$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bfb456f-59f8-46af-b266-0c448f827133.roa File: 1bfb456f-59f8-46af-b266-0c448f827133.roa (raw, json) Hash identifier: +SfsNTE1qHsbcKTeHtT8qpUHw0HCh4T4eI4VjAYJYnc= Subject key identifier: A3:0E:20:BA:37:10:57:44:76:3C:7E:75:A2:7B:7A:F1:E7:87:3C:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3591EDCF1727EE591B761D96E1582920184EC7F5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bfb456f-59f8-46af-b266-0c448f827133.roa Signing time: Mon 22 Sep 2025 21:51:48 +0000 ROA not before: Mon 22 Sep 2025 21:51:48 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:91:ed:cf:17:27:ee:59:1b:76:1d:96:e1:58:29:20:18:4e:c7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:51:48 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=0c7fee4cff441101b5b5b4fef550d479fd425e2f56dbd0e4ac08db569e7a959c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:d1:49:29:cd:59:7d:a9:a9:2a:d0:ab:65: 2a:e9:13:37:f1:58:12:2e:85:3b:6f:7c:28:de:e6: 8c:da:30:79:b2:05:f9:2e:ee:a7:52:82:2a:b4:7e: ce:fd:cf:35:32:de:f9:6e:91:79:3e:82:6c:5f:fe: 15:2f:48:4b:db:41:b7:19:53:7f:95:7f:4b:01:82: 60:63:d3:88:e3:f4:ff:d3:61:0e:45:8a:b2:3a:ac: b3:3e:e0:19:a2:8b:19:ca:50:b3:ed:51:c8:1d:c3: 8c:1f:6b:fa:c2:a5:d6:7d:34:23:d6:10:a4:84:69: 94:8d:73:47:7e:a5:e9:e9:b4:28:a7:90:5a:35:59: d3:97:08:92:b3:6c:49:d0:10:fd:af:8d:22:d1:08: 37:7f:8e:bb:b8:ef:f2:97:aa:81:43:4f:ba:2f:fe: 3a:a2:79:0e:6e:71:f3:3c:ca:06:be:8a:56:d7:60: 61:a5:1e:b3:0a:38:62:e5:15:97:38:5d:2a:7f:21: 54:fa:f0:98:6e:73:28:2a:85:b8:56:fd:37:79:4e: 25:81:37:4b:2f:24:b8:52:b8:cb:e8:09:69:02:32: 70:37:15:e1:e7:66:9d:0a:26:67:d4:76:83:4b:b5: 1c:36:13:f9:df:ee:32:53:18:9f:e2:c0:3b:d4:56: e2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0E:20:BA:37:10:57:44:76:3C:7E:75:A2:7B:7A:F1:E7:87:3C:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bfb456f-59f8-46af-b266-0c448f827133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.211.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:2c:21:ba:27:d9:91:a0:05:b8:89:09:c6:23:6c:69:6c:58: 07:68:d4:d0:26:17:02:b2:41:a7:d0:44:f9:52:b6:34:bd:6f: c0:44:64:e8:4a:80:26:f8:79:2e:6b:85:79:06:8a:ee:c9:2c: 95:ea:32:bd:74:40:b8:24:ab:16:2d:63:7e:36:d7:28:a8:43: 26:2a:4e:71:e9:6a:0d:a0:1d:1b:0e:3b:8a:9c:52:fc:66:05: 3e:5b:9a:71:cd:8a:01:87:d5:11:23:d3:bc:e7:2e:2e:b0:a1: b7:c8:b5:33:70:db:e0:ba:53:6f:e8:91:3b:8f:90:57:0a:39: 8c:4b:d6:cb:3f:28:54:7e:ee:c1:60:2d:ea:c6:c2:67:3f:eb: a3:dd:7f:b2:79:89:a1:27:d4:29:32:f4:2c:a4:a1:3d:64:87: 84:4a:59:08:92:95:c3:c0:bf:c5:23:ad:53:1e:f0:82:2e:2b: 94:d1:20:52:9c:8d:0f:02:5f:1f:f4:92:48:4e:bb:d5:7f:a5: 52:78:81:0e:b4:5f:a6:5f:47:de:ec:a8:3f:66:3e:98:ae:8e: 17:88:3c:ed:c3:7c:cd:3a:f9:61:20:0c:69:aa:98:af:19:04: 57:d8:6e:6c:21:43:5b:1e:5b:11:5b:b9:0b:cc:21:3a:e1:86: d4:59:18:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNZHtzxcn7lkbdh2W4VgpIBhOx/UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjE1MTQ4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzdmZWU0Y2ZmNDQxMTAxYjViNWI0ZmVmNTUwZDQ3OWZk NDI1ZTJmNTZkYmQwZTRhYzA4ZGI1NjllN2E5NTljMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrYtFJKc1ZfampKtCrZSrpEzfxWBIuhTtvfCje5ozaMHmy Bfku7qdSgiq0fs79zzUy3vlukXk+gmxf/hUvSEvbQbcZU3+Vf0sBgmBj04jj9P/T YQ5FirI6rLM+4BmiixnKULPtUcgdw4wfa/rCpdZ9NCPWEKSEaZSNc0d+penptCin kFo1WdOXCJKzbEnQEP2vjSLRCDd/jru47/KXqoFDT7ov/jqieQ5ucfM8yga+ilbX YGGlHrMKOGLlFZc4XSp/IVT68JhucygqhbhW/Td5TiWBN0svJLhSuMvoCWkCMnA3 FeHnZp0KJmfUdoNLtRw2E/nf7jJTGJ/iwDvUVuIlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUow4gujcQV0R2PH51ont68eeHPDowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFiZmI0NTZmLTU5ZjgtNDZhZi1iMjY2LTBjNDQ4ZjgyNzEzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS79MwDQYJKoZIhvcNAQELBQADggEBAIssIbon2ZGgBbiJCcYjbGlsWAdo 1NAmFwKyQafQRPlStjS9b8BEZOhKgCb4eS5rhXkGiu7JLJXqMr10QLgkqxYtY342 1yioQyYqTnHpag2gHRsOO4qcUvxmBT5bmnHNigGH1REj07znLi6wobfItTNw2+C6 U2/okTuPkFcKOYxL1ss/KFR+7sFgLerGwmc/66Pdf7J5iaEn1Cky9CykoT1kh4RK WQiSlcPAv8UjrVMe8IIuK5TRIFKcjQ8CXx/0kkhOu9V/pVJ4gQ60X6ZfR97sqD9m PpiujheIPO3DfM06+WEgDGmqmK8ZBFfYbmwhQ1seWxFbuQvMITrhhtRZGCM= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:04 2025 by rpki-client