$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c6a4cf4-98f8-49f5-909d-9db688675107.roa File: 9c6a4cf4-98f8-49f5-909d-9db688675107.roa (raw, json) Hash identifier: CsXV32xsKs1jHK+sE/wRpDI1Ygs5wFZOy8c1yo6f9m4= Subject key identifier: 23:EE:77:6D:75:09:6C:1E:5C:2C:C0:A9:6B:E9:FD:ED:86:33:D8:09 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6AAD4ABD3FFF8FC34FAD05BE150BB64704BB5F9B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c6a4cf4-98f8-49f5-909d-9db688675107.roa Signing time: Wed 24 Sep 2025 21:14:40 +0000 ROA not before: Wed 24 Sep 2025 21:14:40 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ad:4a:bd:3f:ff:8f:c3:4f:ad:05:be:15:0b:b6:47:04:bb:5f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:14:40 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=4b189ceaa3d13307214441dc9cd44f5553357fab5755bf0177a79500401bf472, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:5e:c0:4c:97:4e:80:44:9f:71:d1:e9:43: 31:dc:1a:a1:c4:33:68:1a:de:2d:19:23:08:54:6d: 9c:cd:f8:67:a5:c7:3b:76:a6:2a:62:c3:e3:6f:3f: c0:54:73:ba:8d:bb:a4:60:8c:01:ca:2c:23:ef:69: 6d:bd:71:e7:7d:f6:ce:08:e5:b5:85:f0:0b:91:a5: 57:2b:52:c5:2b:b6:06:40:62:f6:9c:a0:ef:de:7b: 13:25:e5:e0:42:8d:e1:e0:ab:ae:3c:38:74:0d:17: 38:8b:b2:85:ed:5b:0c:9e:74:98:b7:9a:a7:6e:98: a7:05:f4:03:0a:32:14:cd:ae:3c:60:8e:cb:95:f7: 2c:6f:f6:39:92:63:b8:5d:d4:8e:06:cb:4e:26:5a: d9:e4:17:07:45:13:85:8d:8d:8a:3f:29:f0:ab:ea: d0:a1:5c:5b:87:bc:4d:28:ae:8e:f0:49:38:d8:e8: 02:e6:72:22:ba:c5:62:92:cf:79:c9:5a:e5:8c:1f: f6:0b:b1:50:21:2b:ed:e0:50:45:8a:80:3f:e1:3f: 97:25:13:97:a1:62:91:a6:20:91:c1:a8:1d:52:90: cc:19:ab:20:39:aa:a8:d2:51:38:16:e0:e3:b6:78: e2:60:a9:95:65:3f:9d:fa:99:12:77:e1:3b:8b:94: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EE:77:6D:75:09:6C:1E:5C:2C:C0:A9:6B:E9:FD:ED:86:33:D8:09 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c6a4cf4-98f8-49f5-909d-9db688675107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.219.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:4d:26:80:90:b1:2d:77:d6:de:9d:f9:3b:0b:75:9c:31:0c: 15:f7:a4:8f:10:e8:2f:f1:c4:3a:df:1b:78:00:e8:25:81:21: 4c:b2:2a:e9:3b:fc:68:61:7b:5f:96:30:93:0d:2e:3b:13:e3: 1a:29:7e:0a:bb:59:6e:f0:1b:ec:bd:56:fe:32:4e:6e:ac:09: f5:ce:9b:f4:ae:d3:90:ed:ea:1f:06:ac:ae:c2:ab:0a:41:0e: 9f:44:b2:9c:49:37:60:db:46:06:44:89:f5:d7:14:c8:ba:eb: 60:23:ec:14:72:1a:c5:8a:65:cd:7a:4e:80:ba:a9:84:ad:4e: 29:71:c0:8b:3b:6a:f1:fd:a6:70:c2:e7:47:dd:2e:5d:c0:bb: e4:35:3b:04:2a:60:14:b4:4f:25:81:aa:c8:e0:48:ac:21:b4: 40:4c:55:1e:63:18:ea:21:36:95:55:96:eb:2f:15:7f:a3:30: 0b:c1:b1:94:1e:50:61:5e:ef:55:e1:e8:4a:b2:53:cb:3b:13: f5:0e:f0:cc:64:fb:d8:b2:14:4a:56:18:5b:ef:36:2c:38:03: 94:d1:a0:5a:fc:92:b2:18:a6:4a:9c:5a:22:d7:bb:53:cb:db: 07:ca:48:ea:79:83:b2:d1:1a:3f:82:8e:fb:81:02:16:51:3d: b8:5f:8e:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaq1KvT//j8NPrQW+FQu2RwS7X5swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjExNDQwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjE4OWNlYWEzZDEzMzA3MjE0NDQxZGM5Y2Q0NGY1NTUz MzU3ZmFiNTc1NWJmMDE3N2E3OTUwMDQwMWJmNDcyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyeF7ATJdOgESfcdHpQzHcGqHEM2ga3i0ZIwhUbZzN+Gel xzt2pipiw+NvP8BUc7qNu6RgjAHKLCPvaW29ced99s4I5bWF8AuRpVcrUsUrtgZA YvacoO/eexMl5eBCjeHgq648OHQNFziLsoXtWwyedJi3mqdumKcF9AMKMhTNrjxg jsuV9yxv9jmSY7hd1I4Gy04mWtnkFwdFE4WNjYo/KfCr6tChXFuHvE0oro7wSTjY 6ALmciK6xWKSz3nJWuWMH/YLsVAhK+3gUEWKgD/hP5clE5ehYpGmIJHBqB1SkMwZ qyA5qqjSUTgW4OO2eOJgqZVlP536mRJ34TuLlEOFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI+53bXUJbB5cLMCpa+n97YYz2AkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzljNmE0Y2Y0LTk4ZjgtNDlmNS05MDlkLTlkYjY4ODY3NTEwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQNswDQYJKoZIhvcNAQELBQADggEBAEpNJoCQsS131t6d+TsLdZwxDBX3 pI8Q6C/xxDrfG3gA6CWBIUyyKuk7/Ghhe1+WMJMNLjsT4xopfgq7WW7wG+y9Vv4y Tm6sCfXOm/Su05Dt6h8GrK7CqwpBDp9EspxJN2DbRgZEifXXFMi662Aj7BRyGsWK Zc16ToC6qYStTilxwIs7avH9pnDC50fdLl3Au+Q1OwQqYBS0TyWBqsjgSKwhtEBM VR5jGOohNpVVlusvFX+jMAvBsZQeUGFe71Xh6EqyU8s7E/UO8Mxk+9iyFEpWGFvv Niw4A5TRoFr8krIYpkqcWiLXu1PL2wfKSOp5g7LRGj+CjvuBAhZRPbhfjhc= -----END CERTIFICATE-----Generated at Fri Oct 17 23:46:33 2025 by rpki-client