$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc3ec819-cac2-409e-95d9-d78d108abfe9.roa File: fc3ec819-cac2-409e-95d9-d78d108abfe9.roa (raw, json) Hash identifier: TzzcUDmiMQWfR9uqbPtVeNGNffS88XEPbPLus1R9Ydk= Subject key identifier: D9:E8:54:54:22:14:64:2B:4E:4D:1C:78:DC:E5:74:11:DB:96:43:39 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 23BFDAB98FBCD787967FA1E7441AEDE49248DF35 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc3ec819-cac2-409e-95d9-d78d108abfe9.roa Signing time: Sat 18 Oct 2025 08:33:43 +0000 ROA not before: Sat 18 Oct 2025 08:33:43 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:bf:da:b9:8f:bc:d7:87:96:7f:a1:e7:44:1a:ed:e4:92:48:df:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:33:43 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=322cbe0ef96e24fc138df50fb2798e8a5507d177612f62b3ec393ddc2bfb9428, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:1c:66:26:74:76:b2:e2:40:14:d8:6a:fa: 7e:de:1f:38:42:fc:c3:68:b8:48:0b:6b:b6:fa:14: e0:b3:7e:67:57:07:31:1e:df:86:96:f8:0e:97:35: 9d:19:56:f3:25:a8:5a:da:cb:39:fc:fe:4c:87:c9: 44:52:d8:42:f6:22:4e:dc:1d:63:35:c0:97:4f:b5: 3e:30:b3:42:0a:81:01:f2:b0:b2:b2:fe:8d:e6:95: d5:60:58:82:1f:7f:72:06:39:d4:fc:fb:73:d2:3d: be:63:80:f2:7a:98:d7:ea:23:5c:8c:b3:0c:be:9a: ea:2e:21:97:c7:c3:36:92:9d:d9:01:90:67:ad:5c: 6a:1a:a8:40:74:f8:af:52:5b:e1:d6:71:03:71:d7: a1:41:75:11:bc:ac:76:9f:52:a4:11:fe:c9:ae:6c: 2c:8a:d5:d2:2d:51:ec:6e:70:01:75:08:e6:b8:4b: ab:2a:5a:87:6c:87:76:9e:90:49:63:44:87:49:25: 38:45:f1:60:ff:6b:a3:23:be:b6:d9:f3:e9:cd:17: 1e:ff:b1:e3:17:68:a5:7f:f0:3a:dc:1b:f0:27:ae: 4d:1b:40:60:4a:32:91:55:90:97:b2:a7:c7:48:8a: 2f:f2:92:49:9b:5d:11:04:40:11:8a:2e:41:7e:9c: 58:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E8:54:54:22:14:64:2B:4E:4D:1C:78:DC:E5:74:11:DB:96:43:39 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc3ec819-cac2-409e-95d9-d78d108abfe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.238.0/23 Signature Algorithm: sha256WithRSAEncryption b2:c6:07:13:df:bd:30:e0:2c:d3:76:76:cb:10:87:60:ea:0e: f5:55:0e:35:3e:b0:70:6c:6d:7b:79:9a:34:d6:5c:cf:ae:db: 71:fd:aa:f9:05:5b:c9:6f:8a:68:e2:07:54:ff:a8:f8:81:ca: de:b4:e3:37:63:43:c3:4e:fa:e4:06:f3:1f:06:30:e2:4f:38: 7a:ef:e9:ab:8e:f2:0e:6e:3b:a3:c3:46:c5:da:9f:10:c5:ab: 37:a6:5d:e7:69:43:f9:2f:8e:73:67:1a:9a:7e:48:c8:dc:36: f7:b7:d0:00:12:2a:0e:d4:32:fd:b0:01:4f:2f:ef:24:01:75: eb:70:a6:1f:3d:98:d5:b6:79:48:33:06:47:6d:3d:d0:1d:00: 85:29:44:9c:e7:a0:44:f8:59:44:a8:1d:b8:79:27:99:a7:71: 8a:0d:9d:39:e7:dd:05:5c:45:1a:f3:c4:98:5f:fd:1e:f7:82: 46:74:7c:89:59:ec:4e:3f:76:a3:c8:85:2b:e7:bd:47:cf:03: 65:84:28:af:f0:b0:b0:4b:7b:89:83:8d:81:5e:bb:95:97:4b: 6d:16:e1:2b:21:22:53:7a:41:19:43:c9:78:a9:0c:92:0d:60: 14:89:42:94:e9:32:9a:5f:c8:93:59:fa:29:91:91:89:f9:3d: b6:64:27:ce -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI7/auY+814eWf6HnRBrt5JJI3zUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDgzMzQzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjJjYmUwZWY5NmUyNGZjMTM4ZGY1MGZiMjc5OGU4YTU1 MDdkMTc3NjEyZjYyYjNlYzM5M2RkYzJiZmI5NDI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEdhxmJnR2suJAFNhq+n7eHzhC/MNouEgLa7b6FOCzfmdX BzEe34aW+A6XNZ0ZVvMlqFrayzn8/kyHyURS2EL2Ik7cHWM1wJdPtT4ws0IKgQHy sLKy/o3mldVgWIIff3IGOdT8+3PSPb5jgPJ6mNfqI1yMswy+muouIZfHwzaSndkB kGetXGoaqEB0+K9SW+HWcQNx16FBdRG8rHafUqQR/smubCyK1dItUexucAF1COa4 S6sqWodsh3aekEljRIdJJThF8WD/a6MjvrbZ8+nNFx7/seMXaKV/8DrcG/Anrk0b QGBKMpFVkJeyp8dIii/ykkmbXREEQBGKLkF+nFhpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2ehUVCIUZCtOTRx43OV0EduWQzkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZjM2VjODE5LWNhYzItNDA5ZS05NWQ5LWQ3OGQxMDhhYmZlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoO4wDQYJKoZIhvcNAQELBQADggEBALLGBxPfvTDgLNN2dssQh2DqDvVV DjU+sHBsbXt5mjTWXM+u23H9qvkFW8lvimjiB1T/qPiByt604zdjQ8NO+uQG8x8G MOJPOHrv6auO8g5uO6PDRsXanxDFqzemXedpQ/kvjnNnGpp+SMjcNve30AASKg7U Mv2wAU8v7yQBdetwph89mNW2eUgzBkdtPdAdAIUpRJznoET4WUSoHbh5J5mncYoN nTnn3QVcRRrzxJhf/R73gkZ0fIlZ7E4/dqPIhSvnvUfPA2WEKK/wsLBLe4mDjYFe u5WXS20W4SshIlN6QRlDyXipDJINYBSJQpTpMppfyJNZ+imRkYn5PbZkJ84= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:40 2025 by rpki-client