$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/657d36b6-cf42-4ebc-9b05-2d00d4ad59a9.roa File: 657d36b6-cf42-4ebc-9b05-2d00d4ad59a9.roa (raw, json) Hash identifier: a+dgXvFEOLYv64hBWEeLxyZHB2Yv9sElmbZh1baR90I= Subject key identifier: 83:BA:03:52:98:64:35:C6:A5:EA:32:E4:43:36:68:FD:31:19:CF:90 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 549151FAFB63D0080DC9E43E0B8BEBF2D60E1928 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/657d36b6-cf42-4ebc-9b05-2d00d4ad59a9.roa Signing time: Mon 22 Sep 2025 21:47:38 +0000 ROA not before: Mon 22 Sep 2025 21:47:38 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:91:51:fa:fb:63:d0:08:0d:c9:e4:3e:0b:8b:eb:f2:d6:0e:19:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:47:38 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=7626e784b8c286e6279c709287cfe908f5aade3987366c7fc0969cbf6dda5bf2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:2f:ce:17:8b:56:3f:68:82:8f:a3:62:5e: e8:33:27:9a:e6:02:e6:1f:8d:cf:e1:f2:1b:e2:b5: 12:4e:5c:12:3a:fa:fa:bf:27:5c:68:5b:b2:b0:5e: 31:f8:57:6a:40:f2:22:41:07:55:e0:1b:38:53:ed: 5c:a0:08:5e:d9:63:6a:8b:42:24:b3:c1:42:a0:ed: 91:80:11:4a:11:cc:46:08:56:a8:80:a6:b7:0f:bb: 69:f8:2a:84:81:95:ea:c6:f6:9f:a4:f3:ad:8b:e7: 89:99:9e:08:7a:3e:74:66:96:d6:3b:16:c7:03:87: 11:7f:f5:98:50:c9:c0:35:25:c2:09:d9:90:a7:b6: d3:c2:eb:d5:f4:59:99:07:b2:69:4f:6e:f2:6b:33: 8d:71:92:40:63:bd:a4:97:7c:81:ba:c9:5a:11:2d: 5c:38:10:1d:cf:bf:69:d1:4a:41:6e:ff:1e:a0:e9: f0:52:34:b2:d2:2f:f3:c4:43:31:11:b1:41:30:29: 35:88:d3:77:62:6d:55:6b:40:7d:83:be:22:74:8e: d2:46:b6:b1:42:8d:35:fd:81:48:aa:79:8c:d7:5f: 3f:7a:1f:6d:5b:46:5e:fd:81:cf:5f:7e:33:f6:9e: c6:b2:7a:47:14:a0:35:38:4d:20:1f:09:e0:ca:7b: 65:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BA:03:52:98:64:35:C6:A5:EA:32:E4:43:36:68:FD:31:19:CF:90 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/657d36b6-cf42-4ebc-9b05-2d00d4ad59a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.19.0/24 Signature Algorithm: sha256WithRSAEncryption a1:b0:4b:47:20:72:f8:fd:fb:c4:7f:92:f1:7b:75:10:2f:b3: 5a:15:1c:26:5f:5a:71:1b:80:01:14:ac:97:9d:7f:ec:a0:ab: 1d:26:67:46:2d:7a:c8:b0:8f:b1:a4:b7:fc:d3:48:1b:96:a9: bd:0e:43:3a:1b:d3:d2:55:4a:65:36:d3:aa:4d:c3:62:18:2c: 4d:d9:1b:bb:15:b6:e4:93:55:e3:57:af:92:4e:0b:d1:8e:33: 5f:a7:2f:1a:9e:79:68:f3:0c:72:7e:1a:55:c7:eb:bc:ff:4f: 41:a8:74:e4:b8:a5:0a:25:6d:1f:9e:b8:a3:ed:1f:92:e2:95: 13:2c:df:0b:a4:a2:20:1d:54:6d:c2:95:1c:c0:13:6b:98:4f: 4a:39:c3:25:9b:54:2c:f0:c4:15:c8:49:b4:fc:aa:5f:9f:24: 42:23:96:5f:81:b6:9d:91:53:69:06:83:01:96:60:57:8d:99: 76:ee:50:7b:80:63:2c:39:e1:50:2f:90:a2:f0:66:fb:a2:75: 45:24:2f:96:57:f9:3d:f6:fe:7f:52:ef:78:5a:77:da:d2:01: e9:aa:c9:64:9e:c1:07:e1:00:0c:3b:f8:1c:5a:e3:f7:f3:05: 5e:3e:ab:0d:ff:38:5a:6c:8d:68:b8:d1:c5:27:35:18:18:70: 8a:5e:30:46 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVJFR+vtj0AgNyeQ+C4vr8tYOGSgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjE0NzM4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjI2ZTc4NGI4YzI4NmU2Mjc5YzcwOTI4N2NmZTkwOGY1 YWFkZTM5ODczNjZjN2ZjMDk2OWNiZjZkZGE1YmYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqUi/OF4tWP2iCj6NiXugzJ5rmAuYfjc/h8hvitRJOXBI6 +vq/J1xoW7KwXjH4V2pA8iJBB1XgGzhT7VygCF7ZY2qLQiSzwUKg7ZGAEUoRzEYI VqiAprcPu2n4KoSBlerG9p+k862L54mZngh6PnRmltY7FscDhxF/9ZhQycA1JcIJ 2ZCnttPC69X0WZkHsmlPbvJrM41xkkBjvaSXfIG6yVoRLVw4EB3Pv2nRSkFu/x6g 6fBSNLLSL/PEQzERsUEwKTWI03dibVVrQH2DviJ0jtJGtrFCjTX9gUiqeYzXXz96 H21bRl79gc9ffjP2nsayekcUoDU4TSAfCeDKe2UxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUg7oDUphkNcal6jLkQzZo/TEZz5AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY1N2QzNmI2LWNmNDItNGViYy05YjA1LTJkMDBkNGFkNTlhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7xMwDQYJKoZIhvcNAQELBQADggEBAKGwS0cgcvj9+8R/kvF7dRAvs1oV HCZfWnEbgAEUrJedf+ygqx0mZ0Ytesiwj7Gkt/zTSBuWqb0OQzob09JVSmU206pN w2IYLE3ZG7sVtuSTVeNXr5JOC9GOM1+nLxqeeWjzDHJ+GlXH67z/T0GodOS4pQol bR+euKPtH5LilRMs3wukoiAdVG3ClRzAE2uYT0o5wyWbVCzwxBXISbT8ql+fJEIj ll+Btp2RU2kGgwGWYFeNmXbuUHuAYyw54VAvkKLwZvuidUUkL5ZX+T32/n9S73ha d9rSAemqyWSewQfhAAw7+Bxa4/fzBV4+qw3/OFpsjWi40cUnNRgYcIpeMEY= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:21 2025 by rpki-client