$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ca0cd31-c888-43fa-9446-2efd66e8e61b.roa File: 6ca0cd31-c888-43fa-9446-2efd66e8e61b.roa (raw, json) Hash identifier: 6Mxaa7WLUuOR0D+kZk27DBxT8ERTFeyLMqGva5yTKOY= Subject key identifier: 5D:0E:4E:C6:9B:E7:1D:0B:B3:A4:76:C7:39:FD:A2:FB:1C:CE:D6:84 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29ED5F87C1D775AC378B885DB1FEDEDCE35C5107 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ca0cd31-c888-43fa-9446-2efd66e8e61b.roa Signing time: Mon 22 Sep 2025 22:40:38 +0000 ROA not before: Mon 22 Sep 2025 22:40:38 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ed:5f:87:c1:d7:75:ac:37:8b:88:5d:b1:fe:de:dc:e3:5c:51:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:40:38 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=779edb4e6c9b7d4a7480928a283f0f28ceac221d9782d0c96e0823eefb757a8f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:56:8a:c9:73:a4:15:18:35:b0:f9:05:53:06: 9a:dd:a2:fa:d0:1b:6d:ef:c8:47:89:48:50:ef:f3: ea:4a:47:3e:aa:c0:6c:3a:e3:d3:be:27:d8:8f:e3: 98:ac:73:ed:3a:30:8f:e4:b0:21:0d:c8:8b:96:41: 66:8b:6a:cc:b8:98:4f:db:c2:65:7a:ff:36:10:07: db:12:05:c2:06:06:3e:8f:16:bf:04:b3:2a:e6:7d: 6a:1c:27:6b:9c:86:42:d9:24:d7:03:cc:b4:e5:70: 57:b2:f0:17:61:ef:14:93:68:33:47:08:74:a2:7d: fe:f4:85:01:e5:96:ec:be:7a:39:6d:71:c3:6b:7b: 84:b3:89:66:90:cc:f4:09:69:a7:ae:0d:ec:28:65: 43:7f:00:dc:0d:fe:be:cf:73:8c:15:0c:b2:08:8a: 04:82:f8:c5:01:1f:7b:05:bb:fd:fb:d9:85:7e:25: ee:3f:8d:4a:fa:ad:86:ba:98:fd:aa:c8:e7:11:5b: 9b:54:1e:db:e2:9a:67:f4:1e:aa:41:b2:9b:f7:7c: 21:0b:84:0c:7d:69:dd:be:e0:60:43:30:77:25:0f: 3c:97:a0:64:ba:6c:04:20:63:fc:1b:39:42:e4:f0: 79:b7:48:a8:3a:b4:5d:7d:c7:e3:7d:00:4c:6c:8a: 9f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0E:4E:C6:9B:E7:1D:0B:B3:A4:76:C7:39:FD:A2:FB:1C:CE:D6:84 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ca0cd31-c888-43fa-9446-2efd66e8e61b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.216.0/24 Signature Algorithm: sha256WithRSAEncryption 79:a5:52:bf:61:89:3d:bf:a8:f5:9e:18:e4:86:c5:16:12:d9: 68:f4:72:aa:b8:ca:06:75:39:5f:93:ba:c0:fe:91:61:64:19: 87:7a:dc:56:fb:86:d4:13:42:f3:b5:c8:07:ef:9e:7b:15:8c: 5d:55:89:2a:f7:fa:fb:53:80:9d:93:48:e1:7a:bd:63:7c:88: 92:7b:05:4e:0e:aa:23:fb:f2:b4:7c:26:2a:87:cb:21:7b:a3: cf:45:74:33:49:0f:19:e7:aa:c0:01:70:b6:1b:81:3f:41:c7: 6e:7e:ed:01:9e:f3:b4:bd:cd:a4:32:0f:a9:58:be:3a:a9:0a: c9:04:4a:8e:1f:00:49:0a:5e:92:44:e9:cb:b8:69:2b:55:4f: 96:9f:49:73:60:0b:1d:0c:cd:ea:44:5b:45:36:9b:35:47:10: e5:29:38:09:55:de:f4:7d:11:62:04:ff:7f:cd:91:81:be:75: 4c:4b:ab:22:95:b1:f5:68:df:37:95:7a:65:3a:3f:78:b6:dc: 32:a1:0c:a4:b6:70:9f:6f:bb:6b:15:f7:f5:a9:d1:c6:5c:c8: 84:41:d9:12:ec:3e:56:ee:26:04:e7:9c:21:e3:0f:5f:a6:5c: 03:dd:ab:19:56:fc:ce:a3:9d:f5:7f:54:b8:61:cc:32:7f:89: 59:f0:2f:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKe1fh8HXdaw3i4hdsf7e3ONcUQcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjI0MDM4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzllZGI0ZTZjOWI3ZDRhNzQ4MDkyOGEyODNmMGYyOGNl YWMyMjFkOTc4MmQwYzk2ZTA4MjNlZWZiNzU3YThmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1VorJc6QVGDWw+QVTBprdovrQG23vyEeJSFDv8+pKRz6q wGw649O+J9iP45isc+06MI/ksCENyIuWQWaLasy4mE/bwmV6/zYQB9sSBcIGBj6P Fr8EsyrmfWocJ2uchkLZJNcDzLTlcFey8Bdh7xSTaDNHCHSiff70hQHlluy+ejlt ccNre4SziWaQzPQJaaeuDewoZUN/ANwN/r7Pc4wVDLIIigSC+MUBH3sFu/372YV+ Je4/jUr6rYa6mP2qyOcRW5tUHtvimmf0HqpBspv3fCELhAx9ad2+4GBDMHclDzyX oGS6bAQgY/wbOULk8Hm3SKg6tF19x+N9AExsip8NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXQ5OxpvnHQuzpHbHOf2i+xzO1oQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZjYTBjZDMxLWM4ODgtNDNmYS05NDQ2LTJlZmQ2NmU4ZTYxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9NgwDQYJKoZIhvcNAQELBQADggEBAHmlUr9hiT2/qPWeGOSGxRYS2Wj0 cqq4ygZ1OV+TusD+kWFkGYd63Fb7htQTQvO1yAfvnnsVjF1ViSr3+vtTgJ2TSOF6 vWN8iJJ7BU4OqiP78rR8JiqHyyF7o89FdDNJDxnnqsABcLYbgT9Bx25+7QGe87S9 zaQyD6lYvjqpCskESo4fAEkKXpJE6cu4aStVT5afSXNgCx0MzepEW0U2mzVHEOUp OAlV3vR9EWIE/3/NkYG+dUxLqyKVsfVo3zeVemU6P3i23DKhDKS2cJ9vu2sV9/Wp 0cZcyIRB2RLsPlbuJgTnnCHjD1+mXAPdqxlW/M6jnfV/VLhhzDJ/iVnwLz4= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:11 2025 by rpki-client