$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51621997-487e-4c09-8c3c-35d7c0279271.roa File: 51621997-487e-4c09-8c3c-35d7c0279271.roa (raw, json) Hash identifier: K4rv1vwNiH4huys/oYDhjsgyBtEm3suP95gjmmxrFV8= Subject key identifier: 10:21:B2:B7:F5:12:3E:71:D4:DD:57:2A:21:34:E1:49:FA:B4:EC:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24D7BC23EB0A492E1E1DD904EBA1FCE5B24023AE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51621997-487e-4c09-8c3c-35d7c0279271.roa Signing time: Mon 22 Sep 2025 21:51:47 +0000 ROA not before: Mon 22 Sep 2025 21:51:47 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d7:bc:23:eb:0a:49:2e:1e:1d:d9:04:eb:a1:fc:e5:b2:40:23:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:51:47 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=f1a3e92786be8a96262473fc9aa7762bdad59ad1d050ec6de4ef18d16b91fd71, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d3:21:4d:5b:be:19:8e:fd:13:c0:86:2a:34: 56:5e:4b:02:e9:ef:db:bd:9a:49:cd:ec:2d:15:ba: 03:32:65:d1:f8:46:38:f3:2f:d9:76:46:38:33:e7: 69:09:66:ab:f5:e6:7d:2d:35:a6:e9:34:56:45:66: d7:82:bd:00:b8:9c:4b:f2:57:d7:15:48:4e:05:8d: bf:8e:3d:0a:ff:be:3c:9b:bb:be:73:35:af:37:a9: f2:12:12:19:db:9f:ad:4c:1d:78:42:30:6f:3c:2c: fd:da:6f:c8:42:c4:f0:1f:cb:02:5b:2f:13:1b:67: 19:91:b5:71:5f:fd:c4:40:fc:13:cb:b5:6b:b6:2e: 4f:df:f5:ab:5b:ef:94:c9:cb:97:d0:de:76:6b:11: 40:49:f0:a6:21:3a:cd:33:37:be:e9:61:b8:02:7c: d9:30:f6:71:ab:9f:69:4a:e8:6f:c1:b3:89:19:c9: e3:f2:d6:e8:6c:ba:53:f5:e7:c0:0a:2e:0d:91:69: ab:e5:47:6d:e5:9f:7a:2f:ac:f5:04:3e:70:43:48: 3b:76:ff:fb:45:75:0e:4d:86:c6:13:80:fe:ee:a3: 0c:44:40:89:cf:3d:30:1c:7b:34:c0:f2:fb:9d:1f: c5:aa:54:c9:b8:4d:0a:72:40:e9:16:f8:49:42:e1: 0a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:21:B2:B7:F5:12:3E:71:D4:DD:57:2A:21:34:E1:49:FA:B4:EC:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51621997-487e-4c09-8c3c-35d7c0279271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.210.0/24 Signature Algorithm: sha256WithRSAEncryption a9:45:3b:ca:c0:53:a5:de:9c:f4:0e:d8:3a:66:be:bc:80:15: fc:ca:28:9e:45:b8:b0:df:97:c7:77:50:a8:84:04:f1:23:73: 59:c5:8c:37:7d:32:8d:3c:4a:ac:0c:3b:47:5c:24:41:9b:99: 98:ab:1e:d5:25:a0:e6:f4:0f:f3:e8:97:cd:32:f4:f6:af:ae: 97:d5:fb:4a:64:c2:e9:74:7c:8b:61:83:6c:b0:96:da:09:af: 31:e0:f6:fd:20:07:b6:82:57:a3:f3:4b:2b:c8:fc:ec:fd:d7: af:7e:fd:74:b2:f4:b1:b3:d2:9c:96:cd:74:01:e1:93:94:12: 00:d2:29:3e:7e:4c:f9:25:c0:0c:ab:db:81:e0:44:d5:86:dd: 87:be:52:46:0a:59:ae:a6:fd:2d:e0:7f:ec:12:bb:46:45:98: 03:00:96:21:1d:ed:65:7e:12:99:42:41:24:4d:f4:16:ba:90: e1:9f:4b:a6:da:1c:a3:31:24:14:b9:b0:40:ac:28:14:57:f9: de:46:f0:93:ea:b4:be:9d:d5:c3:8b:16:f4:b0:eb:23:e1:d9: 95:d4:b0:2a:f7:66:36:e6:b2:62:f8:ee:78:55:ba:c7:42:66: 2d:33:71:6a:35:05:99:67:7f:cc:ae:8d:8d:5f:2a:94:36:b9: 0f:cd:69:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJNe8I+sKSS4eHdkE66H85bJAI64wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjE1MTQ3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMWEzZTkyNzg2YmU4YTk2MjYyNDczZmM5YWE3NzYyYmRh ZDU5YWQxZDA1MGVjNmRlNGVmMThkMTZiOTFmZDcxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC90yFNW74Zjv0TwIYqNFZeSwLp79u9mknN7C0VugMyZdH4 RjjzL9l2Rjgz52kJZqv15n0tNabpNFZFZteCvQC4nEvyV9cVSE4Fjb+OPQr/vjyb u75zNa83qfISEhnbn61MHXhCMG88LP3ab8hCxPAfywJbLxMbZxmRtXFf/cRA/BPL tWu2Lk/f9atb75TJy5fQ3nZrEUBJ8KYhOs0zN77pYbgCfNkw9nGrn2lK6G/Bs4kZ yePy1uhsulP158AKLg2RaavlR23ln3ovrPUEPnBDSDt2//tFdQ5NhsYTgP7uowxE QInPPTAcezTA8vudH8WqVMm4TQpyQOkW+ElC4QqzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUECGyt/USPnHU3VcqITThSfq07EUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxNjIxOTk3LTQ4N2UtNGMwOS04YzNjLTM1ZDdjMDI3OTI3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS79IwDQYJKoZIhvcNAQELBQADggEBAKlFO8rAU6XenPQO2DpmvryAFfzK KJ5FuLDfl8d3UKiEBPEjc1nFjDd9Mo08SqwMO0dcJEGbmZirHtUloOb0D/Pol80y 9PavrpfV+0pkwul0fIthg2ywltoJrzHg9v0gB7aCV6PzSyvI/Oz9169+/XSy9LGz 0pyWzXQB4ZOUEgDSKT5+TPklwAyr24HgRNWG3Ye+UkYKWa6m/S3gf+wSu0ZFmAMA liEd7WV+EplCQSRN9Ba6kOGfS6baHKMxJBS5sECsKBRX+d5G8JPqtL6d1cOLFvSw 6yPh2ZXUsCr3ZjbmsmL47nhVusdCZi0zcWo1BZlnf8yujY1fKpQ2uQ/NacI= -----END CERTIFICATE-----Generated at Sat Oct 18 05:11:51 2025 by rpki-client