$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc3edbf2-5c01-49e6-9f4c-91a35a8df8b3.roa File: fc3edbf2-5c01-49e6-9f4c-91a35a8df8b3.roa (raw, json) Hash identifier: pw8LeJwqZNoc/ghmOeYJ0x05ITaEdetBFHdsRHyWU8o= Subject key identifier: 7E:CA:4F:1D:BE:30:54:14:1C:5C:40:47:6A:6F:11:B2:18:3B:31:D8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4BBFA5F770807B8B962AAD0A89D464F85AC00E18 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc3edbf2-5c01-49e6-9f4c-91a35a8df8b3.roa Signing time: Thu 16 Oct 2025 15:19:51 +0000 ROA not before: Thu 16 Oct 2025 15:19:51 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bf:a5:f7:70:80:7b:8b:96:2a:ad:0a:89:d4:64:f8:5a:c0:0e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 15:19:51 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=47d702865eb21c4c4970acc46f560f6fb4e0e75c4e8dc3076cbb01068c1223fd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2b:81:3e:cd:08:21:5d:f7:a4:35:a3:97:ce: 89:c0:40:97:b4:aa:4b:cf:f6:da:20:1e:8f:5c:57: e7:c2:f1:f1:c1:33:00:10:ba:b5:7c:a2:23:63:65: 2d:b1:87:6b:ad:25:2a:91:dd:66:9b:8b:9a:39:1f: e1:f0:0e:15:d6:86:dd:39:ce:46:f1:20:95:b5:d3: fe:37:b5:1b:e2:57:90:a6:bd:50:b3:d2:fb:08:ef: 99:fd:d3:c7:f2:dd:18:4e:64:95:c7:ff:7e:d1:25: e8:03:45:26:06:ad:ee:81:e3:9c:41:66:63:0b:e6: 3c:c5:05:db:69:c5:23:6f:6b:f4:00:48:9b:ec:3a: 07:3f:b5:fe:57:99:6b:4e:ab:4c:a8:9a:1c:e7:38: 4f:e2:fc:1c:33:60:c8:06:2e:95:10:a6:b1:20:d5: bc:96:da:de:e4:0d:08:fb:37:0b:0f:98:25:45:05: d7:28:a3:5c:e0:26:14:4c:39:85:e9:bf:4c:f2:21: 0a:8d:44:7f:6d:e6:41:d2:ca:91:09:a3:c0:af:31: b0:b3:ae:79:03:c1:d9:38:a6:0f:07:a8:7a:f5:7d: a5:a7:e4:b6:e1:70:47:a9:f6:7e:85:1e:97:95:dc: 5f:01:90:f6:85:3b:fd:4e:5e:b0:96:3e:01:01:c6: 55:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CA:4F:1D:BE:30:54:14:1C:5C:40:47:6A:6F:11:B2:18:3B:31:D8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc3edbf2-5c01-49e6-9f4c-91a35a8df8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.180.0/24 Signature Algorithm: sha256WithRSAEncryption ae:bf:c8:b6:63:8a:c2:46:5d:4f:71:89:cd:3d:ee:3d:70:fc: cf:19:c5:31:d6:68:5b:89:69:64:97:2d:2d:8c:b3:cd:e8:b7: 62:27:14:43:c0:1f:21:9c:c1:e5:da:fc:0a:a3:11:9d:c1:91: 44:6a:62:eb:76:5a:b2:88:be:f6:e4:e0:35:f9:4e:c6:27:e0: 13:da:99:32:8a:68:e2:53:b3:56:0b:72:89:ab:aa:c1:2e:77: 23:7a:7e:56:0a:1c:4e:db:c8:88:f3:6d:1f:10:d9:c8:62:a8: 9d:5e:ca:7f:c3:47:ea:39:b8:17:6c:77:6b:cc:e3:14:68:64: e7:84:bb:bd:f1:0d:4e:86:3b:70:3e:bb:52:d1:28:75:d5:2c: ca:7d:d2:5a:13:dd:1c:86:f1:77:de:6b:b5:11:af:45:f9:c1: e7:60:dd:e0:21:2d:a9:b5:64:f5:13:45:b4:8c:fc:84:71:d7: bc:cc:8f:36:66:6f:72:8e:30:04:cd:2c:af:5e:a9:64:cf:d8: 4c:56:19:7e:31:74:1e:3d:0d:43:ad:af:3e:cd:6f:0e:d9:43: 30:35:3f:45:ac:90:5d:e0:54:ba:88:9e:b4:9b:f5:dd:89:bd: 57:6b:dd:e2:5e:cd:aa:d2:1a:30:21:17:32:90:cc:e5:f5:44: 91:75:9d:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS7+l93CAe4uWKq0KidRk+FrADhgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTUxOTUxWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2Q3MDI4NjVlYjIxYzRjNDk3MGFjYzQ2ZjU2MGY2ZmI0 ZTBlNzVjNGU4ZGMzMDc2Y2JiMDEwNjhjMTIyM2ZkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlK4E+zQghXfekNaOXzonAQJe0qkvP9togHo9cV+fC8fHB MwAQurV8oiNjZS2xh2utJSqR3Wabi5o5H+HwDhXWht05zkbxIJW10/43tRviV5Cm vVCz0vsI75n908fy3RhOZJXH/37RJegDRSYGre6B45xBZmML5jzFBdtpxSNva/QA SJvsOgc/tf5XmWtOq0yomhznOE/i/BwzYMgGLpUQprEg1byW2t7kDQj7NwsPmCVF Bdcoo1zgJhRMOYXpv0zyIQqNRH9t5kHSypEJo8CvMbCzrnkDwdk4pg8HqHr1faWn 5LbhcEep9n6FHpeV3F8BkPaFO/1OXrCWPgEBxlXLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfspPHb4wVBQcXEBHam8Rshg7MdgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZjM2VkYmYyLTVjMDEtNDllNi05ZjRjLTkxYTM1YThkZjhiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRLQwDQYJKoZIhvcNAQELBQADggEBAK6/yLZjisJGXU9xic097j1w/M8Z xTHWaFuJaWSXLS2Ms83ot2InFEPAHyGcweXa/AqjEZ3BkURqYut2WrKIvvbk4DX5 TsYn4BPamTKKaOJTs1YLcomrqsEudyN6flYKHE7byIjzbR8Q2chiqJ1eyn/DR+o5 uBdsd2vM4xRoZOeEu73xDU6GO3A+u1LRKHXVLMp90loT3RyG8Xfea7URr0X5wedg 3eAhLam1ZPUTRbSM/IRx17zMjzZmb3KOMATNLK9eqWTP2ExWGX4xdB49DUOtrz7N bw7ZQzA1P0WskF3gVLqInrSb9d2JvVdr3eJezarSGjAhFzKQzOX1RJF1nXs= -----END CERTIFICATE-----Generated at Mon Oct 20 15:45:08 2025 by rpki-client