$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cd38689-3e45-4cc4-8c95-fb95ab9e6b62.roa File: 5cd38689-3e45-4cc4-8c95-fb95ab9e6b62.roa (raw, json) Hash identifier: cDErOEu0tdX+rHzJN4JLG6lNBWMDeC2j6AoJsWH7D/c= Subject key identifier: 86:2C:47:30:C8:80:C9:20:9C:39:13:22:80:86:44:48:26:72:F0:3D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2DB13D91E57B41A354E28CC243BF1E9F54949312 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cd38689-3e45-4cc4-8c95-fb95ab9e6b62.roa Signing time: Mon 22 Sep 2025 21:55:34 +0000 ROA not before: Mon 22 Sep 2025 21:55:34 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b1:3d:91:e5:7b:41:a3:54:e2:8c:c2:43:bf:1e:9f:54:94:93:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:55:34 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=1487ccc79aab28b7f629a9c02b94602566b3436604ac706325f53e6419f0dbf6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:b2:b1:50:09:b1:8e:a2:a4:74:0b:21:8d: 0c:72:07:c2:50:4c:81:4a:64:06:76:43:11:22:0c: fe:b3:3e:67:bb:99:3a:b2:1c:7e:be:45:f5:57:a7: f6:07:83:c3:a4:0d:37:05:d9:10:fe:ae:fc:37:35: e8:f6:55:04:ee:02:82:56:1a:d0:06:49:04:2e:c7: f1:dc:2e:a0:25:9f:11:b4:62:2f:8d:02:6c:7e:6c: 0a:aa:d3:5f:84:30:f8:b2:9b:fd:d0:6f:56:a4:c1: fc:58:39:7d:88:3a:06:32:41:03:6d:84:e3:42:de: 2b:32:1a:3f:09:23:e5:16:4a:22:ed:e5:63:6a:e7: a6:67:97:a1:f1:94:d4:2c:d8:06:25:01:b8:f7:e3: 73:ff:d8:e8:2b:43:b2:1b:b4:11:6c:e8:33:7b:8d: 7b:eb:20:f7:07:a2:9a:fb:6a:8d:92:55:ef:02:5b: 00:09:bc:fe:1a:b0:53:1d:f5:8e:51:ce:59:b5:7d: 9f:bd:82:89:a1:ed:46:cd:8e:27:2c:64:6b:28:8d: c2:ec:ab:d6:33:75:1f:50:e0:60:f0:ed:92:60:32: af:ff:d7:01:57:82:f6:b6:f0:78:fb:c4:2c:81:c9: dd:e5:8d:8d:1d:9d:fd:69:e2:37:37:bc:b9:5c:85: a2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2C:47:30:C8:80:C9:20:9C:39:13:22:80:86:44:48:26:72:F0:3D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cd38689-3e45-4cc4-8c95-fb95ab9e6b62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.40.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:cc:ee:a5:32:05:a6:de:da:01:e0:13:8d:0d:fd:59:cb:d1: 01:94:3d:50:af:d0:a8:55:0f:93:e6:d3:f9:90:68:b7:db:3e: ea:0b:ff:1c:43:33:ab:92:f9:1e:61:b2:e9:d2:c7:47:87:14: 34:5a:95:20:0e:91:d7:91:7b:fa:9d:e2:84:f1:f6:0d:07:41: cf:16:cc:80:5d:d8:80:b6:6f:59:3f:a2:a1:11:f2:df:a3:8c: 93:d4:bf:31:33:8f:ab:77:1a:fc:f0:27:a8:61:de:01:79:a7: 37:3e:b4:be:0f:a0:5c:27:74:1e:bc:d3:cb:24:05:b9:ed:86: 0f:f1:26:a8:4f:47:34:02:e1:8c:bd:8b:9f:d6:9b:2b:31:81: f4:a1:ae:06:92:fd:a2:12:97:67:b7:5d:4e:f2:d8:7b:77:80: 10:f7:ae:6c:11:00:56:70:ee:58:2c:cf:ae:f5:1b:c8:da:05: 6f:55:d9:95:9e:15:dd:75:42:98:e5:3f:38:94:d0:61:32:cf: 96:be:c9:71:f2:36:41:89:2f:f8:70:44:30:c9:3c:e2:0d:77: ce:7b:21:a0:3f:17:12:86:65:ab:67:14:3e:91:99:e1:c4:50: b0:12:17:47:40:43:de:1f:dc:e9:23:39:2a:70:b7:f6:06:62: f8:c1:ee:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULbE9keV7QaNU4ozCQ78en1SUkxIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjE1NTM0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDg3Y2NjNzlhYWIyOGI3ZjYyOWE5YzAyYjk0NjAyNTY2 YjM0MzY2MDRhYzcwNjMyNWY1M2U2NDE5ZjBkYmY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG+rKxUAmxjqKkdAshjQxyB8JQTIFKZAZ2QxEiDP6zPme7 mTqyHH6+RfVXp/YHg8OkDTcF2RD+rvw3Nej2VQTuAoJWGtAGSQQux/HcLqAlnxG0 Yi+NAmx+bAqq01+EMPiym/3Qb1akwfxYOX2IOgYyQQNthONC3isyGj8JI+UWSiLt 5WNq56Znl6HxlNQs2AYlAbj343P/2OgrQ7IbtBFs6DN7jXvrIPcHopr7ao2SVe8C WwAJvP4asFMd9Y5Rzlm1fZ+9gomh7UbNjicsZGsojcLsq9YzdR9Q4GDw7ZJgMq// 1wFXgva28Hj7xCyByd3ljY0dnf1p4jc3vLlchaJTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhixHMMiAySCcORMigIZESCZy8D0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVjZDM4Njg5LTNlNDUtNGNjNC04Yzk1LWZiOTVhYjllNmI2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7ygwDQYJKoZIhvcNAQELBQADggEBAB7M7qUyBabe2gHgE40N/VnL0QGU PVCv0KhVD5Pm0/mQaLfbPuoL/xxDM6uS+R5hsunSx0eHFDRalSAOkdeRe/qd4oTx 9g0HQc8WzIBd2IC2b1k/oqER8t+jjJPUvzEzj6t3GvzwJ6hh3gF5pzc+tL4PoFwn dB6808skBbnthg/xJqhPRzQC4Yy9i5/WmysxgfShrgaS/aISl2e3XU7y2Ht3gBD3 rmwRAFZw7lgsz671G8jaBW9V2ZWeFd11QpjlPziU0GEyz5a+yXHyNkGJL/hwRDDJ POINd857IaA/FxKGZatnFD6RmeHEULASF0dAQ94f3OkjOSpwt/YGYvjB7t8= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:16 2025 by rpki-client