$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2616abca-3290-4bdb-babe-27fd248564c1.roa File: 2616abca-3290-4bdb-babe-27fd248564c1.roa (raw, json) Hash identifier: lTI1w72kSvYk7gD813CqkZhjty+FWpkvkvwVJfMuM0g= Subject key identifier: A9:CE:74:43:C4:06:CA:A6:FC:49:84:D8:5E:50:15:41:A2:49:5F:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1EC35E353EBBA66032F59C1BFD471D9D98CCE11D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2616abca-3290-4bdb-babe-27fd248564c1.roa Signing time: Mon 22 Sep 2025 21:43:25 +0000 ROA not before: Mon 22 Sep 2025 21:43:25 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c3:5e:35:3e:bb:a6:60:32:f5:9c:1b:fd:47:1d:9d:98:cc:e1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:43:25 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=59bfdc036a21d8d2c257f3c3e5423a80db82aaef8fb15b2d4b06da07a10af3a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:b3:d1:50:1b:d9:c7:16:05:ce:f8:15:c5: fe:83:96:3d:b9:a3:23:3d:12:a5:8e:af:a2:9f:4a: 0c:0c:97:78:74:b7:42:3c:36:c2:1a:8a:9b:2b:4c: 26:7b:94:af:f7:7e:ec:e5:54:b1:3f:14:b4:bd:52: 50:0f:bc:26:d3:b0:5b:ec:c8:5e:7e:09:9b:79:f4: b1:a0:3a:a4:3b:77:82:c4:7b:47:7a:b9:08:89:82: df:f0:9b:44:52:18:e0:4c:02:32:ec:7d:8e:4e:33: 10:be:54:30:03:9f:d5:ed:54:bf:48:b0:cd:eb:07: d2:a5:95:ba:29:e5:06:74:64:fd:29:93:9c:2c:78: 39:35:83:de:97:07:2f:5b:55:84:1e:f5:7f:80:6b: c9:ca:5d:e9:fd:51:4e:de:4d:ce:75:2c:f1:f7:66: e8:7c:bd:7e:85:84:29:3b:9f:79:3c:cd:12:84:a9: 44:34:ad:b5:c5:c2:dc:6a:2a:54:57:63:1c:a4:f1: 51:08:0e:4a:31:6d:06:37:d3:6a:61:e2:b0:ce:28: 8e:7e:df:e7:82:28:c4:7c:3a:e6:28:b4:f7:e6:0a: ba:74:53:20:dd:85:1e:06:3d:1a:c0:35:e1:05:54: ef:78:f8:83:b9:fb:40:f2:96:73:4e:5e:b3:a2:2e: 91:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CE:74:43:C4:06:CA:A6:FC:49:84:D8:5E:50:15:41:A2:49:5F:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2616abca-3290-4bdb-babe-27fd248564c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.110.0/24 Signature Algorithm: sha256WithRSAEncryption a7:b0:cd:aa:31:e8:73:ac:45:0f:70:8d:03:9c:a4:b9:43:e7: cc:a8:c4:72:a8:2f:a0:5e:80:54:ea:01:73:a7:5c:e0:3b:01: 76:96:f7:61:39:f3:0c:2f:70:74:95:db:e4:c0:7a:52:56:a9: d4:ce:a1:bc:a5:0f:94:74:ce:10:1b:a8:70:b1:9f:6d:13:77: f8:7f:1c:eb:90:98:68:62:69:2f:79:2b:64:d5:3a:4a:e1:40: 5b:c1:9e:08:02:f8:2d:b9:a4:f2:79:f6:73:63:69:03:cb:4a: fc:44:9a:f1:b1:37:46:37:8c:8e:14:e6:8f:a4:9a:78:d5:30: 78:fd:ac:d2:77:00:94:f9:08:a2:e7:19:aa:85:2d:9d:0e:6f: bf:d8:ba:cf:da:61:7a:07:0b:72:b4:f4:82:a4:39:32:7b:0a: 66:ee:6e:3f:83:a4:a4:b0:ef:18:dc:b6:98:8d:50:8f:9b:78: ed:48:43:a6:ac:c5:f3:5b:f5:99:8b:a9:84:04:6d:ba:4a:44: 16:bc:5f:d1:d3:13:a0:a6:c1:5d:8c:92:88:9c:b1:19:7e:f3: 37:ce:82:59:e9:91:59:76:ce:84:31:bd:ef:4f:3a:bc:d0:d4: 05:fe:51:ea:5e:37:83:8a:26:6b:84:d2:ba:92:e0:e9:7d:72: e5:df:fc:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHsNeNT67pmAy9Zwb/UcdnZjM4R0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjE0MzI1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OWJmZGMwMzZhMjFkOGQyYzI1N2YzYzNlNTQyM2E4MGRi ODJhYWVmOGZiMTViMmQ0YjA2ZGEwN2ExMGFmM2E1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHR7PRUBvZxxYFzvgVxf6Dlj25oyM9EqWOr6KfSgwMl3h0 t0I8NsIaipsrTCZ7lK/3fuzlVLE/FLS9UlAPvCbTsFvsyF5+CZt59LGgOqQ7d4LE e0d6uQiJgt/wm0RSGOBMAjLsfY5OMxC+VDADn9XtVL9IsM3rB9Kllbop5QZ0ZP0p k5wseDk1g96XBy9bVYQe9X+Aa8nKXen9UU7eTc51LPH3Zuh8vX6FhCk7n3k8zRKE qUQ0rbXFwtxqKlRXYxyk8VEIDkoxbQY302ph4rDOKI5+3+eCKMR8OuYotPfmCrp0 UyDdhR4GPRrANeEFVO94+IO5+0DylnNOXrOiLpE/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqc50Q8QGyqb8SYTYXlAVQaJJX34wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI2MTZhYmNhLTMyOTAtNGJkYi1iYWJlLTI3ZmQyNDg1NjRjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS724wDQYJKoZIhvcNAQELBQADggEBAKewzaox6HOsRQ9wjQOcpLlD58yo xHKoL6BegFTqAXOnXOA7AXaW92E58wwvcHSV2+TAelJWqdTOobylD5R0zhAbqHCx n20Td/h/HOuQmGhiaS95K2TVOkrhQFvBnggC+C25pPJ59nNjaQPLSvxEmvGxN0Y3 jI4U5o+kmnjVMHj9rNJ3AJT5CKLnGaqFLZ0Ob7/Yus/aYXoHC3K09IKkOTJ7Cmbu bj+DpKSw7xjctpiNUI+beO1IQ6asxfNb9ZmLqYQEbbpKRBa8X9HTE6CmwV2Mkoic sRl+8zfOglnpkVl2zoQxve9POrzQ1AX+UepeN4OKJmuE0rqS4Ol9cuXf/H4= -----END CERTIFICATE-----Generated at Sat Oct 18 00:11:26 2025 by rpki-client