$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09e66be3-e40b-4d57-8016-4ec804877b3c.roa File: 09e66be3-e40b-4d57-8016-4ec804877b3c.roa (raw, json) Hash identifier: barcyE5jZUeuj2pn4TWyZiz+ioCbwkSD2G5ikNqZqho= Subject key identifier: EE:F7:43:87:70:B9:2D:A7:B0:AC:F1:4E:CC:26:40:A0:B8:78:B6:2B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34ECA5D9F48B597D62150C445A7F4B101F6881B3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09e66be3-e40b-4d57-8016-4ec804877b3c.roa Signing time: Mon 22 Sep 2025 21:47:33 +0000 ROA not before: Mon 22 Sep 2025 21:47:33 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ec:a5:d9:f4:8b:59:7d:62:15:0c:44:5a:7f:4b:10:1f:68:81:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:47:33 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=da937e3eeb57f3bd38c9c65351a268557c6832db2fbb1fc603e4186e5ffe00b0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b4:81:0c:90:13:cf:e4:e8:52:1a:f8:ac:70: bb:ff:a5:e3:3b:33:49:ce:d8:02:3a:d6:98:a0:99: 9a:64:d3:b2:c7:d1:53:89:c2:8a:97:c9:62:31:62: 06:b5:c6:d7:fc:3a:7f:b2:b6:18:30:53:35:d8:d5: ba:7c:41:72:1e:19:46:38:19:45:02:af:49:77:55: 62:e3:7e:3e:7b:94:42:ea:f5:46:20:6e:6b:f5:22: 23:41:bf:d3:5f:cc:f2:00:4e:7f:fa:e2:0d:6e:af: fd:c9:07:dd:6b:91:b9:12:22:c0:69:e4:fb:d9:4c: 3c:12:71:c4:cf:4c:da:6f:69:56:5e:99:9e:a1:66: 60:54:3a:ac:10:89:98:99:26:c4:8b:04:65:7d:f3: 0f:df:de:a3:3f:38:98:92:59:6e:05:d7:2b:ee:62: fc:e1:90:9c:f8:68:6d:6e:c8:67:76:d8:cc:99:e3: 27:25:88:28:39:1c:61:86:0a:18:ed:b9:15:dc:a6: a5:4e:6e:6a:df:d5:ec:a4:67:f0:7c:5a:a4:85:9b: c5:fb:92:e3:d4:36:22:8f:14:0f:97:a0:07:78:38: 02:08:cb:44:c9:46:05:a8:3a:14:82:01:7b:be:fa: 53:b8:c8:f4:ce:f8:e9:84:e7:13:90:03:50:a9:82: 85:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F7:43:87:70:B9:2D:A7:B0:AC:F1:4E:CC:26:40:A0:B8:78:B6:2B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09e66be3-e40b-4d57-8016-4ec804877b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.185.0/24 Signature Algorithm: sha256WithRSAEncryption 96:ad:9e:da:b4:01:3e:c0:8d:78:b5:6d:8d:88:e7:05:98:4c: 59:38:69:5b:6f:0e:31:55:cb:07:c3:11:e7:3f:92:a0:c5:d8: f8:0c:da:d4:f0:ad:40:42:85:c8:8d:31:25:d4:b7:66:9f:34: 6c:90:ff:cf:76:56:c7:f0:4b:33:a6:a7:c1:c2:74:6b:a4:69: ed:90:ec:30:b3:59:e1:fa:13:a0:d6:94:23:9b:5e:c2:24:70: e4:c8:2f:4b:53:64:71:9a:6c:da:28:b2:cb:9f:51:bc:8d:ad: 84:56:0c:a8:01:69:96:a2:9f:30:ee:90:91:30:95:ae:df:bd: 4e:b8:53:37:6d:cd:00:94:99:0b:fb:34:56:00:c8:ad:71:81: f7:d2:da:7a:01:3f:ba:4a:96:a0:f7:9a:b9:0a:d9:e0:e8:d8: b1:41:f0:77:bc:b3:63:0c:57:88:22:84:bf:32:f0:bc:af:52: 0e:be:fb:36:b1:ab:41:bd:1b:34:7e:a9:28:71:59:aa:10:a9: 96:2d:18:05:a5:af:59:14:04:cb:e7:6a:49:4e:4a:a8:68:a4: 47:7e:0a:0f:68:29:19:f3:19:ab:53:24:d7:10:b5:30:1a:26: e8:70:3e:e1:b2:04:f1:fd:0d:54:de:5d:f0:60:d4:e8:cc:76: ca:1f:ba:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNOyl2fSLWX1iFQxEWn9LEB9ogbMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjE0NzMzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTkzN2UzZWViNTdmM2JkMzhjOWM2NTM1MWEyNjg1NTdj NjgzMmRiMmZiYjFmYzYwM2U0MTg2ZTVmZmUwMGIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCptIEMkBPP5OhSGviscLv/peM7M0nO2AI61pigmZpk07LH 0VOJwoqXyWIxYga1xtf8On+ythgwUzXY1bp8QXIeGUY4GUUCr0l3VWLjfj57lELq 9UYgbmv1IiNBv9NfzPIATn/64g1ur/3JB91rkbkSIsBp5PvZTDwSccTPTNpvaVZe mZ6hZmBUOqwQiZiZJsSLBGV98w/f3qM/OJiSWW4F1yvuYvzhkJz4aG1uyGd22MyZ 4ycliCg5HGGGChjtuRXcpqVObmrf1eykZ/B8WqSFm8X7kuPUNiKPFA+XoAd4OAII y0TJRgWoOhSCAXu++lO4yPTO+OmE5xOQA1CpgoV/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7vdDh3C5LaewrPFOzCZAoLh4tiswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA5ZTY2YmUzLWU0MGItNGQ1Ny04MDE2LTRlYzgwNDg3N2IzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS77kwDQYJKoZIhvcNAQELBQADggEBAJatntq0AT7AjXi1bY2I5wWYTFk4 aVtvDjFVywfDEec/kqDF2PgM2tTwrUBChciNMSXUt2afNGyQ/892VsfwSzOmp8HC dGukae2Q7DCzWeH6E6DWlCObXsIkcOTIL0tTZHGabNoossufUbyNrYRWDKgBaZai nzDukJEwla7fvU64UzdtzQCUmQv7NFYAyK1xgffS2noBP7pKlqD3mrkK2eDo2LFB 8He8s2MMV4gihL8y8LyvUg6++zaxq0G9GzR+qShxWaoQqZYtGAWlr1kUBMvnaklO SqhopEd+Cg9oKRnzGatTJNcQtTAaJuhwPuGyBPH9DVTeXfBg1OjMdsofuqo= -----END CERTIFICATE-----Generated at Fri Oct 17 22:15:14 2025 by rpki-client