$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16baca1a-cf30-476e-8212-2f7efcff82e1.roa File: 16baca1a-cf30-476e-8212-2f7efcff82e1.roa (raw, json) Hash identifier: j4KeCJTT0c+lKqIC6+v7PL/tF6jnAn1UoDIg6pzN5UI= Subject key identifier: 4E:2C:7C:D9:7C:AB:D1:BE:D9:21:F7:7D:54:34:96:8B:E6:34:81:AB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 8ECEA9F41B3F4EBB49713D949A642D6E55E953 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16baca1a-cf30-476e-8212-2f7efcff82e1.roa Signing time: Mon 22 Sep 2025 22:29:42 +0000 ROA not before: Mon 22 Sep 2025 22:29:42 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8e:ce:a9:f4:1b:3f:4e:bb:49:71:3d:94:9a:64:2d:6e:55:e9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:29:42 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=f80ffd8215d421ba9cb5ba147d48d33710dc06eb198e6ea351cd5ec6b3e90e12, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:14:9f:06:d6:f1:21:6d:ab:cc:18:e1:a4: 28:15:03:df:73:5f:90:7e:51:8e:58:6a:e8:d1:92: cc:ca:bf:1f:82:8a:93:90:3a:57:71:44:cf:79:2a: af:ef:64:e1:aa:68:b1:e3:f9:c8:07:b6:c9:5c:04: 02:bd:d7:4b:31:41:de:be:5c:5b:f4:ed:fb:b5:de: f8:56:e7:8e:fe:18:df:6c:31:97:ea:0f:27:8e:6e: 40:af:d0:75:3f:a8:fd:0f:51:4d:d8:b0:6d:8d:6d: 75:11:79:05:96:ef:d2:35:81:10:12:56:8f:ff:b0: 9c:22:19:39:c0:84:ac:5c:e6:94:ce:b8:e4:5a:47: 34:0f:8e:01:6e:a1:bc:12:f6:18:d5:23:2b:58:3f: 30:59:3e:df:fa:d2:9f:d8:6a:5a:cc:5e:ea:17:75: 9c:16:30:66:8f:21:8d:b0:cf:39:a3:d2:0c:6a:81: 91:f6:7b:8f:26:3b:f3:cc:40:cd:e8:fe:a1:0d:3f: 93:68:58:b0:ea:ca:01:35:a0:20:81:28:39:7a:d2: 26:ca:04:69:59:ca:07:db:f4:46:bd:52:72:f3:d3: ff:27:3d:ca:f5:08:3a:06:e0:17:cb:29:76:12:6a: a1:98:8f:4a:81:02:ac:8b:f3:2b:4e:fc:bb:5a:bc: c5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2C:7C:D9:7C:AB:D1:BE:D9:21:F7:7D:54:34:96:8B:E6:34:81:AB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16baca1a-cf30-476e-8212-2f7efcff82e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.96.0/19 Signature Algorithm: sha256WithRSAEncryption 2e:70:33:12:81:c9:ed:08:2d:dc:a9:92:e3:0a:36:be:18:0f: a3:7e:aa:ba:06:b3:7c:50:cb:5a:b3:d9:c9:77:da:d0:a7:53: e1:b1:df:28:32:d1:99:b5:e6:ed:90:ba:56:4a:b0:c7:fe:d2: 9a:6b:ee:7d:f7:50:05:fc:c7:b8:8a:c0:a2:af:f4:7f:3c:9e: d7:4d:1b:ac:dc:c6:e7:c9:1c:f2:de:69:eb:14:a8:6e:6f:d5: b3:22:8e:35:b9:11:8f:79:fc:6c:6d:75:e1:36:f3:6a:c1:c1: a7:8b:cf:38:53:89:eb:e4:c3:46:3a:fb:c0:8d:01:3d:7f:3f: a5:04:75:46:a8:32:08:97:f7:37:b7:25:be:54:5f:3c:22:7e: 25:35:4f:39:2c:19:46:49:99:5a:32:5d:52:1c:42:34:2d:a8: 16:5e:93:41:e7:74:ff:1d:5c:f3:ca:97:cd:7b:60:ba:d1:e5: a9:e7:f1:0f:90:e1:80:3b:34:e2:35:6f:44:ea:f1:e2:26:77: a5:6b:d7:1d:45:c8:32:99:fd:64:01:85:b5:87:50:1c:91:16: b7:ce:3e:7d:9a:a1:72:f3:bd:d6:59:25:24:c5:fb:bc:17:06: af:2f:43:c5:6e:b3:5f:44:03:57:33:95:bf:f7:fa:92:14:0d: 95:82:38:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAI7OqfQbP067SXE9lJpkLW5V6VMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIyOTQyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmODBmZmQ4MjE1ZDQyMWJhOWNiNWJhMTQ3ZDQ4ZDMzNzEw ZGMwNmViMTk4ZTZlYTM1MWNkNWVjNmIzZTkwZTEyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrsBSfBtbxIW2rzBjhpCgVA99zX5B+UY5YaujRkszKvx+C ipOQOldxRM95Kq/vZOGqaLHj+cgHtslcBAK910sxQd6+XFv07fu13vhW547+GN9s MZfqDyeObkCv0HU/qP0PUU3YsG2NbXUReQWW79I1gRASVo//sJwiGTnAhKxc5pTO uORaRzQPjgFuobwS9hjVIytYPzBZPt/60p/YalrMXuoXdZwWMGaPIY2wzzmj0gxq gZH2e48mO/PMQM3o/qENP5NoWLDqygE1oCCBKDl60ibKBGlZygfb9Ea9UnLz0/8n Pcr1CDoG4BfLKXYSaqGYj0qBAqyL8ytO/LtavMVTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTix82Xyr0b7ZIfd9VDSWi+Y0gaswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2YmFjYTFhLWNmMzAtNDc2ZS04MjEyLTJmN2VmY2ZmODJlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUS72AwDQYJKoZIhvcNAQELBQADggEBAC5wMxKBye0ILdypkuMKNr4YD6N+ qroGs3xQy1qz2cl32tCnU+Gx3ygy0Zm15u2QulZKsMf+0ppr7n33UAX8x7iKwKKv 9H88ntdNG6zcxufJHPLeaesUqG5v1bMijjW5EY95/GxtdeE282rBwaeLzzhTievk w0Y6+8CNAT1/P6UEdUaoMgiX9ze3Jb5UXzwifiU1TzksGUZJmVoyXVIcQjQtqBZe k0HndP8dXPPKl817YLrR5ann8Q+Q4YA7NOI1b0Tq8eImd6Vr1x1FyDKZ/WQBhbWH UByRFrfOPn2aoXLzvdZZJSTF+7wXBq8vQ8Vus19EA1czlb/3+pIUDZWCODU= -----END CERTIFICATE-----Generated at Sat Oct 18 02:42:50 2025 by rpki-client