$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/681ef11a-fb85-480f-ab00-03c9aaa9fc5e.roa File: 681ef11a-fb85-480f-ab00-03c9aaa9fc5e.roa (raw, json) Hash identifier: mYnY5AJDzNzBC1m4Wq7ZFiT+TjC8SPlrF75pjCCwYfw= Subject key identifier: 2B:25:C9:B1:1A:5D:33:62:A4:CA:1F:CE:E4:EB:AF:67:32:03:DD:1B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 28483F7386B687EC359FA5F8F8118FDE2BFCC48C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/681ef11a-fb85-480f-ab00-03c9aaa9fc5e.roa Signing time: Mon 22 Sep 2025 21:43:07 +0000 ROA not before: Mon 22 Sep 2025 21:43:07 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:48:3f:73:86:b6:87:ec:35:9f:a5:f8:f8:11:8f:de:2b:fc:c4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:43:07 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=1d5696a452132b8cd2ffa3e6d3ec02ec354c666f5740ac961ae38a047c771fe8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:d8:2e:e8:33:50:1d:5d:6e:c7:10:33:43: 8c:bf:77:48:fe:ea:bb:a0:0c:94:66:81:f3:34:e3: e8:17:a7:e7:db:cf:cd:26:f1:5d:18:a2:e7:49:13: 04:04:e8:64:b5:55:1d:9c:22:39:ff:1b:8d:fb:f3: c8:6f:be:59:0a:97:3e:91:02:f4:46:c9:9f:a7:4f: 38:e2:7e:7c:11:a4:23:ec:2d:83:2e:38:ac:ef:b0: 57:d6:d8:52:50:b4:ab:9b:bf:d9:60:13:28:b1:24: 2f:10:b4:11:db:98:8f:49:c1:eb:69:b2:1e:69:6a: a9:86:e9:72:b5:ca:2b:23:ad:4d:4e:9b:3c:7b:e2: 44:b9:69:fe:9d:99:50:92:0d:5c:ec:b2:f9:23:58: 89:3c:f3:8f:47:1c:37:20:d8:81:e2:d4:63:29:7f: b6:ff:2b:cb:74:49:39:bf:83:b4:5e:9a:43:53:3c: 33:3b:db:5c:cf:ee:2b:52:5a:d4:f9:e6:95:c7:dc: 3b:f9:b7:a1:b2:2b:11:b6:20:87:b9:16:77:04:ed: 2d:eb:61:39:5a:19:b2:7e:77:b9:84:94:8c:5c:c3: e4:36:ae:2b:ab:5e:e4:6b:81:f8:5e:c0:15:6b:9b: 78:20:1e:c0:b8:0c:1f:38:93:a9:35:54:fc:06:39: 7a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:25:C9:B1:1A:5D:33:62:A4:CA:1F:CE:E4:EB:AF:67:32:03:DD:1B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/681ef11a-fb85-480f-ab00-03c9aaa9fc5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.92.0/24 Signature Algorithm: sha256WithRSAEncryption a0:0b:50:e7:ea:c0:c8:ec:a3:86:b4:41:a4:98:0f:1e:d8:cc: 06:20:82:20:72:f3:9f:4c:d9:2b:8a:3c:45:f2:73:4c:bc:f6: 61:41:5b:7e:38:11:55:4f:d1:d0:4d:94:91:76:f1:fd:e6:f4: d8:92:1a:95:3f:60:02:f0:12:da:6a:a5:a1:7b:d7:e3:29:c7: 57:5a:b1:52:d7:ad:38:79:1e:65:3e:30:60:3c:52:dc:1f:6f: df:85:22:a4:2e:79:ec:cc:d9:06:85:3f:cb:30:f3:4c:69:9e: b3:fc:98:fc:6a:af:ba:1b:11:5f:35:3a:58:d1:77:a5:0a:9f: 2a:08:fd:d2:0d:8b:2f:51:20:bb:b6:55:90:f2:70:29:89:91: b7:64:3c:e5:42:83:dd:0e:b8:43:3f:99:f0:7a:91:e2:7d:49: 8e:59:d9:0e:39:14:3f:e1:dc:0d:b5:ab:76:62:3e:d7:f6:fb: b4:81:54:4a:fb:c9:a1:40:87:a6:5f:70:3d:6e:6a:74:0a:d2: 91:ab:bc:f5:f7:34:cc:b6:e6:a0:2c:8d:14:47:1e:33:dd:21: e1:af:88:e8:8f:69:a2:95:7b:6e:0e:7a:11:36:86:ee:fc:ec: ef:ef:c9:26:f4:c3:1d:86:5f:38:a7:26:70:ae:35:52:53:6a: 80:f3:99:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKEg/c4a2h+w1n6X4+BGP3iv8xIwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjE0MzA3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDU2OTZhNDUyMTMyYjhjZDJmZmEzZTZkM2VjMDJlYzM1 NGM2NjZmNTc0MGFjOTYxYWUzOGEwNDdjNzcxZmU4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMRtgu6DNQHV1uxxAzQ4y/d0j+6rugDJRmgfM04+gXp+fb z80m8V0YoudJEwQE6GS1VR2cIjn/G43788hvvlkKlz6RAvRGyZ+nTzjifnwRpCPs LYMuOKzvsFfW2FJQtKubv9lgEyixJC8QtBHbmI9Jwetpsh5paqmG6XK1yisjrU1O mzx74kS5af6dmVCSDVzssvkjWIk8849HHDcg2IHi1GMpf7b/K8t0STm/g7RemkNT PDM721zP7itSWtT55pXH3Dv5t6GyKxG2IIe5FncE7S3rYTlaGbJ+d7mElIxcw+Q2 riurXuRrgfhewBVrm3ggHsC4DB84k6k1VPwGOXq9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKyXJsRpdM2Kkyh/O5OuvZzID3RswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4MWVmMTFhLWZiODUtNDgwZi1hYjAwLTAzYzlhYWE5ZmM1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7lwwDQYJKoZIhvcNAQELBQADggEBAKALUOfqwMjso4a0QaSYDx7YzAYg giBy859M2SuKPEXyc0y89mFBW344EVVP0dBNlJF28f3m9NiSGpU/YALwEtpqpaF7 1+Mpx1dasVLXrTh5HmU+MGA8Utwfb9+FIqQueezM2QaFP8sw80xpnrP8mPxqr7ob EV81OljRd6UKnyoI/dINiy9RILu2VZDycCmJkbdkPOVCg90OuEM/mfB6keJ9SY5Z 2Q45FD/h3A21q3ZiPtf2+7SBVEr7yaFAh6ZfcD1uanQK0pGrvPX3NMy25qAsjRRH HjPdIeGviOiPaaKVe24OehE2hu787O/vySb0wx2GXzinJnCuNVJTaoDzmc0= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:19 2025 by rpki-client