$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1abcd577-e060-4e29-97f6-564081e9ec43.roa File: 1abcd577-e060-4e29-97f6-564081e9ec43.roa (raw, json) Hash identifier: AVs/2DESbVY3EVsIIX8uSJhB1z5oracm080oYdvOGaQ= Subject key identifier: 06:AF:D5:61:AB:4A:27:43:1A:CD:DA:ED:47:B9:F1:EE:FE:47:D8:00 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3B0099AB55D139EAB2C93BBE7487ED667948D231 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1abcd577-e060-4e29-97f6-564081e9ec43.roa Signing time: Wed 24 Sep 2025 22:09:31 +0000 ROA not before: Wed 24 Sep 2025 22:09:31 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:00:99:ab:55:d1:39:ea:b2:c9:3b:be:74:87:ed:66:79:48:d2:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:09:31 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=de2213720674f214567d42a2832b3f22b281b5da9f7320ad0eb61a557f809929, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:99:99:8e:7e:c2:7a:71:4d:7d:11:62:23:cd: 74:a2:a8:59:ca:05:28:23:37:0e:e5:41:d5:b7:49: 12:c4:44:15:65:ac:56:d8:36:22:2c:8a:f7:94:b8: 4b:23:6d:99:5f:ff:35:e4:7f:5e:e5:62:05:3a:c6: 62:79:5d:38:87:9a:e0:90:55:70:c8:bd:d0:7e:47: 13:5b:4e:fe:33:69:92:b0:7d:fd:2b:e0:19:24:63: 43:b4:9d:1c:ae:25:af:1c:fd:3c:eb:b6:2d:3b:51: 0b:56:6e:a4:8e:65:f2:3f:33:f3:2b:ae:02:71:b7: a5:6c:5a:e3:70:08:d7:5c:ec:57:8d:0d:36:aa:43: 60:4b:62:98:84:67:ea:17:67:23:b7:c6:b5:01:a2: 64:34:de:4c:50:67:f5:db:58:10:50:de:91:73:a0: e7:24:e1:78:f8:23:06:c4:1e:c3:21:6c:0f:b1:b6: b1:af:f4:c1:25:d6:9e:06:f2:fa:fe:98:d3:56:54: db:c8:fb:14:4d:d3:cf:27:11:aa:30:81:7e:99:00: a5:e9:aa:54:c5:e7:8b:a9:e4:89:0d:36:6a:3a:2b: 61:53:16:c6:0e:b2:b2:c2:33:57:13:13:8d:51:91: 6a:1a:4b:09:0c:78:55:8f:0f:25:53:d6:8f:f1:e8: 07:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AF:D5:61:AB:4A:27:43:1A:CD:DA:ED:47:B9:F1:EE:FE:47:D8:00 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1abcd577-e060-4e29-97f6-564081e9ec43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.42.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:ca:68:a4:56:91:20:e3:d7:84:b0:7d:ab:d8:e0:ce:97:2a: 01:4b:48:d0:45:7d:f3:2a:fc:ca:f2:2d:9f:48:c6:31:5a:5d: b4:25:7a:a8:18:64:77:0c:d0:bb:96:ae:8c:c7:c4:d8:32:82: c3:64:73:12:4f:01:3c:d1:6f:70:9e:7f:2a:ab:20:cf:b4:19: f1:08:66:64:e1:0d:c4:87:f2:50:5f:c9:33:12:06:2e:e3:9b: dc:8f:89:77:83:c6:f5:63:80:ce:b7:a8:d0:33:67:46:15:c8: c1:9b:40:cf:37:7b:a9:66:cf:48:af:71:db:2d:41:47:af:a9: d5:06:90:27:38:ee:e6:22:3d:ca:aa:c6:4c:56:77:46:76:1c: 74:de:00:c3:3c:d4:f7:52:27:f3:52:f8:ad:65:35:7d:b0:74: 1c:06:18:77:d1:87:60:bb:5f:bb:e0:13:5e:61:f7:9f:e3:ad: 37:e9:4f:78:75:09:6b:5a:d7:86:b8:26:bc:27:9f:c5:85:39: f0:21:23:df:99:97:c7:65:58:23:d9:0f:bc:a4:a8:6a:40:d2: c5:18:bb:a8:b7:4c:47:16:a4:9a:81:2b:d5:fd:2c:94:ba:f6: 97:b4:a6:cf:8f:e2:8f:80:48:3b:a4:62:f3:1f:38:dc:fd:2d: cb:94:55:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOwCZq1XROeqyyTu+dIftZnlI0jEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjIwOTMxWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTIyMTM3MjA2NzRmMjE0NTY3ZDQyYTI4MzJiM2YyMmIy ODFiNWRhOWY3MzIwYWQwZWI2MWE1NTdmODA5OTI5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWmZmOfsJ6cU19EWIjzXSiqFnKBSgjNw7lQdW3SRLERBVl rFbYNiIsiveUuEsjbZlf/zXkf17lYgU6xmJ5XTiHmuCQVXDIvdB+RxNbTv4zaZKw ff0r4BkkY0O0nRyuJa8c/Tzrti07UQtWbqSOZfI/M/MrrgJxt6VsWuNwCNdc7FeN DTaqQ2BLYpiEZ+oXZyO3xrUBomQ03kxQZ/XbWBBQ3pFzoOck4Xj4IwbEHsMhbA+x trGv9MEl1p4G8vr+mNNWVNvI+xRN088nEaowgX6ZAKXpqlTF54up5IkNNmo6K2FT FsYOsrLCM1cTE41RkWoaSwkMeFWPDyVT1o/x6Ad/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBq/VYatKJ0MazdrtR7nx7v5H2AAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhYmNkNTc3LWUwNjAtNGUyOS05N2Y2LTU2NDA4MWU5ZWM0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQyowDQYJKoZIhvcNAQELBQADggEBAB/KaKRWkSDj14SwfavY4M6XKgFL SNBFffMq/MryLZ9IxjFaXbQleqgYZHcM0LuWrozHxNgygsNkcxJPATzRb3Cefyqr IM+0GfEIZmThDcSH8lBfyTMSBi7jm9yPiXeDxvVjgM63qNAzZ0YVyMGbQM83e6lm z0ivcdstQUevqdUGkCc47uYiPcqqxkxWd0Z2HHTeAMM81PdSJ/NS+K1lNX2wdBwG GHfRh2C7X7vgE15h95/jrTfpT3h1CWta14a4Jrwnn8WFOfAhI9+Zl8dlWCPZD7yk qGpA0sUYu6i3TEcWpJqBK9X9LJS69pe0ps+P4o+ASDukYvMfONz9LcuUVVw= -----END CERTIFICATE-----Generated at Sat Oct 18 05:06:15 2025 by rpki-client