$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3caaf55d-1377-474e-8a77-e81a50c1b696.roa File: 3caaf55d-1377-474e-8a77-e81a50c1b696.roa (raw, json) Hash identifier: Edou7QrKf+pqi7U/vMJ6MYQhahvmg1SCkBXgFSKgygU= Subject key identifier: 72:1E:93:41:DD:88:1D:95:12:D1:66:2A:B4:BC:54:9E:0F:0A:33:6B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53390A7EAB06956BFD3C4E24665E73F7F8656064 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3caaf55d-1377-474e-8a77-e81a50c1b696.roa Signing time: Mon 22 Sep 2025 19:27:40 +0000 ROA not before: Mon 22 Sep 2025 19:27:40 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:39:0a:7e:ab:06:95:6b:fd:3c:4e:24:66:5e:73:f7:f8:65:60:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:27:40 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=fc1c2969442e356c173ae52425dce0b656e9c866144a926cc48b231627e916bb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:35:87:75:0c:a0:e0:7f:db:0a:47:4e:2c: 04:f5:56:92:10:ca:97:04:56:82:2f:63:c4:a2:84: 0b:68:c0:d3:8a:7d:76:a8:84:0c:41:ad:3a:e2:7e: 00:37:36:0f:07:9d:a5:e4:0b:d5:f5:00:b4:36:27: f2:6c:5f:1d:fb:14:1d:01:75:6a:de:bc:62:ea:0a: 85:b9:45:1a:f5:c8:af:4f:24:bd:67:87:58:21:3d: 41:d5:45:37:eb:72:62:a8:0c:c2:69:ca:23:ad:97: c5:ba:2d:cc:c6:fc:1f:78:99:d5:70:d6:32:f0:6c: db:bc:4b:03:e5:13:c7:c1:a3:a0:ab:c7:ee:b9:64: 88:48:76:74:d5:d7:47:d3:46:27:f1:3a:d6:8b:bd: 4a:56:6a:d8:82:0e:17:05:03:54:75:51:b3:f4:8c: ea:5e:69:57:84:4f:cb:c2:c0:dc:3c:c7:b0:2d:eb: 04:c5:d6:a2:65:a1:6e:b8:a8:d7:fc:42:fe:98:b1: e5:99:b1:e4:23:37:cc:15:a6:c1:cd:2d:46:8d:f2: 3f:4b:8a:dd:b0:db:68:4d:84:f5:93:a7:09:4f:2a: 58:44:fa:a3:b6:bf:30:2f:94:e3:d2:b9:5e:fd:de: cb:38:5c:18:8a:71:67:fd:26:fe:ff:c4:7c:06:42: d4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1E:93:41:DD:88:1D:95:12:D1:66:2A:B4:BC:54:9E:0F:0A:33:6B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3caaf55d-1377-474e-8a77-e81a50c1b696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.248.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:2b:94:82:7e:ad:9b:2f:c9:d0:7b:4f:b8:1d:e5:0d:d0:72: 5a:a8:b9:cb:b1:e5:6a:93:cc:48:04:1d:88:b3:47:6e:75:20: d8:e5:fc:88:ef:f8:c5:2c:80:04:9a:a8:b6:9c:e2:f1:a3:b6: d9:78:3c:7e:24:06:63:5c:eb:24:aa:f4:2d:74:bb:f8:ce:86: aa:6a:a9:a2:ad:a6:2e:3d:a3:af:6c:d5:59:d8:45:8f:43:83: 99:0d:53:ff:62:84:67:b8:5f:c3:35:bb:cb:e9:7d:69:ec:09: 76:04:ed:62:1a:6c:9b:d3:ad:b0:98:47:22:c2:96:a2:43:67: 5d:9a:10:d4:b3:f5:e2:28:96:b5:41:99:72:ef:3c:a5:f8:ff: 23:10:15:bc:9b:29:0a:96:04:2f:53:8d:16:99:82:42:16:2a: 1e:90:b5:21:35:36:da:3d:6b:ba:69:db:ea:a7:52:12:35:52: 0b:44:75:8d:ef:3d:97:7a:34:8e:cf:ea:3e:25:b7:f1:59:d2: 3d:9f:8b:ad:4d:ab:dd:3a:f4:f9:42:36:09:ce:9d:ef:ed:32: 3f:8d:17:98:04:0a:80:75:cc:ef:d6:d5:89:02:53:22:5f:ce: 33:44:f9:20:8d:e5:50:ab:d5:ea:ee:47:35:8f:a6:27:6e:f4: e0:6d:5c:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUzkKfqsGlWv9PE4kZl5z9/hlYGQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkyNzQwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzFjMjk2OTQ0MmUzNTZjMTczYWU1MjQyNWRjZTBiNjU2 ZTljODY2MTQ0YTkyNmNjNDhiMjMxNjI3ZTkxNmJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDSzWHdQyg4H/bCkdOLAT1VpIQypcEVoIvY8SihAtowNOK fXaohAxBrTrifgA3Ng8HnaXkC9X1ALQ2J/JsXx37FB0BdWrevGLqCoW5RRr1yK9P JL1nh1ghPUHVRTfrcmKoDMJpyiOtl8W6LczG/B94mdVw1jLwbNu8SwPlE8fBo6Cr x+65ZIhIdnTV10fTRifxOtaLvUpWatiCDhcFA1R1UbP0jOpeaVeET8vCwNw8x7At 6wTF1qJloW64qNf8Qv6YseWZseQjN8wVpsHNLUaN8j9Lit2w22hNhPWTpwlPKlhE +qO2vzAvlOPSuV793ss4XBiKcWf9Jv7/xHwGQtSPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUch6TQd2IHZUS0WYqtLxUng8KM2swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNjYWFmNTVkLTEzNzctNDc0ZS04YTc3LWU4MWE1MGMxYjY5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpPgwDQYJKoZIhvcNAQELBQADggEBAJsrlIJ+rZsvydB7T7gd5Q3Qclqo ucux5WqTzEgEHYizR251INjl/Ijv+MUsgASaqLac4vGjttl4PH4kBmNc6ySq9C10 u/jOhqpqqaKtpi49o69s1VnYRY9Dg5kNU/9ihGe4X8M1u8vpfWnsCXYE7WIabJvT rbCYRyLClqJDZ12aENSz9eIolrVBmXLvPKX4/yMQFbybKQqWBC9TjRaZgkIWKh6Q tSE1Nto9a7pp2+qnUhI1UgtEdY3vPZd6NI7P6j4lt/FZ0j2fi61Nq9069PlCNgnO ne/tMj+NF5gECoB1zO/W1YkCUyJfzjNE+SCN5VCr1eruRzWPpidu9OBtXB0= -----END CERTIFICATE-----Generated at Sat Oct 18 02:36:40 2025 by rpki-client