$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ad4dac74-602e-419e-8789-fd7f5c7a7819.roa File: ad4dac74-602e-419e-8789-fd7f5c7a7819.roa (raw, json) Hash identifier: VOrplXGZ2NR7PJdrLNxeJ4CTSj+x+2Imv2XgIRxKCbk= Subject key identifier: 45:E5:B8:43:B1:BC:83:18:65:9F:E0:EC:85:AB:86:48:A6:01:EC:44 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 35E36A1801C1539288794C396CB9C8EBDA0CD980 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ad4dac74-602e-419e-8789-fd7f5c7a7819.roa Signing time: Fri 26 Sep 2025 16:32:22 +0000 ROA not before: Fri 26 Sep 2025 16:32:22 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.42.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e3:6a:18:01:c1:53:92:88:79:4c:39:6c:b9:c8:eb:da:0c:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 16:32:22 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=d01414f63fcace087a8e58fd45166cc59631df72490e24eb25754c4afa2bdfeb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:47:95:70:28:76:d7:6d:6a:9f:70:79:50:a5: 4e:ee:6d:d6:c1:b3:0b:42:77:8f:e9:5b:37:05:c5: ca:05:0e:ab:06:00:2d:b8:70:d8:96:3b:91:72:13: 04:5f:32:b5:6c:86:16:8f:e1:e2:11:11:f9:c7:9b: 15:a0:e9:6f:74:ea:03:22:12:df:63:c3:91:6e:c0: a2:25:f7:03:99:20:76:a1:bc:35:61:99:90:dc:cf: 8a:cd:ea:5d:c0:d9:e6:5a:01:47:0d:55:fc:00:40: b8:0f:cc:fb:67:d6:8c:66:e3:36:d3:b6:0a:d8:9b: 55:ec:d8:0b:fe:bb:24:e1:16:df:b4:d8:68:22:54: d9:ed:74:ec:07:9a:17:88:fb:0d:df:b3:0c:31:a9: 27:92:1c:cb:f8:e9:a5:5c:9c:58:fb:d6:18:b2:4e: 54:64:ff:ca:f5:78:a9:4f:14:87:43:af:ea:70:81: e0:df:26:d3:c7:e4:7f:8a:09:97:94:c1:f3:2e:f1: a9:b7:c6:c9:73:1b:49:21:cc:7f:db:75:bf:84:9a: 4c:79:32:a8:0d:73:27:26:cc:58:4b:98:57:c6:56: c8:e6:8e:4d:ee:23:5d:d7:fa:2f:9a:3e:83:69:04: 56:3e:b1:ee:dd:6c:7e:b9:51:e5:be:bd:22:32:e5: b4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E5:B8:43:B1:BC:83:18:65:9F:E0:EC:85:AB:86:48:A6:01:EC:44 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ad4dac74-602e-419e-8789-fd7f5c7a7819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.42.0.0/16 Signature Algorithm: sha256WithRSAEncryption 69:eb:4c:90:86:f6:b2:14:a9:81:03:b9:1d:ae:34:11:5e:45: a5:1d:b7:94:3d:57:ae:a5:0e:d5:b1:3d:32:f9:d2:27:ac:d8: a0:1b:6d:d3:67:5d:7f:28:e9:c7:20:d2:fd:35:d4:98:9b:8e: 63:7a:7e:8a:44:25:e2:03:f7:45:f7:de:79:84:74:5a:b3:94: 9c:71:e8:7f:20:90:7f:42:ce:5e:7b:62:c8:3d:80:0e:2b:ff: 3a:f6:98:47:f6:4c:e1:39:4c:73:a5:c3:74:39:3c:5e:12:ab: 30:4b:6a:3f:b0:74:bb:7c:30:cb:98:45:d4:c2:2c:fd:9f:70: 49:fa:d3:85:b4:b5:b5:61:a8:d2:ab:c3:8a:21:27:bc:0e:6c: ee:5d:d8:26:b9:53:14:4f:09:49:f2:87:25:c1:30:49:2d:2f: 8d:b9:e0:ab:14:35:33:4a:ca:4d:e9:06:e4:cc:d9:c5:09:4b: ba:a0:f6:85:c8:c7:24:7a:1f:5d:07:f5:2c:d1:2b:49:80:fa: 71:81:a3:19:42:de:38:57:37:67:eb:4b:3a:a0:ba:2b:3a:87: 15:55:a6:66:d6:42:93:54:3e:c3:4b:b6:80:42:9d:2f:e7:d1: cb:19:69:ed:75:a8:6b:e9:88:5c:ba:4c:28:f5:de:4a:0b:47: a5:12:24:8b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNeNqGAHBU5KIeUw5bLnI69oM2YAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTYzMjIyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDE0MTRmNjNmY2FjZTA4N2E4ZTU4ZmQ0NTE2NmNjNTk2 MzFkZjcyNDkwZTI0ZWIyNTc1NGM0YWZhMmJkZmViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVR5VwKHbXbWqfcHlQpU7ubdbBswtCd4/pWzcFxcoFDqsG AC24cNiWO5FyEwRfMrVshhaP4eIREfnHmxWg6W906gMiEt9jw5FuwKIl9wOZIHah vDVhmZDcz4rN6l3A2eZaAUcNVfwAQLgPzPtn1oxm4zbTtgrYm1Xs2Av+uyThFt+0 2GgiVNntdOwHmheI+w3fswwxqSeSHMv46aVcnFj71hiyTlRk/8r1eKlPFIdDr+pw geDfJtPH5H+KCZeUwfMu8am3xslzG0khzH/bdb+Emkx5MqgNcycmzFhLmFfGVsjm jk3uI13X+i+aPoNpBFY+se7dbH65UeW+vSIy5bQ1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUReW4Q7G8gxhln+DshauGSKYB7EQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FkNGRhYzc0LTYwMmUtNDE5ZS04Nzg5LWZkN2Y1YzdhNzgxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASKjANBgkqhkiG9w0BAQsFAAOCAQEAaetMkIb2shSpgQO5Ha40EV5FpR23 lD1XrqUO1bE9MvnSJ6zYoBtt02ddfyjpxyDS/TXUmJuOY3p+ikQl4gP3RffeeYR0 WrOUnHHofyCQf0LOXntiyD2ADiv/OvaYR/ZM4TlMc6XDdDk8XhKrMEtqP7B0u3ww y5hF1MIs/Z9wSfrThbS1tWGo0qvDiiEnvA5s7l3YJrlTFE8JSfKHJcEwSS0vjbng qxQ1M0rKTekG5MzZxQlLuqD2hcjHJHofXQf1LNErSYD6cYGjGULeOFc3Z+tLOqC6 KzqHFVWmZtZCk1Q+w0u2gEKdL+fRyxlp7XWoa+mIXLpMKPXeSgtHpRIkiw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:44:16 2025 by rpki-client