$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6eaca9bd-12bb-435a-8d36-628e5a2d8a11.roa File: 6eaca9bd-12bb-435a-8d36-628e5a2d8a11.roa (raw, json) Hash identifier: UOoEVFPfooCjiKIL1+2SyFAtXXW2i7mc2sC/w/Ir2Pc= Subject key identifier: F9:F5:88:57:DA:72:92:07:A4:BC:DA:41:7B:C7:56:0A:33:38:42:64 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5EC79C18CED9BA375E81212094ADC53CC1CBCEA1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6eaca9bd-12bb-435a-8d36-628e5a2d8a11.roa Signing time: Mon 22 Sep 2025 22:08:49 +0000 ROA not before: Mon 22 Sep 2025 22:08:49 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c7:9c:18:ce:d9:ba:37:5e:81:21:20:94:ad:c5:3c:c1:cb:ce:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:08:49 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=bb4ecc88595ba0a63378d3ff6836102e17a47e848213e0146e9460fdfbd59705, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:c2:d3:88:c0:5b:4a:c4:65:42:56:24:aa: 2f:92:64:22:c7:ba:25:a7:f0:d3:a6:93:2d:b4:fd: af:85:04:44:4e:01:20:42:05:f3:dd:c1:2a:9b:4f: f2:17:f4:4f:b3:86:8f:67:de:7e:02:8e:9e:0b:ca: 5f:cb:2a:27:64:60:b2:2a:a3:8b:95:d2:b4:94:42: d2:33:cd:f6:fc:71:3d:25:11:6a:fe:be:c4:06:99: 27:9a:f6:4e:b0:2f:96:0f:5a:aa:70:d7:82:12:2b: 41:21:00:7f:cb:fb:27:d2:4d:58:6f:8c:ba:9d:fc: c3:25:1e:8c:ba:bb:11:98:a2:0d:2f:9b:1b:13:53: 7d:85:46:ce:c2:a8:53:28:34:e1:2b:e2:ec:ba:01: c7:3d:1a:7d:6c:c9:3d:5f:8d:cb:e6:47:9e:bf:21: 3a:29:9c:af:a9:84:2f:d7:f5:7b:b0:fd:fc:0e:d3: 00:16:62:bd:3c:51:0d:a8:aa:d7:4b:75:bd:a4:df: 02:4d:11:48:5c:1a:af:a5:fe:a4:07:3d:f9:6b:75: 58:3a:27:68:2f:ce:b8:49:5c:4f:74:38:31:c1:0a: cd:28:bd:b0:76:f4:d5:ff:2f:b5:ad:c6:02:f2:23: e4:2a:9c:1c:06:31:b0:a6:c9:a6:6f:e6:9e:69:6a: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F5:88:57:DA:72:92:07:A4:BC:DA:41:7B:C7:56:0A:33:38:42:64 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6eaca9bd-12bb-435a-8d36-628e5a2d8a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.140.0/23 Signature Algorithm: sha256WithRSAEncryption 45:90:a8:ac:ea:fa:30:20:c5:01:7d:22:d7:9a:b2:f0:89:2c: ee:06:28:96:cb:38:79:b5:81:21:76:10:bf:87:44:7c:0c:5c: e0:b2:45:1e:12:48:49:c1:4e:69:3f:89:6f:0a:81:3f:13:36: 74:53:58:ce:3c:08:93:c4:f6:fe:2e:f9:14:fd:35:c9:37:c6: b2:4c:4e:3f:94:f9:ae:e7:a4:cd:a5:da:a5:8f:19:61:34:90: d6:ac:09:96:f7:4c:36:04:13:3d:d2:f6:36:49:b0:46:9a:81: 59:d8:32:d9:cc:8a:2e:00:67:11:0f:f1:21:c9:98:bd:d8:b4: 9d:be:2d:24:0b:53:f5:b6:49:26:19:7f:69:ba:1a:71:ef:87: 5b:6a:0d:7a:88:76:b7:ef:2c:ec:b8:b9:4a:d6:0a:e7:c4:bc: a5:03:6d:d2:de:c8:d0:f1:74:fd:5f:e4:17:80:fe:1b:44:42: a8:36:18:d5:45:68:68:07:1a:c3:6b:bc:70:c6:46:ca:a6:e6: d5:99:29:49:6c:bb:7a:91:14:24:a7:cf:2d:91:55:3e:c0:6c: ba:02:8e:49:5c:b9:7d:ec:e6:d4:2f:23:e6:26:40:82:54:31: c3:b4:33:dd:14:1e:1b:94:1e:ca:c0:b1:0f:7e:74:2a:1c:80: 79:c5:0c:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXsecGM7ZujdegSEglK3FPMHLzqEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIwODQ5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjRlY2M4ODU5NWJhMGE2MzM3OGQzZmY2ODM2MTAyZTE3 YTQ3ZTg0ODIxM2UwMTQ2ZTk0NjBmZGZiZDU5NzA1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVX8LTiMBbSsRlQlYkqi+SZCLHuiWn8NOmky20/a+FBERO ASBCBfPdwSqbT/IX9E+zho9n3n4Cjp4Lyl/LKidkYLIqo4uV0rSUQtIzzfb8cT0l EWr+vsQGmSea9k6wL5YPWqpw14ISK0EhAH/L+yfSTVhvjLqd/MMlHoy6uxGYog0v mxsTU32FRs7CqFMoNOEr4uy6Acc9Gn1syT1fjcvmR56/ITopnK+phC/X9Xuw/fwO 0wAWYr08UQ2oqtdLdb2k3wJNEUhcGq+l/qQHPflrdVg6J2gvzrhJXE90ODHBCs0o vbB29NX/L7WtxgLyI+QqnBwGMbCmyaZv5p5pauDHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+fWIV9pykgekvNpBe8dWCjM4QmQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZlYWNhOWJkLTEyYmItNDM1YS04ZDM2LTYyOGU1YTJkOGExMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES74wwDQYJKoZIhvcNAQELBQADggEBAEWQqKzq+jAgxQF9IteasvCJLO4G KJbLOHm1gSF2EL+HRHwMXOCyRR4SSEnBTmk/iW8KgT8TNnRTWM48CJPE9v4u+RT9 Nck3xrJMTj+U+a7npM2l2qWPGWE0kNasCZb3TDYEEz3S9jZJsEaagVnYMtnMii4A ZxEP8SHJmL3YtJ2+LSQLU/W2SSYZf2m6GnHvh1tqDXqIdrfvLOy4uUrWCufEvKUD bdLeyNDxdP1f5BeA/htEQqg2GNVFaGgHGsNrvHDGRsqm5tWZKUlsu3qRFCSnzy2R VT7AbLoCjklcuX3s5tQvI+YmQIJUMcO0M90UHhuUHsrAsQ9+dCocgHnFDG4= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:40 2025 by rpki-client