$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e990b6-39f4-428c-bb01-f760616cd068.roa File: c3e990b6-39f4-428c-bb01-f760616cd068.roa (raw, json) Hash identifier: JYOu9+YLBlN6Kz6FMF7UPdUO3JpqSLHi/XWgF9DeKag= Subject key identifier: 00:61:09:AD:71:34:25:8C:A9:B6:80:2F:9D:E1:61:9C:5A:1D:42:29 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 074F31E56E2336F262CC41CF441EB9915476C298 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e990b6-39f4-428c-bb01-f760616cd068.roa Signing time: Fri 10 Oct 2025 01:04:26 +0000 ROA not before: Fri 10 Oct 2025 01:04:26 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.35.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4f:31:e5:6e:23:36:f2:62:cc:41:cf:44:1e:b9:91:54:76:c2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 01:04:26 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=7f65912a39c3ffb2117241ca685bf6864ba56b251d0b074eabcea701de261942, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:d0:a2:7a:a7:59:2b:6f:a7:e8:30:a8:e1: 0f:4d:da:ed:73:2d:88:86:a2:f3:d5:c2:a5:10:87: 96:1d:68:90:73:cb:d5:84:d0:74:32:0b:94:e2:46: 63:a8:f3:b6:7d:a1:4a:eb:ab:16:5c:3e:a0:08:ab: 62:8f:60:15:b5:59:ea:b7:f2:76:d0:a1:63:85:35: 88:aa:1a:01:5f:90:c0:be:23:1d:06:42:6a:ee:aa: b1:be:15:f1:4c:85:99:55:4c:6b:49:cb:ec:b3:be: 21:de:3e:9a:b7:b7:2d:cc:51:bf:47:f3:32:4b:fd: f8:21:af:b6:04:5a:49:d8:75:40:28:15:f5:85:e3: 4f:4e:17:09:4f:50:40:26:b7:ec:e9:91:9e:81:60: 08:3d:85:d3:7b:ee:fa:13:2c:f6:67:2f:8a:9c:13: 45:89:19:5a:4d:22:79:57:c0:74:bc:dd:8c:f1:d9: c0:e6:33:a1:21:c8:cf:c2:ba:37:ad:84:c5:20:e4: 21:eb:a5:a1:c3:80:30:53:1d:25:e5:46:dd:f7:6c: 03:14:f6:8a:94:81:0c:4d:50:a0:b6:f8:b2:ae:2e: c4:55:93:f0:c4:09:2c:0b:6c:f4:82:9c:54:3b:43: a8:73:6b:e7:09:79:ef:3d:57:1a:9e:53:33:c8:f6: 56:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:61:09:AD:71:34:25:8C:A9:B6:80:2F:9D:E1:61:9C:5A:1D:42:29 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e990b6-39f4-428c-bb01-f760616cd068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.35.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4f:f7:42:fc:12:cc:cb:53:e6:17:5c:c4:11:7a:02:88:8a:16: e5:56:dd:40:3f:27:4d:94:a1:28:de:8d:ff:6a:67:97:fc:dc: eb:40:6e:14:51:59:f6:11:78:0a:ac:60:5e:43:2e:72:3f:00: ba:93:0e:14:c1:ec:08:41:12:cb:33:f9:71:40:64:db:6a:c9: fc:61:75:10:a1:20:fe:bb:af:84:aa:4a:06:6f:28:7d:73:cc: 0c:17:e0:5c:1a:3a:9a:8a:ad:84:12:9f:a5:90:f6:66:0f:46: 22:24:0d:5f:56:e4:93:de:7c:20:e9:f0:84:d3:0a:36:c9:23: f0:65:63:34:1b:27:a1:8d:69:3f:15:c8:2b:40:18:d7:c0:24: d0:b7:7e:dc:d8:dc:13:7b:fd:c6:e4:6a:77:f0:80:a9:15:3f: b8:a8:8f:63:32:40:9d:ba:0d:b3:bb:64:87:57:da:c9:b1:7f: b4:bf:a3:af:5c:a0:62:12:b1:d7:e9:26:3b:8b:9a:e1:b6:7a: b6:4c:54:8b:aa:a2:25:08:af:00:46:ac:3a:f7:71:17:e6:89: 69:3a:4c:9c:8d:ef:82:9f:d1:67:40:16:3c:55:6a:3a:2f:a7: 67:cb:cd:ce:ac:bb:ea:ed:b1:cb:08:e8:20:0d:9d:2f:ca:cb: 37:a9:f2:1a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUB08x5W4jNvJizEHPRB65kVR2wpgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMDEwNDI2WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjY1OTEyYTM5YzNmZmIyMTE3MjQxY2E2ODViZjY4NjRi YTU2YjI1MWQwYjA3NGVhYmNlYTcwMWRlMjYxOTQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFo9CieqdZK2+n6DCo4Q9N2u1zLYiGovPVwqUQh5YdaJBz y9WE0HQyC5TiRmOo87Z9oUrrqxZcPqAIq2KPYBW1Weq38nbQoWOFNYiqGgFfkMC+ Ix0GQmruqrG+FfFMhZlVTGtJy+yzviHePpq3ty3MUb9H8zJL/fghr7YEWknYdUAo FfWF409OFwlPUEAmt+zpkZ6BYAg9hdN77voTLPZnL4qcE0WJGVpNInlXwHS83Yzx 2cDmM6EhyM/CujethMUg5CHrpaHDgDBTHSXlRt33bAMU9oqUgQxNUKC2+LKuLsRV k/DECSwLbPSCnFQ7Q6hza+cJee89VxqeUzPI9lYBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUAGEJrXE0JYyptoAvneFhnFodQikwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MzZTk5MGI2LTM5ZjQtNDI4Yy1iYjAxLWY3NjA2MTZjZDA2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASIzANBgkqhkiG9w0BAQsFAAOCAQEAT/dC/BLMy1PmF1zEEXoCiIoW5Vbd QD8nTZShKN6N/2pnl/zc60BuFFFZ9hF4CqxgXkMucj8AupMOFMHsCEESyzP5cUBk 22rJ/GF1EKEg/ruvhKpKBm8ofXPMDBfgXBo6moqthBKfpZD2Zg9GIiQNX1bkk958 IOnwhNMKNskj8GVjNBsnoY1pPxXIK0AY18Ak0Ld+3NjcE3v9xuRqd/CAqRU/uKiP YzJAnboNs7tkh1faybF/tL+jr1ygYhKx1+kmO4ua4bZ6tkxUi6qiJQivAEasOvdx F+aJaTpMnI3vgp/RZ0AWPFVqOi+nZ8vNzqy76u2xywjoIA2dL8rLN6nyGg== -----END CERTIFICATE-----Generated at Mon Oct 20 05:57:00 2025 by rpki-client