$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7f2bfa28-4616-4e31-825e-e6f6174e3c60.roa File: 7f2bfa28-4616-4e31-825e-e6f6174e3c60.roa (raw, json) Hash identifier: yBRn5v0VmWMstoJ1FfzNjDYrNyVy9RCF5WeyhttdWhw= Subject key identifier: C8:3D:38:91:F6:A5:FA:A5:0C:85:0E:FA:4E:E9:FD:9B:E9:58:1C:2F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F75AC80D0315863D5A2241C13BDCC4B020DC53A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7f2bfa28-4616-4e31-825e-e6f6174e3c60.roa Signing time: Mon 22 Sep 2025 21:51:59 +0000 ROA not before: Mon 22 Sep 2025 21:51:59 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:75:ac:80:d0:31:58:63:d5:a2:24:1c:13:bd:cc:4b:02:0d:c5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:51:59 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=25370eae235e54741ad86b27d2a7d28d5c8b6ff3e433cfa1bb2921750526ae3a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f8:4d:40:64:51:c1:2d:d7:0e:50:45:91:a3: 72:8a:ad:ea:90:e7:43:85:28:96:0b:a4:0b:c6:03: ad:d5:ff:30:b5:05:e6:c9:ce:48:b2:b8:af:2b:f3: d7:b7:5f:c7:80:b3:95:33:3e:a0:bd:f6:ed:7f:48: 81:09:2a:8f:e9:36:c2:cb:56:53:bb:03:03:09:9f: 83:23:1f:0d:b0:e5:28:4f:46:6c:d2:d3:7b:b4:e4: 1d:f2:c4:c7:d8:7b:ca:b4:05:e1:68:bc:0f:c0:08: ab:cf:f9:23:de:7c:32:82:dc:f2:cc:39:3c:f9:3d: 5e:36:b0:b1:9a:1f:ba:6b:2d:1e:fc:94:69:4f:2a: 86:78:21:53:c6:7f:e4:74:2e:5d:25:42:46:6f:3d: e7:d0:0e:69:46:a1:31:d7:d0:ed:f7:f3:2e:fb:c2: 26:c7:0c:cb:ef:9a:6c:24:76:46:85:d1:db:77:fd: 61:2e:b0:21:13:67:b2:3d:1a:be:cf:25:46:f4:90: 29:3a:a4:44:f0:21:19:00:67:27:df:8d:b2:05:3c: 9f:db:b5:a4:e1:30:72:da:03:fb:31:8b:6a:8c:df: 9b:bb:8e:d8:8b:aa:5d:30:2f:d7:a0:36:d0:78:43: 9a:7a:c1:9d:0e:c4:50:5a:25:0f:d5:bf:1b:da:6c: ca:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3D:38:91:F6:A5:FA:A5:0C:85:0E:FA:4E:E9:FD:9B:E9:58:1C:2F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7f2bfa28-4616-4e31-825e-e6f6174e3c60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.223.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:0d:66:b3:41:38:9f:60:a4:16:9a:f0:7f:a1:4d:77:05:17: b0:e0:dd:67:93:26:d1:9f:c2:11:18:03:43:19:7a:85:ea:e0: af:8e:8e:1b:c5:9e:8d:c3:f3:54:1a:65:a2:e3:83:db:c4:f1: 43:37:ca:69:37:a2:e8:d5:1a:0d:3f:a3:56:ec:5f:0c:6d:1b: 01:df:da:8d:1f:5a:86:4f:45:ad:93:58:d0:08:18:fd:a5:ff: a4:7a:d8:4a:df:4b:cd:a6:11:87:d2:2c:f5:85:d2:df:0c:78: 22:44:91:25:1d:20:d5:0b:e4:f0:18:4e:a6:2b:28:ad:10:3d: 35:99:5b:1e:59:66:1a:2e:60:10:30:3d:b2:4c:3f:3b:55:d2: f7:4c:e4:6e:7c:95:4e:14:1a:73:69:c7:2d:24:c4:73:c7:0d: b2:16:ee:4d:26:25:d5:45:b3:65:77:92:83:73:72:dc:3e:24: 2a:c3:d1:f1:db:81:c4:d1:10:7a:57:c0:3d:a5:39:91:2f:9c: 8f:33:8f:6e:2a:66:24:41:86:fb:ac:4d:5e:5e:02:0e:42:77: cd:d3:31:89:66:e7:3d:2e:1b:78:17:56:0b:9c:96:39:71:dc: 6e:84:22:65:d0:60:64:c0:8b:7c:c4:4f:36:3b:9f:43:a6:0c: f9:39:98:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT3WsgNAxWGPVoiQcE73MSwINxTowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjE1MTU5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTM3MGVhZTIzNWU1NDc0MWFkODZiMjdkMmE3ZDI4ZDVj OGI2ZmYzZTQzM2NmYTFiYjI5MjE3NTA1MjZhZTNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8+E1AZFHBLdcOUEWRo3KKreqQ50OFKJYLpAvGA63V/zC1 BebJzkiyuK8r89e3X8eAs5UzPqC99u1/SIEJKo/pNsLLVlO7AwMJn4MjHw2w5ShP RmzS03u05B3yxMfYe8q0BeFovA/ACKvP+SPefDKC3PLMOTz5PV42sLGaH7prLR78 lGlPKoZ4IVPGf+R0Ll0lQkZvPefQDmlGoTHX0O338y77wibHDMvvmmwkdkaF0dt3 /WEusCETZ7I9Gr7PJUb0kCk6pETwIRkAZyffjbIFPJ/btaThMHLaA/sxi2qM35u7 jtiLql0wL9egNtB4Q5p6wZ0OxFBaJQ/VvxvabMpRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyD04kfal+qUMhQ76Tun9m+lYHC8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdmMmJmYTI4LTQ2MTYtNGUzMS04MjVlLWU2ZjYxNzRlM2M2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS798wDQYJKoZIhvcNAQELBQADggEBAF0NZrNBOJ9gpBaa8H+hTXcFF7Dg 3WeTJtGfwhEYA0MZeoXq4K+OjhvFno3D81QaZaLjg9vE8UM3ymk3oujVGg0/o1bs XwxtGwHf2o0fWoZPRa2TWNAIGP2l/6R62ErfS82mEYfSLPWF0t8MeCJEkSUdINUL 5PAYTqYrKK0QPTWZWx5ZZhouYBAwPbJMPztV0vdM5G58lU4UGnNpxy0kxHPHDbIW 7k0mJdVFs2V3koNzctw+JCrD0fHbgcTREHpXwD2lOZEvnI8zj24qZiRBhvusTV5e Ag5Cd83TMYlm5z0uG3gXVgucljlx3G6EImXQYGTAi3zETzY7n0OmDPk5mDc= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:34 2025 by rpki-client