$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19096cf9-d32f-446d-a4da-7e5327c3f5b3.roa File: 19096cf9-d32f-446d-a4da-7e5327c3f5b3.roa (raw, json) Hash identifier: AQttzP+gQ02OtdTw98K3FzDY3qWfNjkhyywpy1BLoLs= Subject key identifier: 55:6F:C0:9E:E2:9D:32:F4:DD:6D:A6:95:A0:3F:4F:0B:EF:00:27:C1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3ACED2A75D92ADCB27019CA3E4C5D518FEF955F6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19096cf9-d32f-446d-a4da-7e5327c3f5b3.roa Signing time: Mon 22 Sep 2025 22:21:57 +0000 ROA not before: Mon 22 Sep 2025 22:21:57 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ce:d2:a7:5d:92:ad:cb:27:01:9c:a3:e4:c5:d5:18:fe:f9:55:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:21:57 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=544721ed5c5e993ad0a36c144e59f73e3cdeae441182f463aa4352b14635e309, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:7e:67:6a:f3:28:c0:18:32:60:a6:bc:47: cd:7a:7c:e0:4c:e4:52:2a:12:26:3e:40:cd:d3:16: aa:af:ff:fd:41:d1:99:c4:4c:98:db:92:f4:3e:9f: a0:cc:64:41:e9:24:c5:56:28:e3:a5:e4:75:bb:b4: 4f:03:7f:44:93:df:63:92:75:0a:f4:82:ab:f0:92: f0:b2:7b:dd:04:43:45:07:fa:f1:90:92:f5:8a:ca: 58:7f:8d:9d:9a:2c:25:02:78:59:d6:f5:6a:23:9a: 3a:b1:0a:cd:bb:e4:e8:dd:f2:35:c9:dc:1f:ec:61: 4e:cd:1d:a3:04:2a:e4:7f:ea:a0:43:e9:0f:cc:e4: f6:31:05:67:23:1b:47:94:84:93:06:d9:a0:65:ad: a4:30:72:d5:20:01:49:da:80:00:3a:47:1c:92:6a: 7e:ce:63:de:e6:02:92:aa:07:04:8c:ba:e9:f7:3c: c4:cc:f0:86:d2:a2:7d:32:07:a4:12:d6:52:55:66: 2d:64:9f:87:56:37:6e:24:3a:c4:43:0b:2d:7b:3d: 67:f0:25:ee:79:68:b3:aa:78:d1:d5:fa:41:76:64: 2e:3d:e6:46:89:16:7f:ed:5a:78:e6:34:ee:bc:8d: d4:b3:a5:eb:87:f2:59:a8:74:fd:8c:24:21:ba:7b: 82:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6F:C0:9E:E2:9D:32:F4:DD:6D:A6:95:A0:3F:4F:0B:EF:00:27:C1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19096cf9-d32f-446d-a4da-7e5327c3f5b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.236.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:73:cd:e1:d6:fd:71:b2:a0:6a:87:b5:22:b8:32:ad:d7:0d: b5:b7:a7:bd:95:e8:a5:3d:26:9f:a3:18:2b:ac:97:c3:02:42: e2:2f:d2:0a:e7:8e:76:d4:30:10:38:ce:0d:f4:80:38:79:15: 42:cd:19:17:9c:ba:f2:17:b5:90:ac:08:ce:8b:0a:ba:21:2a: 95:82:eb:4f:8c:99:6a:2b:8d:72:67:be:df:5b:f7:62:76:ed: f9:ad:11:5b:26:92:37:38:b0:3d:ab:8c:6c:d0:3e:03:a0:8f: b3:7b:0a:35:29:b1:08:8e:55:38:8e:2c:d3:0d:b8:bb:87:1e: 58:28:a1:bb:38:fc:49:9e:69:cf:4c:b3:91:dc:37:4d:6d:df: 71:7f:80:bc:76:33:e4:d6:d4:ec:19:8d:0e:f0:79:59:fb:7e: 7d:ad:d9:95:44:44:08:69:36:a2:84:74:2d:54:1e:b2:b8:83: 9e:d3:30:d3:1b:89:76:da:df:54:9c:28:85:fd:6e:22:0a:24: 64:8d:e7:8b:69:be:c9:17:94:c1:6b:80:fd:be:3c:ea:68:e4: 9a:59:1c:89:bc:b8:e5:b0:3f:70:05:43:c2:c5:e7:44:ac:11: 64:4b:32:d7:f5:ee:be:a9:f2:c7:6b:64:28:2c:49:3e:9b:e9: eb:a4:f6:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOs7Sp12SrcsnAZyj5MXVGP75VfYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIyMTU3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDQ3MjFlZDVjNWU5OTNhZDBhMzZjMTQ0ZTU5ZjczZTNj ZGVhZTQ0MTE4MmY0NjNhYTQzNTJiMTQ2MzVlMzA5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5dX5navMowBgyYKa8R816fOBM5FIqEiY+QM3TFqqv//1B 0ZnETJjbkvQ+n6DMZEHpJMVWKOOl5HW7tE8Df0ST32OSdQr0gqvwkvCye90EQ0UH +vGQkvWKylh/jZ2aLCUCeFnW9WojmjqxCs275Ojd8jXJ3B/sYU7NHaMEKuR/6qBD 6Q/M5PYxBWcjG0eUhJMG2aBlraQwctUgAUnagAA6RxySan7OY97mApKqBwSMuun3 PMTM8IbSon0yB6QS1lJVZi1kn4dWN24kOsRDCy17PWfwJe55aLOqeNHV+kF2ZC49 5kaJFn/tWnjmNO68jdSzpeuH8lmodP2MJCG6e4LrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVW/AnuKdMvTdbaaVoD9PC+8AJ8EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE5MDk2Y2Y5LWQzMmYtNDQ2ZC1hNGRhLTdlNTMyN2MzZjViMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS7+wwDQYJKoZIhvcNAQELBQADggEBAFxzzeHW/XGyoGqHtSK4Mq3XDbW3 p72V6KU9Jp+jGCusl8MCQuIv0grnjnbUMBA4zg30gDh5FULNGRecuvIXtZCsCM6L CrohKpWC60+MmWorjXJnvt9b92J27fmtEVsmkjc4sD2rjGzQPgOgj7N7CjUpsQiO VTiOLNMNuLuHHlgoobs4/Emeac9Ms5HcN01t33F/gLx2M+TW1OwZjQ7weVn7fn2t 2ZVERAhpNqKEdC1UHrK4g57TMNMbiXba31ScKIX9biIKJGSN54tpvskXlMFrgP2+ POpo5JpZHIm8uOWwP3AFQ8LF50SsEWRLMtf17r6p8sdrZCgsST6b6euk9sA= -----END CERTIFICATE-----Generated at Sat Oct 18 07:31:43 2025 by rpki-client