$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a25611d-db20-4411-9b99-19e33d4892b8.roa File: 3a25611d-db20-4411-9b99-19e33d4892b8.roa (raw, json) Hash identifier: yP71E1U6Th0WxtZtTPHBSUZaL5aO63e8T82yVVv9+LE= Subject key identifier: 55:8D:AB:93:07:44:07:5F:BD:C6:C3:F2:3C:B8:6D:E4:CA:72:9A:43 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6FA32C1EDE9514D914F1C44AD44E3F5F06D01A1E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a25611d-db20-4411-9b99-19e33d4892b8.roa Signing time: Mon 22 Sep 2025 19:56:28 +0000 ROA not before: Mon 22 Sep 2025 19:56:28 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a3:2c:1e:de:95:14:d9:14:f1:c4:4a:d4:4e:3f:5f:06:d0:1a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:56:28 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=03f63c8d55316b074fd64d581aaaf09ec02520e038ef7e36d2640d8f69b7649a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d0:9b:85:90:d3:c3:63:0f:f5:3c:cf:18:9b: a5:81:7f:02:d3:f3:a1:77:43:00:86:55:5d:03:22: 32:1f:6a:81:8b:9e:ae:4f:82:ea:a7:03:45:be:5b: 7a:d7:b9:b8:a6:4b:8e:d9:53:53:a4:56:26:b2:d7: f7:a3:71:1b:3d:33:27:60:80:13:43:85:9e:af:08: 3b:4c:25:d4:f1:e3:33:d0:36:5f:6e:9d:00:f2:40: f8:98:de:c4:c9:52:8c:e8:c6:67:81:a2:30:78:a7: 42:f2:f6:dd:35:5d:f6:e8:a6:5f:20:1a:07:62:34: 6d:2f:8e:2b:62:79:18:f4:52:52:40:5e:02:ce:96: bb:48:15:fb:83:ae:8d:49:c1:d3:ac:7d:6f:09:2c: 0c:90:ce:58:b7:81:a6:d0:69:95:68:e6:af:15:3d: 81:e0:69:66:cf:65:5c:a3:66:bc:6f:f9:ac:20:79: 79:bc:dc:f4:88:3c:3d:0c:13:1a:62:71:e2:4f:41: 4f:7d:44:4d:9b:80:66:49:5c:54:37:ce:c6:e1:04: f3:63:b7:08:ca:5f:85:ed:68:99:78:8c:ba:44:ad: 20:45:30:56:8d:f2:38:77:90:31:4a:f5:42:c1:79: 5d:68:1d:c8:29:2d:93:19:5f:96:f2:a0:80:06:7a: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8D:AB:93:07:44:07:5F:BD:C6:C3:F2:3C:B8:6D:E4:CA:72:9A:43 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a25611d-db20-4411-9b99-19e33d4892b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.92.0/23 Signature Algorithm: sha256WithRSAEncryption 54:50:1c:2f:a7:23:02:de:34:04:46:4b:bf:d0:ac:b1:26:88: f1:aa:3a:71:6a:67:42:50:6d:8b:59:35:e0:b8:f3:b1:c8:ec: 15:a9:56:b2:a3:d1:0b:20:1a:16:e3:3a:14:df:a4:cf:f2:0d: f8:c9:07:c2:73:83:e4:18:72:b6:a8:e3:e3:c8:4a:c0:1b:a7: 48:5d:f4:78:c9:69:85:5e:96:0f:15:71:54:b6:3d:a9:e2:2b: 8b:fd:69:17:e8:ec:86:fa:08:18:1f:63:41:a8:65:7f:89:00: 79:32:93:ff:52:52:7f:b4:fe:2d:0b:31:be:8e:16:01:50:ef: 1d:65:d7:5b:e1:17:bf:98:c0:23:a3:49:d5:39:36:0e:b7:c6: 6e:c3:6f:41:87:f1:40:17:11:cb:52:d7:ba:be:ba:53:7d:9c: a9:e4:fd:d6:22:4b:4b:d2:df:23:5b:a7:02:69:78:ae:ac:ad: 49:25:12:5a:6e:98:ea:48:ab:42:4c:79:7a:52:1d:20:ba:0d: f1:7f:c1:2b:29:77:7b:6e:dc:13:c0:08:85:bb:01:7a:01:da: 78:11:29:de:f3:1f:ce:49:85:20:76:0a:74:bf:12:11:40:14: d5:3c:a4:66:90:ec:af:03:a9:2f:29:13:84:fe:9a:d4:09:03: 0c:c7:97:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb6MsHt6VFNkU8cRK1E4/XwbQGh4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTk1NjI4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2Y2M2M4ZDU1MzE2YjA3NGZkNjRkNTgxYWFhZjA5ZWMw MjUyMGUwMzhlZjdlMzZkMjY0MGQ4ZjY5Yjc2NDlhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU0JuFkNPDYw/1PM8Ym6WBfwLT86F3QwCGVV0DIjIfaoGL nq5PguqnA0W+W3rXubimS47ZU1OkViay1/ejcRs9MydggBNDhZ6vCDtMJdTx4zPQ Nl9unQDyQPiY3sTJUozoxmeBojB4p0Ly9t01Xfbopl8gGgdiNG0vjitieRj0UlJA XgLOlrtIFfuDro1JwdOsfW8JLAyQzli3gabQaZVo5q8VPYHgaWbPZVyjZrxv+awg eXm83PSIPD0MExpiceJPQU99RE2bgGZJXFQ3zsbhBPNjtwjKX4XtaJl4jLpErSBF MFaN8jh3kDFK9ULBeV1oHcgpLZMZX5byoIAGev5VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVY2rkwdEB1+9xsPyPLht5MpymkMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNhMjU2MTFkLWRiMjAtNDQxMS05Yjk5LTE5ZTMzZDQ4OTJiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpFwwDQYJKoZIhvcNAQELBQADggEBAFRQHC+nIwLeNARGS7/QrLEmiPGq OnFqZ0JQbYtZNeC487HI7BWpVrKj0QsgGhbjOhTfpM/yDfjJB8Jzg+QYcrao4+PI SsAbp0hd9HjJaYVelg8VcVS2PaniK4v9aRfo7Ib6CBgfY0GoZX+JAHkyk/9SUn+0 /i0LMb6OFgFQ7x1l11vhF7+YwCOjSdU5Ng63xm7Db0GH8UAXEctS17q+ulN9nKnk /dYiS0vS3yNbpwJpeK6srUklElpumOpIq0JMeXpSHSC6DfF/wSspd3tu3BPACIW7 AXoB2ngRKd7zH85JhSB2CnS/EhFAFNU8pGaQ7K8DqS8pE4T+mtQJAwzHl40= -----END CERTIFICATE-----Generated at Fri Oct 17 23:57:40 2025 by rpki-client