$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b35bbd0-bd6b-48a6-8ad4-822e63633282.roa File: 1b35bbd0-bd6b-48a6-8ad4-822e63633282.roa (raw, json) Hash identifier: e7VBklrwP3wt0G0WZzoRjk6+46N8jYDJrXYGlTLP5kA= Subject key identifier: 03:89:01:60:BD:43:0E:4B:04:9D:6C:31:B7:A7:5B:D2:FD:02:69:D7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 02872D32926F56A600CA820C8B82BC60F3FC9C04 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b35bbd0-bd6b-48a6-8ad4-822e63633282.roa Signing time: Mon 22 Sep 2025 17:26:04 +0000 ROA not before: Mon 22 Sep 2025 17:26:04 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:87:2d:32:92:6f:56:a6:00:ca:82:0c:8b:82:bc:60:f3:fc:9c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:26:04 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=f2be96a4619f1dbf49c99835bb3c7c7949cbd9262510ab52eb3a2a93aa1a1e38, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:23:a2:5a:7a:d8:12:64:17:bb:18:fd:42: 5c:8c:79:d8:70:20:ee:e2:58:ce:dd:c4:94:a7:56: a8:41:77:93:22:9c:d9:76:7d:6e:84:6a:61:c9:c1: 3b:81:22:61:57:c9:4a:2d:d3:0a:c5:53:c4:b3:06: 7b:d4:4e:e1:8d:3d:dd:9d:65:c1:09:d2:fb:e4:15: 19:53:34:00:82:c2:02:82:4f:0c:67:a8:eb:84:e0: e4:85:e2:27:92:7f:9c:e8:60:2a:f2:95:3c:7e:0a: a9:d7:fe:86:7f:4f:8f:fc:40:2b:e0:9b:bf:39:3a: a8:e0:7d:a3:9b:ed:d1:bb:ff:22:51:4a:9e:6d:96: 83:d9:1c:cd:67:cc:e4:d3:b9:88:a3:5e:80:15:80: bd:60:f6:06:d1:e3:d2:ec:86:a7:5e:bb:db:33:2f: 2f:bc:91:40:ac:51:2b:27:71:00:8a:60:e2:90:ca: a0:e4:5f:e5:2c:a2:91:21:f8:d6:1a:bc:f8:83:e5: eb:b7:52:b7:b6:c7:7f:48:05:c0:74:1d:53:51:02: 74:da:37:7f:c0:1e:a8:ba:f1:68:f3:44:de:a9:cf: 22:df:86:fc:6d:f1:54:55:e7:95:5c:45:01:c1:68: e8:9b:a4:32:66:91:e5:23:72:54:8c:1b:48:f0:f2: ca:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:89:01:60:BD:43:0E:4B:04:9D:6C:31:B7:A7:5B:D2:FD:02:69:D7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b35bbd0-bd6b-48a6-8ad4-822e63633282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.122.0/24 Signature Algorithm: sha256WithRSAEncryption 58:53:42:54:98:e9:1d:00:a3:4a:42:fe:be:2e:08:91:b6:5a: 09:53:85:03:63:e7:aa:1a:b7:96:0f:4e:bc:b5:14:0a:9d:db: 32:90:82:5d:e1:7f:4a:15:1e:85:98:b8:27:ad:7c:2c:03:16: 87:13:c2:ef:af:5b:12:78:4f:dd:03:72:63:f4:c3:a7:43:18: 4d:83:55:5d:28:09:c0:25:88:a1:8a:41:ce:45:b9:77:ac:43: f2:5a:96:8d:50:68:ad:29:5b:45:6b:14:63:89:16:7d:00:30: 17:99:3b:9c:5b:b3:ba:e6:71:5b:3a:3e:1b:8f:f6:0e:57:47: e5:e1:03:2d:c4:01:b2:56:c7:52:a7:56:6c:2b:00:ce:fd:1a: 48:c2:19:31:45:ed:fe:66:45:8a:82:70:1b:63:ca:96:f1:33: ec:10:0c:1f:3a:e5:53:f6:25:15:ce:01:39:87:ea:7f:ba:d3: 8c:ed:e1:98:ec:f3:4a:ce:ec:d3:65:40:9d:3d:79:fd:d7:ab: a0:ee:1f:f4:59:c6:41:05:82:5d:87:7f:47:91:14:ca:a3:13: a2:5c:72:26:c0:ec:37:d7:45:78:4c:51:b1:d0:5c:f0:65:45: e6:91:ef:50:b7:ce:d2:fa:e6:a3:80:ad:4f:2a:66:07:16:a4: a0:ae:36:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAoctMpJvVqYAyoIMi4K8YPP8nAQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTcyNjA0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmJlOTZhNDYxOWYxZGJmNDljOTk4MzViYjNjN2M3OTQ5 Y2JkOTI2MjUxMGFiNTJlYjNhMmE5M2FhMWExZTM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcDyOiWnrYEmQXuxj9QlyMedhwIO7iWM7dxJSnVqhBd5Mi nNl2fW6EamHJwTuBImFXyUot0wrFU8SzBnvUTuGNPd2dZcEJ0vvkFRlTNACCwgKC TwxnqOuE4OSF4ieSf5zoYCrylTx+CqnX/oZ/T4/8QCvgm785OqjgfaOb7dG7/yJR Sp5tloPZHM1nzOTTuYijXoAVgL1g9gbR49Lshqdeu9szLy+8kUCsUSsncQCKYOKQ yqDkX+UsopEh+NYavPiD5eu3Ure2x39IBcB0HVNRAnTaN3/AHqi68WjzRN6pzyLf hvxt8VRV55VcRQHBaOibpDJmkeUjclSMG0jw8sopAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUA4kBYL1DDksEnWwxt6db0v0CadcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFiMzViYmQwLWJkNmItNDhhNi04YWQ0LTgyMmU2MzYzMzI4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm3owDQYJKoZIhvcNAQELBQADggEBAFhTQlSY6R0Ao0pC/r4uCJG2WglT hQNj56oat5YPTry1FAqd2zKQgl3hf0oVHoWYuCetfCwDFocTwu+vWxJ4T90DcmP0 w6dDGE2DVV0oCcAliKGKQc5FuXesQ/Jalo1QaK0pW0VrFGOJFn0AMBeZO5xbs7rm cVs6PhuP9g5XR+XhAy3EAbJWx1KnVmwrAM79GkjCGTFF7f5mRYqCcBtjypbxM+wQ DB865VP2JRXOATmH6n+604zt4Zjs80rO7NNlQJ09ef3Xq6DuH/RZxkEFgl2Hf0eR FMqjE6JccibA7DfXRXhMUbHQXPBlReaR71C3ztL65qOArU8qZgcWpKCuNqA= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:38 2025 by rpki-client