$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2579f5-f2b5-43e8-871b-7d661a802641.roa File: 3f2579f5-f2b5-43e8-871b-7d661a802641.roa (raw, json) Hash identifier: KFMqCeFkFIW2M8PZTso75GiTgegnAdnUfSDnctbPnU4= Subject key identifier: 6D:9D:17:2E:FA:CE:63:EB:F5:1A:35:AD:DB:56:86:37:52:AC:FB:7B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 36E63C8AF22998674C54C259D737CB1F27EF10A6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2579f5-f2b5-43e8-871b-7d661a802641.roa Signing time: Mon 01 Sep 2025 17:30:43 +0000 ROA not before: Mon 01 Sep 2025 17:30:43 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 18.253.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e6:3c:8a:f2:29:98:67:4c:54:c2:59:d7:37:cb:1f:27:ef:10:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 1 17:30:43 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=1aee564a182d4aa041333a9ef94b8f1a4a91c2ce5805d12443f44c1a60004b5f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:89:32:c7:5a:8b:d5:89:45:d4:36:56:bd:ff: 3a:5a:3c:c8:39:ff:90:b2:45:e9:45:68:6d:e9:47: 66:13:61:37:27:02:32:0b:0f:ee:91:a3:6c:fa:73: 19:30:94:ed:9d:8f:0c:a9:2e:e9:d7:19:af:ca:55: e5:c7:c7:17:29:70:1a:18:07:35:10:ca:0c:9c:e8: 31:cf:6f:24:1f:5e:12:08:b9:ce:38:05:67:b4:10: c0:74:0a:e5:82:f0:cb:17:79:c4:51:cc:c7:20:99: 47:29:c2:d4:88:6d:7a:39:0f:cd:2e:b1:8c:93:29: d5:80:96:c2:b0:65:f8:36:aa:de:68:d3:7e:d5:e1: b9:6a:c4:c1:5a:53:4c:92:84:47:1b:2a:d8:2c:04: 8d:f2:eb:5a:18:d2:27:cd:1c:43:41:86:63:1e:31: 7b:b8:60:13:de:f7:d8:50:2d:aa:d9:ec:3d:67:62: c0:bb:16:cc:fb:d1:1d:87:32:5c:4a:b6:fb:e0:84: aa:55:28:40:14:60:23:23:e1:e2:2c:4b:e4:5d:18: ef:48:9a:c3:be:91:e2:d0:38:a3:fa:ce:73:19:83: 82:85:8c:e0:7c:72:58:fc:9b:5d:e1:fa:99:a9:3a: b6:2a:cd:c1:23:91:ab:0e:d3:d7:e5:d9:f5:76:f7: 14:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9D:17:2E:FA:CE:63:EB:F5:1A:35:AD:DB:56:86:37:52:AC:FB:7B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2579f5-f2b5-43e8-871b-7d661a802641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.253.128.0/17 Signature Algorithm: sha256WithRSAEncryption a3:c8:91:e0:28:c9:93:ce:1a:aa:da:4b:3d:89:28:a6:be:8a: bd:e3:39:e5:56:6c:7d:52:dc:90:f3:ff:e6:f8:a7:d2:a2:37: ee:e7:5b:a3:54:5a:18:6b:dd:82:01:bf:bf:74:fd:33:44:62: 9b:1f:9c:dc:a4:3b:09:22:c7:e5:83:87:73:59:ce:18:33:54: 0a:7f:b6:b7:13:13:6c:3d:18:69:fd:8f:a4:2b:7a:8c:63:41: 47:f6:67:81:0e:b9:27:f7:c7:fd:85:a2:95:ac:24:8b:54:86: 8f:94:98:18:78:5e:e1:5f:ca:ec:3c:43:37:12:0f:85:a6:8f: 04:c4:dd:bf:6e:38:cd:65:4e:71:02:32:d7:05:32:3e:34:cf: ea:e6:8c:06:4a:6a:a2:e8:57:03:46:6e:07:32:62:22:e7:90: 88:f6:ed:83:15:b9:d4:fc:77:ce:80:5b:50:b5:4f:83:8d:c1: 8c:34:4f:c5:d5:e9:95:25:ec:7b:ff:cc:a0:6b:09:53:5c:2e: 02:1a:77:a9:ad:bf:43:b8:d4:cf:61:d7:d4:00:d6:da:ac:79: 29:ae:27:c3:e5:cd:e1:d5:d4:14:3a:07:74:ac:b0:00:63:db: a5:bd:6c:8a:e9:09:88:3c:bf:69:08:47:aa:2a:a3:5e:14:ce: 60:d6:66:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNuY8ivIpmGdMVMJZ1zfLHyfvEKYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTAxMTczMDQzWhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYWVlNTY0YTE4MmQ0YWEwNDEzMzNhOWVmOTRiOGYxYTRh OTFjMmNlNTgwNWQxMjQ0M2Y0NGMxYTYwMDA0YjVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDniTLHWovViUXUNla9/zpaPMg5/5CyRelFaG3pR2YTYTcn AjILD+6Ro2z6cxkwlO2djwypLunXGa/KVeXHxxcpcBoYBzUQygyc6DHPbyQfXhII uc44BWe0EMB0CuWC8MsXecRRzMcgmUcpwtSIbXo5D80usYyTKdWAlsKwZfg2qt5o 037V4blqxMFaU0yShEcbKtgsBI3y61oY0ifNHENBhmMeMXu4YBPe99hQLarZ7D1n YsC7Fsz70R2HMlxKtvvghKpVKEAUYCMj4eIsS+RdGO9ImsO+keLQOKP6znMZg4KF jOB8clj8m13h+pmpOrYqzcEjkasO09fl2fV29xTVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbZ0XLvrOY+v1GjWt21aGN1Ks+3swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNmMjU3OWY1LWYyYjUtNDNlOC04NzFiLTdkNjYxYTgwMjY0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcS/YAwDQYJKoZIhvcNAQELBQADggEBAKPIkeAoyZPOGqraSz2JKKa+ir3j OeVWbH1S3JDz/+b4p9KiN+7nW6NUWhhr3YIBv790/TNEYpsfnNykOwkix+WDh3NZ zhgzVAp/trcTE2w9GGn9j6QreoxjQUf2Z4EOuSf3x/2FopWsJItUho+UmBh4XuFf yuw8QzcSD4WmjwTE3b9uOM1lTnECMtcFMj40z+rmjAZKaqLoVwNGbgcyYiLnkIj2 7YMVudT8d86AW1C1T4ONwYw0T8XV6ZUl7Hv/zKBrCVNcLgIad6mtv0O41M9h19QA 1tqseSmuJ8PlzeHV1BQ6B3SssABj26W9bIrpCYg8v2kIR6oqo14UzmDWZpg= -----END CERTIFICATE-----Generated at Fri Sep 19 03:30:48 2025 by rpki-client