$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/647ace11-8776-4e52-a2da-9206d91d25f5.roa File: 647ace11-8776-4e52-a2da-9206d91d25f5.roa (raw, json) Hash identifier: Ft91esdb+ORlu+UFxdXr6tczsmBIhz27AvqmU/6WZJs= Subject key identifier: B9:96:11:FB:A2:74:83:BB:0B:7F:FA:D4:B7:32:8E:8A:AB:8B:50:A5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: E12F93193CC593A20EF632C42A64FA4A1094A2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/647ace11-8776-4e52-a2da-9206d91d25f5.roa Signing time: Mon 22 Sep 2025 23:09:11 +0000 ROA not before: Mon 22 Sep 2025 23:09:11 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e1:2f:93:19:3c:c5:93:a2:0e:f6:32:c4:2a:64:fa:4a:10:94:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:09:11 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=4cf31fb6fd6ffc52e5422d940d5cd0fbcaed340442b526c3c113e89ff0a59973, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:97:50:58:9d:00:19:4b:c8:b7:16:ba:79: 3c:34:f1:3e:85:59:a8:e6:48:4e:fe:ec:21:6d:d6: 94:13:10:3a:06:98:c4:87:72:b9:cf:6f:0f:7d:e3: 82:04:52:95:09:76:6f:b2:bc:1c:0b:a6:19:3a:65: 9a:5f:e0:ca:26:f2:4c:ed:1b:f5:d4:e5:28:a4:8b: b7:72:9b:0f:3d:2d:ec:d8:ae:f3:bb:40:ae:1a:52: e4:00:7e:4b:17:fb:4a:f2:13:41:e6:81:44:96:e9: 57:c3:ef:6a:6f:dc:04:d4:9e:e2:06:d3:fd:8f:e9: aa:92:2c:d6:88:60:a9:c5:6e:22:a8:1c:10:a2:67: a6:88:82:79:95:e0:6e:71:ed:09:01:7d:f5:42:1b: eb:2a:b8:c5:16:a1:ec:44:40:23:bd:1d:1e:17:77: e3:39:ff:29:24:61:7e:10:d2:1d:ff:63:07:2d:ce: a3:93:35:bd:46:2c:89:d6:a9:a8:80:42:56:2b:33: ca:d0:49:2c:3d:0e:ee:ef:73:f6:85:31:ad:0d:3b: 9e:fa:b8:38:69:c2:06:3e:29:87:14:2b:a3:90:77: df:2f:d2:0e:07:c8:f4:64:5f:58:18:f1:94:55:54: 18:37:6b:0f:94:79:70:98:fa:4c:51:e5:95:69:e0: 7b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:96:11:FB:A2:74:83:BB:0B:7F:FA:D4:B7:32:8E:8A:AB:8B:50:A5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/647ace11-8776-4e52-a2da-9206d91d25f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.252.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:0f:08:94:27:fa:02:dc:f9:95:0d:c8:d6:a5:16:81:61:ed: 18:95:9d:e1:84:ac:be:a8:cf:4c:82:41:a2:66:5f:cc:35:48: af:6a:19:bf:18:26:e5:2b:cb:6c:6c:b2:4f:13:8e:01:98:c0: bd:94:75:ac:c3:04:21:9d:ba:ff:a0:5a:52:44:d4:c0:3c:86: 31:59:35:ae:47:d1:c1:5f:d1:45:1e:29:be:17:30:6c:cb:9a: 17:3a:f4:a2:53:17:f7:b2:3b:29:92:79:b0:88:9c:6d:11:c3: 1e:a3:04:c4:0a:93:36:92:d3:ef:7d:90:ec:d2:1b:b9:1d:91: 0f:18:af:07:6b:10:af:5b:da:7d:61:fc:65:2d:3c:cc:b6:0e: 8d:fc:91:fe:3f:00:b7:8a:9c:6e:19:99:51:8b:6d:c6:ee:87: a9:12:2a:26:02:ce:ce:9e:8b:69:13:a9:1a:18:55:9f:9a:21: 06:33:80:a5:22:c3:85:50:e4:98:bf:a1:9d:64:8d:df:6f:b1: ec:7f:d1:95:b5:87:2e:4e:0a:75:f6:70:e7:d3:82:24:49:c3: d2:fa:a1:9f:18:de:92:aa:c7:0a:a3:d1:a2:d8:f4:54:60:93: 24:30:23:08:aa:4e:10:de:fa:13:4a:e6:46:a0:74:45:57:f3: 68:24:fe:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAOEvkxk8xZOiDvYyxCpk+koQlKIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjMwOTExWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2YzMWZiNmZkNmZmYzUyZTU0MjJkOTQwZDVjZDBmYmNh ZWQzNDA0NDJiNTI2YzNjMTEzZTg5ZmYwYTU5OTczMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm/5dQWJ0AGUvItxa6eTw08T6FWajmSE7+7CFt1pQTEDoG mMSHcrnPbw9944IEUpUJdm+yvBwLphk6ZZpf4Mom8kztG/XU5Siki7dymw89LezY rvO7QK4aUuQAfksX+0ryE0HmgUSW6VfD72pv3ATUnuIG0/2P6aqSLNaIYKnFbiKo HBCiZ6aIgnmV4G5x7QkBffVCG+squMUWoexEQCO9HR4Xd+M5/ykkYX4Q0h3/Ywct zqOTNb1GLInWqaiAQlYrM8rQSSw9Du7vc/aFMa0NO576uDhpwgY+KYcUK6OQd98v 0g4HyPRkX1gY8ZRVVBg3aw+UeXCY+kxR5ZVp4Hv9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuZYR+6J0g7sLf/rUtzKOiquLUKUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY0N2FjZTExLTg3NzYtNGU1Mi1hMmRhLTkyMDZkOTFkMjVmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9PwwDQYJKoZIhvcNAQELBQADggEBAAsPCJQn+gLc+ZUNyNalFoFh7RiV neGErL6oz0yCQaJmX8w1SK9qGb8YJuUry2xssk8TjgGYwL2UdazDBCGduv+gWlJE 1MA8hjFZNa5H0cFf0UUeKb4XMGzLmhc69KJTF/eyOymSebCInG0Rwx6jBMQKkzaS 0+99kOzSG7kdkQ8YrwdrEK9b2n1h/GUtPMy2Do38kf4/ALeKnG4ZmVGLbcbuh6kS KiYCzs6ei2kTqRoYVZ+aIQYzgKUiw4VQ5Ji/oZ1kjd9vsex/0ZW1hy5OCnX2cOfT giRJw9L6oZ8Y3pKqxwqj0aLY9FRgkyQwIwiqThDe+hNK5kagdEVX82gk/j4= -----END CERTIFICATE-----Generated at Fri Oct 17 23:46:33 2025 by rpki-client