$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5dc2ed3b-8e9c-49e2-9086-149c8e4127ba.roa File: 5dc2ed3b-8e9c-49e2-9086-149c8e4127ba.roa (raw, json) Hash identifier: fS5pmQFLXkDFT0FidQMosYuq0820G2tDEx2o0bOGzhg= Subject key identifier: 12:FE:F8:98:15:1D:0F:6D:94:6E:1A:5C:A8:34:86:6E:D6:AC:D8:26 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3B46F62CD95D4FAAD2D399D9B8E125B12413DB7F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5dc2ed3b-8e9c-49e2-9086-149c8e4127ba.roa Signing time: Sat 18 Oct 2025 19:00:10 +0000 ROA not before: Sat 18 Oct 2025 19:00:10 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:46:f6:2c:d9:5d:4f:aa:d2:d3:99:d9:b8:e1:25:b1:24:13:db:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:00:10 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=4b9d905ae72c43990b4cc828fe42cfaf95af1ecee929f5fad9d6a417a8336336, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:4e:9a:15:f3:07:d2:1a:f9:fe:71:6a:e6: f9:04:1d:12:7b:b5:97:34:c4:95:57:f1:83:8a:4f: ef:1d:a5:c3:95:47:12:89:d6:15:b5:b2:de:f0:0e: 05:6f:2e:a0:85:95:1e:43:ba:ad:a8:d9:1a:12:aa: 35:c2:21:a8:4f:84:91:6b:32:84:eb:52:64:84:29: 4c:14:ff:a8:e9:60:13:73:a5:fb:eb:2f:b2:88:a5: 75:6e:55:59:f2:e1:c6:fd:b0:9f:5d:ba:3d:3a:a9: 0d:9c:ae:e9:1b:cd:f0:74:7f:2f:e4:2d:79:81:1c: 6a:67:b6:19:54:44:6f:ad:ad:ae:c3:db:53:0b:b7: e8:b1:80:8e:47:6e:2b:c6:68:9f:58:2f:3e:fa:52: fb:ed:ad:54:fb:5a:19:ae:a2:57:72:55:c2:4d:4e: a8:40:70:60:97:22:11:3f:d0:90:87:01:7e:7d:b9: 21:4c:f8:98:c0:f1:1e:39:8c:f4:1e:94:56:dc:f7: 52:4a:8f:73:65:e7:cf:64:a7:ce:90:d1:c4:07:c5: 15:60:dc:26:99:bc:3b:fd:37:6c:fd:06:10:32:75: 7a:b7:c6:e7:29:8b:eb:88:fb:e6:38:4f:f6:f3:95: 5f:81:d9:2d:ea:a0:5d:d1:a3:a9:3d:8d:e8:26:9c: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FE:F8:98:15:1D:0F:6D:94:6E:1A:5C:A8:34:86:6E:D6:AC:D8:26 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5dc2ed3b-8e9c-49e2-9086-149c8e4127ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.3.0/24 Signature Algorithm: sha256WithRSAEncryption 11:83:f4:29:96:9b:07:16:67:e9:67:c2:a5:a9:f2:f9:0f:f6: d8:ac:70:3e:64:ab:aa:f6:fa:31:97:89:f0:e5:ef:3c:39:f4: bc:24:fe:24:95:a0:6a:7b:df:69:a7:3b:53:d8:cb:7e:4e:a4: 7d:14:c4:aa:48:81:21:85:91:7f:3f:ee:02:35:c0:2b:ae:dd: 5f:1d:cc:21:27:64:dd:3d:29:cf:b6:11:c4:56:41:47:e7:ba: 74:02:cf:ea:af:bb:03:8c:85:57:57:09:3d:9c:92:38:ca:8b: 86:0e:83:84:d3:b4:ed:15:c2:6e:cb:55:36:71:5b:57:f9:be: e7:5d:ad:98:b5:34:46:6d:31:bd:3a:6a:76:05:21:df:b8:2e: 97:b4:62:12:e4:fb:31:1b:14:a2:81:86:a2:30:41:da:4e:20: ee:85:b1:b0:e2:18:55:aa:9c:e1:8c:45:2c:a3:5c:99:9e:58: 7b:cf:c7:31:4c:3f:36:e6:e9:62:be:e8:51:ae:09:7c:0a:f0: e8:7b:42:2a:2f:30:a3:10:81:35:7c:95:fe:61:74:5c:c1:e7: 63:12:50:27:86:98:46:56:dd:1d:e9:82:e5:50:3b:97:6c:02: 48:1a:b8:cc:5f:f4:56:fa:4e:50:bf:c5:ab:fa:4b:49:5e:e5: 43:d0:21:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO0b2LNldT6rS05nZuOElsSQT238wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTkwMDEwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjlkOTA1YWU3MmM0Mzk5MGI0Y2M4MjhmZTQyY2ZhZjk1 YWYxZWNlZTkyOWY1ZmFkOWQ2YTQxN2E4MzM2MzM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0Ok6aFfMH0hr5/nFq5vkEHRJ7tZc0xJVX8YOKT+8dpcOV RxKJ1hW1st7wDgVvLqCFlR5Duq2o2RoSqjXCIahPhJFrMoTrUmSEKUwU/6jpYBNz pfvrL7KIpXVuVVny4cb9sJ9duj06qQ2crukbzfB0fy/kLXmBHGpnthlURG+tra7D 21MLt+ixgI5HbivGaJ9YLz76UvvtrVT7WhmuoldyVcJNTqhAcGCXIhE/0JCHAX59 uSFM+JjA8R45jPQelFbc91JKj3Nl589kp86Q0cQHxRVg3CaZvDv9N2z9BhAydXq3 xucpi+uI++Y4T/bzlV+B2S3qoF3Ro6k9jegmnJr1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEv74mBUdD22UbhpcqDSGbtas2CYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVkYzJlZDNiLThlOWMtNDllMi05MDg2LTE0OWM4ZTQxMjdiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoAMwDQYJKoZIhvcNAQELBQADggEBABGD9CmWmwcWZ+lnwqWp8vkP9tis cD5kq6r2+jGXifDl7zw59Lwk/iSVoGp732mnO1PYy35OpH0UxKpIgSGFkX8/7gI1 wCuu3V8dzCEnZN09Kc+2EcRWQUfnunQCz+qvuwOMhVdXCT2ckjjKi4YOg4TTtO0V wm7LVTZxW1f5vuddrZi1NEZtMb06anYFId+4Lpe0YhLk+zEbFKKBhqIwQdpOIO6F sbDiGFWqnOGMRSyjXJmeWHvPxzFMPzbm6WK+6FGuCXwK8Oh7QiovMKMQgTV8lf5h dFzB52MSUCeGmEZW3R3pguVQO5dsAkgauMxf9Fb6TlC/xav6S0le5UPQIT4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:23 2025 by rpki-client