$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e5be8ef-9950-4477-92a3-9bf03769cafe.roa File: 6e5be8ef-9950-4477-92a3-9bf03769cafe.roa (raw, json) Hash identifier: grlkRoMz7h1Ma5GC0K8OMjmo3s4t8CP8WOiBcyMyce8= Subject key identifier: 65:DB:11:3A:2F:E0:A6:95:81:DF:EE:00:57:99:0F:3D:5A:3C:25:CA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34299475E5BBA1A6F5DE8C5556AC8ADFD4AF2EC1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e5be8ef-9950-4477-92a3-9bf03769cafe.roa Signing time: Mon 22 Sep 2025 22:22:03 +0000 ROA not before: Mon 22 Sep 2025 22:22:03 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:29:94:75:e5:bb:a1:a6:f5:de:8c:55:56:ac:8a:df:d4:af:2e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:22:03 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=517a97dbfd10844b55f0b393082c8f4d94876b050a0fb35a86495f4a2bed8499, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:9e:e2:58:bb:d7:2c:0b:da:a8:19:54:f0: c9:5f:8b:64:fa:ef:99:d5:53:4a:a6:20:8e:61:72: 14:7f:3a:b5:c0:75:f1:90:87:6b:3e:53:0e:d1:bb: 03:fc:46:ca:cb:de:f9:30:2c:56:e5:05:80:e5:fc: 68:6f:c0:3e:eb:ca:34:f8:dd:59:3a:79:6e:6c:21: 89:27:5d:e6:51:20:8d:88:d3:3a:9d:bd:cf:4a:3e: b8:98:0f:98:3b:8a:36:10:15:63:db:15:b8:c6:07: 1b:15:f6:4c:e2:fa:4d:81:1f:80:30:c9:25:66:69: 4a:ab:90:4a:89:78:72:64:a3:ea:ac:89:c7:3c:67: bf:52:2d:b5:f9:ea:f6:f6:89:57:3b:ee:c0:dd:b1: 1f:08:09:c7:47:b3:c6:85:e4:6d:aa:e0:8b:04:0c: 1b:e4:a9:12:37:dc:37:02:0b:9c:12:8b:b6:f5:a7: 81:9a:00:63:c2:b7:01:a6:72:2d:9f:59:97:20:96: 3b:0c:d6:74:3c:8d:bd:61:78:63:46:0e:2a:f1:74: d4:90:69:03:12:7e:71:f3:8a:6e:97:7b:f3:23:27: 9f:dd:44:0f:84:9f:ad:41:8c:5a:38:54:08:b1:b5: ee:91:6a:c5:71:60:7f:40:9d:ee:12:21:f9:b8:72: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DB:11:3A:2F:E0:A6:95:81:DF:EE:00:57:99:0F:3D:5A:3C:25:CA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e5be8ef-9950-4477-92a3-9bf03769cafe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.252.0/22 Signature Algorithm: sha256WithRSAEncryption 63:f2:5c:f2:b7:0d:8d:bc:99:c1:bd:02:34:04:8d:54:5c:7a: 04:f8:c0:aa:1d:4a:3c:40:8e:bc:36:41:e9:da:c4:4a:24:c8: 68:a6:60:62:fa:03:c5:67:b8:9b:35:68:4d:24:87:47:00:d6: 76:f2:ae:00:02:97:aa:7a:ee:8e:d8:c1:09:af:de:96:97:35: 1b:c0:ee:d2:79:e5:07:a2:25:eb:a4:e1:71:af:09:91:be:04: 5e:30:00:91:df:c9:bc:fb:f9:61:0f:bb:35:59:7a:67:1a:6e: 71:d6:3d:01:66:df:68:91:e1:78:6e:0a:2f:94:ec:2d:ad:36: dd:51:c1:4f:64:ae:ae:b7:93:9e:91:73:9e:5e:78:09:64:d9: 80:23:19:45:d7:5e:81:88:46:07:3b:13:3d:c2:e2:5e:5c:f0: 29:39:42:11:88:b9:9f:5d:50:fe:37:d3:3a:8f:40:2d:4b:53: ad:5c:5d:44:19:96:fe:14:c5:8d:36:fd:d7:e0:a5:65:0b:58: 43:8a:4d:9b:3d:2b:fd:83:5a:27:8f:2b:70:84:2a:f4:01:62: ef:9f:44:af:3b:d0:30:af:4f:40:72:dd:9e:aa:d7:62:60:42: 09:28:9b:78:e9:64:74:ab:41:47:2f:d9:86:4b:aa:3a:37:c4: 93:38:2a:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNCmUdeW7oab13oxVVqyK39SvLsEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIyMjAzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTdhOTdkYmZkMTA4NDRiNTVmMGIzOTMwODJjOGY0ZDk0 ODc2YjA1MGEwZmIzNWE4NjQ5NWY0YTJiZWQ4NDk5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0657iWLvXLAvaqBlU8Mlfi2T675nVU0qmII5hchR/OrXA dfGQh2s+Uw7RuwP8RsrL3vkwLFblBYDl/GhvwD7ryjT43Vk6eW5sIYknXeZRII2I 0zqdvc9KPriYD5g7ijYQFWPbFbjGBxsV9kzi+k2BH4AwySVmaUqrkEqJeHJko+qs icc8Z79SLbX56vb2iVc77sDdsR8ICcdHs8aF5G2q4IsEDBvkqRI33DcCC5wSi7b1 p4GaAGPCtwGmci2fWZcgljsM1nQ8jb1heGNGDirxdNSQaQMSfnHzim6Xe/MjJ5/d RA+En61BjFo4VAixte6RasVxYH9Ane4SIfm4cmkBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZdsROi/gppWB3+4AV5kPPVo8JcowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZlNWJlOGVmLTk5NTAtNDQ3Ny05MmEzLTliZjAzNzY5Y2FmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS7/wwDQYJKoZIhvcNAQELBQADggEBAGPyXPK3DY28mcG9AjQEjVRcegT4 wKodSjxAjrw2QenaxEokyGimYGL6A8VnuJs1aE0kh0cA1nbyrgACl6p67o7YwQmv 3paXNRvA7tJ55QeiJeuk4XGvCZG+BF4wAJHfybz7+WEPuzVZemcabnHWPQFm32iR 4XhuCi+U7C2tNt1RwU9krq63k56Rc55eeAlk2YAjGUXXXoGIRgc7Ez3C4l5c8Ck5 QhGIuZ9dUP430zqPQC1LU61cXUQZlv4UxY02/dfgpWULWEOKTZs9K/2DWiePK3CE KvQBYu+fRK870DCvT0By3Z6q12JgQgkom3jpZHSrQUcv2YZLqjo3xJM4Ks0= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:20 2025 by rpki-client