$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76f7662d-0d0e-4273-b797-21f1a7f25688.roa File: 76f7662d-0d0e-4273-b797-21f1a7f25688.roa (raw, json) Hash identifier: l4PziSw3dRT+M41XzZwqNzLrDhHmnZEP3QF6hljNz2A= Subject key identifier: C5:B3:D3:A6:5E:2D:85:6C:23:2C:35:B8:36:A9:46:A3:30:95:45:FB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3BCB606379C1A7BA7B9A4D62EFD7BFA70DA3602A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76f7662d-0d0e-4273-b797-21f1a7f25688.roa Signing time: Mon 22 Sep 2025 19:42:48 +0000 ROA not before: Mon 22 Sep 2025 19:42:48 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:cb:60:63:79:c1:a7:ba:7b:9a:4d:62:ef:d7:bf:a7:0d:a3:60:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:42:48 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=1b1466208dc168d91ac9f321a0b1215ba2325f13c7fc1b1dceba88f2668aa7ab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9f:8f:5c:fd:cc:df:8c:50:7a:65:9b:f6:2a: 06:6c:65:4c:64:1e:f1:68:a9:49:b7:34:9f:70:d3: 93:30:5b:03:86:3b:1b:74:2e:1b:30:ed:38:ba:cb: 02:c2:df:6e:a7:8a:a7:8b:ec:dc:3d:42:d6:9c:e1: ac:0a:e1:7e:87:a5:58:97:03:b4:1e:fd:3e:7e:01: 8a:fc:b7:f2:da:4e:83:d4:58:64:68:a4:49:37:5b: 38:c4:4e:81:be:c9:25:fd:2a:7a:0c:78:07:cb:4e: e6:fd:33:a4:ee:c2:e7:62:9e:30:68:cd:01:13:e3: ec:fc:51:fe:20:18:9a:6a:cb:f3:62:18:69:c3:db: e4:34:6a:25:b9:75:60:c6:db:8d:75:f3:9e:75:05: 7b:73:e8:62:1a:82:8e:78:00:98:56:f3:21:bc:ca: e1:0d:51:51:9b:24:11:78:64:88:6a:54:77:cf:ea: fd:ee:b0:95:8d:c4:f8:29:fa:68:a4:ca:b9:c3:d8: bb:7a:95:68:46:38:61:ca:96:41:38:bc:21:0f:d4: a8:1f:84:47:0b:7b:70:dc:97:fd:0c:1b:f2:38:ba: 59:00:6f:6b:b2:7d:33:af:9f:cb:df:4f:82:57:ce: 7d:de:51:86:bb:41:75:46:02:d8:92:f8:a5:44:ea: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B3:D3:A6:5E:2D:85:6C:23:2C:35:B8:36:A9:46:A3:30:95:45:FB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76f7662d-0d0e-4273-b797-21f1a7f25688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.235.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:e0:c6:3c:1c:f4:38:4d:53:27:6a:c8:5e:7e:98:96:96:16: 13:f8:6c:83:08:8d:70:05:d8:ff:1d:28:1d:80:b3:81:6b:a1: cb:81:5b:1d:c8:f4:56:f2:c9:84:d4:d5:b2:5b:0d:d1:ab:f3: 5b:b9:a2:64:bf:0b:de:de:76:3b:ba:f9:c5:05:9f:10:bc:9b: 25:22:f3:7b:d7:35:27:63:7d:c3:3d:48:4e:45:26:cf:1c:72: f0:92:d8:46:37:a4:09:07:1d:89:d2:25:2e:f6:69:a7:0c:cd: bd:5c:c2:7d:68:e4:d8:86:a6:25:f9:39:a6:3b:ea:c0:c7:0c: 40:25:46:e9:86:ef:11:81:cf:31:66:fb:47:15:64:2f:35:97: 08:7a:7e:1d:47:42:49:f5:ea:c4:48:e3:b7:23:24:3e:3e:3d: d9:fb:9c:0a:fa:49:0e:ee:a1:07:cc:04:44:7d:44:d4:7c:e9: f0:fe:fb:a3:aa:0c:91:59:6e:2f:6f:2d:75:c8:d0:6d:b9:d4: f7:6e:97:fd:14:e1:34:7b:30:38:f5:77:e1:79:88:51:d6:bb: 3b:0e:97:3b:b8:f6:fd:1f:3d:03:d0:70:c4:aa:64:6d:0d:97: ff:d1:68:b6:72:4f:95:77:67:44:01:e1:b2:02:55:9f:5b:8a: 5f:94:28:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO8tgY3nBp7p7mk1i79e/pw2jYCowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTk0MjQ4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjE0NjYyMDhkYzE2OGQ5MWFjOWYzMjFhMGIxMjE1YmEy MzI1ZjEzYzdmYzFiMWRjZWJhODhmMjY2OGFhN2FiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbn49c/czfjFB6ZZv2KgZsZUxkHvFoqUm3NJ9w05MwWwOG Oxt0Lhsw7Ti6ywLC326niqeL7Nw9Qtac4awK4X6HpViXA7Qe/T5+AYr8t/LaToPU WGRopEk3WzjEToG+ySX9KnoMeAfLTub9M6TuwudinjBozQET4+z8Uf4gGJpqy/Ni GGnD2+Q0aiW5dWDG24118551BXtz6GIago54AJhW8yG8yuENUVGbJBF4ZIhqVHfP 6v3usJWNxPgp+mikyrnD2Lt6lWhGOGHKlkE4vCEP1KgfhEcLe3Dcl/0MG/I4ulkA b2uyfTOvn8vfT4JXzn3eUYa7QXVGAtiS+KVE6tfXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxbPTpl4thWwjLDW4NqlGozCVRfswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc2Zjc2NjJkLTBkMGUtNDI3My1iNzk3LTIxZjFhN2YyNTY4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpeswDQYJKoZIhvcNAQELBQADggEBAJ7gxjwc9DhNUydqyF5+mJaWFhP4 bIMIjXAF2P8dKB2As4FrocuBWx3I9FbyyYTU1bJbDdGr81u5omS/C97edju6+cUF nxC8myUi83vXNSdjfcM9SE5FJs8ccvCS2EY3pAkHHYnSJS72aacMzb1cwn1o5NiG piX5OaY76sDHDEAlRumG7xGBzzFm+0cVZC81lwh6fh1HQkn16sRI47cjJD4+Pdn7 nAr6SQ7uoQfMBER9RNR86fD++6OqDJFZbi9vLXXI0G251Pdul/0U4TR7MDj1d+F5 iFHWuzsOlzu49v0fPQPQcMSqZG0Nl//RaLZyT5V3Z0QB4bICVZ9bil+UKMM= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:24 2025 by rpki-client