$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3525d695-f24e-4501-8b6c-e5aca5746b23.roa File: 3525d695-f24e-4501-8b6c-e5aca5746b23.roa (raw, json) Hash identifier: lEzlIDEL3onjxQQfUrnVcdM57MsnPRDoBP4OpkK3NjI= Subject key identifier: 3E:CF:76:F9:DA:09:F7:34:2A:A7:95:59:95:4F:60:3F:27:90:52:D5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 554810685141C6868A7184B682F5590CAF6DF2D3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3525d695-f24e-4501-8b6c-e5aca5746b23.roa Signing time: Wed 24 Sep 2025 22:12:10 +0000 ROA not before: Wed 24 Sep 2025 22:12:10 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:48:10:68:51:41:c6:86:8a:71:84:b6:82:f5:59:0c:af:6d:f2:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:12:10 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=39684f8d734fb29a48958f892dcddda768f89c6f9d164ea23e37dca82f8087b7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:55:33:76:13:2e:38:8b:0f:b8:99:72:6d: 39:d1:1a:f2:49:bd:21:78:5b:fa:68:9d:db:5f:62: a3:1e:d7:0a:73:06:16:30:04:c5:01:03:53:64:8f: e4:4d:31:03:91:e3:ec:69:4b:1f:bc:2a:73:91:2e: a1:bd:cd:ea:fa:83:57:14:9c:19:f9:4e:82:93:eb: e0:ea:ce:4e:b2:96:b0:74:e1:8a:46:84:e2:45:f9: de:da:cf:58:6d:6e:2b:2e:f7:59:9b:2f:d6:0a:33: ea:99:ac:15:59:f4:21:fe:d8:62:fa:80:87:cf:73: d0:c9:f3:d2:d0:d2:24:13:cd:77:b9:44:7b:d8:99: 86:23:e0:e3:39:84:f3:87:f9:c5:5e:52:44:ac:6b: 2c:f3:83:8e:c8:8d:2d:5d:4b:48:76:46:71:67:31: 46:dc:72:d2:12:05:fb:d3:5b:a2:12:64:ae:6c:aa: 55:56:bc:68:9c:2a:7e:f6:47:dd:86:18:d3:32:23: ac:a1:89:37:73:f4:d0:64:09:a6:db:79:90:7e:a0: f2:bb:1b:9d:13:c6:17:14:1a:ff:76:52:9b:0c:e9: 9a:b2:8d:c3:77:de:c1:50:13:74:64:24:fa:d1:e9: 2c:5a:8e:90:4f:9d:ec:72:93:cd:ad:18:06:53:10: 25:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CF:76:F9:DA:09:F7:34:2A:A7:95:59:95:4F:60:3F:27:90:52:D5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3525d695-f24e-4501-8b6c-e5aca5746b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.97.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:57:65:1f:2a:d0:de:4b:d6:7c:8a:d9:4a:16:fa:04:a8:1e: b8:c3:45:47:35:3e:b7:15:07:19:e0:3a:9c:98:aa:0e:c7:ab: 56:1e:8f:e0:f2:b5:20:4f:af:50:0f:06:65:15:74:32:f9:98: ba:f6:7b:b7:28:5f:69:ff:60:f6:c4:7e:30:59:96:b1:54:ff: 93:a3:b7:76:99:19:42:0d:17:cc:d6:40:c1:8d:ef:25:48:a0: 35:c4:a1:a1:75:2d:26:54:6f:12:6a:fd:4a:c9:ab:ea:9f:2c: 32:ba:ec:bf:7f:32:61:7b:e0:97:2f:86:a1:a4:a6:2e:02:ad: a7:9a:19:a7:25:06:9e:f6:e1:2d:f6:7d:a2:56:ed:d3:53:54: 16:f3:bd:93:17:e0:80:fd:66:fe:db:bc:e4:a8:dd:fd:13:f1: 89:e0:40:9c:87:20:7b:8e:3e:a0:0f:43:ad:48:23:c3:ad:ea: 7f:d4:f0:63:9a:b6:33:98:b5:86:d0:72:3a:60:74:91:df:dd: 66:b7:0d:b7:e7:0e:c9:36:68:e3:55:48:db:a0:08:7f:96:11: ce:12:36:00:a0:90:38:17:6b:34:b7:d5:3f:84:f5:e3:e9:14: 5e:9f:9f:7c:c5:f3:35:47:a9:94:da:39:76:75:5e:96:75:5d: 9e:7e:2a:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVUgQaFFBxoaKcYS2gvVZDK9t8tMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjIxMjEwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTY4NGY4ZDczNGZiMjlhNDg5NThmODkyZGNkZGRhNzY4 Zjg5YzZmOWQxNjRlYTIzZTM3ZGNhODJmODA4N2I3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI61UzdhMuOIsPuJlybTnRGvJJvSF4W/pondtfYqMe1wpz BhYwBMUBA1Nkj+RNMQOR4+xpSx+8KnORLqG9zer6g1cUnBn5ToKT6+Dqzk6ylrB0 4YpGhOJF+d7az1htbisu91mbL9YKM+qZrBVZ9CH+2GL6gIfPc9DJ89LQ0iQTzXe5 RHvYmYYj4OM5hPOH+cVeUkSsayzzg47IjS1dS0h2RnFnMUbcctISBfvTW6ISZK5s qlVWvGicKn72R92GGNMyI6yhiTdz9NBkCabbeZB+oPK7G50TxhcUGv92UpsM6Zqy jcN33sFQE3RkJPrR6SxajpBPnexyk82tGAZTECVrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPs92+doJ9zQqp5VZlU9gPyeQUtUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1MjVkNjk1LWYyNGUtNDUwMS04YjZjLWU1YWNhNTc0NmIyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQ2EwDQYJKoZIhvcNAQELBQADggEBAEtXZR8q0N5L1nyK2UoW+gSoHrjD RUc1PrcVBxngOpyYqg7Hq1Yej+DytSBPr1APBmUVdDL5mLr2e7coX2n/YPbEfjBZ lrFU/5Ojt3aZGUINF8zWQMGN7yVIoDXEoaF1LSZUbxJq/UrJq+qfLDK67L9/MmF7 4JcvhqGkpi4CraeaGaclBp724S32faJW7dNTVBbzvZMX4ID9Zv7bvOSo3f0T8Yng QJyHIHuOPqAPQ61II8Ot6n/U8GOatjOYtYbQcjpgdJHf3Wa3DbfnDsk2aONVSNug CH+WEc4SNgCgkDgXazS31T+E9ePpFF6fn3zF8zVHqZTaOXZ1XpZ1XZ5+Kng= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:00 2025 by rpki-client