$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0dec826-ba1f-42f5-ace3-48b82dca62e4.roa File: a0dec826-ba1f-42f5-ace3-48b82dca62e4.roa (raw, json) Hash identifier: Vc6Wg8DiYv8q5tAu75RufPC3JPAS/ZHOSBtAUxcyanU= Subject key identifier: 03:23:C6:42:A1:1D:BC:90:56:7D:F1:2E:0F:70:01:95:AF:E8:FE:42 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34ADD8CD2BC22D185B9072640EB4324DCE68190E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0dec826-ba1f-42f5-ace3-48b82dca62e4.roa Signing time: Mon 22 Sep 2025 21:45:28 +0000 ROA not before: Mon 22 Sep 2025 21:45:28 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ad:d8:cd:2b:c2:2d:18:5b:90:72:64:0e:b4:32:4d:ce:68:19:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:45:28 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=f257c7c442d720da32c71ee5f28916f7aada5e6a41ff43cbb087689e4a662728, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:c1:ae:91:ed:f2:32:b1:15:23:6e:b1:6d: 97:d6:9b:78:5d:40:76:29:57:cb:a8:80:ca:de:04: e5:74:fd:24:08:21:d5:f3:ab:a5:85:35:0e:cd:c2: 56:8f:dd:54:b0:92:9d:08:e7:26:22:75:10:a1:ad: e7:f8:0d:bf:9b:ba:f0:68:f5:d1:5a:57:e3:cc:18: 8e:90:5b:62:7d:6a:9c:62:82:4a:ea:41:17:2e:a2: 2a:e1:52:b8:89:76:74:62:bc:6a:af:89:67:f7:45: 8c:ae:ff:10:c5:ba:88:a9:9e:b9:b6:23:c1:56:2c: a0:70:bc:68:f1:9f:6d:d1:f1:9c:92:e6:3e:ea:3a: 26:82:9c:aa:d6:1f:42:8d:43:13:d1:2a:a0:09:62: 2c:4a:60:12:1c:d5:b4:79:8d:70:9c:3d:33:ad:29: 09:82:ca:01:3d:27:fd:10:48:9e:32:f7:e7:8d:32: e9:2b:5d:7a:3e:c6:ed:d9:2d:71:c2:3e:63:59:3a: 99:c0:70:23:32:3f:f7:37:b7:18:2d:41:77:a3:96: e0:8f:e7:2d:9b:b4:7d:d7:7d:51:1a:7f:fa:eb:ae: 8c:77:4f:85:d1:e9:6f:19:c3:46:53:17:9a:b8:3a: 53:3e:b1:9a:ed:f0:01:30:83:86:ce:d7:cc:3e:ea: 48:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:23:C6:42:A1:1D:BC:90:56:7D:F1:2E:0F:70:01:95:AF:E8:FE:42 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0dec826-ba1f-42f5-ace3-48b82dca62e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.140.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:51:07:e7:69:15:02:78:02:e0:f8:73:a4:d6:28:d8:cb:37: e8:ab:52:85:f6:c9:2a:41:7f:46:67:16:58:d0:10:29:b2:66: ca:a1:72:31:29:46:65:6c:3c:85:c3:a5:22:2c:b7:4f:bf:50: ea:a3:23:c5:69:4f:8f:c7:73:f0:dd:6b:34:d9:55:57:f8:6a: f7:a1:dd:04:2a:1b:ef:12:4c:cc:f1:83:6c:21:92:a7:7d:51: 26:c1:50:7f:d1:47:f9:cc:65:c3:93:55:97:07:c9:d5:96:4d: df:2d:d2:f0:c0:51:04:43:c1:83:5c:1e:83:ea:f4:dd:5c:24: 23:d4:37:fc:a1:e0:f9:52:43:11:74:e2:8f:b6:f8:fa:04:8a: 15:b6:87:be:ed:5b:a8:65:a6:8e:79:e3:ac:05:e1:0e:34:7e: 0d:86:cb:12:29:c0:75:72:9f:7d:5a:ee:71:e6:91:86:0b:b4: b0:f7:29:68:5d:79:2f:21:4d:d2:4a:5f:b4:80:81:59:99:57: a2:7c:ea:c2:30:c2:ba:05:3b:f1:34:c4:80:3e:4e:b1:aa:07: e3:08:8b:b1:47:b0:a4:4c:8e:54:16:98:d0:4c:0f:8b:18:c4: 44:d9:10:40:6c:2b:a1:04:c2:a3:1d:51:e8:f5:b7:a6:bd:18: fd:c7:bb:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNK3YzSvCLRhbkHJkDrQyTc5oGQ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjE0NTI4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjU3YzdjNDQyZDcyMGRhMzJjNzFlZTVmMjg5MTZmN2Fh ZGE1ZTZhNDFmZjQzY2JiMDg3Njg5ZTRhNjYyNzI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7scGuke3yMrEVI26xbZfWm3hdQHYpV8uogMreBOV0/SQI IdXzq6WFNQ7NwlaP3VSwkp0I5yYidRChref4Db+buvBo9dFaV+PMGI6QW2J9apxi gkrqQRcuoirhUriJdnRivGqviWf3RYyu/xDFuoipnrm2I8FWLKBwvGjxn23R8ZyS 5j7qOiaCnKrWH0KNQxPRKqAJYixKYBIc1bR5jXCcPTOtKQmCygE9J/0QSJ4y9+eN MukrXXo+xu3ZLXHCPmNZOpnAcCMyP/c3txgtQXejluCP5y2btH3XfVEaf/rrrox3 T4XR6W8Zw0ZTF5q4OlM+sZrt8AEwg4bO18w+6khdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAyPGQqEdvJBWffEuD3ABla/o/kIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EwZGVjODI2LWJhMWYtNDJmNS1hY2UzLTQ4YjgyZGNhNjJlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS74wwDQYJKoZIhvcNAQELBQADggEBAJpRB+dpFQJ4AuD4c6TWKNjLN+ir UoX2ySpBf0ZnFljQECmyZsqhcjEpRmVsPIXDpSIst0+/UOqjI8VpT4/Hc/DdazTZ VVf4aveh3QQqG+8STMzxg2whkqd9USbBUH/RR/nMZcOTVZcHydWWTd8t0vDAUQRD wYNcHoPq9N1cJCPUN/yh4PlSQxF04o+2+PoEihW2h77tW6hlpo5546wF4Q40fg2G yxIpwHVyn31a7nHmkYYLtLD3KWhdeS8hTdJKX7SAgVmZV6J86sIwwroFO/E0xIA+ TrGqB+MIi7FHsKRMjlQWmNBMD4sYxETZEEBsK6EEwqMdUej1t6a9GP3HuyA= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:28 2025 by rpki-client