$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1abfc9a9-2d03-4d33-9eef-e24d4f5a282d.roa File: 1abfc9a9-2d03-4d33-9eef-e24d4f5a282d.roa (raw, json) Hash identifier: QIVah/vFaKDH6MUkTMISFBunNh7jjY+rwrG5mUWwP7A= Subject key identifier: A0:A4:E1:9A:8C:F1:5D:F9:06:CA:C9:19:88:C4:40:FA:88:2F:A5:A4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 73A30F3A9D7EF4534E0F102EB77676AB2CF73B47 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1abfc9a9-2d03-4d33-9eef-e24d4f5a282d.roa Signing time: Wed 24 Sep 2025 21:51:56 +0000 ROA not before: Wed 24 Sep 2025 21:51:56 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a3:0f:3a:9d:7e:f4:53:4e:0f:10:2e:b7:76:76:ab:2c:f7:3b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:51:56 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=25a0a5fdfecda666da6e3602b511f5449acd193e541d672dabc78689d742a480, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:23:75:8f:d5:2b:ae:c8:74:82:9d:4e:ef: 9e:9f:9f:dd:6c:53:0d:95:1f:91:51:29:d2:84:b3: 51:4c:52:77:3f:b5:4f:64:bb:17:fa:02:a1:a1:46: 73:7c:0d:8f:cd:89:c7:34:3c:c2:86:85:06:aa:e6: 41:31:38:62:05:4e:92:1a:31:3b:ce:a9:ac:85:46: f6:03:97:d9:52:3d:45:f0:89:41:9e:81:0a:89:ee: c1:5f:e1:f2:f9:2c:26:13:8f:48:08:ee:3d:e1:97: 4f:8b:6a:e7:c3:d6:05:cf:b8:72:b6:a0:ed:5a:73: 4e:cd:8c:c1:93:92:ce:65:95:4f:9a:b2:80:7b:07: c8:46:8d:eb:3c:c8:46:c3:40:20:1e:c9:8a:ac:7d: 43:5b:71:51:1e:67:42:d1:5c:c7:42:98:8c:c3:0d: db:62:bb:d0:68:d0:92:4c:55:bb:3d:9d:53:78:28: f9:81:f5:3e:53:8e:c3:a7:e1:de:e4:37:03:82:a3: 7a:7d:65:f5:86:92:84:bf:c8:a2:f2:b7:40:ed:11: cf:da:39:d6:18:5d:5f:61:80:30:8a:4c:53:2e:b8: d2:73:44:9c:04:d1:24:38:a9:4c:85:08:e1:70:24: d3:9a:11:da:96:fa:bd:e3:3f:1c:43:4b:9c:e0:2f: 0a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A4:E1:9A:8C:F1:5D:F9:06:CA:C9:19:88:C4:40:FA:88:2F:A5:A4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1abfc9a9-2d03-4d33-9eef-e24d4f5a282d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.35.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:03:61:50:3f:0c:be:86:f4:9c:83:68:fb:8e:f4:5e:de:4f: 4c:7c:a9:84:18:0f:e8:f5:a7:20:ad:36:77:6d:5c:5a:15:fd: 6d:0f:eb:6d:a2:11:46:95:a5:b1:a0:68:9e:ba:9e:cd:f1:c4: fa:ae:19:3b:41:f5:39:ac:a2:e7:3c:07:ee:05:e7:c6:94:93: b1:cf:ac:cb:4f:f2:4f:46:22:d6:4d:1a:ec:bb:27:fa:c8:43: 4b:5d:c9:74:69:da:d7:06:bf:3e:64:e4:fd:a9:a6:46:5e:9e: 0e:73:92:53:45:9b:7f:e7:e5:6b:72:18:9d:8f:57:1c:ef:3e: 31:f8:4c:3c:90:c8:a3:fb:ad:4c:0d:b9:81:17:b0:9a:76:d6: 77:08:5f:30:6a:43:b5:57:db:9f:8c:82:ed:4c:ed:ac:0f:e8: 55:13:6e:54:9d:dc:7e:9b:21:25:16:18:65:a0:27:49:df:a8: da:a4:e1:2f:71:65:87:8e:d3:dd:ae:2c:42:28:ee:ba:17:ef: 79:5e:36:67:06:cd:53:92:5f:83:fc:68:d6:cd:16:e2:2b:04: b9:00:e4:50:50:6d:12:70:8e:3e:00:13:8c:0f:b4:9e:62:61: 6c:35:a2:5c:ae:d0:38:7e:ba:7f:3b:8e:78:7b:a6:d0:b0:29: 4a:d5:a3:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc6MPOp1+9FNODxAut3Z2qyz3O0cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjE1MTU2WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWEwYTVmZGZlY2RhNjY2ZGE2ZTM2MDJiNTExZjU0NDlh Y2QxOTNlNTQxZDY3MmRhYmM3ODY4OWQ3NDJhNDgwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvWCN1j9Urrsh0gp1O756fn91sUw2VH5FRKdKEs1FMUnc/ tU9kuxf6AqGhRnN8DY/Nicc0PMKGhQaq5kExOGIFTpIaMTvOqayFRvYDl9lSPUXw iUGegQqJ7sFf4fL5LCYTj0gI7j3hl0+LaufD1gXPuHK2oO1ac07NjMGTks5llU+a soB7B8hGjes8yEbDQCAeyYqsfUNbcVEeZ0LRXMdCmIzDDdtiu9Bo0JJMVbs9nVN4 KPmB9T5TjsOn4d7kNwOCo3p9ZfWGkoS/yKLyt0DtEc/aOdYYXV9hgDCKTFMuuNJz RJwE0SQ4qUyFCOFwJNOaEdqW+r3jPxxDS5zgLwrFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoKThmozxXfkGyskZiMRA+ogvpaQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhYmZjOWE5LTJkMDMtNGQzMy05ZWVmLWUyNGQ0ZjVhMjgyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQiMwDQYJKoZIhvcNAQELBQADggEBAA0DYVA/DL6G9JyDaPuO9F7eT0x8 qYQYD+j1pyCtNndtXFoV/W0P622iEUaVpbGgaJ66ns3xxPquGTtB9Tmsouc8B+4F 58aUk7HPrMtP8k9GItZNGuy7J/rIQ0tdyXRp2tcGvz5k5P2ppkZeng5zklNFm3/n 5WtyGJ2PVxzvPjH4TDyQyKP7rUwNuYEXsJp21ncIXzBqQ7VX25+Mgu1M7awP6FUT blSd3H6bISUWGGWgJ0nfqNqk4S9xZYeO092uLEIo7roX73leNmcGzVOSX4P8aNbN FuIrBLkA5FBQbRJwjj4AE4wPtJ5iYWw1olyu0Dh+un87jnh7ptCwKUrVo2I= -----END CERTIFICATE-----Generated at Sat Oct 18 04:13:05 2025 by rpki-client