$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ec3a66d-4cd2-4341-8712-3a7be69c31ad.roa File: 3ec3a66d-4cd2-4341-8712-3a7be69c31ad.roa (raw, json) Hash identifier: vmw9uHkytGeYbroUcn+uLqIvMwj9Tz8JmJtzjQB33+w= Subject key identifier: AF:1A:33:8F:60:A6:F9:41:BD:FD:10:B1:62:12:63:D3:5A:BE:9C:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72A2FA662F89E9540A9F08D4DAF4B08547B1187B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ec3a66d-4cd2-4341-8712-3a7be69c31ad.roa Signing time: Mon 22 Sep 2025 17:24:09 +0000 ROA not before: Mon 22 Sep 2025 17:24:09 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a2:fa:66:2f:89:e9:54:0a:9f:08:d4:da:f4:b0:85:47:b1:18:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:24:09 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=89bfe4b65ea1f10cc0826c299dd283df6b51ab02b74122e817d8c3c64b737a0b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8c:bf:79:bd:c9:00:27:b0:da:05:8a:df:78: 15:31:f1:12:20:34:78:6c:f9:9a:35:91:ff:7f:41: 19:2d:57:36:fa:99:4a:c7:f4:9d:a5:2b:31:a1:ec: 73:18:fc:cd:5e:c9:9d:45:68:70:60:10:42:61:1b: c8:3b:5e:98:b2:5e:19:d7:c1:04:8b:c1:c4:87:97: 62:3f:87:82:1e:82:ab:fe:72:0f:58:cc:f2:ec:6b: 54:98:9a:c3:70:f8:31:2f:93:b9:ce:02:a9:91:d3: 6a:49:cf:20:5d:dd:62:c5:98:38:07:93:1f:39:58: a7:60:8c:30:1c:c9:4a:0c:49:45:49:36:3b:01:4c: 82:55:5d:4f:a9:82:34:ca:7e:dc:d2:d7:3f:1e:7e: cf:89:a3:65:14:6c:fd:17:8a:bc:f4:21:14:0c:1f: f1:1a:c0:d8:0f:c8:69:ab:c9:2c:a6:ec:5a:31:0c: aa:63:79:5a:95:e8:91:1c:e0:cf:95:cc:8d:1b:5f: 00:0e:fa:0c:17:0d:fe:0b:3c:2f:c6:b8:f7:8d:84: fc:1e:97:29:4f:2c:78:7f:79:c0:78:dc:b2:13:91: 80:33:c1:da:9e:6d:98:9c:2c:bc:ec:32:87:10:94: 86:5b:71:c0:f6:13:7e:a5:5d:3d:b3:31:b0:23:c6: 65:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1A:33:8F:60:A6:F9:41:BD:FD:10:B1:62:12:63:D3:5A:BE:9C:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ec3a66d-4cd2-4341-8712-3a7be69c31ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.106.0/24 Signature Algorithm: sha256WithRSAEncryption 77:ce:dc:7a:a2:9f:45:97:47:14:41:92:15:e0:77:4a:d6:78: 8c:3e:43:24:91:a3:e8:9a:0e:66:f2:37:78:1e:52:d9:a4:bc: 30:6e:ef:18:81:56:b3:0f:94:59:4a:3f:a6:f6:61:61:b4:5e: 40:93:76:1a:3d:7d:5d:b4:5d:f1:54:45:f0:91:fb:64:4f:26: 5e:4b:38:8e:f2:de:c3:41:de:c7:42:8f:a6:e0:03:52:09:63: b9:1c:da:03:09:4a:df:ea:eb:1a:40:20:cf:0f:12:11:69:60: e8:66:a7:7c:d7:1a:e6:62:bb:7f:2e:05:2c:bf:7a:51:91:e6: 0a:8d:82:f5:7c:67:cf:fa:a9:9a:5e:74:13:4b:b4:19:1f:bb: c3:5c:83:c2:c1:1d:67:42:de:6f:42:67:8e:47:d9:f3:45:d3: 04:37:02:fa:6d:48:98:18:13:dc:cc:27:4b:cf:44:42:e0:ab: bd:a9:c0:39:b6:6f:93:6a:cf:e9:10:c6:11:f6:bc:18:9a:5e: ee:fe:db:82:26:1c:64:53:9e:15:d9:9a:f0:21:9f:67:85:86: 2e:db:da:93:76:4c:60:a5:df:d1:2c:ba:ab:d4:7b:f8:be:93: 58:61:58:75:1d:d4:06:86:7e:05:ef:8e:e9:42:18:72:dd:41: 62:63:f0:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcqL6Zi+J6VQKnwjU2vSwhUexGHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTcyNDA5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OWJmZTRiNjVlYTFmMTBjYzA4MjZjMjk5ZGQyODNkZjZi NTFhYjAyYjc0MTIyZTgxN2Q4YzNjNjRiNzM3YTBiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChjL95vckAJ7DaBYrfeBUx8RIgNHhs+Zo1kf9/QRktVzb6 mUrH9J2lKzGh7HMY/M1eyZ1FaHBgEEJhG8g7XpiyXhnXwQSLwcSHl2I/h4Iegqv+ cg9YzPLsa1SYmsNw+DEvk7nOAqmR02pJzyBd3WLFmDgHkx85WKdgjDAcyUoMSUVJ NjsBTIJVXU+pgjTKftzS1z8efs+Jo2UUbP0Xirz0IRQMH/EawNgPyGmrySym7Fox DKpjeVqV6JEc4M+VzI0bXwAO+gwXDf4LPC/GuPeNhPwelylPLHh/ecB43LITkYAz wdqebZicLLzsMocQlIZbccD2E36lXT2zMbAjxmWbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrxozj2Cm+UG9/RCxYhJj01q+nMAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNlYzNhNjZkLTRjZDItNDM0MS04NzEyLTNhN2JlNjljMzFhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm2owDQYJKoZIhvcNAQELBQADggEBAHfO3Hqin0WXRxRBkhXgd0rWeIw+ QySRo+iaDmbyN3geUtmkvDBu7xiBVrMPlFlKP6b2YWG0XkCTdho9fV20XfFURfCR +2RPJl5LOI7y3sNB3sdCj6bgA1IJY7kc2gMJSt/q6xpAIM8PEhFpYOhmp3zXGuZi u38uBSy/elGR5gqNgvV8Z8/6qZpedBNLtBkfu8Ncg8LBHWdC3m9CZ45H2fNF0wQ3 AvptSJgYE9zMJ0vPRELgq72pwDm2b5Nqz+kQxhH2vBiaXu7+24ImHGRTnhXZmvAh n2eFhi7b2pN2TGCl39EsuqvUe/i+k1hhWHUd1AaGfgXvjulCGHLdQWJj8Kw= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:07 2025 by rpki-client