$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3c0fda5-8e99-43aa-9e91-b173196958bc.roa File: d3c0fda5-8e99-43aa-9e91-b173196958bc.roa (raw, json) Hash identifier: hPQ8/qL/V3/0JAZEfSUo2xETsB1A9cteUEqTQrBYfQU= Subject key identifier: F1:68:E3:B8:F3:EC:43:9A:AC:2C:52:32:D0:95:8C:9D:9C:40:21:2E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3DA8723D42DFA1EFEDBFC5F467E993A7E97D44 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3c0fda5-8e99-43aa-9e91-b173196958bc.roa Signing time: Sat 18 Oct 2025 11:40:11 +0000 ROA not before: Sat 18 Oct 2025 11:40:11 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a8:72:3d:42:df:a1:ef:ed:bf:c5:f4:67:e9:93:a7:e9:7d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:40:11 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=7dd8d770041f2e495a3ddb4ec7d1b3e3f446e5f271b90778373eda915af69bfd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:26:96:62:43:d9:f5:9b:73:a4:a7:d6:6b:46: f2:c3:86:60:23:e5:db:a0:22:90:a3:15:3e:90:92: f6:76:a3:82:32:31:3e:96:10:35:61:41:e1:d6:7d: 8c:81:c5:6f:f5:b1:95:89:48:e5:49:3b:fd:61:ca: 47:ab:08:1e:33:a2:37:5a:f6:b0:08:f1:85:e6:18: dc:3a:a5:e9:ef:39:d3:7f:e8:0d:de:3b:4b:17:8a: ca:4e:c3:a9:c8:9f:b3:17:1b:e8:77:6f:73:ff:4d: 0f:27:77:10:71:66:57:34:bf:83:84:a3:e7:b8:77: 0a:b9:0b:af:08:e8:b9:97:99:ec:3a:21:1e:d4:53: 00:38:05:d5:80:2b:a5:87:5d:23:11:f3:cc:0c:4f: b3:98:43:8d:1c:3f:8c:d2:22:01:86:2b:54:c2:ea: 80:17:ba:f3:68:4f:82:56:52:68:ee:c2:b1:99:3c: d9:95:f0:e1:41:4f:7c:7c:62:f9:3d:d2:ab:06:e5: 1e:37:b4:7f:6d:65:dd:36:02:ef:02:da:15:ad:6e: 4d:08:73:0a:3c:93:a5:5c:83:fc:22:82:82:b6:b7: 94:fd:22:22:89:e6:ef:61:27:c1:d1:e7:db:21:81: 6d:54:d1:4a:2a:54:08:19:0b:31:50:32:a0:5e:02: d2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:68:E3:B8:F3:EC:43:9A:AC:2C:52:32:D0:95:8C:9D:9C:40:21:2E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3c0fda5-8e99-43aa-9e91-b173196958bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.154.0/24 Signature Algorithm: sha256WithRSAEncryption 54:46:7b:eb:9d:4a:d7:fb:5b:e1:e3:81:2c:fd:0e:17:7d:b7: d5:6b:65:47:bd:1f:bd:49:d0:30:a3:46:55:10:d9:7e:09:9c: 70:a7:2d:4a:59:6e:3a:e5:db:ab:ff:45:0d:92:c4:2b:19:9a: 84:e3:0b:13:e5:31:67:67:8b:66:0e:b0:b2:a2:a5:83:f7:22: f2:ea:13:67:55:52:d2:94:a6:ad:3a:16:16:ac:fb:e8:86:81: f7:9d:ff:61:8e:9f:3a:64:4c:76:1b:c1:6d:9c:5d:94:58:0a: 45:d8:9d:1f:00:98:e7:03:34:b9:cf:c3:85:20:1b:bf:6e:2b: d4:a4:b1:4a:e5:85:50:d6:b3:84:e6:1e:32:9d:3d:31:03:b3: 75:d4:65:d3:f9:36:e8:2b:05:37:19:a1:90:84:c6:1a:89:36: a5:1c:ad:dc:51:38:50:fb:57:4e:d7:ab:7f:fa:a9:7f:87:c5: d2:b0:89:f6:14:67:33:59:ca:93:0c:74:b7:5f:6e:66:3f:55: 04:e9:1a:77:07:da:8d:1a:61:07:d5:06:5d:99:e6:f1:f8:6f: 20:7d:f6:c7:c3:6f:2b:b2:7b:fe:f0:97:48:54:0a:c5:9c:32: 2c:55:74:32:97:53:4f:89:54:34:78:86:0b:a0:e3:ea:e6:2a: d7:c0:19:a5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITPahyPULfoe/tv8X0Z+mTp+l9RDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEwMTgxMTQwMTFaFw0yNTExMjIyMzU5NTla MHoxSTBHBgNVBAUTQDdkZDhkNzcwMDQxZjJlNDk1YTNkZGI0ZWM3ZDFiM2UzZjQ0 NmU1ZjI3MWI5MDc3ODM3M2VkYTkxNWFmNjliZmQxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ8mlmJD2fWbc6Sn1mtG8sOGYCPl26AikKMVPpCS9najgjIx PpYQNWFB4dZ9jIHFb/WxlYlI5Uk7/WHKR6sIHjOiN1r2sAjxheYY3Dql6e8503/o Dd47SxeKyk7Dqcifsxcb6Hdvc/9NDyd3EHFmVzS/g4Sj57h3CrkLrwjouZeZ7Doh HtRTADgF1YArpYddIxHzzAxPs5hDjRw/jNIiAYYrVMLqgBe682hPglZSaO7CsZk8 2ZXw4UFPfHxi+T3SqwblHje0f21l3TYC7wLaFa1uTQhzCjyTpVyD/CKCgra3lP0i Ionm72EnwdHn2yGBbVTRSipUCBkLMVAyoF4C0psCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTxaOO48+xDmqwsUjLQlYydnEAhLjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvZDNjMGZkYTUtOGU5OS00M2FhLTllOTEtYjE3MzE5Njk1OGJjLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEABKbmjANBgkqhkiG9w0BAQsFAAOCAQEAVEZ7651K1/tb4eOBLP0OF3231Wtl R70fvUnQMKNGVRDZfgmccKctSlluOuXbq/9FDZLEKxmahOMLE+UxZ2eLZg6wsqKl g/ci8uoTZ1VS0pSmrToWFqz76IaB953/YY6fOmRMdhvBbZxdlFgKRdidHwCY5wM0 uc/DhSAbv24r1KSxSuWFUNazhOYeMp09MQOzddRl0/k26CsFNxmhkITGGok2pRyt 3FE4UPtXTterf/qpf4fF0rCJ9hRnM1nKkwx0t19uZj9VBOkadwfajRphB9UGXZnm 8fhvIH32x8NvK7J7/vCXSFQKxZwyLFV0MpdTT4lUNHiGC6Dj6uYq18AZpQ== -----END CERTIFICATE-----Generated at Mon Oct 20 03:08:08 2025 by rpki-client