$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b0bfd170-3701-4b30-975b-48647c9ae845.roa File: b0bfd170-3701-4b30-975b-48647c9ae845.roa (raw, json) Hash identifier: 4jZHMdjGvaCXIcZ71TDaAz8znAb5lNR20Slrt9a97Hk= Subject key identifier: E3:3D:A7:47:21:79:7D:DA:6A:29:F8:DA:02:DB:8C:56:9B:13:A4:CF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 19C2ADCDCEC8F441423752FC5C3D423939F33EFA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b0bfd170-3701-4b30-975b-48647c9ae845.roa Signing time: Mon 22 Sep 2025 22:11:00 +0000 ROA not before: Mon 22 Sep 2025 22:11:00 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c2:ad:cd:ce:c8:f4:41:42:37:52:fc:5c:3d:42:39:39:f3:3e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:11:00 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=c2a626ce054207c5911299fb9eece36f080ce93f788a6820bd8e9d5a0c2f2afe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:92:b5:06:55:c9:26:2b:72:f8:89:64:b5:a1: 04:39:3e:11:29:ba:a6:f8:cd:43:32:f5:42:7f:f2: a5:d9:8c:8b:d1:43:29:d9:31:b8:ed:aa:63:9b:58: b1:ad:09:2a:ac:ec:94:11:a3:b3:f1:08:66:89:d7: c3:fb:a2:d7:d5:cb:d7:bf:39:42:62:22:5c:a9:1f: 1c:15:0a:ca:ca:13:d3:cf:98:fe:44:0a:60:06:2f: a2:e2:0f:9a:fe:be:e7:f1:11:06:6b:42:d8:70:45: ad:0e:3c:66:2d:9a:50:08:81:27:a7:ad:00:16:87: ef:aa:7d:cb:76:0f:ac:f6:4c:f6:03:ad:42:9d:8a: d5:ad:38:37:c8:8d:e1:14:f5:43:c6:ed:75:0e:f3: 58:61:4d:e3:ef:3a:ae:58:76:21:95:62:71:09:47: 10:e4:e9:3a:d8:63:3f:9a:9a:8e:f3:09:a1:10:f1: d0:ee:62:8a:bd:94:b9:03:00:a0:cd:d5:74:9b:d2: 17:1f:9c:4c:be:f9:4e:61:2d:e2:8e:45:45:48:47: 1b:38:cd:9e:7d:9b:b8:a6:fc:53:dc:7d:f1:ab:b9: f6:4b:82:55:c6:4d:53:dc:00:4a:6a:fb:2e:07:2b: af:91:87:3f:ed:df:71:01:6a:67:71:ac:7d:8d:eb: d5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3D:A7:47:21:79:7D:DA:6A:29:F8:DA:02:DB:8C:56:9B:13:A4:CF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b0bfd170-3701-4b30-975b-48647c9ae845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.228.0/23 Signature Algorithm: sha256WithRSAEncryption 54:27:b8:8b:91:39:36:fc:da:52:ff:38:b9:43:dc:59:6c:27: a3:a2:ae:dd:e7:72:3c:6f:cc:b6:35:fb:ba:66:a2:73:2a:a4: d0:0a:47:6f:28:c0:b9:dc:c7:59:0f:dc:22:38:47:c8:da:8c: 24:e8:cf:cb:07:e8:80:8e:94:a8:b4:65:95:84:a2:b3:c5:5a: 3e:0e:ba:31:c4:1f:bb:af:f5:89:65:83:ab:58:8b:99:5b:68: d6:1f:ec:ce:ea:44:86:5a:b1:c4:4a:af:8d:61:e5:79:cb:08: 9c:57:10:1f:cb:3e:6c:53:81:5f:62:95:23:23:62:02:3d:7e: 5d:d3:5f:9e:12:81:f2:64:3f:72:85:78:6d:dd:ca:ed:43:3d: 15:bb:4c:0f:99:15:29:fa:b7:26:0c:90:b1:da:1c:7a:8d:61: 4d:ed:aa:d4:89:f2:6b:a1:81:a3:80:39:05:02:69:72:90:a9: 79:e9:63:b0:39:91:24:cb:41:b2:4b:3a:df:9f:49:88:1f:51: 02:70:ac:70:b4:9b:fa:a4:50:62:4f:a9:a6:64:85:8e:6b:7a: d7:ab:e3:50:23:5f:ee:27:69:4e:64:a7:50:36:71:fd:18:86: 06:d8:cf:17:c3:fb:98:d4:3f:95:37:6c:32:3c:b2:5a:aa:44: 39:c1:b7:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGcKtzc7I9EFCN1L8XD1COTnzPvowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIxMTAwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMmE2MjZjZTA1NDIwN2M1OTExMjk5ZmI5ZWVjZTM2ZjA4 MGNlOTNmNzg4YTY4MjBiZDhlOWQ1YTBjMmYyYWZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmkrUGVckmK3L4iWS1oQQ5PhEpuqb4zUMy9UJ/8qXZjIvR QynZMbjtqmObWLGtCSqs7JQRo7PxCGaJ18P7otfVy9e/OUJiIlypHxwVCsrKE9PP mP5ECmAGL6LiD5r+vufxEQZrQthwRa0OPGYtmlAIgSenrQAWh++qfct2D6z2TPYD rUKditWtODfIjeEU9UPG7XUO81hhTePvOq5YdiGVYnEJRxDk6TrYYz+amo7zCaEQ 8dDuYoq9lLkDAKDN1XSb0hcfnEy++U5hLeKORUVIRxs4zZ59m7im/FPcffGrufZL glXGTVPcAEpq+y4HK6+Rhz/t33EBamdxrH2N69XVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4z2nRyF5fdpqKfjaAtuMVpsTpM8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IwYmZkMTcwLTM3MDEtNGIzMC05NzViLTQ4NjQ3YzlhZTg0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7+QwDQYJKoZIhvcNAQELBQADggEBAFQnuIuROTb82lL/OLlD3FlsJ6Oi rt3ncjxvzLY1+7pmonMqpNAKR28owLncx1kP3CI4R8jajCToz8sH6ICOlKi0ZZWE orPFWj4OujHEH7uv9Yllg6tYi5lbaNYf7M7qRIZascRKr41h5XnLCJxXEB/LPmxT gV9ilSMjYgI9fl3TX54SgfJkP3KFeG3dyu1DPRW7TA+ZFSn6tyYMkLHaHHqNYU3t qtSJ8muhgaOAOQUCaXKQqXnpY7A5kSTLQbJLOt+fSYgfUQJwrHC0m/qkUGJPqaZk hY5reter41AjX+4naU5kp1A2cf0YhgbYzxfD+5jUP5U3bDI8slqqRDnBt78= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:09 2025 by rpki-client