$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3860f1c8-1281-446c-a7de-b7c6aa84c79c.roa File: 3860f1c8-1281-446c-a7de-b7c6aa84c79c.roa (raw, json) Hash identifier: nJftPKdQXkujIoV8F9wlkBA9baYP54VhHdeheNL1wdQ= Subject key identifier: 26:A6:4E:6D:A1:C9:E1:EB:D8:69:8E:31:C7:C6:F4:BE:F5:AC:53:69 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 46B2602145F3EE4085D6CE6C109BE6CB50C8D6FB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3860f1c8-1281-446c-a7de-b7c6aa84c79c.roa Signing time: Mon 22 Sep 2025 21:37:15 +0000 ROA not before: Mon 22 Sep 2025 21:37:15 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b2:60:21:45:f3:ee:40:85:d6:ce:6c:10:9b:e6:cb:50:c8:d6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:37:15 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=8ee7315ebb79c2c3fb48c9b35f86bbb289b14fd5ed3ab6aee907249130c669a4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:f6:84:a5:1b:e3:38:8f:26:cc:b5:68:46: fa:6e:20:92:f4:b6:1e:65:07:4b:61:29:07:8b:a5: 2b:3a:3b:3a:4a:4e:e6:df:ba:de:18:63:ba:f2:68: e0:f4:f8:6d:ed:96:e6:e0:db:96:b6:7f:6f:db:86: 17:dd:31:df:66:cf:c0:d0:e6:c3:a0:31:46:26:27: eb:45:33:ea:78:b3:78:75:fe:88:5d:4d:38:7b:29: c4:ac:37:10:66:a1:a8:f4:fe:71:f8:7b:f6:10:0e: a6:8b:6a:35:03:a6:b9:e6:a6:72:06:ab:58:10:bf: 0c:b2:9f:db:1a:68:a0:46:87:45:9f:e0:b2:e8:6b: 1d:af:db:aa:a0:62:76:67:cb:c4:bc:80:a1:63:20: be:8e:2f:36:40:47:2b:18:cc:e4:cf:da:2b:ed:0c: 7a:71:1c:67:93:3f:8c:66:d3:44:dc:9c:b6:5a:a1: 5e:f5:5b:70:ff:22:f5:ca:86:20:2b:a0:40:f6:92: 79:9c:bc:c6:2a:27:c8:3d:8c:b9:90:2e:07:77:b9: e5:d4:6d:8a:ff:c7:9b:96:b8:e5:f6:71:89:51:b5: 69:3c:9b:27:97:03:e4:f2:04:94:c6:a8:4e:f5:0f: d0:65:5c:36:1d:30:e4:e9:a5:0d:13:11:46:52:2f: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A6:4E:6D:A1:C9:E1:EB:D8:69:8E:31:C7:C6:F4:BE:F5:AC:53:69 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3860f1c8-1281-446c-a7de-b7c6aa84c79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.230.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:2d:31:ad:67:e7:0e:ba:93:52:d0:42:e1:b5:ef:af:44:89: 2c:54:10:40:e9:a4:d9:1d:e1:39:db:3d:0a:36:85:c4:9b:cc: 06:65:fc:88:55:e8:f7:3b:b4:9f:39:da:c0:7e:ec:ce:66:7e: 69:db:e1:27:ad:e7:6c:0e:90:48:17:09:7e:74:43:a1:e3:53: 3f:ed:f3:21:81:5e:e2:20:9e:42:12:b2:97:80:9e:f9:5e:b8: 18:75:8c:9f:55:15:fc:0e:14:36:d9:29:1a:3b:37:fc:71:65: 4c:d4:31:1b:04:e5:2d:b5:64:2c:89:e6:e6:fc:65:55:d3:40: c0:64:6b:e3:d5:a9:86:70:0f:b0:d4:a4:fa:c2:fb:e4:14:f6: 74:49:f0:d9:15:b6:96:e9:d4:6e:c6:6b:84:72:77:52:df:0c: ca:2e:39:74:63:5b:f8:12:2b:34:53:4a:89:4e:d2:08:f0:f3: 3f:65:b9:72:e5:36:53:c7:23:31:42:4b:a2:80:90:3c:66:ee: 3a:e2:e6:05:1f:65:8a:15:08:8f:35:ec:cd:14:91:a8:55:38: f7:f2:ff:9c:8d:28:1c:69:c9:8c:ef:7c:61:68:ed:49:2e:6e: 5e:45:03:e2:71:4a:0e:a5:9b:9c:b7:33:e1:bf:c5:eb:ad:c0: f4:98:99:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURrJgIUXz7kCF1s5sEJvmy1DI1vswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjEzNzE1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZWU3MzE1ZWJiNzljMmMzZmI0OGM5YjM1Zjg2YmJiMjg5 YjE0ZmQ1ZWQzYWI2YWVlOTA3MjQ5MTMwYzY2OWE0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFyfaEpRvjOI8mzLVoRvpuIJL0th5lB0thKQeLpSs6OzpK Tubfut4YY7ryaOD0+G3tlubg25a2f2/bhhfdMd9mz8DQ5sOgMUYmJ+tFM+p4s3h1 /ohdTTh7KcSsNxBmoaj0/nH4e/YQDqaLajUDprnmpnIGq1gQvwyyn9saaKBGh0Wf 4LLoax2v26qgYnZny8S8gKFjIL6OLzZARysYzOTP2ivtDHpxHGeTP4xm00TcnLZa oV71W3D/IvXKhiAroED2knmcvMYqJ8g9jLmQLgd3ueXUbYr/x5uWuOX2cYlRtWk8 myeXA+TyBJTGqE71D9BlXDYdMOTppQ0TEUZSL7UPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJqZObaHJ4evYaY4xx8b0vvWsU2kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM4NjBmMWM4LTEyODEtNDQ2Yy1hN2RlLWI3YzZhYTg0Yzc5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7uYwDQYJKoZIhvcNAQELBQADggEBAA8tMa1n5w66k1LQQuG1769EiSxU EEDppNkd4TnbPQo2hcSbzAZl/IhV6Pc7tJ852sB+7M5mfmnb4Set52wOkEgXCX50 Q6HjUz/t8yGBXuIgnkISspeAnvleuBh1jJ9VFfwOFDbZKRo7N/xxZUzUMRsE5S21 ZCyJ5ub8ZVXTQMBka+PVqYZwD7DUpPrC++QU9nRJ8NkVtpbp1G7Ga4Ryd1LfDMou OXRjW/gSKzRTSolO0gjw8z9luXLlNlPHIzFCS6KAkDxm7jri5gUfZYoVCI817M0U kahVOPfy/5yNKBxpyYzvfGFo7Ukubl5FA+JxSg6lm5y3M+G/xeutwPSYmXM= -----END CERTIFICATE-----Generated at Sat Oct 18 04:15:42 2025 by rpki-client