$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fb2d443-3f69-4b47-85e8-421e99959c6c.roa File: 7fb2d443-3f69-4b47-85e8-421e99959c6c.roa (raw, json) Hash identifier: YVHljpQGbFOMbuSOVCRyQ/8wbb9SJSZOH49u+uzJgTE= Subject key identifier: AC:85:E3:6E:A7:BC:44:1D:B9:C9:AA:76:03:1F:33:4A:3F:D6:46:FB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0A1350572F45CB53E7CB80694A0A345FE17B9490 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fb2d443-3f69-4b47-85e8-421e99959c6c.roa Signing time: Fri 26 Sep 2025 16:14:56 +0000 ROA not before: Fri 26 Sep 2025 16:14:56 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.141.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:13:50:57:2f:45:cb:53:e7:cb:80:69:4a:0a:34:5f:e1:7b:94:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 16:14:56 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=3b3086af9743356ebe6ec2989eb35bfd1fc81004ffc5aabf2a04183eeb1c997a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:f2:50:85:27:a4:b1:73:ba:4c:7e:af:5c: 1e:ba:c3:dd:5f:bb:67:52:9e:98:09:84:cd:ef:3f: c3:be:46:c5:8a:72:94:48:b1:e7:07:bc:b3:e4:ff: 1d:10:b2:35:2e:71:7d:18:12:5b:ba:0e:d4:6b:81: c2:a2:e0:c6:32:05:c9:60:1f:7c:ec:3c:e9:1c:b2: f0:27:fc:ae:9e:67:ca:31:06:0a:73:eb:8a:78:03: 67:ad:8e:76:9b:b6:2b:8c:62:e4:bc:98:ae:df:74: a7:ee:2f:20:3d:57:3e:50:dc:5a:ef:8a:54:a4:b5: 1c:d6:fd:9d:b7:3d:9e:89:9d:66:30:0e:7b:23:5a: 17:55:93:3a:18:19:9e:96:e9:ea:f6:6b:61:d7:66: 3e:a2:2f:9a:3c:cb:57:5f:eb:bc:f2:36:a9:6a:b9: 01:07:1a:9d:07:16:42:83:1a:bb:a9:89:f0:d5:2d: 78:5d:7c:cb:99:5d:8f:6d:a5:02:18:0b:ca:d6:ab: 5e:dc:8a:18:6e:31:f8:8a:4b:17:ea:5e:4d:3f:5c: 75:be:ed:f2:dd:48:27:56:07:e6:62:fa:92:74:28: e9:1d:4f:d4:de:97:01:9b:33:96:ef:be:9c:c2:68: e3:6d:52:e9:3b:b4:47:dc:06:b9:50:25:0b:74:b2: 4d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:85:E3:6E:A7:BC:44:1D:B9:C9:AA:76:03:1F:33:4A:3F:D6:46:FB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fb2d443-3f69-4b47-85e8-421e99959c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.141.60.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:c4:34:20:ad:d6:eb:18:30:1d:7a:91:3f:06:71:d6:fc:38: 4b:0e:5d:c1:66:84:9e:cc:4e:7f:ad:9c:e6:e4:45:af:e2:2d: 1b:5e:2d:84:40:03:36:84:57:30:cd:cb:6f:3b:ef:83:46:64: 4c:30:0d:ec:85:39:80:50:8f:e3:0c:a6:78:82:42:ee:b4:3c: 3b:82:f8:ef:c5:3e:d8:c4:ff:7e:59:fb:e1:a2:4b:23:43:d3: b8:4d:8a:f0:0a:64:f7:b9:b5:04:b8:45:ed:25:0e:a8:31:3d: b6:2d:44:20:49:96:77:6d:e9:15:67:52:a3:65:82:4b:da:ff: 05:29:39:e3:28:09:33:30:d1:97:38:ed:80:13:d6:39:60:36: 73:fb:c5:7f:dc:ba:35:0c:53:c3:33:96:61:af:e2:0e:54:68: eb:eb:f1:69:4a:e6:b5:a1:1c:c6:c6:2f:56:7f:e4:91:9d:ad: 59:82:db:36:0a:8b:9b:5a:eb:96:a4:88:73:38:66:74:fd:c8: 9d:2a:2f:00:42:9d:e8:6d:81:e1:cc:6b:5d:f7:80:cf:6f:67: a6:1c:e3:f1:37:1e:bc:ef:07:d3:9e:b1:66:2b:91:b1:d7:42: 98:e7:35:37:27:9f:46:10:22:63:8d:3f:25:c4:11:ca:d3:b0: bf:7d:35:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUChNQVy9Fy1Pny4BpSgo0X+F7lJAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTYxNDU2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjMwODZhZjk3NDMzNTZlYmU2ZWMyOTg5ZWIzNWJmZDFm YzgxMDA0ZmZjNWFhYmYyYTA0MTgzZWViMWM5OTdhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI0/JQhSeksXO6TH6vXB66w91fu2dSnpgJhM3vP8O+RsWK cpRIsecHvLPk/x0QsjUucX0YElu6DtRrgcKi4MYyBclgH3zsPOkcsvAn/K6eZ8ox Bgpz64p4A2etjnabtiuMYuS8mK7fdKfuLyA9Vz5Q3FrvilSktRzW/Z23PZ6JnWYw DnsjWhdVkzoYGZ6W6er2a2HXZj6iL5o8y1df67zyNqlquQEHGp0HFkKDGrupifDV LXhdfMuZXY9tpQIYC8rWq17cihhuMfiKSxfqXk0/XHW+7fLdSCdWB+Zi+pJ0KOkd T9TelwGbM5bvvpzCaONtUuk7tEfcBrlQJQt0sk0zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrIXjbqe8RB25yap2Ax8zSj/WRvswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdmYjJkNDQzLTNmNjktNGI0Ny04NWU4LTQyMWU5OTk1OWM2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASjTwwDQYJKoZIhvcNAQELBQADggEBAFvENCCt1usYMB16kT8Gcdb8OEsO XcFmhJ7MTn+tnObkRa/iLRteLYRAAzaEVzDNy28774NGZEwwDeyFOYBQj+MMpniC Qu60PDuC+O/FPtjE/35Z++GiSyND07hNivAKZPe5tQS4Re0lDqgxPbYtRCBJlndt 6RVnUqNlgkva/wUpOeMoCTMw0Zc47YAT1jlgNnP7xX/cujUMU8MzlmGv4g5UaOvr 8WlK5rWhHMbGL1Z/5JGdrVmC2zYKi5ta65akiHM4ZnT9yJ0qLwBCnehtgeHMa133 gM9vZ6Yc4/E3HrzvB9OesWYrkbHXQpjnNTcnn0YQImONPyXEEcrTsL99Nd4= -----END CERTIFICATE-----Generated at Fri Oct 17 23:55:00 2025 by rpki-client