$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92027619-01b3-45b9-bf1a-6c432d1848c2.roa File: 92027619-01b3-45b9-bf1a-6c432d1848c2.roa (raw, json) Hash identifier: 9wbm0vMzTTZrG7cPXZhg6sEfgITa0B4Eb/kXqM1Tpeg= Subject key identifier: CC:41:99:E7:40:FC:F6:82:CD:80:13:21:DE:FD:85:7A:16:B2:63:EE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 241C5B9607EF28D36F1D59B55522B99D738F0B3B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92027619-01b3-45b9-bf1a-6c432d1848c2.roa Signing time: Mon 22 Sep 2025 23:11:12 +0000 ROA not before: Mon 22 Sep 2025 23:11:12 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1c:5b:96:07:ef:28:d3:6f:1d:59:b5:55:22:b9:9d:73:8f:0b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:11:12 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=ea9b3ed6764808af486e3edada339858d2a78e507d070797c5123d5c76b3aed4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7b:bb:f6:db:68:8c:37:b6:35:f8:28:32:08: 76:68:ae:fc:89:3d:4e:a9:eb:e7:7a:e0:4b:c5:0e: f7:e4:1b:10:c2:01:4c:b7:d2:55:c4:c3:93:97:a4: 8e:26:49:1d:9d:48:af:5b:09:42:0f:50:42:b1:e7: 8d:14:ca:69:db:75:58:71:44:85:c9:31:cf:83:60: a8:92:c0:60:94:7b:59:9e:94:92:e5:11:e6:07:28: 8c:75:93:f1:e7:c8:02:52:71:b6:7c:a7:fb:29:7b: 2b:33:12:e4:73:e1:33:6c:be:51:3a:4b:79:54:2d: b0:2e:06:15:e3:14:77:19:f8:8b:12:26:09:56:ca: a6:cc:e8:31:91:6a:a6:a7:54:dd:be:3b:b6:cd:a1: a5:a6:67:08:f0:33:e3:e9:45:27:fb:2e:9a:1c:63: 0c:21:78:17:f9:54:30:8e:79:43:93:bf:ce:72:b4: 15:43:ed:a4:e3:96:c7:c1:58:bf:07:19:1c:f9:5c: 85:6d:85:6c:d4:ce:fb:23:ed:5d:a6:b0:66:70:f9: 7f:e4:57:06:19:f0:3d:2d:0f:bc:60:7a:13:fb:85: 0e:4d:af:3f:fd:5b:1b:be:94:4c:54:57:63:2a:ff: 23:72:a0:9f:26:7e:ab:70:5a:a4:4e:05:cd:0f:8f: 81:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:41:99:E7:40:FC:F6:82:CD:80:13:21:DE:FD:85:7A:16:B2:63:EE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92027619-01b3-45b9-bf1a-6c432d1848c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.68.0/23 Signature Algorithm: sha256WithRSAEncryption a1:e7:72:2b:c8:c6:cb:a2:8a:f6:02:43:12:0d:f4:ba:d4:14: 04:7c:fc:51:07:c4:df:2e:d5:b1:8a:e9:ec:26:6b:68:1c:14: f9:43:e9:ae:20:a7:f6:12:9d:d3:a7:d0:48:4e:88:1c:d1:78: 32:fa:92:5a:e8:e0:ae:46:6d:74:e8:e7:25:2a:7c:bf:b5:c0: 3d:0d:b7:74:b5:e0:48:5c:11:79:74:23:d5:96:27:4a:f5:27: b4:d3:a6:f5:75:ac:4c:80:71:86:f8:40:17:13:1b:67:00:c2: 64:06:3d:c8:52:37:3e:41:04:a4:4e:43:a2:dc:a3:ef:54:fd: 93:37:40:5b:79:dd:56:84:33:5b:a4:cd:29:0e:5b:7a:15:f2: ff:8c:a4:fd:81:b3:b5:35:28:4a:38:88:b5:4e:71:6e:18:07: 2f:bd:87:df:fd:7b:b9:4e:d4:14:e5:22:4d:1c:0d:ac:18:16: e0:d2:50:77:a2:dc:3e:c7:ff:40:d7:ed:f2:96:42:99:fe:7f: c8:22:fc:90:dc:68:55:e9:56:df:aa:cb:aa:56:61:a6:1e:55: 0b:5b:ff:2d:ee:c8:8d:3c:84:01:7c:23:c9:bd:fe:e9:03:6c: cc:2e:94:af:4a:2a:29:96:b1:ac:d7:0e:3f:d5:05:ed:0e:ba: db:f5:b9:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJBxblgfvKNNvHVm1VSK5nXOPCzswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjMxMTEyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTliM2VkNjc2NDgwOGFmNDg2ZTNlZGFkYTMzOTg1OGQy YTc4ZTUwN2QwNzA3OTdjNTEyM2Q1Yzc2YjNhZWQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbe7v222iMN7Y1+CgyCHZorvyJPU6p6+d64EvFDvfkGxDC AUy30lXEw5OXpI4mSR2dSK9bCUIPUEKx540UymnbdVhxRIXJMc+DYKiSwGCUe1me lJLlEeYHKIx1k/HnyAJScbZ8p/speyszEuRz4TNsvlE6S3lULbAuBhXjFHcZ+IsS JglWyqbM6DGRaqanVN2+O7bNoaWmZwjwM+PpRSf7LpocYwwheBf5VDCOeUOTv85y tBVD7aTjlsfBWL8HGRz5XIVthWzUzvsj7V2msGZw+X/kVwYZ8D0tD7xgehP7hQ5N rz/9Wxu+lExUV2Mq/yNyoJ8mfqtwWqROBc0Pj4GPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzEGZ50D89oLNgBMh3v2FehayY+4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkyMDI3NjE5LTAxYjMtNDViOS1iZjFhLTZjNDMyZDE4NDhjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9EQwDQYJKoZIhvcNAQELBQADggEBAKHncivIxsuiivYCQxIN9LrUFAR8 /FEHxN8u1bGK6ewma2gcFPlD6a4gp/YSndOn0EhOiBzReDL6klro4K5GbXTo5yUq fL+1wD0Nt3S14EhcEXl0I9WWJ0r1J7TTpvV1rEyAcYb4QBcTG2cAwmQGPchSNz5B BKROQ6Lco+9U/ZM3QFt53VaEM1ukzSkOW3oV8v+MpP2Bs7U1KEo4iLVOcW4YBy+9 h9/9e7lO1BTlIk0cDawYFuDSUHei3D7H/0DX7fKWQpn+f8gi/JDcaFXpVt+qy6pW YaYeVQtb/y3uyI08hAF8I8m9/ukDbMwulK9KKimWsazXDj/VBe0Outv1uT0= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:16 2025 by rpki-client