$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42228a59-9b8a-455a-9707-578aec679efa.roa File: 42228a59-9b8a-455a-9707-578aec679efa.roa (raw, json) Hash identifier: FpeLSBegfoDzl6PtV3v6eVc79p7VD/0u+KTWL3qbjDs= Subject key identifier: 07:3E:F3:27:D4:51:5E:6D:00:CA:7D:70:D4:15:F4:FA:48:81:F1:72 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 38EF527BF13EAC1E7DE2FB2E053AC49E499FDB9F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42228a59-9b8a-455a-9707-578aec679efa.roa Signing time: Mon 22 Sep 2025 18:22:02 +0000 ROA not before: Mon 22 Sep 2025 18:22:02 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ef:52:7b:f1:3e:ac:1e:7d:e2:fb:2e:05:3a:c4:9e:49:9f:db:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:22:02 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=968aaade9d4705b995b404e2458a11c65d2db4e470264ee862253741e1df035e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:ac:8b:53:6c:db:1a:25:73:d3:dd:67:80: 16:6d:ba:a8:c2:d0:9c:be:aa:54:d2:91:c9:0e:6e: 97:52:4f:78:45:5c:79:8f:b1:e9:23:9f:71:ee:a1: 66:03:6c:c6:4c:e6:c5:a5:47:8b:d7:b9:9a:b8:70: 5b:92:35:25:0f:f3:c3:3e:6d:45:07:f7:48:71:d7: e2:8e:6f:bd:20:19:ad:43:64:c3:0a:c0:d8:58:76: 36:a2:3a:af:32:7b:c1:67:68:6a:1b:e8:8e:1f:a3: 21:d4:2a:7a:56:da:39:68:b3:4d:25:f8:3b:4c:53: 1c:39:84:96:c6:bf:de:5a:51:90:da:a8:eb:23:76: b1:65:6d:0a:71:58:30:90:13:1a:8f:4c:d1:7f:e6: e3:c7:ac:c7:ed:5c:17:30:a1:ed:63:91:15:3a:3b: d0:5a:f0:16:04:07:71:fd:71:45:84:b8:c1:c3:22: e0:8f:eb:9e:31:06:fa:7d:cb:bb:fc:43:b7:71:8d: 33:77:c9:37:15:1f:44:63:ce:6b:fa:cd:ef:18:3b: 4a:80:00:bb:37:d9:2b:9b:dd:66:36:de:62:40:b4: 26:7a:2a:e2:80:07:f6:9d:d8:7a:38:9a:aa:ea:84: 01:b1:ca:d6:41:4b:3a:df:5b:30:07:8c:7e:b9:48: 56:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3E:F3:27:D4:51:5E:6D:00:CA:7D:70:D4:15:F4:FA:48:81:F1:72 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42228a59-9b8a-455a-9707-578aec679efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.228.0/24 Signature Algorithm: sha256WithRSAEncryption 18:80:bd:aa:d0:bc:e4:81:84:42:7d:df:f8:06:b7:48:e6:8e: 12:6c:d1:e3:07:5c:4f:eb:10:14:f7:a1:a3:91:3c:06:09:25: c9:c8:d0:43:7c:25:b2:42:10:6d:e9:5c:df:ac:b7:66:75:54: 54:de:9e:39:8b:7d:9e:96:a0:f4:3d:2c:6d:67:b8:9a:1f:74: 9e:34:05:36:b1:e2:50:7f:cb:74:c4:02:b3:11:86:82:80:3e: 18:63:1b:a8:b1:80:f6:02:a0:d0:7f:f9:14:b7:5a:ba:90:5c: 96:8f:2d:92:ea:87:43:39:0c:88:1d:5c:d6:03:3d:76:38:67: 94:62:63:7f:5a:10:00:39:2a:64:4f:b9:9c:ec:b9:c4:aa:c4: ea:e5:c3:05:da:df:c7:c5:58:0e:04:69:cf:8a:c3:19:45:40: d1:8a:dc:22:a2:67:ed:bf:50:74:be:58:bc:6e:6a:a9:77:03: f7:3b:04:80:19:6f:a9:9c:2a:44:6c:61:65:d7:d5:1e:8c:b3: ae:03:d4:19:b7:d8:13:67:15:f1:d3:b1:9d:ec:87:79:8d:a4: 02:dd:44:3a:12:cd:39:37:de:a7:c9:88:a3:5b:76:2d:4a:5a: 86:41:4f:fe:bc:42:f8:26:a9:c4:58:8d:da:65:07:51:2d:0d: 6a:1d:c6:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOO9Se/E+rB594vsuBTrEnkmf258wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgyMjAyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjhhYWFkZTlkNDcwNWI5OTViNDA0ZTI0NThhMTFjNjVk MmRiNGU0NzAyNjRlZTg2MjI1Mzc0MWUxZGYwMzVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBqqyLU2zbGiVz091ngBZtuqjC0Jy+qlTSkckObpdST3hF XHmPsekjn3HuoWYDbMZM5sWlR4vXuZq4cFuSNSUP88M+bUUH90hx1+KOb70gGa1D ZMMKwNhYdjaiOq8ye8FnaGob6I4foyHUKnpW2jlos00l+DtMUxw5hJbGv95aUZDa qOsjdrFlbQpxWDCQExqPTNF/5uPHrMftXBcwoe1jkRU6O9Ba8BYEB3H9cUWEuMHD IuCP654xBvp9y7v8Q7dxjTN3yTcVH0Rjzmv6ze8YO0qAALs32Sub3WY23mJAtCZ6 KuKAB/ad2Ho4mqrqhAGxytZBSzrfWzAHjH65SFb5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBz7zJ9RRXm0Ayn1w1BX0+kiB8XIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQyMjI4YTU5LTliOGEtNDU1YS05NzA3LTU3OGFlYzY3OWVmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoOQwDQYJKoZIhvcNAQELBQADggEBABiAvarQvOSBhEJ93/gGt0jmjhJs 0eMHXE/rEBT3oaORPAYJJcnI0EN8JbJCEG3pXN+st2Z1VFTenjmLfZ6WoPQ9LG1n uJofdJ40BTax4lB/y3TEArMRhoKAPhhjG6ixgPYCoNB/+RS3WrqQXJaPLZLqh0M5 DIgdXNYDPXY4Z5RiY39aEAA5KmRPuZzsucSqxOrlwwXa38fFWA4Eac+KwxlFQNGK 3CKiZ+2/UHS+WLxuaql3A/c7BIAZb6mcKkRsYWXX1R6Ms64D1Bm32BNnFfHTsZ3s h3mNpALdRDoSzTk33qfJiKNbdi1KWoZBT/68QvgmqcRYjdplB1EtDWodxmY= -----END CERTIFICATE-----Generated at Sat Oct 18 02:38:02 2025 by rpki-client