$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6141d861-8e78-4084-a33f-e9b491703332.roa File: 6141d861-8e78-4084-a33f-e9b491703332.roa (raw, json) Hash identifier: 1H9uzzWBGd1t8cSInRS3MIZve8sZszrbL/6GRO0JrsI= Subject key identifier: 8F:A5:CC:FC:2B:21:26:E0:36:B8:B8:C0:7D:71:07:BF:7A:22:F4:52 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 012971FBDD57B38109FED743C21847302F4F89CE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6141d861-8e78-4084-a33f-e9b491703332.roa Signing time: Wed 24 Sep 2025 22:02:36 +0000 ROA not before: Wed 24 Sep 2025 22:02:36 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:29:71:fb:dd:57:b3:81:09:fe:d7:43:c2:18:47:30:2f:4f:89:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:02:36 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=03ea9628ef78984d5dbc85fe8118303040a8f98a956939ee37f11058fe65d105, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:29:d0:40:e6:5e:16:17:dd:48:89:1a:dc: 79:0b:c3:06:40:f4:e9:6d:1f:4a:31:8d:fd:84:2c: d3:5b:58:07:9b:9d:3a:7d:2b:2f:3d:24:10:59:fc: 35:45:3d:d5:35:02:c2:64:1a:12:4b:a0:96:c3:b8: 57:5a:d6:96:c3:e1:69:22:16:13:c1:b6:92:0e:13: bd:49:76:2d:c2:2f:01:15:f0:eb:42:53:ab:8e:7a: 28:9b:e5:e8:5d:53:2f:dc:b6:23:e4:f4:67:26:ff: b9:5d:94:be:a5:da:34:60:ef:eb:18:4b:24:61:20: 5a:c2:9c:b3:5c:41:be:6f:db:5c:c4:0f:75:d2:f7: f4:82:f0:05:57:33:1f:c4:3f:1a:ee:4a:93:79:4d: 4a:4a:35:57:78:9f:2c:48:40:48:3f:15:56:8c:cb: cc:92:f7:38:f5:a3:74:49:c0:fc:b0:5e:be:82:36: 45:19:82:6f:22:ed:db:b5:b6:9c:3a:ed:1a:80:1d: 8f:0f:29:80:66:e9:08:a3:8c:5b:9c:b5:f0:a3:ee: 9c:77:be:ee:d0:f6:aa:8b:fd:78:55:8c:6c:7f:50: d8:8f:4e:c3:91:1d:3a:e9:11:f5:d3:84:0c:7f:46: d3:76:11:f1:52:27:e5:67:ef:e1:b1:f7:d0:4c:ee: 82:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A5:CC:FC:2B:21:26:E0:36:B8:B8:C0:7D:71:07:BF:7A:22:F4:52 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6141d861-8e78-4084-a33f-e9b491703332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.192.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:ca:0c:56:20:e0:72:c4:e1:4c:a5:ab:8d:34:e8:31:7b:be: c5:92:7f:c4:f5:8c:9f:08:7d:dc:d4:2a:2d:06:e1:ea:ff:fb: 94:32:a3:bf:5d:33:c6:25:2e:4a:6b:42:bd:02:e1:5d:42:53: 68:71:20:dd:53:f6:1f:b7:ee:e6:42:53:8a:ac:60:02:59:5f: 70:2d:a5:2d:8c:59:71:91:20:09:a3:5f:31:fe:14:a7:01:bd: 0c:02:ea:f1:d9:f2:fe:0f:51:b4:54:52:be:9e:b8:67:8b:64: 34:6c:f2:72:47:30:c7:37:8f:cd:da:b4:84:b7:59:39:ee:b2: 84:8c:d5:24:2c:83:1a:e9:54:12:5a:a1:dc:4c:44:a0:ce:3b: a2:74:43:fe:93:bd:2c:bf:55:6b:b2:59:d2:bd:4f:f5:5b:b2: a4:c8:72:7f:30:12:b7:88:42:ac:2f:6c:ef:7f:30:c7:92:26: 29:ab:e7:40:38:38:98:03:3f:35:eb:86:74:e6:31:fd:cc:f1: be:7a:2a:e6:62:4e:8f:8e:2b:29:04:e5:63:97:0f:13:46:89: 79:28:c4:09:9b:b5:b5:92:5b:a0:ff:f0:d3:84:a0:9b:bd:e4: 5c:19:02:ca:2b:22:4f:14:90:30:fd:a9:1c:90:12:16:b9:55: f9:81:dc:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUASlx+91Xs4EJ/tdDwhhHMC9Pic4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjIwMjM2WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2VhOTYyOGVmNzg5ODRkNWRiYzg1ZmU4MTE4MzAzMDQw YThmOThhOTU2OTM5ZWUzN2YxMTA1OGZlNjVkMTA1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLGinQQOZeFhfdSIka3HkLwwZA9OltH0oxjf2ELNNbWAeb nTp9Ky89JBBZ/DVFPdU1AsJkGhJLoJbDuFda1pbD4WkiFhPBtpIOE71Jdi3CLwEV 8OtCU6uOeiib5ehdUy/ctiPk9Gcm/7ldlL6l2jRg7+sYSyRhIFrCnLNcQb5v21zE D3XS9/SC8AVXMx/EPxruSpN5TUpKNVd4nyxIQEg/FVaMy8yS9zj1o3RJwPywXr6C NkUZgm8i7du1tpw67RqAHY8PKYBm6QijjFuctfCj7px3vu7Q9qqL/XhVjGx/UNiP TsORHTrpEfXThAx/RtN2EfFSJ+Vn7+Gx99BM7oLBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUj6XM/CshJuA2uLjAfXEHv3oi9FIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYxNDFkODYxLThlNzgtNDA4NC1hMzNmLWU5YjQ5MTcwMzMzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQ8AwDQYJKoZIhvcNAQELBQADggEBAIrKDFYg4HLE4Uylq4006DF7vsWS f8T1jJ8IfdzUKi0G4er/+5Qyo79dM8YlLkprQr0C4V1CU2hxIN1T9h+37uZCU4qs YAJZX3AtpS2MWXGRIAmjXzH+FKcBvQwC6vHZ8v4PUbRUUr6euGeLZDRs8nJHMMc3 j83atIS3WTnusoSM1SQsgxrpVBJaodxMRKDOO6J0Q/6TvSy/VWuyWdK9T/VbsqTI cn8wEreIQqwvbO9/MMeSJimr50A4OJgDPzXrhnTmMf3M8b56KuZiTo+OKykE5WOX DxNGiXkoxAmbtbWSW6D/8NOEoJu95FwZAsorIk8UkDD9qRyQEha5VfmB3IE= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:24 2025 by rpki-client