$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b86041b-44db-4854-a8c3-10ab6b63b3fa.roa File: 3b86041b-44db-4854-a8c3-10ab6b63b3fa.roa (raw, json) Hash identifier: ex14TwX7odkPsKrogipBywL306j3War2ywCmG83CmgI= Subject key identifier: F9:43:8B:B2:6B:21:A7:17:D1:94:96:A2:50:17:67:5D:CD:59:24:09 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A42DC10B4FA5841B7832779BBA6700DEEEE04F1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b86041b-44db-4854-a8c3-10ab6b63b3fa.roa Signing time: Mon 22 Sep 2025 20:44:46 +0000 ROA not before: Mon 22 Sep 2025 20:44:46 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:42:dc:10:b4:fa:58:41:b7:83:27:79:bb:a6:70:0d:ee:ee:04:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:44:46 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=dde1dbd0438d3b0a50056b07671d637715a4dc73654a54540900ba9431502911, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:6e:1b:c1:3c:0b:d1:90:86:48:90:f3:60: 10:b2:f7:6e:a0:51:a6:c1:c9:a5:5f:38:a9:5d:c8: 3d:aa:72:7c:18:45:8a:53:2f:41:86:79:82:15:38: 15:02:8b:fb:ee:21:fd:39:b9:cc:d7:3d:29:67:31: b1:e6:00:f9:94:e5:48:ba:ef:78:71:ab:72:36:5a: c8:14:90:38:b0:71:39:22:44:51:30:25:5e:22:96: 26:08:f2:cc:8f:3f:74:7f:10:41:1b:41:34:e6:17: 10:c8:2e:da:dc:a3:eb:40:04:de:a7:c4:31:f9:83: ee:6a:1c:b6:46:3b:73:c4:74:ec:34:e8:02:a0:a1: 87:2e:ee:44:a5:8d:a0:09:17:a0:be:ac:ec:96:cb: 36:cf:8d:ae:71:8c:3f:6e:c5:c5:61:b3:88:92:13: 73:d5:cf:05:81:b0:48:a5:62:fa:eb:11:4a:89:a3: b7:82:28:8d:56:f8:d0:a4:24:f3:66:2a:a6:1b:0e: 7a:9d:ba:59:24:c4:2e:26:5f:fe:97:36:52:75:96: 33:6c:66:ca:ee:f6:58:3f:00:d0:e0:60:c4:f0:03: b4:bb:8f:89:10:8e:d6:e2:9a:6c:d5:1b:54:c9:80: 74:9a:43:f0:f7:a3:be:be:33:ad:98:da:94:57:c7: 67:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:43:8B:B2:6B:21:A7:17:D1:94:96:A2:50:17:67:5D:CD:59:24:09 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b86041b-44db-4854-a8c3-10ab6b63b3fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.199.0/24 Signature Algorithm: sha256WithRSAEncryption 49:40:da:dd:3f:c9:10:64:af:19:ac:ed:2a:06:21:56:f7:4c: a2:8a:8e:0c:89:e2:68:0a:02:49:43:54:f7:7c:12:37:1a:10: 89:06:66:a3:30:5a:bd:c6:e4:29:4f:03:93:c5:dc:1a:cb:90: af:ef:3b:41:3c:38:44:a5:11:e5:65:3d:b4:69:35:0d:cc:02: ea:bd:a0:80:b8:c3:e9:b0:26:ac:d2:df:c7:a5:84:56:68:75: 3f:67:dc:a1:d7:ce:8f:a8:75:c5:5c:a8:86:d1:0b:79:ac:8b: f8:b8:bc:a8:51:e9:8f:b9:eb:6a:07:a5:7d:f9:5f:69:8d:31: 46:bd:f2:72:53:8f:7a:46:ee:e4:33:ef:fb:3c:2d:30:0d:53: e3:3f:12:ab:2c:82:df:7e:6c:df:a6:cf:67:e4:cf:db:15:d1: f4:03:50:09:ff:d9:ec:68:cd:ea:2c:77:14:a5:91:ac:2a:ef: a7:57:b9:d1:bb:7e:ab:34:bd:18:11:75:b3:bf:36:80:34:dc: 90:85:30:3d:e5:43:23:10:16:32:66:9b:1b:cb:77:9c:f0:9e: 5a:8f:02:25:0a:40:d7:fa:89:f5:51:dc:dc:d0:e3:3e:8d:38: 07:38:92:7e:8c:6f:ce:4a:6b:17:aa:ab:96:5d:0e:24:c7:9b: 37:70:57:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUakLcELT6WEG3gyd5u6ZwDe7uBPEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjA0NDQ2WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGUxZGJkMDQzOGQzYjBhNTAwNTZiMDc2NzFkNjM3NzE1 YTRkYzczNjU0YTU0NTQwOTAwYmE5NDMxNTAyOTExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0m24bwTwL0ZCGSJDzYBCy926gUabByaVfOKldyD2qcnwY RYpTL0GGeYIVOBUCi/vuIf05uczXPSlnMbHmAPmU5Ui673hxq3I2WsgUkDiwcTki RFEwJV4iliYI8syPP3R/EEEbQTTmFxDILtrco+tABN6nxDH5g+5qHLZGO3PEdOw0 6AKgoYcu7kSljaAJF6C+rOyWyzbPja5xjD9uxcVhs4iSE3PVzwWBsEilYvrrEUqJ o7eCKI1W+NCkJPNmKqYbDnqdulkkxC4mX/6XNlJ1ljNsZsru9lg/ANDgYMTwA7S7 j4kQjtbimmzVG1TJgHSaQ/D3o76+M62Y2pRXx2ezAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+UOLsmshpxfRlJaiUBdnXc1ZJAkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiODYwNDFiLTQ0ZGItNDg1NC1hOGMzLTEwYWI2YjYzYjNmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrccwDQYJKoZIhvcNAQELBQADggEBAElA2t0/yRBkrxms7SoGIVb3TKKK jgyJ4mgKAklDVPd8EjcaEIkGZqMwWr3G5ClPA5PF3BrLkK/vO0E8OESlEeVlPbRp NQ3MAuq9oIC4w+mwJqzS38elhFZodT9n3KHXzo+odcVcqIbRC3msi/i4vKhR6Y+5 62oHpX35X2mNMUa98nJTj3pG7uQz7/s8LTANU+M/Eqssgt9+bN+mz2fkz9sV0fQD UAn/2exozeosdxSlkawq76dXudG7fqs0vRgRdbO/NoA03JCFMD3lQyMQFjJmmxvL d5zwnlqPAiUKQNf6ifVR3NzQ4z6NOAc4kn6Mb85Kaxeqq5ZdDiTHmzdwV3U= -----END CERTIFICATE-----Generated at Sat Oct 18 05:11:44 2025 by rpki-client