:c7:30:51:82:f0: 95:fa:05:c1:1d:ef:ff:48:3c:37:e5:b1:1d:97:d3: da:86:3b:d5:25:99:62:69:86:e7:6f:a3:cb:62:b2: 74:ad:b1:90:27:38:86:18:f1:be:82:2a:7a:c5:24: cb:44:ce:91:3e:84:8f:b2:ee:f7:4c:29:67:0b:9c: e4:3c:51:e3:50:32:81:0f:be:a1:ec:59:6f:7c:56: f9:74:cc:40:8a:4c:46:44:42:d0:ce:b9:0c:4f:39: 8a:fc:b3:e2:de:ed:a3:57:86:df:b6:cf:e3:67:b0: 26:44:01:32:16:33:34:3b:9a:05:5b:a3:1d:d1:43: 78:49:9c:77:09:b1:2c:8e:4f:4c:41:a2:1a:dc:0f: cc:fa:b4:e5:dd:99:17:4b:0e:63:fb:87:5b:53:31: 65:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AB:FC:92:B8:FB:BC:35:9F:97:2C:E2:56:08:E8:EA:67:45:AB:07 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/428bb2a5-8b3b-4ae9-927b-c78a5b890f69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.158.0/23 Signature Algorithm: sha256WithRSAEncryption 97:6b:ee:ce:bc:35:7a:1c:69:65:42:8a:b4:27:65:33:03:b5: 85:53:7b:51:9b:67:fb:38:09:aa:82:50:d8:f1:36:70:fe:61: 51:bc:7c:a4:8b:54:6b:88:d4:78:85:01:f8:7e:06:2c:ec:85: 6b:d5:df:57:22:e0:d7:0f:55:d9:8b:54:ea:5e:5e:c1:fe:92: 28:6c:f3:91:f0:3a:47:b2:03:6b:fe:58:32:f2:fb:2b:56:b2: 80:2c:da:71:47:e0:89:81:5e:cb:e8:a1:b9:55:c4:50:75:26: 74:b5:8f:6d:12:b6:64:01:fa:82:bb:14:aa:50:16:da:3e:d3: 20:bb:a0:7e:2a:18:91:ce:2e:b9:db:81:35:58:4c:52:94:89: a9:2f:58:94:15:c8:98:b2:af:8c:55:ef:6b:c3:97:ae:f9:a3: 18:39:bd:1c:f2:8f:37:09:5e:98:9d:40:73:d1:ad:13:af:1f: 17:79:4f:51:01:b6:9c:9f:ff:a9:f5:ef:13:7d:e7:c0:35:ee: 60:f3:ec:2a:9c:27:2b:a3:2b:e0:08:e2:5f:50:67:37:e2:45: d5:9a:1d:ec:fb:5a:ba:b6:e9:3c:1c:1f:16:d5:2a:d4:75:f4: c9:89:6c:fb:01:85:72:40:75:fe:89:d9:22:b7:2a:71:5e:02: 4f:9a:38:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJHDIzxB/mWo+SzKB3o4C5JrFcoYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTA0MjM5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTdmNWFmZWQ1OTBmNzZmY2E4NWRkMGMzM2Q0NGY3NzUw ZTVkMWNhYWM0MzQ4NmZhZDM5MTAxY2JiMjE2ZTY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpz4ZhtkkoSXlDNOB0ju5zDUlThDy5xQlBgsIzk7iwu6Im 221iwK0cZ68nIR1DdKxltpigNnq17OqMsD2foG7lIqigPeaPLZ4RrnNtL3uhxDf6 qrKD6DPf7+fvKXP4m0j7myvHMFGC8JX6BcEd7/9IPDflsR2X09qGO9UlmWJphudv o8tisnStsZAnOIYY8b6CKnrFJMtEzpE+hI+y7vdMKWcLnOQ8UeNQMoEPvqHsWW98 Vvl0zECKTEZEQtDOuQxPOYr8s+Le7aNXht+2z+NnsCZEATIWMzQ7mgVbox3RQ3hJ nHcJsSyOT0xBohrcD8z6tOXdmRdLDmP7h1tTMWU1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaKv8krj7vDWflyziVgjo6mdFqwcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQyOGJiMmE1LThiM2ItNGFlOS05MjdiLWM3OGE1Yjg5MGY2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQ54wDQYJKoZIhvcNAQELBQADggEBAJdr7s68NXocaWVCirQnZTMDtYVT e1GbZ/s4CaqCUNjxNnD+YVG8fKSLVGuI1HiFAfh+BizshWvV31ci4NcPVdmLVOpe XsH+kihs85HwOkeyA2v+WDLy+ytWsoAs2nFH4ImBXsvooblVxFB1JnS1j20StmQB +oK7FKpQFto+0yC7oH4qGJHOLrnbgTVYTFKUiakvWJQVyJiyr4xV72vDl675oxg5 vRzyjzcJXpidQHPRrROvHxd5T1EBtpyf/6n17xN958A17mDz7CqcJyujK+AI4l9Q ZzfiRdWaHez7Wrq26TwcHxbVKtR19MmJbPsBhXJAdf6J2SK3KnFeAk+aOKI= -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:43 2025 by rpki-client