$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/999ed17f-490c-4f0a-8870-f5488a005cb6.roa File: 999ed17f-490c-4f0a-8870-f5488a005cb6.roa (raw, json) Hash identifier: TZq7BlA98Xu8hTbwSwZ4MIp3aqn9unu5CcK8NVwTg8Q= Subject key identifier: FF:B1:AD:DC:D6:94:36:FC:24:5C:B2:D4:06:18:6A:7D:18:AB:2F:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6BA90FD4B149F7211BB2CE0DE15C1470D878A98D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/999ed17f-490c-4f0a-8870-f5488a005cb6.roa Signing time: Mon 22 Sep 2025 21:39:15 +0000 ROA not before: Mon 22 Sep 2025 21:39:15 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a9:0f:d4:b1:49:f7:21:1b:b2:ce:0d:e1:5c:14:70:d8:78:a9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:39:15 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=09cee008e66c3e8938a5e8d299b419157962f1393b8fd05547f6adcbcf9cf024, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:b0:25:80:22:f7:8a:56:cb:71:53:59:0e: af:67:12:31:08:ba:c6:90:72:42:c2:fb:e2:93:ec: 1e:dc:cc:b7:59:4c:7f:b2:bc:b2:f0:fd:e6:dd:d5: bf:db:a5:3c:32:d7:f9:67:02:f7:42:51:2c:21:de: aa:c3:11:56:2f:09:99:a9:6b:2a:42:06:30:de:85: 30:b2:b5:e2:88:4d:6d:b8:ea:04:ab:82:46:fd:e3: 34:13:b7:4f:29:90:f7:e1:28:f0:cf:be:ea:4a:b6: da:16:64:c5:61:42:dd:24:43:cd:21:ac:90:cd:6e: 6c:f1:78:a5:5d:84:a8:75:fd:17:22:8e:ec:4f:74: 32:dc:c7:9d:bb:22:6f:ff:17:8d:85:8e:7a:fc:ed: 2e:3e:03:ca:74:00:a8:17:88:48:06:d9:d7:84:0d: 4e:4b:bc:64:a8:fb:6b:da:0e:45:2e:3f:7b:4e:78: 9c:28:cc:09:71:96:ff:8e:4d:59:e6:eb:80:10:87: e8:18:03:e2:f6:69:ba:bf:5b:0a:f9:25:42:19:c1: 79:50:fa:ee:5b:9e:57:25:e9:fe:67:95:a6:8a:80: 47:19:48:47:ab:ed:00:38:02:a7:25:3f:6a:a5:2e: e4:63:23:c0:17:01:e2:cd:02:1d:f2:62:c7:75:2b: 60:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B1:AD:DC:D6:94:36:FC:24:5C:B2:D4:06:18:6A:7D:18:AB:2F:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/999ed17f-490c-4f0a-8870-f5488a005cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.29.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:13:48:02:32:c0:be:e0:ff:4a:26:a7:00:d5:fc:d5:d7:16: e6:ba:9b:b9:b1:27:9c:d4:b4:05:96:8c:01:46:fc:ef:de:dc: ce:f3:1b:df:e8:60:bf:5b:37:e5:7f:3c:5c:d7:1a:40:95:98: a3:02:3e:f6:43:e2:4d:33:7b:cb:82:44:71:a2:57:a1:88:5e: 5e:8b:76:75:a4:12:3b:26:d7:a1:11:fc:64:2e:3a:0f:62:15: 5d:c6:4d:09:2d:ff:90:9f:b9:f0:6b:5c:92:93:be:da:5d:d4: 7d:e3:be:12:4d:4a:a4:98:0c:21:12:8f:bc:09:4f:ca:5d:b9: 23:9b:26:78:8d:ff:9b:af:e0:a0:7f:62:dc:4a:05:3f:e5:90: 9a:40:d2:00:af:05:c2:f1:db:14:0a:c3:35:49:7e:fb:dd:44: 52:dc:29:97:92:d5:0a:89:ce:14:93:ca:6b:df:ba:f0:4e:f9: c4:cb:ef:1b:29:cc:89:e7:6b:64:2e:3d:e3:b8:10:d8:a0:e1: 0a:e7:30:ea:0e:66:27:18:ff:f1:4a:b6:68:2e:2e:6d:98:dc: 9a:4f:0d:2a:ad:ae:05:ac:ab:22:61:29:98:81:84:c6:ed:45: 2f:f5:89:94:5b:97:e4:16:64:96:04:cd:39:55:e6:0c:42:cd: 05:85:9e:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa6kP1LFJ9yEbss4N4VwUcNh4qY0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjEzOTE1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOWNlZTAwOGU2NmMzZTg5MzhhNWU4ZDI5OWI0MTkxNTc5 NjJmMTM5M2I4ZmQwNTU0N2Y2YWRjYmNmOWNmMDI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCryLAlgCL3ilbLcVNZDq9nEjEIusaQckLC++KT7B7czLdZ TH+yvLLw/ebd1b/bpTwy1/lnAvdCUSwh3qrDEVYvCZmpaypCBjDehTCyteKITW24 6gSrgkb94zQTt08pkPfhKPDPvupKttoWZMVhQt0kQ80hrJDNbmzxeKVdhKh1/Rci juxPdDLcx527Im//F42Fjnr87S4+A8p0AKgXiEgG2deEDU5LvGSo+2vaDkUuP3tO eJwozAlxlv+OTVnm64AQh+gYA+L2abq/Wwr5JUIZwXlQ+u5bnlcl6f5nlaaKgEcZ SEer7QA4AqclP2qlLuRjI8AXAeLNAh3yYsd1K2AdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/7Gt3NaUNvwkXLLUBhhqfRirL48wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk5OWVkMTdmLTQ5MGMtNGYwYS04ODcwLWY1NDg4YTAwNWNiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7h0wDQYJKoZIhvcNAQELBQADggEBAFwTSAIywL7g/0ompwDV/NXXFua6 m7mxJ5zUtAWWjAFG/O/e3M7zG9/oYL9bN+V/PFzXGkCVmKMCPvZD4k0ze8uCRHGi V6GIXl6LdnWkEjsm16ER/GQuOg9iFV3GTQkt/5CfufBrXJKTvtpd1H3jvhJNSqSY DCESj7wJT8pduSObJniN/5uv4KB/YtxKBT/lkJpA0gCvBcLx2xQKwzVJfvvdRFLc KZeS1QqJzhSTymvfuvBO+cTL7xspzInna2QuPeO4ENig4QrnMOoOZicY//FKtmgu Lm2Y3JpPDSqtrgWsqyJhKZiBhMbtRS/1iZRbl+QWZJYEzTlV5gxCzQWFnj8= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:07 2025 by rpki-client