$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/643ff6cc-8b07-4a03-84c5-1d337e47ee29.roa File: 643ff6cc-8b07-4a03-84c5-1d337e47ee29.roa (raw, json) Hash identifier: +hrQC1DkGqWESOQaQXM+1IOFet2kpiDDVC6yRr1aHTY= Subject key identifier: 8A:3C:0C:8F:28:C7:B0:7F:31:F0:43:65:FF:C9:41:2B:2A:F4:3C:F4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 059C0A877467D2E804F273643006A7666E5BDAB0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/643ff6cc-8b07-4a03-84c5-1d337e47ee29.roa Signing time: Mon 22 Sep 2025 22:23:30 +0000 ROA not before: Mon 22 Sep 2025 22:23:30 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9c:0a:87:74:67:d2:e8:04:f2:73:64:30:06:a7:66:6e:5b:da:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:23:30 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=a208fc5904b8f43871f4295d6608a03e77c4af97be23ef9582d42731d4da825f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c9:63:52:c4:35:21:92:55:88:1b:09:0c:3c: e4:e3:fc:14:79:06:ce:70:bd:3e:12:d6:63:49:f4: b8:f6:dd:5b:fe:b7:b0:d0:2f:2d:2b:1d:39:87:08: 52:09:ea:b0:c8:17:8b:db:17:02:6e:49:6f:b5:31: 7e:36:bd:62:d2:04:92:4e:00:7f:f8:5f:61:47:f8: 91:1a:ce:c1:a7:55:f6:6c:73:03:e8:7d:b0:53:cb: cf:8e:a6:ec:89:a0:c5:b0:4b:85:f5:21:0c:64:79: e3:66:81:fb:5a:8e:7b:3a:9c:9c:d8:ea:0e:0c:9b: fd:72:4f:c8:fb:3b:ac:74:0e:99:2c:c9:76:5d:1a: bb:ec:bf:73:41:38:54:03:18:e2:4c:e9:6d:ad:4d: fa:24:fd:86:63:41:2a:da:6d:02:98:c9:d5:88:0b: 4f:60:6f:2c:e2:17:c5:2f:ce:3e:d8:c2:b4:ce:c7: 0e:51:73:08:90:26:38:c6:90:5b:2f:02:53:8d:89: 7a:2c:ff:c2:7e:3f:d0:04:fb:f7:98:be:25:e6:08: ec:7f:c5:52:4c:80:94:87:c8:2c:8c:70:ac:b5:fd: 8d:d2:ac:10:33:3f:2c:f4:f0:33:f9:67:53:f4:b1: 76:11:82:d6:7a:b7:96:8f:78:fa:0e:12:85:c1:fb: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3C:0C:8F:28:C7:B0:7F:31:F0:43:65:FF:C9:41:2B:2A:F4:3C:F4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/643ff6cc-8b07-4a03-84c5-1d337e47ee29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.56.0/22 Signature Algorithm: sha256WithRSAEncryption 55:28:81:ee:94:e4:73:2f:4f:38:07:2a:d6:9c:85:8e:3d:21: ad:dc:1c:fd:e6:19:fc:3e:85:c2:4c:22:5d:2a:e2:45:b1:b7: b6:e7:ce:8f:47:c0:65:8c:0e:db:d8:8b:88:38:2a:75:fe:7c: 4b:f2:83:ad:18:52:85:75:14:8d:9c:8e:57:bf:3c:55:9c:fa: c4:4a:af:63:54:62:79:2d:a0:a6:8e:f8:6e:38:f7:9c:e9:d7: b2:69:a2:81:db:45:e5:1a:be:06:67:21:72:e9:fc:2e:4b:3f: 48:93:dc:3d:45:c7:c2:f0:70:5f:35:0e:82:32:37:57:c7:5f: 05:31:ee:00:1b:a1:6f:d4:95:c2:86:1c:e6:5e:c0:95:ef:cf: a7:4b:ea:76:07:d6:f0:f4:dd:8a:1d:46:f1:13:bc:8f:23:e3: 59:40:92:6b:15:b1:ba:b2:10:3f:67:6b:8f:52:d4:b6:59:84: 64:80:32:d2:aa:f7:71:2c:01:f0:e7:2e:27:ae:21:44:c3:0c: 57:4f:98:5b:a7:8b:da:a5:f9:62:b5:89:29:8e:1c:d0:41:d5: 28:1b:98:b0:fa:a5:f2:8f:a5:e3:ef:91:12:06:e0:e3:c8:4a: f8:7a:43:ee:8c:01:b3:e8:59:83:16:ca:fd:a6:79:d6:a9:83: ab:11:c8:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBZwKh3Rn0ugE8nNkMAanZm5b2rAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIyMzMwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjA4ZmM1OTA0YjhmNDM4NzFmNDI5NWQ2NjA4YTAzZTc3 YzRhZjk3YmUyM2VmOTU4MmQ0MjczMWQ0ZGE4MjVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmyWNSxDUhklWIGwkMPOTj/BR5Bs5wvT4S1mNJ9Lj23Vv+ t7DQLy0rHTmHCFIJ6rDIF4vbFwJuSW+1MX42vWLSBJJOAH/4X2FH+JEazsGnVfZs cwPofbBTy8+OpuyJoMWwS4X1IQxkeeNmgftajns6nJzY6g4Mm/1yT8j7O6x0Dpks yXZdGrvsv3NBOFQDGOJM6W2tTfok/YZjQSrabQKYydWIC09gbyziF8Uvzj7YwrTO xw5RcwiQJjjGkFsvAlONiXos/8J+P9AE+/eYviXmCOx/xVJMgJSHyCyMcKy1/Y3S rBAzPyz08DP5Z1P0sXYRgtZ6t5aPePoOEoXB+02NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUijwMjyjHsH8x8ENl/8lBKyr0PPQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY0M2ZmNmNjLThiMDctNGEwMy04NGM1LTFkMzM3ZTQ3ZWUyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS7zgwDQYJKoZIhvcNAQELBQADggEBAFUoge6U5HMvTzgHKtachY49Ia3c HP3mGfw+hcJMIl0q4kWxt7bnzo9HwGWMDtvYi4g4KnX+fEvyg60YUoV1FI2cjle/ PFWc+sRKr2NUYnktoKaO+G4495zp17JpooHbReUavgZnIXLp/C5LP0iT3D1Fx8Lw cF81DoIyN1fHXwUx7gAboW/UlcKGHOZewJXvz6dL6nYH1vD03YodRvETvI8j41lA kmsVsbqyED9na49S1LZZhGSAMtKq93EsAfDnLieuIUTDDFdPmFuni9ql+WK1iSmO HNBB1SgbmLD6pfKPpePvkRIG4OPISvh6Q+6MAbPoWYMWyv2medapg6sRyAs= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:03 2025 by rpki-client