$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7b52e5c-1734-49a8-9b48-2a185b60bd3b.roa File: c7b52e5c-1734-49a8-9b48-2a185b60bd3b.roa (raw, json) Hash identifier: vFvcUDYUEPwio+hz8iXw9l0q5xofg/iNcykpTx9jxsg= Subject key identifier: 46:F8:5E:B2:2D:02:27:95:9B:1E:FB:C1:1C:BB:E0:68:65:19:FC:97 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 771A7E5F7D3B83F956F1261E3F21681C6C68C015 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7b52e5c-1734-49a8-9b48-2a185b60bd3b.roa Signing time: Fri 19 Sep 2025 00:39:01 +0000 ROA not before: Fri 19 Sep 2025 00:39:01 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:1a:7e:5f:7d:3b:83:f9:56:f1:26:1e:3f:21:68:1c:6c:68:c0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:39:01 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=35da2d9d9541df3eb63d8f1acd455d9d8551b5adeb51c38f2c37c8be77954dc9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9e:9f:75:22:2c:36:53:15:bb:81:9b:f2:70: a4:14:0b:be:e9:8b:a6:33:c8:cb:92:5f:19:43:1a: 83:06:5d:6c:75:47:4b:d1:cd:58:c4:76:c8:22:ce: 40:04:c3:16:df:3c:8a:d6:57:29:ff:04:59:7e:23: 8b:aa:32:9f:07:23:d1:da:ec:9f:9f:77:b9:0b:e7: 59:8b:c3:5f:e1:94:e4:7f:cd:5e:d2:f8:53:8f:6f: 3c:c2:de:9e:92:79:b9:39:0b:60:e5:57:2d:6e:54: ed:e5:b6:c9:9c:13:b0:3f:ed:c3:28:02:85:c5:cf: 67:80:d7:00:79:74:36:80:d6:43:6e:05:35:57:c7: 63:12:f2:d9:cb:d3:c3:16:08:ab:2c:59:4a:38:99: 1f:3a:65:ae:e3:ce:83:31:cd:2e:cb:69:62:f0:07: 42:72:97:f8:a9:a4:69:80:eb:34:56:bb:3b:5f:b7: 00:b2:20:39:21:9f:a9:e7:a9:01:3c:df:de:91:29: 68:1e:90:95:cb:ac:a2:14:6a:9d:9e:25:a3:a9:eb: ff:ab:27:e0:da:9d:94:21:d0:36:48:3f:d2:5f:3e: 89:8a:12:13:f1:5a:8c:53:05:ba:4a:96:02:f5:0d: 2f:d6:f0:da:38:dc:34:39:2c:65:26:01:fc:c6:99: 7d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F8:5E:B2:2D:02:27:95:9B:1E:FB:C1:1C:BB:E0:68:65:19:FC:97 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7b52e5c-1734-49a8-9b48-2a185b60bd3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.46.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:7c:a9:44:7e:f4:ea:72:a0:98:88:9a:e1:45:08:3c:b0:9b: fe:b3:59:4c:c7:63:dd:29:5e:22:a1:5f:13:e6:d6:b3:0a:6d: 88:0e:0e:ef:bd:9a:1c:7a:45:c9:f2:f1:a3:42:cf:57:d7:db: 02:1f:92:86:04:26:a8:ab:33:3b:9e:40:9a:5c:57:7e:89:64: 64:83:bd:d6:b6:40:a2:af:4f:ef:14:d9:c6:23:7a:ca:a4:75: f7:e8:c3:52:c3:b7:49:19:5b:f8:91:7b:34:15:59:a9:a6:d6: 74:bc:f9:57:cc:da:7e:e1:85:57:d2:a9:59:f3:95:51:b4:3d: 57:51:30:1a:e5:e8:d9:68:10:3a:18:38:a7:e8:c8:ab:5e:c6: 20:c8:ed:f6:62:82:fe:29:c0:b6:d2:5f:98:57:35:21:73:d5: f3:9f:4a:81:29:62:cb:c6:d8:f7:cc:4b:bc:d2:93:e8:93:e6: 3d:63:f0:1f:ec:5c:6c:39:c0:7d:62:58:21:8a:41:1f:41:ba: db:7a:a0:4c:54:a7:95:4c:94:55:05:20:72:93:80:f0:06:9b: ec:26:c2:d3:f4:51:74:99:7c:08:8e:e9:42:2f:61:8b:bc:b0: 5f:ba:07:54:4d:4b:d5:c7:a1:6e:03:e5:e0:3e:02:a7:0a:da: 22:72:d5:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdxp+X307g/lW8SYePyFoHGxowBUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDAzOTAxWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNWRhMmQ5ZDk1NDFkZjNlYjYzZDhmMWFjZDQ1NWQ5ZDg1 NTFiNWFkZWI1MWMzOGYyYzM3YzhiZTc3OTU0ZGM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDnp91Iiw2UxW7gZvycKQUC77pi6YzyMuSXxlDGoMGXWx1 R0vRzVjEdsgizkAEwxbfPIrWVyn/BFl+I4uqMp8HI9Ha7J+fd7kL51mLw1/hlOR/ zV7S+FOPbzzC3p6Sebk5C2DlVy1uVO3ltsmcE7A/7cMoAoXFz2eA1wB5dDaA1kNu BTVXx2MS8tnL08MWCKssWUo4mR86Za7jzoMxzS7LaWLwB0Jyl/ippGmA6zRWuztf twCyIDkhn6nnqQE8396RKWgekJXLrKIUap2eJaOp6/+rJ+DanZQh0DZIP9JfPomK EhPxWoxTBbpKlgL1DS/W8No43DQ5LGUmAfzGmX1NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURvhesi0CJ5WbHvvBHLvgaGUZ/JcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M3YjUyZTVjLTE3MzQtNDlhOC05YjQ4LTJhMTg1YjYwYmQzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRC4wDQYJKoZIhvcNAQELBQADggEBAI98qUR+9OpyoJiImuFFCDywm/6z WUzHY90pXiKhXxPm1rMKbYgODu+9mhx6Rcny8aNCz1fX2wIfkoYEJqirMzueQJpc V36JZGSDvda2QKKvT+8U2cYjesqkdffow1LDt0kZW/iRezQVWamm1nS8+VfM2n7h hVfSqVnzlVG0PVdRMBrl6NloEDoYOKfoyKtexiDI7fZigv4pwLbSX5hXNSFz1fOf SoEpYsvG2PfMS7zSk+iT5j1j8B/sXGw5wH1iWCGKQR9Butt6oExUp5VMlFUFIHKT gPAGm+wmwtP0UXSZfAiO6UIvYYu8sF+6B1RNS9XHoW4D5eA+AqcK2iJy1d0= -----END CERTIFICATE-----Generated at Fri Sep 19 12:41:51 2025 by rpki-client