$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3a79118-0ecc-4144-8c59-ea34075056da.roa File: a3a79118-0ecc-4144-8c59-ea34075056da.roa (raw, json) Hash identifier: M10otow8wqp8Ya6V9E2jMeLsuPKSGV5Fs65Luhy3piQ= Subject key identifier: 0B:F1:FF:D8:2C:F2:88:7F:98:A8:35:EA:60:9F:DC:CC:89:43:88:2C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 276AD3C22E21AEF88040C0A9AE84EBB80F0E224A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3a79118-0ecc-4144-8c59-ea34075056da.roa Signing time: Mon 22 Sep 2025 21:31:27 +0000 ROA not before: Mon 22 Sep 2025 21:31:27 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6a:d3:c2:2e:21:ae:f8:80:40:c0:a9:ae:84:eb:b8:0f:0e:22:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:31:27 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=014977c2e5fdf368d61c7f7564bee39ee2a7853fba3d9a2cc4a350c6e66e9f01, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:53:0e:b4:5e:53:a6:38:0b:96:fa:fd:65: 75:92:53:61:c1:ee:2d:a9:5b:8a:bf:9d:10:17:d3: a5:71:ce:d5:5c:85:be:bf:1e:86:54:bd:69:07:f8: 06:2a:f4:cf:a5:04:5b:c9:34:d0:92:97:d9:7a:08: 1d:32:b2:55:2f:de:fd:1c:37:1a:c3:1f:32:18:88: b1:5b:c7:c0:59:65:2f:6b:69:9d:fe:48:e7:ba:a2: dd:6f:b2:ef:b8:b2:ab:52:a6:20:85:88:fe:29:cc: b5:96:6f:55:ac:34:7d:ea:f3:29:3f:f9:b0:45:75: 15:38:79:36:ce:be:24:88:b1:55:08:ab:a9:ec:93: ad:06:38:9f:98:a0:1b:1e:48:64:fa:68:aa:e9:37: fa:fe:1f:0a:3c:26:90:c4:56:f5:cd:60:58:1b:06: e7:ad:d4:b7:c4:21:46:28:c0:c7:f2:23:53:c5:5c: cc:23:7e:e0:a4:72:4e:d4:9c:99:47:2d:93:f1:65: 99:58:0b:1b:b2:ee:ed:a7:c5:1d:a0:db:47:13:71: d5:f2:af:32:f2:e7:5c:cc:3f:ab:84:d1:dd:b0:a7: e9:72:87:da:76:d8:78:d2:0e:18:48:5f:db:ed:7a: f6:9d:c0:8e:65:f4:9d:32:17:93:4d:bf:51:7e:23: 7c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F1:FF:D8:2C:F2:88:7F:98:A8:35:EA:60:9F:DC:CC:89:43:88:2C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3a79118-0ecc-4144-8c59-ea34075056da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.185.0/24 Signature Algorithm: sha256WithRSAEncryption 60:09:ba:dc:76:e7:47:50:92:13:9a:71:9e:3b:81:9b:a2:08: e7:b6:26:de:3e:53:39:07:f0:f1:58:93:58:2b:7d:4e:92:bd: d4:c6:2f:77:c1:71:ce:b7:a1:d3:bd:09:5c:83:fa:4a:af:9e: 0c:41:e6:81:8c:07:94:ef:bb:03:b8:4e:a5:6f:9e:01:e1:59: 46:bc:e7:3d:45:a0:e7:fd:2d:83:a2:48:63:09:ae:d1:4f:97: cf:cd:1c:96:f7:b2:e8:64:46:d5:1d:4d:56:c2:c6:b9:f0:ec: 24:97:3c:fe:1c:62:4f:95:db:f1:33:90:e4:d1:d9:09:18:27: a5:1d:8a:57:1c:16:00:f4:a0:6d:e0:42:af:dd:ba:82:b0:92: d6:37:e1:5b:db:50:e3:6e:6c:bb:b2:4c:6c:f3:8a:bd:07:a9: 64:a2:bb:8d:48:23:26:c3:b9:ea:69:61:d1:c7:c7:82:4e:55: d8:8b:a1:54:19:38:35:c1:00:17:23:2d:f0:dd:54:19:0f:68: 9c:5d:47:87:84:c5:36:de:6f:e8:7d:b7:1d:59:2c:61:d3:b6: 1f:72:4c:c9:25:98:81:64:9d:26:cc:56:6e:06:86:eb:16:09: 1e:bf:23:3a:f8:45:ac:6e:b4:1e:c7:e5:64:1d:57:76:46:cd: 55:4a:9b:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ2rTwi4hrviAQMCproTruA8OIkowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjEzMTI3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTQ5NzdjMmU1ZmRmMzY4ZDYxYzdmNzU2NGJlZTM5ZWUy YTc4NTNmYmEzZDlhMmNjNGEzNTBjNmU2NmU5ZjAxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzNFMOtF5TpjgLlvr9ZXWSU2HB7i2pW4q/nRAX06VxztVc hb6/HoZUvWkH+AYq9M+lBFvJNNCSl9l6CB0yslUv3v0cNxrDHzIYiLFbx8BZZS9r aZ3+SOe6ot1vsu+4sqtSpiCFiP4pzLWWb1WsNH3q8yk/+bBFdRU4eTbOviSIsVUI q6nsk60GOJ+YoBseSGT6aKrpN/r+Hwo8JpDEVvXNYFgbBuet1LfEIUYowMfyI1PF XMwjfuCkck7UnJlHLZPxZZlYCxuy7u2nxR2g20cTcdXyrzLy51zMP6uE0d2wp+ly h9p22HjSDhhIX9vtevadwI5l9J0yF5NNv1F+I3w/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC/H/2CzyiH+YqDXqYJ/czIlDiCwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EzYTc5MTE4LTBlY2MtNDE0NC04YzU5LWVhMzQwNzUwNTZkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7rkwDQYJKoZIhvcNAQELBQADggEBAGAJutx250dQkhOacZ47gZuiCOe2 Jt4+UzkH8PFYk1grfU6SvdTGL3fBcc63odO9CVyD+kqvngxB5oGMB5TvuwO4TqVv ngHhWUa85z1FoOf9LYOiSGMJrtFPl8/NHJb3suhkRtUdTVbCxrnw7CSXPP4cYk+V 2/EzkOTR2QkYJ6UdilccFgD0oG3gQq/duoKwktY34VvbUONubLuyTGzzir0HqWSi u41IIybDueppYdHHx4JOVdiLoVQZODXBABcjLfDdVBkPaJxdR4eExTbeb+h9tx1Z LGHTth9yTMklmIFknSbMVm4GhusWCR6/Izr4RaxutB7H5WQdV3ZGzVVKm4I= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:53 2025 by rpki-client