$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b854070-b6ea-4af8-9577-643e0cc387aa.roa File: 3b854070-b6ea-4af8-9577-643e0cc387aa.roa (raw, json) Hash identifier: Ay3tAp2TEVdncvC1GhO/UgGX/8lOHPdi/1XXVu/0PQk= Subject key identifier: 5D:5B:7F:E2:96:A4:B8:07:C5:82:E5:BB:87:30:93:45:1D:09:A9:DD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4C9F7314A2AA124C1D7F0B25C5AD938A811EE223 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b854070-b6ea-4af8-9577-643e0cc387aa.roa Signing time: Mon 22 Sep 2025 17:22:11 +0000 ROA not before: Mon 22 Sep 2025 17:22:11 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9f:73:14:a2:aa:12:4c:1d:7f:0b:25:c5:ad:93:8a:81:1e:e2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:22:11 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=e556531e3288d2431daf05f60377d9341f88414ce88731042a02606b49628a87, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:41:42:ab:1e:63:4a:3b:72:d2:3c:8c:72:f5: 14:2e:19:f2:f5:27:ac:c6:af:fd:f7:80:70:22:35: aa:ee:d1:15:18:85:1c:a3:7a:1a:b6:4a:6b:38:50: 29:c4:0f:87:4a:81:f0:15:46:cc:c9:d3:77:36:83: 97:d9:59:2a:c7:87:49:67:1d:ea:5a:4c:4a:b3:17: f5:32:b7:d7:4e:7b:83:31:e0:b4:8e:30:78:18:a2: c5:b4:f3:5b:3f:aa:a8:9c:04:47:83:5a:78:9d:ea: 70:57:58:19:73:36:d7:be:d0:4e:5f:c8:e8:50:e5: b5:14:96:7f:3c:7a:9b:32:2c:69:4b:30:59:02:7d: 34:c1:c5:fc:62:fb:86:6d:52:36:71:9f:84:18:fb: 9c:e1:4c:f3:fe:36:e2:c4:1a:84:8f:d8:6d:86:3b: 17:ad:1e:06:2f:40:d3:b0:55:d7:52:18:6d:29:31: 7d:5c:a0:e0:88:6c:a7:aa:9b:01:ab:fe:30:5d:57: 0d:24:ab:f8:4e:21:53:bc:30:01:76:79:df:4e:32: 3f:7b:50:9e:a4:43:dd:2d:12:16:79:48:78:82:fa: cf:db:64:69:21:18:bc:5f:81:7f:62:4a:2d:d1:5d: e5:a0:06:40:0b:50:26:ae:c0:ac:6e:76:71:59:85: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5B:7F:E2:96:A4:B8:07:C5:82:E5:BB:87:30:93:45:1D:09:A9:DD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b854070-b6ea-4af8-9577-643e0cc387aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.84.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:d4:79:31:9b:82:14:c6:b0:3d:9f:ec:b4:bb:a8:71:c3:87: bf:12:ea:21:ad:94:ff:e0:da:fb:a3:85:8b:07:8c:58:97:f2: 74:3a:25:52:d2:69:71:87:8e:7a:ef:88:ed:46:07:8f:5b:f3: ac:25:5b:d3:04:12:a1:86:d1:e0:d5:57:08:1f:ab:d0:2c:e6: 59:ad:a2:05:ca:33:68:ff:f1:0d:69:d7:fe:76:23:96:ad:18: 26:9c:a7:b8:96:f4:7b:a0:db:9d:51:e1:48:4e:66:c7:b2:bc: 2d:00:87:61:22:bf:bc:32:94:80:bd:8f:48:e5:8f:64:eb:6a: 8e:68:2a:2b:01:5a:f3:ff:82:9b:9f:12:d2:8e:b5:8b:dd:c3: 12:90:a1:5f:a3:f4:2f:e8:01:8f:f2:a9:70:08:db:15:06:fd: f5:1e:61:49:7b:5d:e0:58:65:76:a5:52:6c:99:5c:1a:ef:b8: 96:3c:3b:c8:3e:ad:d1:de:d8:56:31:45:66:35:e9:47:e0:64: 9f:2e:d0:92:19:a8:8b:44:ce:e1:9c:d1:90:06:bf:ac:ca:07: e8:8b:d0:f8:64:15:75:7a:13:cb:df:2a:ea:72:17:f3:81:61: 1c:eb:3a:09:75:5c:9b:13:c6:bd:d5:fc:0a:91:4b:e8:00:9c: 96:7b:e2:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTJ9zFKKqEkwdfwslxa2TioEe4iMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTcyMjExWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTU2NTMxZTMyODhkMjQzMWRhZjA1ZjYwMzc3ZDkzNDFm ODg0MTRjZTg4NzMxMDQyYTAyNjA2YjQ5NjI4YTg3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIQUKrHmNKO3LSPIxy9RQuGfL1J6zGr/33gHAiNaru0RUY hRyjehq2Sms4UCnED4dKgfAVRszJ03c2g5fZWSrHh0lnHepaTEqzF/Uyt9dOe4Mx 4LSOMHgYosW081s/qqicBEeDWnid6nBXWBlzNte+0E5fyOhQ5bUUln88epsyLGlL MFkCfTTBxfxi+4ZtUjZxn4QY+5zhTPP+NuLEGoSP2G2GOxetHgYvQNOwVddSGG0p MX1coOCIbKeqmwGr/jBdVw0kq/hOIVO8MAF2ed9OMj97UJ6kQ90tEhZ5SHiC+s/b ZGkhGLxfgX9iSi3RXeWgBkALUCauwKxudnFZhXa/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXVt/4pakuAfFguW7hzCTRR0Jqd0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiODU0MDcwLWI2ZWEtNGFmOC05NTc3LTY0M2UwY2MzODdhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmlQwDQYJKoZIhvcNAQELBQADggEBADvUeTGbghTGsD2f7LS7qHHDh78S 6iGtlP/g2vujhYsHjFiX8nQ6JVLSaXGHjnrviO1GB49b86wlW9MEEqGG0eDVVwgf q9As5lmtogXKM2j/8Q1p1/52I5atGCacp7iW9Hug251R4UhOZseyvC0Ah2Eiv7wy lIC9j0jlj2Trao5oKisBWvP/gpufEtKOtYvdwxKQoV+j9C/oAY/yqXAI2xUG/fUe YUl7XeBYZXalUmyZXBrvuJY8O8g+rdHe2FYxRWY16UfgZJ8u0JIZqItEzuGc0ZAG v6zKB+iL0PhkFXV6E8vfKupyF/OBYRzrOgl1XJsTxr3V/AqRS+gAnJZ74pA= -----END CERTIFICATE-----Generated at Sat Oct 18 00:16:28 2025 by rpki-client