$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/658e14bd-6fcc-4c3a-af2b-94a02a383d64.roa File: 658e14bd-6fcc-4c3a-af2b-94a02a383d64.roa (raw, json) Hash identifier: TFTqHeluDnlPqXeh+5Bm/MaxYCYZcaAjNJ9QA8lFOIU= Subject key identifier: 62:96:75:3B:C8:78:5A:82:D2:1B:5C:63:B0:3D:90:C7:40:93:A2:4E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 66246AF28E21565E219743326140C6BF2C3EFB91 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/658e14bd-6fcc-4c3a-af2b-94a02a383d64.roa Signing time: Mon 22 Sep 2025 22:36:31 +0000 ROA not before: Mon 22 Sep 2025 22:36:31 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:24:6a:f2:8e:21:56:5e:21:97:43:32:61:40:c6:bf:2c:3e:fb:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:36:31 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=dd0e6fbc59b2f25aa9cfc93d43e02091000b257d31efdfcbc369627be04061ff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:39:a8:d2:28:38:62:9f:b4:79:32:4f:87:13: c6:78:90:ef:79:c4:39:db:83:7b:a3:4d:05:47:b3: 78:c1:f2:0c:39:a1:a9:39:8e:c9:b1:68:4a:b6:02: 0d:24:85:b7:cc:91:e7:bd:18:b4:90:15:fe:56:fb: cd:e8:07:9f:57:2d:0a:e5:96:0d:26:f9:cc:df:fc: 5a:77:87:ab:0e:3f:b9:47:72:4f:90:0d:b9:46:49: c5:ba:b6:da:ea:6e:c2:25:20:e3:8d:47:ab:b4:6e: df:83:fc:fd:23:85:c8:6c:23:06:0a:40:3d:d2:58: fd:7c:65:31:2c:ab:a0:ba:70:4c:50:95:cd:5f:92: 93:24:66:02:24:5a:84:30:58:5b:5e:09:b7:cc:29: 27:81:b2:03:b1:29:12:36:05:d2:8e:3b:1d:46:83: 15:96:a8:81:0a:a0:17:ec:fe:db:a0:6c:ba:bd:ae: 3d:fb:1b:95:e5:36:69:5e:d2:22:e5:3d:a3:b0:62: 39:d6:de:68:b4:ec:a4:4e:1d:a2:07:da:9c:3f:0e: 4e:a5:78:81:f8:06:0e:81:69:6d:f7:4a:b9:af:76: 6e:0d:d1:92:f2:45:d0:93:fc:1a:5a:98:cf:15:ae: fd:06:08:ef:f4:be:1b:15:6c:20:b3:a5:a9:5b:e2: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:96:75:3B:C8:78:5A:82:D2:1B:5C:63:B0:3D:90:C7:40:93:A2:4E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/658e14bd-6fcc-4c3a-af2b-94a02a383d64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.139.0/24 Signature Algorithm: sha256WithRSAEncryption 53:68:dc:72:ee:06:65:26:9b:6a:a1:38:00:61:06:ad:fb:a0: 47:77:d7:cc:78:da:a1:5a:f4:3a:0e:65:0c:a6:b3:a3:0a:f9: ad:a3:ed:7a:04:ca:da:56:ea:96:5c:4b:e9:22:36:16:a2:8a: 57:42:e4:db:72:ce:5e:07:b6:5e:1b:fc:68:17:d1:b6:ce:21: b1:5f:f1:b0:3d:19:3b:1f:7e:14:ce:da:91:0f:91:5a:51:eb: b4:2f:cd:61:ce:97:72:3d:5b:94:31:e6:f0:80:c4:20:47:a7: b3:73:c6:11:7e:72:f1:0a:f5:ec:c4:d1:e6:75:2d:eb:ee:e7: 44:7b:aa:08:96:d7:0a:cf:62:4d:03:b2:82:ca:b9:d7:c7:6a: b4:05:62:1b:74:b6:84:c4:69:b4:bb:70:2e:41:21:d3:ad:a6: 48:ad:2f:d2:11:0e:ff:98:ed:ee:94:c8:a1:9e:af:eb:3a:3a: b9:5f:4d:63:83:c5:0b:19:3e:90:42:ce:36:da:99:95:05:6c: 27:f8:dc:d6:cf:77:3d:52:94:44:e5:df:92:a3:d8:f5:aa:6e: 41:81:25:7b:9b:79:b8:21:6c:7f:3e:fc:e4:d6:f4:6d:2f:27: 3d:10:79:cb:18:dd:7e:1f:a3:ff:25:51:89:cc:70:a8:00:25: fd:5e:d3:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZiRq8o4hVl4hl0MyYUDGvyw++5EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIzNjMxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDBlNmZiYzU5YjJmMjVhYTljZmM5M2Q0M2UwMjA5MTAw MGIyNTdkMzFlZmRmY2JjMzY5NjI3YmUwNDA2MWZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbOajSKDhin7R5Mk+HE8Z4kO95xDnbg3ujTQVHs3jB8gw5 oak5jsmxaEq2Ag0khbfMkee9GLSQFf5W+83oB59XLQrllg0m+czf/Fp3h6sOP7lH ck+QDblGScW6ttrqbsIlIOONR6u0bt+D/P0jhchsIwYKQD3SWP18ZTEsq6C6cExQ lc1fkpMkZgIkWoQwWFteCbfMKSeBsgOxKRI2BdKOOx1GgxWWqIEKoBfs/tugbLq9 rj37G5XlNmle0iLlPaOwYjnW3mi07KROHaIH2pw/Dk6leIH4Bg6BaW33Srmvdm4N 0ZLyRdCT/BpamM8Vrv0GCO/0vhsVbCCzpalb4vR/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYpZ1O8h4WoLSG1xjsD2Qx0CTok4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY1OGUxNGJkLTZmY2MtNGMzYS1hZjJiLTk0YTAyYTM4M2Q2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9IswDQYJKoZIhvcNAQELBQADggEBAFNo3HLuBmUmm2qhOABhBq37oEd3 18x42qFa9DoOZQyms6MK+a2j7XoEytpW6pZcS+kiNhaiildC5Ntyzl4Htl4b/GgX 0bbOIbFf8bA9GTsffhTO2pEPkVpR67QvzWHOl3I9W5Qx5vCAxCBHp7NzxhF+cvEK 9ezE0eZ1Levu50R7qgiW1wrPYk0DsoLKudfHarQFYht0toTEabS7cC5BIdOtpkit L9IRDv+Y7e6UyKGer+s6OrlfTWODxQsZPpBCzjbamZUFbCf43NbPdz1SlETl35Kj 2PWqbkGBJXubebghbH8+/OTW9G0vJz0QecsY3X4fo/8lUYnMcKgAJf1e0/s= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:04 2025 by rpki-client