$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68ea34e0-b2d3-401b-8fbe-e5aefb87fe9e.roa File: 68ea34e0-b2d3-401b-8fbe-e5aefb87fe9e.roa (raw, json) Hash identifier: tu8h+1pkf1yoiRuFltmMxSkHNbGorDJwrqnYmcjEc2M= Subject key identifier: A3:6C:BE:89:B3:CD:37:79:67:85:F8:17:AB:23:5D:02:1C:F9:BE:1C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7DC6FF4192573A62F4282CCE74F050D7D71B7EF6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68ea34e0-b2d3-401b-8fbe-e5aefb87fe9e.roa Signing time: Sat 18 Oct 2025 06:31:21 +0000 ROA not before: Sat 18 Oct 2025 06:31:21 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c6:ff:41:92:57:3a:62:f4:28:2c:ce:74:f0:50:d7:d7:1b:7e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:31:21 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=4f53724cc656d619616d34c358bd9ca558a19bc17820afbf091bdd277d962bda, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:d8:e6:42:5c:11:dd:4f:c7:ce:4e:54:d4: 32:93:aa:2c:a1:56:0b:92:98:66:15:22:c3:32:04: 96:65:89:17:50:44:30:83:d0:49:0d:ca:8e:d6:61: 90:b3:e6:43:c3:e7:4a:e8:8b:1e:0c:0b:c5:df:f9: 65:00:c5:f1:87:27:e2:fd:28:ba:c4:b5:b2:10:14: 97:7b:cc:6b:2e:5f:a2:03:b3:43:4b:fb:52:73:cb: 6f:96:fd:f0:ae:6f:81:69:09:10:a1:b8:82:35:b8: 20:47:0e:5e:92:70:38:e7:28:13:db:fe:18:98:54: e0:1e:af:ed:66:df:d4:fd:c6:7f:17:30:23:fc:11: bd:03:a8:db:ee:87:fd:70:6e:32:62:d6:df:6f:86: 19:0a:71:1a:f6:17:8e:f5:ee:40:f2:09:10:47:9e: 4e:3d:38:e7:f5:95:2b:26:f0:6e:de:7e:3c:82:bc: 54:44:76:97:5a:bf:74:0f:70:98:dc:85:14:9a:fe: 40:14:ef:49:f4:26:90:0d:0f:c5:22:62:36:6b:c1: 54:09:4f:8a:07:f6:74:eb:d0:b9:e8:a7:72:0e:22: c2:30:7a:b3:a0:76:db:50:8e:71:a2:4a:29:90:40: 10:de:75:2a:25:8f:6f:e3:13:e1:f0:1e:3f:ee:26: e8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6C:BE:89:B3:CD:37:79:67:85:F8:17:AB:23:5D:02:1C:F9:BE:1C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68ea34e0-b2d3-401b-8fbe-e5aefb87fe9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.40.0/22 Signature Algorithm: sha256WithRSAEncryption 91:bd:6e:0e:3b:0b:21:59:0a:9a:c4:1d:f4:e8:c5:fa:7d:ae: 1f:0f:a5:32:d2:18:f2:79:d5:65:92:2d:3d:6b:b7:1f:da:8e: a4:ea:da:67:67:62:1d:64:be:53:b2:f0:31:9c:e1:86:3f:ce: 33:3f:eb:43:5d:9c:87:32:71:b6:b0:2e:42:af:be:e9:b2:3a: f7:b7:b9:7a:51:82:9e:5c:84:ef:ce:b6:63:d5:b3:a5:83:c2: d8:43:c1:01:d4:33:75:b4:77:38:0e:a7:92:07:12:00:46:6e: 66:bd:63:ce:48:4f:66:44:fb:32:bf:bd:e6:8d:56:9b:56:26: fc:fb:e6:40:77:a0:2d:b5:0f:22:57:51:38:20:c0:d3:3f:8f: 1e:19:2c:64:d1:7d:51:75:1f:47:96:cc:05:d8:6d:6f:3e:02: 9c:4b:c9:e3:ea:fa:41:f5:2b:84:85:d9:40:23:8d:70:1c:cc: e5:a7:8d:fe:69:c9:1b:d6:7c:93:93:2c:2f:a7:e0:2b:36:e2: 60:af:69:aa:b3:ad:4f:16:25:de:77:ef:11:03:77:89:e3:ea: 92:97:1b:27:c8:ec:d4:ac:e0:03:8c:50:70:58:6d:34:e2:71: 48:92:7b:3d:a7:e3:52:ba:29:40:1f:e4:8c:4d:38:3b:36:6c: d5:0f:87:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfcb/QZJXOmL0KCzOdPBQ19cbfvYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYzMTIxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjUzNzI0Y2M2NTZkNjE5NjE2ZDM0YzM1OGJkOWNhNTU4 YTE5YmMxNzgyMGFmYmYwOTFiZGQyNzdkOTYyYmRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI4tjmQlwR3U/Hzk5U1DKTqiyhVguSmGYVIsMyBJZliRdQ RDCD0EkNyo7WYZCz5kPD50roix4MC8Xf+WUAxfGHJ+L9KLrEtbIQFJd7zGsuX6ID s0NL+1Jzy2+W/fCub4FpCRChuII1uCBHDl6ScDjnKBPb/hiYVOAer+1m39T9xn8X MCP8Eb0DqNvuh/1wbjJi1t9vhhkKcRr2F4717kDyCRBHnk49OOf1lSsm8G7efjyC vFREdpdav3QPcJjchRSa/kAU70n0JpAND8UiYjZrwVQJT4oH9nTr0Lnop3IOIsIw erOgdttQjnGiSimQQBDedSolj2/jE+HwHj/uJugRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUo2y+ibPNN3lnhfgXqyNdAhz5vhwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4ZWEzNGUwLWIyZDMtNDAxYi04ZmJlLWU1YWVmYjg3ZmU5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISrSgwDQYJKoZIhvcNAQELBQADggEBAJG9bg47CyFZCprEHfToxfp9rh8P pTLSGPJ51WWSLT1rtx/ajqTq2mdnYh1kvlOy8DGc4YY/zjM/60NdnIcycbawLkKv vumyOve3uXpRgp5chO/OtmPVs6WDwthDwQHUM3W0dzgOp5IHEgBGbma9Y85IT2ZE +zK/veaNVptWJvz75kB3oC21DyJXUTggwNM/jx4ZLGTRfVF1H0eWzAXYbW8+ApxL yePq+kH1K4SF2UAjjXAczOWnjf5pyRvWfJOTLC+n4Cs24mCvaaqzrU8WJd537xED d4nj6pKXGyfI7NSs4AOMUHBYbTTicUiSez2n41K6KUAf5IxNODs2bNUPh0o= -----END CERTIFICATE-----Generated at Mon Oct 20 19:16:32 2025 by rpki-client