$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c580ebc-cff1-4148-84be-4d7e4c2842b9.roa File: 7c580ebc-cff1-4148-84be-4d7e4c2842b9.roa (raw, json) Hash identifier: sFkr7jNbCFWB47rVqUD4YexPEnvrkwRk3iwBqDZa1FI= Subject key identifier: 3E:D6:C4:DF:0D:03:47:B7:32:2B:D7:45:55:D6:6C:4C:BC:ED:FB:3D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1112D2B402336174EF4D7FE8FB13B26F17F01ED5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c580ebc-cff1-4148-84be-4d7e4c2842b9.roa Signing time: Wed 24 Sep 2025 22:59:37 +0000 ROA not before: Wed 24 Sep 2025 22:59:37 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:12:d2:b4:02:33:61:74:ef:4d:7f:e8:fb:13:b2:6f:17:f0:1e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:59:37 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=64f25cbb0a1cadb622e4f685030062bc8e3789c1a4544a7ab2628c5c753d8377, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a3:98:8b:15:18:22:9b:40:b9:32:8d:f9:ff: ab:b6:df:1b:82:32:9f:aa:13:1a:19:3a:b5:cb:6a: 79:ad:bc:11:56:7f:9a:e2:38:42:e6:74:a1:13:f8: 53:e5:07:fc:1a:ec:e0:48:64:c4:c6:f3:57:7b:76: 81:91:5e:c4:2d:75:91:56:fd:19:87:2d:ed:f9:d9: 01:6f:57:a3:5a:7c:e9:90:f9:ba:d2:73:41:b7:06: 1c:e9:b8:94:a3:45:00:39:47:a8:33:19:37:af:41: 9f:db:e8:7a:cf:1d:c7:27:5b:f0:46:bb:ba:b3:c3: 3e:83:f9:4e:11:96:72:e7:6c:60:17:78:94:da:14: ad:43:0b:54:f9:58:81:84:40:72:99:36:d0:87:b5: 03:51:f2:19:b7:3d:bd:ca:3f:e0:2e:44:5c:68:bf: 47:89:45:f6:cd:c3:a2:85:37:4b:03:9d:66:bf:6f: 24:c9:2b:9c:46:8f:8f:8f:72:c8:9b:e6:0e:ef:ac: 3c:b8:af:97:5e:33:b7:ae:03:09:91:d6:75:24:a0: 68:f3:6c:1d:86:19:e0:75:09:5b:40:1f:cb:38:47: 92:52:01:e9:17:f6:c2:68:03:fc:72:ba:fe:69:5a: 65:1d:3a:4d:e9:45:09:5e:55:34:56:a6:c9:47:4b: 89:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D6:C4:DF:0D:03:47:B7:32:2B:D7:45:55:D6:6C:4C:BC:ED:FB:3D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c580ebc-cff1-4148-84be-4d7e4c2842b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.60.0/22 Signature Algorithm: sha256WithRSAEncryption a4:4a:9a:97:02:72:ff:b1:d4:13:b8:5f:ee:b4:50:db:62:cd: 7c:db:f4:ff:b3:25:03:a3:41:c9:37:34:de:7d:ec:67:9c:45: a6:e2:e3:a3:d7:b6:26:aa:c1:07:53:b8:61:43:cb:61:0f:b5: 11:e7:c2:3a:dc:48:2b:0d:80:95:58:67:16:c6:de:94:3a:90: 13:1e:47:1e:e2:ae:36:f5:7e:a7:62:34:b6:77:96:8a:a6:06: b5:ee:dc:0b:b8:04:99:00:e0:1a:17:5f:83:48:79:fd:36:76: 28:79:bb:31:3b:53:80:94:82:96:24:15:db:0a:a3:73:38:54: 86:3c:a2:68:dd:23:bc:93:50:f5:15:0c:51:c3:94:04:23:f6: 0f:44:1d:d6:d1:10:8d:fd:30:16:5e:d4:16:16:15:78:d8:d8: 4b:0d:7a:6d:9b:f4:09:e2:de:fc:3d:cb:d1:d1:f9:c1:a7:e5: c5:90:b7:e9:31:ff:12:a5:d4:a4:a0:e9:9b:69:61:f8:c0:9d: d4:3f:89:0e:4c:37:31:ad:ba:34:b1:cd:03:a3:99:51:cd:db: 5e:81:5c:15:93:c2:31:31:a2:53:ef:22:3e:2f:9e:39:63:aa: ad:b5:d4:60:12:cd:5d:3a:cc:83:64:63:1b:8c:ea:4e:4c:fb: 4f:d3:6b:18 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUERLStAIzYXTvTX/o+xOybxfwHtUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjI1OTM3WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NGYyNWNiYjBhMWNhZGI2MjJlNGY2ODUwMzAwNjJiYzhl Mzc4OWMxYTQ1NDRhN2FiMjYyOGM1Yzc1M2Q4Mzc3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKo5iLFRgim0C5Mo35/6u23xuCMp+qExoZOrXLanmtvBFW f5riOELmdKET+FPlB/wa7OBIZMTG81d7doGRXsQtdZFW/RmHLe352QFvV6NafOmQ +brSc0G3BhzpuJSjRQA5R6gzGTevQZ/b6HrPHccnW/BGu7qzwz6D+U4RlnLnbGAX eJTaFK1DC1T5WIGEQHKZNtCHtQNR8hm3Pb3KP+AuRFxov0eJRfbNw6KFN0sDnWa/ byTJK5xGj4+Pcsib5g7vrDy4r5deM7euAwmR1nUkoGjzbB2GGeB1CVtAH8s4R5JS AekX9sJoA/xyuv5pWmUdOk3pRQleVTRWpslHS4l7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPtbE3w0DR7cyK9dFVdZsTLzt+z0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdjNTgwZWJjLWNmZjEtNDE0OC04NGJlLTRkN2U0YzI4NDJiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQzwwDQYJKoZIhvcNAQELBQADggEBAKRKmpcCcv+x1BO4X+60UNtizXzb 9P+zJQOjQck3NN597GecRabi46PXtiaqwQdTuGFDy2EPtRHnwjrcSCsNgJVYZxbG 3pQ6kBMeRx7irjb1fqdiNLZ3loqmBrXu3Au4BJkA4BoXX4NIef02dih5uzE7U4CU gpYkFdsKo3M4VIY8omjdI7yTUPUVDFHDlAQj9g9EHdbREI39MBZe1BYWFXjY2EsN em2b9Ani3vw9y9HR+cGn5cWQt+kx/xKl1KSg6ZtpYfjAndQ/iQ5MNzGtujSxzQOj mVHN216BXBWTwjExolPvIj4vnjljqq211GASzV06zINkYxuM6k5M+0/Taxg= -----END CERTIFICATE-----Generated at Fri Oct 17 21:59:10 2025 by rpki-client