$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72398da2-7b74-4d06-bb8b-987cd06fe7ab.roa File: 72398da2-7b74-4d06-bb8b-987cd06fe7ab.roa (raw, json) Hash identifier: uJSQ5qReIcgNvNoS0nGPd4eIR5DrzQQURf0w6VYTGY4= Subject key identifier: B5:FB:DD:5F:A3:35:9F:29:4A:60:45:B7:74:D5:40:C5:89:FC:02:EE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6FC172448674AB18D080BD8D9E36668EE034EF9F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72398da2-7b74-4d06-bb8b-987cd06fe7ab.roa Signing time: Mon 22 Sep 2025 23:22:15 +0000 ROA not before: Mon 22 Sep 2025 23:22:15 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c1:72:44:86:74:ab:18:d0:80:bd:8d:9e:36:66:8e:e0:34:ef:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:22:15 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=534b067efcf2d72da2e6b6fe878a121ed984b0395e8e378f726f351a0a4e1eb4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:f0:59:5e:a1:cd:cb:47:da:1d:c4:04:5e: 39:f0:4b:ee:a8:b9:3b:4c:c7:c0:3e:c0:f2:0e:37: eb:7f:3d:45:94:34:30:ed:c1:91:c1:ff:e5:c5:cb: ec:73:dd:ee:88:39:1d:60:ee:f1:d2:8b:e1:14:13: 73:b4:68:96:b8:f0:be:a4:c1:91:e7:1c:7a:81:d9: e0:d1:37:e1:ba:7e:68:a7:44:33:20:15:ac:52:97: 92:b3:09:3a:0f:a7:8a:74:dc:b1:ca:b7:bd:78:6b: c0:16:46:03:e2:79:2d:58:66:1e:13:c5:ea:4e:4c: 53:ea:fb:93:9e:65:73:21:07:08:1e:9b:73:64:79: bf:55:40:55:79:67:0b:6b:47:ac:19:20:2d:8c:18: bd:07:a0:37:22:57:39:17:48:be:c7:08:55:e1:9c: 88:bc:37:9a:ee:bd:4a:4b:77:3a:e5:b5:e7:5c:4d: 6d:21:ef:0c:ea:80:cb:b3:c9:84:1e:e7:3f:b8:f0: 35:ac:65:3c:cb:2a:6b:1f:bc:28:f2:7c:57:db:35: 3e:e9:46:f1:a7:4e:77:c0:62:14:43:a9:58:74:2d: c8:48:9a:a4:27:c6:45:e1:b9:70:89:23:a3:1f:81: 67:55:e2:a5:71:07:81:84:7c:5c:e0:e0:bf:63:03: ce:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FB:DD:5F:A3:35:9F:29:4A:60:45:B7:74:D5:40:C5:89:FC:02:EE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72398da2-7b74-4d06-bb8b-987cd06fe7ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.236.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:e7:c5:aa:37:f4:70:b2:32:50:f4:6e:24:d7:f6:7f:e4:6b: 49:94:0d:ff:91:a6:66:2f:54:8f:b5:08:f7:fc:9f:88:52:1b: d5:7d:2e:4a:20:cd:48:c4:76:cb:7f:35:d3:5a:cb:36:44:ae: 6d:35:7d:83:68:72:75:27:5c:48:c1:28:33:0e:8f:7b:11:ae: 60:63:73:fb:99:0e:eb:0b:14:ae:9e:a4:ba:8d:33:18:ed:f3: 47:19:0f:28:8d:47:94:08:0e:38:29:fc:5a:61:ca:32:05:49: 27:a7:04:30:11:88:3d:50:c5:30:d3:f3:18:ae:34:d3:6f:6a: 11:1d:e5:b8:86:2c:f5:74:8a:fa:79:40:63:6d:4b:03:d4:7c: 7b:30:09:48:6f:2a:93:c6:4b:55:07:fd:2e:9d:d4:d3:7c:1b: 30:41:08:7a:ca:2a:24:84:36:6f:ea:8b:22:dd:7f:1a:90:c0: 88:3b:95:46:53:01:02:dc:57:b8:93:a6:85:92:b5:a7:14:fb: 6c:ca:a0:3e:67:fa:0f:65:0c:eb:31:8a:ec:92:e7:f8:e7:73: e2:be:24:c2:e2:f3:c4:f8:35:be:99:99:62:fd:3e:e9:12:d2: 13:87:00:af:ee:89:46:8d:28:cf:46:2b:bd:0c:e9:69:09:49: 37:9f:d6:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb8FyRIZ0qxjQgL2NnjZmjuA0758wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjMyMjE1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzRiMDY3ZWZjZjJkNzJkYTJlNmI2ZmU4NzhhMTIxZWQ5 ODRiMDM5NWU4ZTM3OGY3MjZmMzUxYTBhNGUxZWI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClavBZXqHNy0faHcQEXjnwS+6ouTtMx8A+wPION+t/PUWU NDDtwZHB/+XFy+xz3e6IOR1g7vHSi+EUE3O0aJa48L6kwZHnHHqB2eDRN+G6fmin RDMgFaxSl5KzCToPp4p03LHKt714a8AWRgPieS1YZh4TxepOTFPq+5OeZXMhBwge m3Nkeb9VQFV5ZwtrR6wZIC2MGL0HoDciVzkXSL7HCFXhnIi8N5ruvUpLdzrltedc TW0h7wzqgMuzyYQe5z+48DWsZTzLKmsfvCjyfFfbNT7pRvGnTnfAYhRDqVh0LchI mqQnxkXhuXCJI6MfgWdV4qVxB4GEfFzg4L9jA86XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtfvdX6M1nylKYEW3dNVAxYn8Au4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcyMzk4ZGEyLTdiNzQtNGQwNi1iYjhiLTk4N2NkMDZmZTdhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS9OwwDQYJKoZIhvcNAQELBQADggEBAC/nxao39HCyMlD0biTX9n/ka0mU Df+RpmYvVI+1CPf8n4hSG9V9LkogzUjEdst/NdNayzZErm01fYNocnUnXEjBKDMO j3sRrmBjc/uZDusLFK6epLqNMxjt80cZDyiNR5QIDjgp/FphyjIFSSenBDARiD1Q xTDT8xiuNNNvahEd5biGLPV0ivp5QGNtSwPUfHswCUhvKpPGS1UH/S6d1NN8GzBB CHrKKiSENm/qiyLdfxqQwIg7lUZTAQLcV7iTpoWStacU+2zKoD5n+g9lDOsxiuyS 5/jnc+K+JMLi88T4Nb6ZmWL9PukS0hOHAK/uiUaNKM9GK70M6WkJSTef1kc= -----END CERTIFICATE-----Generated at Sat Oct 18 02:17:27 2025 by rpki-client