$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a1aa05a-0482-4fe1-9836-5bc059a30287.roa File: 7a1aa05a-0482-4fe1-9836-5bc059a30287.roa (raw, json) Hash identifier: tj3g/dI8waxNIOoMaJWLcOhI/S9yXtyQFcaFl0yOncs= Subject key identifier: 98:82:85:6B:E3:BB:BA:49:3C:97:85:D2:27:14:CB:C5:DB:40:FA:E3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 39DDCE43E094C742D1B3B9A9A0D69E1A5E7ADF43 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a1aa05a-0482-4fe1-9836-5bc059a30287.roa Signing time: Mon 22 Sep 2025 18:40:59 +0000 ROA not before: Mon 22 Sep 2025 18:40:59 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:dd:ce:43:e0:94:c7:42:d1:b3:b9:a9:a0:d6:9e:1a:5e:7a:df:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:40:59 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=7e897c78f294815e93c2ce755175600a3dc7a1c85c7d626bdc9c718b389d57c0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:42:78:01:6c:de:27:68:a4:16:06:97:fb:76: 14:0e:08:14:e2:7d:a8:1e:5f:8c:e4:d3:00:e3:89: b6:d3:84:29:c9:cf:56:df:dd:39:29:34:f2:e1:d9: 4b:ff:bd:bf:13:ce:9b:d7:73:d5:ca:10:f9:d0:64: 3e:ee:e5:1f:8d:93:ac:e1:ad:84:41:6e:7a:13:e4: ef:8f:76:4e:af:5a:0e:bf:35:f6:3a:88:96:27:e2: 96:40:10:df:75:85:30:f2:6f:49:be:92:b8:eb:f3: 50:27:29:20:56:d2:10:bd:c4:48:05:8f:36:5a:02: 25:66:e1:90:66:7d:20:e3:ad:d7:28:2d:52:62:a5: 1f:d2:a9:51:14:5f:18:24:06:53:2f:ab:76:bf:7f: ca:50:ce:20:e2:95:cd:0b:cc:44:7c:43:d2:d3:c1: 18:30:4d:73:70:6a:3d:26:38:60:6c:40:4f:05:bb: ca:4a:d8:9f:a0:46:65:37:cb:14:a9:e7:18:ba:4b: f4:9a:61:a2:6d:48:3d:2a:f5:73:32:dd:aa:fc:2a: e7:6d:7b:c0:2d:f7:51:b7:9f:ca:e3:0e:1d:9c:2c: 9d:59:43:43:22:3d:bc:39:41:da:21:3a:bf:ce:b9: 3f:08:fe:2b:64:76:2e:ad:e7:72:a6:6f:b3:eb:c9: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:82:85:6B:E3:BB:BA:49:3C:97:85:D2:27:14:CB:C5:DB:40:FA:E3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a1aa05a-0482-4fe1-9836-5bc059a30287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.41.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:db:be:4f:85:84:a3:7d:1a:f0:cb:d8:1f:d2:5b:6d:de:f2: 07:28:7a:9e:db:51:b7:79:34:f2:f7:7d:c9:4d:94:58:db:17: 63:61:06:81:36:10:0b:c1:b6:61:1a:bb:fa:3d:09:a7:a0:12: 16:d0:93:9b:e4:c7:77:6e:47:05:e8:b4:28:f8:bb:5c:46:f0: 69:b7:5e:49:9d:d2:98:f7:d8:2c:23:fa:49:71:69:8d:7a:74: bf:53:9a:f2:54:74:7d:8a:9d:90:68:a6:63:2a:23:e7:32:4a: 82:a1:49:22:c5:84:52:21:15:79:83:eb:a2:af:27:ad:50:e0: 98:e3:40:fa:ac:0b:15:2d:a4:65:27:98:59:86:af:47:45:4a: d0:2b:06:a8:b1:2c:08:0d:da:e4:c2:23:53:29:b9:d9:a0:e5: 65:5a:ba:5f:2a:14:f4:43:62:5a:0d:f6:b1:5c:e5:c1:06:85: de:e2:8e:de:50:c0:74:05:44:74:6b:13:4d:6a:1b:83:f1:81: d5:60:00:98:0c:f9:99:a2:99:4c:c8:e7:c0:39:0d:1b:de:a8: 0a:e0:bc:00:c3:ea:bc:90:02:3b:34:31:40:56:be:7a:81:0d: 1f:be:a9:ea:2d:3c:13:39:60:50:29:89:93:94:6b:84:af:36: 26:1f:a3:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOd3OQ+CUx0LRs7mpoNaeGl5630MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTg0MDU5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTg5N2M3OGYyOTQ4MTVlOTNjMmNlNzU1MTc1NjAwYTNk YzdhMWM4NWM3ZDYyNmJkYzljNzE4YjM4OWQ1N2MwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2QngBbN4naKQWBpf7dhQOCBTifageX4zk0wDjibbThCnJ z1bf3TkpNPLh2Uv/vb8TzpvXc9XKEPnQZD7u5R+Nk6zhrYRBbnoT5O+Pdk6vWg6/ NfY6iJYn4pZAEN91hTDyb0m+krjr81AnKSBW0hC9xEgFjzZaAiVm4ZBmfSDjrdco LVJipR/SqVEUXxgkBlMvq3a/f8pQziDilc0LzER8Q9LTwRgwTXNwaj0mOGBsQE8F u8pK2J+gRmU3yxSp5xi6S/SaYaJtSD0q9XMy3ar8Kudte8At91G3n8rjDh2cLJ1Z Q0MiPbw5QdohOr/OuT8I/itkdi6t53Kmb7PryZG1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmIKFa+O7ukk8l4XSJxTLxdtA+uMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdhMWFhMDVhLTA0ODItNGZlMS05ODM2LTViYzA1OWEzMDI4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoSkwDQYJKoZIhvcNAQELBQADggEBAB/bvk+FhKN9GvDL2B/SW23e8gco ep7bUbd5NPL3fclNlFjbF2NhBoE2EAvBtmEau/o9CaegEhbQk5vkx3duRwXotCj4 u1xG8Gm3Xkmd0pj32Cwj+klxaY16dL9TmvJUdH2KnZBopmMqI+cySoKhSSLFhFIh FXmD66KvJ61Q4JjjQPqsCxUtpGUnmFmGr0dFStArBqixLAgN2uTCI1Mpudmg5WVa ul8qFPRDYloN9rFc5cEGhd7ijt5QwHQFRHRrE01qG4PxgdVgAJgM+ZmimUzI58A5 DRveqArgvADD6ryQAjs0MUBWvnqBDR++qeotPBM5YFApiZOUa4SvNiYfo7Q= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:15 2025 by rpki-client