$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/285a44d6-d11b-4ec2-a907-76ead96de75f.roa File: 285a44d6-d11b-4ec2-a907-76ead96de75f.roa (raw, json) Hash identifier: FSD0jbMC3O76/aNxHQMBGreRe+TDX/fbKyD3p16DimE= Subject key identifier: C6:99:EB:08:DC:5F:E0:89:84:41:36:06:6D:51:20:6F:F3:B2:01:ED Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 331FA34CBE2063768D966AEC9382EBD71C2FB4E2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/285a44d6-d11b-4ec2-a907-76ead96de75f.roa Signing time: Mon 22 Sep 2025 21:23:54 +0000 ROA not before: Mon 22 Sep 2025 21:23:54 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1f:a3:4c:be:20:63:76:8d:96:6a:ec:93:82:eb:d7:1c:2f:b4:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:23:54 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=a9ad6cb0d4baab8ba34255672c7791becaa3a6ab3889617230306e28e90e046e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2b:6f:5e:0b:8a:e2:a4:f0:71:83:fa:05:2f: 64:f3:5f:65:69:4f:5e:b5:8c:36:a4:c0:f5:09:96: 41:f0:da:67:29:6e:80:8a:9a:da:fb:27:6b:0c:3f: 4a:5a:87:a9:cb:92:ce:da:55:d9:fa:ac:ed:e5:68: b8:5c:97:73:af:0c:17:5a:52:2b:03:94:9c:f2:b6: 8b:5e:77:5f:51:33:a2:ab:2e:dc:24:a2:86:01:6e: ce:77:e2:1b:74:77:54:a1:87:14:e1:31:11:d3:f9: bb:e0:6c:3c:af:22:47:c2:22:83:4f:94:8f:1c:60: 46:d4:19:f2:d1:60:af:d2:00:04:60:bf:ba:d4:bc: bd:a3:5f:a3:c7:4a:5e:c5:31:aa:3e:cd:ac:f7:01: 36:e1:6d:07:d8:27:d0:77:74:cd:7a:64:7e:44:d8: 65:ed:5f:25:37:96:75:33:3f:e0:f7:c9:eb:22:9e: c6:66:c2:8f:7f:6c:93:63:11:06:ce:8a:a8:05:72: 74:b0:5d:7a:0b:7f:ab:0a:07:ef:df:28:a5:81:df: f1:0a:3a:d4:1d:77:5c:65:53:11:c3:9a:f6:d6:f0: 65:e7:37:57:a7:4a:f4:4d:97:6c:e0:81:19:b1:31: 4d:99:55:b2:dc:c6:fb:87:b4:6d:b9:a5:20:c6:32: 7f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:99:EB:08:DC:5F:E0:89:84:41:36:06:6D:51:20:6F:F3:B2:01:ED X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/285a44d6-d11b-4ec2-a907-76ead96de75f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.96.0/20 Signature Algorithm: sha256WithRSAEncryption 67:3d:b6:03:34:d5:f6:be:2e:df:94:bb:df:8a:06:d1:e2:76: 4c:79:94:92:1a:46:a7:c0:05:a9:f7:26:4a:1b:29:00:4d:2b: 2f:16:b2:60:72:78:a5:3f:e5:1d:88:f7:30:69:1d:e8:b5:5f: 63:4c:16:f0:73:9f:cc:1b:dc:e8:a8:6e:48:6c:d1:1b:55:c7: 3e:77:f1:1a:64:a9:44:51:6d:13:86:a5:b4:01:5a:1c:06:cc: 3e:70:81:d9:29:a7:b9:de:d4:fe:43:f6:58:20:5c:c7:a2:0a: fb:60:5e:01:ad:fa:b6:a3:0e:cc:0b:62:9f:aa:ab:2b:16:1a: d0:d5:cf:43:ca:e3:b3:08:c5:9e:65:e0:40:ea:b4:61:db:4d: 4a:f1:d6:75:68:01:04:87:5c:06:42:a4:a3:67:7c:98:73:76: 86:71:31:a7:a6:80:d7:d2:1f:fd:20:06:bb:6f:aa:f1:b1:f3: 9d:d5:3d:83:92:e7:34:43:3b:d5:45:fb:04:b4:42:ce:e6:74: 19:57:54:40:8e:b0:b7:9f:6b:82:98:47:2e:e3:6b:1f:25:03: 0a:6e:ec:bf:96:3d:b9:66:d5:ae:4b:e1:45:94:9f:7b:be:e6: 24:25:96:09:16:b6:16:d1:74:4c:08:21:b8:7b:ee:21:33:69: 52:ff:8b:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMx+jTL4gY3aNlmrsk4Lr1xwvtOIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjEyMzU0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWFkNmNiMGQ0YmFhYjhiYTM0MjU1NjcyYzc3OTFiZWNh YTNhNmFiMzg4OTYxNzIzMDMwNmUyOGU5MGUwNDZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdK29eC4ripPBxg/oFL2TzX2VpT161jDakwPUJlkHw2mcp boCKmtr7J2sMP0pah6nLks7aVdn6rO3laLhcl3OvDBdaUisDlJzytoted19RM6Kr LtwkooYBbs534ht0d1ShhxThMRHT+bvgbDyvIkfCIoNPlI8cYEbUGfLRYK/SAARg v7rUvL2jX6PHSl7FMao+zaz3ATbhbQfYJ9B3dM16ZH5E2GXtXyU3lnUzP+D3yesi nsZmwo9/bJNjEQbOiqgFcnSwXXoLf6sKB+/fKKWB3/EKOtQdd1xlUxHDmvbW8GXn N1enSvRNl2zggRmxMU2ZVbLcxvuHtG25pSDGMn9FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxpnrCNxf4ImEQTYGbVEgb/OyAe0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI4NWE0NGQ2LWQxMWItNGVjMi1hOTA3LTc2ZWFkOTZkZTc1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSrWAwDQYJKoZIhvcNAQELBQADggEBAGc9tgM01fa+Lt+Uu9+KBtHidkx5 lJIaRqfABan3JkobKQBNKy8WsmByeKU/5R2I9zBpHei1X2NMFvBzn8wb3Oiobkhs 0RtVxz538RpkqURRbROGpbQBWhwGzD5wgdkpp7ne1P5D9lggXMeiCvtgXgGt+raj DswLYp+qqysWGtDVz0PK47MIxZ5l4EDqtGHbTUrx1nVoAQSHXAZCpKNnfJhzdoZx MaemgNfSH/0gBrtvqvGx853VPYOS5zRDO9VF+wS0Qs7mdBlXVECOsLefa4KYRy7j ax8lAwpu7L+WPblm1a5L4UWUn3u+5iQllgkWthbRdEwIIbh77iEzaVL/i0Q= -----END CERTIFICATE-----Generated at Sat Oct 18 02:15:33 2025 by rpki-client