$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42a9c30f-0a5b-4ce0-b73d-560fee070158.roa File: 42a9c30f-0a5b-4ce0-b73d-560fee070158.roa (raw, json) Hash identifier: BU4KTK5lNueAITHm9AAiU94UP0Y9PhwR2aJfvLMwiIA= Subject key identifier: FA:FB:A8:EA:1F:6A:57:4F:91:8D:59:D8:FB:19:57:E5:53:FF:4C:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3E1116F7142FE9957D9264E90F36C2C757B86265 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42a9c30f-0a5b-4ce0-b73d-560fee070158.roa Signing time: Mon 22 Sep 2025 18:09:08 +0000 ROA not before: Mon 22 Sep 2025 18:09:08 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:11:16:f7:14:2f:e9:95:7d:92:64:e9:0f:36:c2:c7:57:b8:62:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:09:08 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=785015787528c63c9bb825211d9dfd0a5389f23520703321bd8edda27d42148e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:0a:96:d4:e2:b4:1d:bc:16:d8:ab:9c:66: ac:b5:21:96:41:17:3a:96:cb:46:1a:2a:84:f3:18: ad:1a:20:7f:fb:ab:ec:69:cc:37:62:0a:95:34:4e: 96:a9:1a:83:3c:40:26:9a:63:13:19:6e:af:c8:bc: c4:56:ad:3d:2d:da:45:ad:15:c8:fc:15:da:e4:32: 6d:d2:bd:8c:e1:0c:fc:ed:a2:7e:53:2d:47:bf:04: a4:fd:78:18:2a:45:c7:55:14:8e:6c:03:0e:98:66: 11:57:0a:2b:bb:79:88:b1:1d:e4:a9:01:44:0d:c9: 04:c1:6c:ab:87:e4:2c:00:cb:28:f6:4f:bc:96:ef: ed:e2:69:f6:91:49:08:ec:61:02:d7:fb:d9:87:2b: e2:bf:5a:a4:c7:52:00:d0:29:ba:4b:97:94:ee:ac: b6:58:c8:fd:8f:ef:bc:40:43:77:a7:a6:71:65:f1: 23:cf:4f:67:36:a8:27:b4:4d:b1:e3:0e:b8:06:3c: 54:80:7a:2c:80:0f:a7:10:9d:a6:2a:79:62:7a:b9: 3d:51:6a:cf:45:12:f4:11:17:4d:eb:2d:fe:2c:0b: a9:4f:92:55:32:cb:0b:67:78:96:71:32:f4:e3:62: fc:d9:c9:fc:dd:53:58:98:cd:af:f3:f6:52:9e:f6: 42:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FB:A8:EA:1F:6A:57:4F:91:8D:59:D8:FB:19:57:E5:53:FF:4C:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42a9c30f-0a5b-4ce0-b73d-560fee070158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.176.0/20 Signature Algorithm: sha256WithRSAEncryption 64:34:f6:f9:40:61:ad:04:42:5d:c1:3b:50:6e:28:8a:25:be: 86:31:ce:2d:bd:f5:1e:41:47:b2:82:87:46:6f:07:61:ff:0e: 1b:37:bc:1e:39:04:23:8e:1e:88:6a:37:69:9c:26:5c:e0:e1: 15:5d:c5:75:08:8b:6b:6e:31:2b:d3:17:8f:70:fd:af:7e:23: 86:d7:17:da:8e:cd:eb:d7:a8:7d:69:8b:b4:16:b4:fc:2e:3e: 62:a8:fa:28:69:38:5d:6a:f9:f1:d8:23:a1:5f:33:25:bd:fa: 19:e3:65:d1:77:82:51:4e:13:30:0a:6d:96:cb:b3:e0:97:f3: ba:ac:4d:7c:10:c0:f4:bb:e1:a3:01:c1:b2:a0:16:12:be:ed: 50:0f:ed:73:74:70:69:e5:2a:5c:12:4f:32:30:a1:f4:ef:87: 34:fd:09:26:62:ca:46:85:0b:c9:0f:f5:cd:b1:78:4f:31:eb: ec:d0:41:a1:8d:80:ec:f2:9a:70:08:e4:39:a9:8c:a8:5f:d3: 48:f1:66:b6:43:65:9e:4f:69:ee:29:b3:af:59:a1:6c:5c:5d: 83:e6:e9:a5:37:d6:1a:ff:b8:88:49:48:9e:ab:08:49:09:f0: 46:cd:53:f2:fb:75:6d:dd:0a:1c:42:0d:c5:5b:98:6d:6e:e4: 1b:3d:90:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPhEW9xQv6ZV9kmTpDzbCx1e4YmUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgwOTA4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODUwMTU3ODc1MjhjNjNjOWJiODI1MjExZDlkZmQwYTUz ODlmMjM1MjA3MDMzMjFiZDhlZGRhMjdkNDIxNDhlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf9QqW1OK0HbwW2KucZqy1IZZBFzqWy0YaKoTzGK0aIH/7 q+xpzDdiCpU0TpapGoM8QCaaYxMZbq/IvMRWrT0t2kWtFcj8FdrkMm3SvYzhDPzt on5TLUe/BKT9eBgqRcdVFI5sAw6YZhFXCiu7eYixHeSpAUQNyQTBbKuH5CwAyyj2 T7yW7+3iafaRSQjsYQLX+9mHK+K/WqTHUgDQKbpLl5TurLZYyP2P77xAQ3enpnFl 8SPPT2c2qCe0TbHjDrgGPFSAeiyAD6cQnaYqeWJ6uT1Ras9FEvQRF03rLf4sC6lP klUyywtneJZxMvTjYvzZyfzdU1iYza/z9lKe9kI9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+vuo6h9qV0+RjVnY+xlX5VP/TMAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQyYTljMzBmLTBhNWItNGNlMC1iNzNkLTU2MGZlZTA3MDE1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSm7AwDQYJKoZIhvcNAQELBQADggEBAGQ09vlAYa0EQl3BO1BuKIolvoYx zi299R5BR7KCh0ZvB2H/Dhs3vB45BCOOHohqN2mcJlzg4RVdxXUIi2tuMSvTF49w /a9+I4bXF9qOzevXqH1pi7QWtPwuPmKo+ihpOF1q+fHYI6FfMyW9+hnjZdF3glFO EzAKbZbLs+CX87qsTXwQwPS74aMBwbKgFhK+7VAP7XN0cGnlKlwSTzIwofTvhzT9 CSZiykaFC8kP9c2xeE8x6+zQQaGNgOzymnAI5DmpjKhf00jxZrZDZZ5Pae4ps69Z oWxcXYPm6aU31hr/uIhJSJ6rCEkJ8EbNU/L7dW3dChxCDcVbmG1u5Bs9kE8= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:03 2025 by rpki-client