$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/586ae7b0-e564-4dba-b466-e2b8f281d1b2.roa File: 586ae7b0-e564-4dba-b466-e2b8f281d1b2.roa (raw, json) Hash identifier: LF7lQ5HsnpwrOCCPA7eDFLZriMlj1E2jM3p81th8QqU= Subject key identifier: EC:51:20:97:E5:6A:95:2F:ED:1A:48:74:31:10:4B:AA:16:FD:52:19 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1E3A3968727796775B3E8FBA0AB37B16112EB873 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/586ae7b0-e564-4dba-b466-e2b8f281d1b2.roa Signing time: Mon 22 Sep 2025 22:08:53 +0000 ROA not before: Mon 22 Sep 2025 22:08:53 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3a:39:68:72:77:96:77:5b:3e:8f:ba:0a:b3:7b:16:11:2e:b8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:08:53 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=e917e6fe1d538a8586dfdafe5e12cd4e9c8cd8cca00505b7517f9ada9405781e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:2b:0b:25:5a:f6:bf:9b:2a:6c:c2:8a:c3: 70:cd:77:a1:60:be:7a:64:5b:b1:53:b3:4d:a0:56: 57:86:a3:0c:c1:99:6f:db:12:f9:0a:d5:d5:8c:af: 33:d7:44:69:e0:ac:2e:8f:4a:ab:ef:c2:14:32:ef: a4:80:59:90:f7:ca:ff:49:a7:fe:35:22:c4:79:e6: cf:61:b4:e6:6a:d0:02:7d:ac:0f:97:44:bc:fb:0f: 0a:24:d9:de:be:e9:3d:c8:f7:00:95:61:7c:a3:d7: de:71:9f:88:61:cc:74:9a:7e:67:44:28:0c:f0:56: 82:86:72:04:52:5f:80:1e:c1:2b:3c:0c:9e:2a:fc: 9e:91:bf:94:88:7d:7a:ec:9e:f7:2d:e2:27:f1:23: 69:c5:21:87:66:93:90:11:49:5e:c7:74:9a:be:ac: 96:dd:64:43:36:8d:57:95:7c:83:5e:a5:3f:7d:ff: 0d:42:87:c1:01:34:2f:49:88:f7:18:57:7b:67:0c: f9:0b:68:cf:19:c2:42:0f:57:83:cc:7c:f8:a3:d9: f5:ac:b3:12:5d:de:87:0e:a1:d8:48:b2:45:85:f5: cc:0a:57:24:fc:a9:6b:da:b3:8a:50:1d:7e:39:f8: 26:1b:93:a8:99:29:bb:d1:ea:e6:8c:fe:ee:83:43: 8d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:51:20:97:E5:6A:95:2F:ED:1A:48:74:31:10:4B:AA:16:FD:52:19 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/586ae7b0-e564-4dba-b466-e2b8f281d1b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.148.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:2d:c4:16:4f:92:8e:8c:89:24:ce:1b:0d:c5:a0:ce:aa:6b: 42:6a:c0:e1:38:19:5f:07:cc:24:c7:7b:b1:97:79:ba:7f:fe: f5:bb:20:56:dd:51:08:e5:95:26:32:19:9b:92:d2:7a:d1:2f: 16:01:05:39:d2:a3:81:a0:4d:11:0d:8c:4e:08:3a:0c:90:f7: c6:be:3b:e8:da:f8:d0:1f:cd:cb:80:83:41:77:59:e3:50:f4: 84:5e:ac:3e:d0:81:11:71:c9:af:56:f0:5b:1b:f4:b0:42:de: d2:5e:b5:61:0f:99:0e:cc:1b:b8:82:74:0b:9e:61:22:d9:a4: f2:7e:df:93:a3:e3:c6:48:64:13:ac:b0:c0:10:94:2c:b9:74: eb:e9:aa:30:4d:20:6b:a9:9a:4e:41:98:2f:17:60:f4:91:21: bd:f9:57:5c:80:e0:88:1d:3c:12:65:84:24:5e:03:92:b5:24: 33:39:ac:ed:c2:24:33:b2:26:06:86:f9:e4:38:99:7b:22:4c: 2b:96:d8:12:9b:1f:df:17:76:35:08:2f:50:d2:8e:25:bc:21: 12:9e:b8:49:61:cb:c9:b0:cf:f0:72:15:b8:ed:2e:0a:eb:f3: 0b:d4:a4:74:ca:78:19:11:31:33:3f:99:84:a9:22:83:cd:5e: a6:bc:d4:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHjo5aHJ3lndbPo+6CrN7FhEuuHMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIwODUzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTE3ZTZmZTFkNTM4YTg1ODZkZmRhZmU1ZTEyY2Q0ZTlj OGNkOGNjYTAwNTA1Yjc1MTdmOWFkYTk0MDU3ODFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz2isLJVr2v5sqbMKKw3DNd6FgvnpkW7FTs02gVleGowzB mW/bEvkK1dWMrzPXRGngrC6PSqvvwhQy76SAWZD3yv9Jp/41IsR55s9htOZq0AJ9 rA+XRLz7Dwok2d6+6T3I9wCVYXyj195xn4hhzHSafmdEKAzwVoKGcgRSX4AewSs8 DJ4q/J6Rv5SIfXrsnvct4ifxI2nFIYdmk5ARSV7HdJq+rJbdZEM2jVeVfINepT99 /w1Ch8EBNC9JiPcYV3tnDPkLaM8ZwkIPV4PMfPij2fWssxJd3ocOodhIskWF9cwK VyT8qWvas4pQHX45+CYbk6iZKbvR6uaM/u6DQ43pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7FEgl+VqlS/tGkh0MRBLqhb9UhkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU4NmFlN2IwLWU1NjQtNGRiYS1iNDY2LWUyYjhmMjgxZDFiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES75QwDQYJKoZIhvcNAQELBQADggEBAGwtxBZPko6MiSTOGw3FoM6qa0Jq wOE4GV8HzCTHe7GXebp//vW7IFbdUQjllSYyGZuS0nrRLxYBBTnSo4GgTRENjE4I OgyQ98a+O+ja+NAfzcuAg0F3WeNQ9IRerD7QgRFxya9W8Fsb9LBC3tJetWEPmQ7M G7iCdAueYSLZpPJ+35Oj48ZIZBOssMAQlCy5dOvpqjBNIGupmk5BmC8XYPSRIb35 V1yA4IgdPBJlhCReA5K1JDM5rO3CJDOyJgaG+eQ4mXsiTCuW2BKbH98XdjUIL1DS jiW8IRKeuElhy8mwz/ByFbjtLgrr8wvUpHTKeBkRMTM/mYSpIoPNXqa81C8= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:03 2025 by rpki-client