$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/351ba0d0-8d0b-4110-86bc-4aaf37d9cdee.roa File: 351ba0d0-8d0b-4110-86bc-4aaf37d9cdee.roa (raw, json) Hash identifier: qwjolTu/2taeIWi3Nxp2/a0Z8yriBFjGKvBfR2plk8g= Subject key identifier: B2:98:F8:01:75:BA:49:63:77:2B:5A:21:87:E0:D1:C4:F9:F5:83:04 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6989BB17BB21877B3E9B8949F2D259E3A6B0A2F7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/351ba0d0-8d0b-4110-86bc-4aaf37d9cdee.roa Signing time: Mon 22 Sep 2025 19:26:10 +0000 ROA not before: Mon 22 Sep 2025 19:26:10 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:89:bb:17:bb:21:87:7b:3e:9b:89:49:f2:d2:59:e3:a6:b0:a2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:26:10 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=a7bc188e557255567ef1f7db072440d73fba501ff84a4f2c140cc9c4a2f17bde, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a4:62:2d:28:6b:c4:7f:4b:aa:6c:70:ba:7c: 44:3a:bc:69:12:c3:6f:9e:9d:fe:47:b3:05:58:a9: d3:76:e7:29:70:eb:2b:24:17:2d:5f:1d:7b:59:2f: 93:65:a7:03:95:83:0e:62:cc:dc:0c:7b:9d:9b:70: da:50:9b:0e:5b:f0:e5:55:17:05:06:2a:fa:6c:63: 73:77:64:46:5e:a8:60:a8:98:66:e7:0f:df:52:65: 68:2a:18:72:bb:07:90:01:7a:17:84:02:72:1c:1f: ad:3b:f5:84:56:b2:17:17:22:fb:de:b3:b3:74:5a: b4:0e:f6:51:9e:33:19:dd:da:fe:00:74:0a:4a:4e: 14:57:ab:40:d4:8a:4e:fb:6f:57:7c:1f:03:3e:e6: da:28:67:25:ea:16:7e:5f:d8:19:4b:14:b4:0d:b3: 5c:b0:89:58:99:90:5c:26:72:a2:88:9a:cb:31:02: 5b:b9:05:a9:2a:a8:ad:ed:e1:5d:e5:c0:ec:f4:99: ee:99:07:66:4e:d9:25:c1:25:02:d0:73:f3:0b:45: b2:7f:cd:f6:0f:4a:f9:a8:3f:83:0e:34:99:25:ed: d9:d0:60:c1:84:25:69:14:36:a9:99:0c:6f:30:84: 06:7c:b5:64:5c:92:e6:d1:ea:ab:85:77:7a:2b:05: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:98:F8:01:75:BA:49:63:77:2B:5A:21:87:E0:D1:C4:F9:F5:83:04 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/351ba0d0-8d0b-4110-86bc-4aaf37d9cdee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.235.0/24 Signature Algorithm: sha256WithRSAEncryption 03:68:05:b8:9c:84:0c:bf:8d:30:4a:25:e2:d6:ba:e3:1a:9e: f2:9a:13:9c:15:b6:db:d3:34:93:8b:89:4f:21:b4:58:bf:76: 04:68:b1:51:f3:08:3c:65:ea:a4:bb:e7:64:d9:7a:17:97:93: 4d:f8:72:e6:3b:16:7d:08:52:59:b0:9c:03:36:b1:b6:83:45: 56:61:a6:da:21:90:34:22:e0:fd:5d:8f:b5:76:ac:5a:55:c5: 9c:e2:b4:b9:55:c4:e8:c0:16:31:16:f5:14:7e:ec:51:b6:5c: a3:3a:57:63:d3:b1:5f:17:1d:0e:22:9c:a1:96:54:bd:4e:f5: 82:37:fe:ae:d3:f5:66:84:a8:15:b0:f6:a4:33:29:c7:81:57: c0:02:2b:fa:f9:03:e3:57:03:30:43:f9:7d:1c:d7:d4:74:d9: 7d:1e:d4:bf:e1:1e:06:df:3a:c4:10:3d:7e:e8:1b:06:36:b5: 3f:43:cf:74:16:4b:2f:cb:5a:42:10:b0:6c:e0:e7:0e:2b:fd: e9:e5:e4:02:85:18:11:dc:24:c8:e1:7c:de:94:6a:2f:38:26: 17:85:fb:0a:be:96:d9:a0:dd:3e:4a:d3:40:59:b1:15:99:fd: b2:1e:a9:0b:de:5b:8b:e4:a9:8e:ea:0e:cc:23:12:3c:05:80: d5:00:95:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaYm7F7shh3s+m4lJ8tJZ46awovcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkyNjEwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhN2JjMTg4ZTU1NzI1NTU2N2VmMWY3ZGIwNzI0NDBkNzNm YmE1MDFmZjg0YTRmMmMxNDBjYzljNGEyZjE3YmRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdpGItKGvEf0uqbHC6fEQ6vGkSw2+enf5HswVYqdN25ylw 6yskFy1fHXtZL5NlpwOVgw5izNwMe52bcNpQmw5b8OVVFwUGKvpsY3N3ZEZeqGCo mGbnD99SZWgqGHK7B5ABeheEAnIcH6079YRWshcXIvves7N0WrQO9lGeMxnd2v4A dApKThRXq0DUik77b1d8HwM+5tooZyXqFn5f2BlLFLQNs1ywiViZkFwmcqKImssx Alu5BakqqK3t4V3lwOz0me6ZB2ZO2SXBJQLQc/MLRbJ/zfYPSvmoP4MONJkl7dnQ YMGEJWkUNqmZDG8whAZ8tWRckubR6quFd3orBfFhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUspj4AXW6SWN3K1ohh+DRxPn1gwQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1MWJhMGQwLThkMGItNDExMC04NmJjLTRhYWYzN2Q5Y2RlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpOswDQYJKoZIhvcNAQELBQADggEBAANoBbichAy/jTBKJeLWuuManvKa E5wVttvTNJOLiU8htFi/dgRosVHzCDxl6qS752TZeheXk034cuY7Fn0IUlmwnAM2 sbaDRVZhptohkDQi4P1dj7V2rFpVxZzitLlVxOjAFjEW9RR+7FG2XKM6V2PTsV8X HQ4inKGWVL1O9YI3/q7T9WaEqBWw9qQzKceBV8ACK/r5A+NXAzBD+X0c19R02X0e 1L/hHgbfOsQQPX7oGwY2tT9Dz3QWSy/LWkIQsGzg5w4r/enl5AKFGBHcJMjhfN6U ai84JheF+wq+ltmg3T5K00BZsRWZ/bIeqQveW4vkqY7qDswjEjwFgNUAlbo= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:40 2025 by rpki-client