$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35ca07fe-835f-40e2-9b04-18556cb71980.roa File: 35ca07fe-835f-40e2-9b04-18556cb71980.roa (raw, json) Hash identifier: +VLitcINGLcbJ77pb3sRMs9pZSJOLpzLkJ7U/A173oY= Subject key identifier: D8:68:DC:23:9B:95:7E:5E:90:83:68:9F:C6:B6:A9:85:0C:61:BC:5A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 76C0C66D6506E5386F94738EAD5A893458D672E9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35ca07fe-835f-40e2-9b04-18556cb71980.roa Signing time: Tue 21 Oct 2025 02:50:04 +0000 ROA not before: Tue 21 Oct 2025 02:50:04 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.50.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c0:c6:6d:65:06:e5:38:6f:94:73:8e:ad:5a:89:34:58:d6:72:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 02:50:04 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=7d785e3de183797aa894995a31a7a81a1f9f1969241fa15307af94e2e6d21207, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:35:4d:0e:ac:f3:8e:3f:d7:94:79:e9:97:fa: ce:7f:52:ef:e0:88:0f:a8:ea:23:ed:53:d3:5c:87: b9:f2:a6:99:8e:48:6e:1b:c7:d0:7d:80:7a:60:5b: 05:a9:6d:a0:50:dc:e3:a2:d5:f9:ef:e7:7f:4c:3b: de:1a:73:ae:26:cd:f0:dd:f3:f4:e8:58:5c:dc:ea: 01:f6:f1:0d:f1:8e:75:5e:46:65:8d:48:17:7f:a1: a5:1c:c7:93:53:43:05:c5:93:d4:9a:f4:d1:bf:fc: 16:82:cc:16:8f:c8:62:e2:81:29:6b:6b:ea:a1:4b: 07:5c:7d:ac:e7:a0:8f:44:f1:62:19:d4:41:a2:55: ac:2e:24:fa:f6:19:96:25:f6:dc:b0:65:9e:7f:2f: 82:9c:5f:e4:84:cf:42:cd:39:f5:15:b0:51:1c:35: 7c:e6:9f:17:8c:bf:ad:85:0d:63:2b:d4:d7:c6:d8: 9c:e0:5b:d8:9a:27:d1:0d:12:67:d7:f7:eb:d1:cd: e3:c5:a5:2e:9a:90:3e:5c:f4:fc:21:80:b2:16:6c: e1:a0:e7:f5:f6:f2:7e:3b:76:b8:d0:1b:42:83:1e: da:8e:5d:ab:89:72:4b:16:c2:b5:09:f2:8f:67:75: 49:50:a0:50:33:b0:a6:45:f3:69:dc:2b:17:74:22: df:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:68:DC:23:9B:95:7E:5E:90:83:68:9F:C6:B6:A9:85:0C:61:BC:5A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35ca07fe-835f-40e2-9b04-18556cb71980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.50.0.0/15 Signature Algorithm: sha256WithRSAEncryption 7e:7d:0f:7e:8e:be:bc:33:bc:65:2a:6d:db:84:e6:a9:07:5d: a4:01:e0:0c:e2:28:3a:b2:1c:ea:fd:b2:67:0a:60:57:c2:74: a6:1a:ab:80:02:15:41:ef:58:fb:24:8d:7b:e2:7f:61:43:8e: 7d:59:04:2f:a7:e1:55:77:9d:d9:bc:df:a3:ba:76:7a:00:9c: 3c:42:30:4c:da:ad:5c:98:67:af:88:0d:d0:22:90:c8:69:db: 7c:88:34:69:d5:18:03:6e:3a:68:cb:f9:88:28:fd:0a:c9:32: 37:04:3c:2c:b8:c6:ee:1f:de:a4:67:9c:1c:1b:a6:58:f0:30: 87:37:40:08:8e:63:b5:b6:c5:26:40:0f:1c:f2:b7:af:a8:ea: dd:35:e2:cd:a9:41:2a:e7:b9:a3:5a:9d:12:fa:ec:a7:ff:2c: 72:e9:53:83:e6:47:65:0b:ee:e3:45:f0:6b:ce:5e:78:e3:2e: 17:3c:b9:86:9d:ac:b8:30:c8:eb:ba:d8:3c:bc:74:33:ed:0b: 09:d5:70:3f:b0:ca:20:7d:bf:b4:a8:20:79:a7:a9:93:c0:c6: 5b:d7:0a:f4:4f:60:41:ac:2d:9f:58:f9:1c:8a:0f:63:84:08: c6:2d:8c:a6:46:c8:cc:92:73:34:1b:c1:fb:c1:ab:b8:a1:15: 6e:e0:9d:e1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdsDGbWUG5ThvlHOOrVqJNFjWcukwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDI1MDA0WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDc4NWUzZGUxODM3OTdhYTg5NDk5NWEzMWE3YTgxYTFm OWYxOTY5MjQxZmExNTMwN2FmOTRlMmU2ZDIxMjA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVNU0OrPOOP9eUeemX+s5/Uu/giA+o6iPtU9Nch7nyppmO SG4bx9B9gHpgWwWpbaBQ3OOi1fnv539MO94ac64mzfDd8/ToWFzc6gH28Q3xjnVe RmWNSBd/oaUcx5NTQwXFk9Sa9NG//BaCzBaPyGLigSlra+qhSwdcfaznoI9E8WIZ 1EGiVawuJPr2GZYl9tywZZ5/L4KcX+SEz0LNOfUVsFEcNXzmnxeMv62FDWMr1NfG 2JzgW9iaJ9ENEmfX9+vRzePFpS6akD5c9PwhgLIWbOGg5/X28n47drjQG0KDHtqO XauJcksWwrUJ8o9ndUlQoFAzsKZF82ncKxd0It+5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2GjcI5uVfl6Qg2ifxraphQxhvFowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1Y2EwN2ZlLTgzNWYtNDBlMi05YjA0LTE4NTU2Y2I3MTk4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwESMjANBgkqhkiG9w0BAQsFAAOCAQEAfn0Pfo6+vDO8ZSpt24TmqQddpAHg DOIoOrIc6v2yZwpgV8J0phqrgAIVQe9Y+ySNe+J/YUOOfVkEL6fhVXed2bzfo7p2 egCcPEIwTNqtXJhnr4gN0CKQyGnbfIg0adUYA246aMv5iCj9CskyNwQ8LLjG7h/e pGecHBumWPAwhzdACI5jtbbFJkAPHPK3r6jq3TXizalBKue5o1qdEvrsp/8sculT g+ZHZQvu40Xwa85eeOMuFzy5hp2suDDI67rYPLx0M+0LCdVwP7DKIH2/tKggeaep k8DGW9cK9E9gQawtn1j5HIoPY4QIxi2MpkbIzJJzNBvB+8GruKEVbuCd4Q== -----END CERTIFICATE-----Generated at Wed Nov 5 03:26:00 2025 by rpki-client