$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69f25f6a-ecff-4f7a-a869-3321d5c252fa.roa File: 69f25f6a-ecff-4f7a-a869-3321d5c252fa.roa (raw, json) Hash identifier: yhAnM+bn3XXIwCR1jgFYAqVKzEx79Hq1UtlC/2iSveI= Subject key identifier: 21:26:1D:04:D6:CD:45:17:30:14:17:8F:0C:07:08:7D:68:B1:3D:F6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7C04BA7B7A522453DB6923352B9557C86A3A720A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69f25f6a-ecff-4f7a-a869-3321d5c252fa.roa Signing time: Mon 22 Sep 2025 21:57:48 +0000 ROA not before: Mon 22 Sep 2025 21:57:48 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:04:ba:7b:7a:52:24:53:db:69:23:35:2b:95:57:c8:6a:3a:72:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:57:48 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=833e36d9110170c64a55068d69fe8161c431f1128a5099be61271522bce1c146, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:c6:06:cc:65:67:26:f8:2e:b4:17:1c:30: 08:06:bf:7a:4c:05:fc:a8:96:d6:80:3c:37:a8:f3: b9:31:5f:97:d0:44:e8:53:4c:28:85:4c:a4:d5:66: f1:48:c7:ed:e7:32:6f:03:df:e3:cc:f9:54:6a:c0: 9f:c0:41:fa:d3:04:6a:22:0e:5d:90:1f:ab:74:fd: e4:a7:28:8a:a9:14:3f:46:6f:43:4f:f8:de:6d:a4: 1a:c8:5e:56:b3:0e:d2:dc:81:0b:12:4e:0a:12:83: b3:7c:f8:32:92:18:bb:8b:ba:8b:b5:fc:dd:4d:f5: 79:3b:fe:23:ca:af:01:69:a3:d5:3c:60:1c:fe:8f: 14:3a:75:2b:f0:7a:61:68:4f:5c:c9:82:70:c4:85: 0a:ec:d9:52:49:37:31:74:9c:6c:f5:58:4b:7f:59: c3:b2:71:3b:e2:63:a9:11:e6:98:02:be:20:a1:be: 59:13:2f:cd:e7:45:64:5f:f2:96:c3:96:01:fa:3f: fc:ff:29:7f:eb:f4:d1:15:07:77:e9:0f:30:1d:ad: ac:5a:c9:fe:ab:2d:52:32:3b:5d:ec:cc:b2:1a:74: ea:7c:bf:0b:14:6d:89:16:c8:07:ef:07:66:94:48: 53:f8:c5:a7:5c:bb:40:e3:e3:c8:7d:2f:8e:aa:cc: 06:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:26:1D:04:D6:CD:45:17:30:14:17:8F:0C:07:08:7D:68:B1:3D:F6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69f25f6a-ecff-4f7a-a869-3321d5c252fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.84.0/24 Signature Algorithm: sha256WithRSAEncryption 48:71:76:19:f4:8d:ce:4d:d3:37:0d:c8:91:f7:32:ce:3d:fd: 34:da:94:e3:04:1d:54:ed:bf:9d:d8:ba:44:52:7b:3c:dc:82: c8:33:16:1e:ed:59:40:be:56:ee:b8:7c:f6:bc:c1:cb:c1:bc: bb:39:48:a6:95:68:3a:e3:68:37:e2:09:1d:f8:20:05:62:06: 46:0e:7f:fe:2c:c3:7f:bc:d2:42:32:eb:8b:70:f6:6d:a4:e1: b9:70:e9:15:df:f6:4f:77:c9:88:b0:df:1e:7e:ed:65:78:28: 65:88:c5:d4:41:0d:bd:ce:63:6c:58:ba:60:0c:19:4f:b1:0e: f6:ee:61:95:aa:0a:ac:b3:ee:c9:e1:25:3e:76:b6:c7:de:67: 38:1f:01:f8:f1:a2:76:e9:fe:08:31:c5:6a:5f:54:ac:c9:10: d7:76:c6:b8:37:1a:55:e9:19:d4:f2:de:36:ca:dc:1c:6e:fb: 2c:80:46:c1:36:05:3c:32:26:b9:d1:a1:9d:4f:54:de:a2:d9: c2:b5:08:c4:08:5a:e7:32:a8:47:d0:79:53:93:8f:53:e6:17: 74:9d:19:e9:02:27:77:fa:50:dd:55:38:26:bc:f5:15:17:81: 89:13:0a:82:35:d2:b2:f6:5e:5a:78:31:fc:21:ce:e9:0e:1b: a8:02:af:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfAS6e3pSJFPbaSM1K5VXyGo6cgowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjE1NzQ4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzNlMzZkOTExMDE3MGM2NGE1NTA2OGQ2OWZlODE2MWM0 MzFmMTEyOGE1MDk5YmU2MTI3MTUyMmJjZTFjMTQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+GsYGzGVnJvgutBccMAgGv3pMBfyoltaAPDeo87kxX5fQ ROhTTCiFTKTVZvFIx+3nMm8D3+PM+VRqwJ/AQfrTBGoiDl2QH6t0/eSnKIqpFD9G b0NP+N5tpBrIXlazDtLcgQsSTgoSg7N8+DKSGLuLuou1/N1N9Xk7/iPKrwFpo9U8 YBz+jxQ6dSvwemFoT1zJgnDEhQrs2VJJNzF0nGz1WEt/WcOycTviY6kR5pgCviCh vlkTL83nRWRf8pbDlgH6P/z/KX/r9NEVB3fpDzAdraxayf6rLVIyO13szLIadOp8 vwsUbYkWyAfvB2aUSFP4xadcu0Dj48h9L46qzAbXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUISYdBNbNRRcwFBePDAcIfWixPfYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY5ZjI1ZjZhLWVjZmYtNGY3YS1hODY5LTMzMjFkNWMyNTJmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS71QwDQYJKoZIhvcNAQELBQADggEBAEhxdhn0jc5N0zcNyJH3Ms49/TTa lOMEHVTtv53YukRSezzcgsgzFh7tWUC+Vu64fPa8wcvBvLs5SKaVaDrjaDfiCR34 IAViBkYOf/4sw3+80kIy64tw9m2k4blw6RXf9k93yYiw3x5+7WV4KGWIxdRBDb3O Y2xYumAMGU+xDvbuYZWqCqyz7snhJT52tsfeZzgfAfjxonbp/ggxxWpfVKzJENd2 xrg3GlXpGdTy3jbK3Bxu+yyARsE2BTwyJrnRoZ1PVN6i2cK1CMQIWucyqEfQeVOT j1PmF3SdGekCJ3f6UN1VOCa89RUXgYkTCoI10rL2Xlp4MfwhzukOG6gCryA= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:20 2025 by rpki-client