$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa File: 9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa (raw, json) Hash identifier: hkffjQ9ZzZB/PCpTw1dPngozVgiBM4eQlvtz7sZnSjg= Subject key identifier: A3:81:E3:E8:43:CE:5E:81:CE:88:EF:35:E8:19:C1:F8:90:E0:DB:DC Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 1F11543857C363AC1F3EDA55DCAE4288DF0834D3 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa Signing time: Sat 18 Oct 2025 00:00:22 +0000 ROA not before: Sat 18 Oct 2025 00:00:22 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.169.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:11:54:38:57:c3:63:ac:1f:3e:da:55:dc:ae:42:88:df:08:34:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Oct 18 00:00:22 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=19637d335f4cfb3587dc1ab99ab4d53924c0f30cf2821ce0e51dc7d8c5167f93, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7e:15:8d:73:6c:fa:84:ec:b2:b9:f6:c3:4a: dc:26:6f:36:56:1f:ff:ff:02:b9:4f:43:8f:10:3d: 9a:d4:5a:8d:53:eb:7c:e2:f1:ef:c3:76:70:a0:11: 26:b5:5f:2a:14:49:88:a4:51:c4:d3:11:32:fe:ee: 22:09:58:22:cd:11:ea:c5:b3:2f:80:eb:f7:0e:4a: 4d:33:36:78:18:da:2b:24:5a:28:9c:0f:8a:d6:cd: 54:a1:0a:cd:fa:a1:50:a6:71:6b:70:50:52:fb:c4: c1:82:88:03:aa:b5:bd:e0:fd:c9:9d:75:77:a4:8d: f1:59:b6:86:57:5e:dd:9b:76:7a:d2:b7:4f:0a:b3: 0d:7f:ab:c7:a5:23:0b:22:49:9f:b5:0d:9f:45:a4: 38:02:4b:aa:70:a2:38:05:80:e8:2a:e7:11:5c:59: 80:43:9c:79:7e:f9:1b:23:a9:29:df:b5:98:24:b1: fa:50:16:77:12:38:9b:42:83:87:3d:db:bf:2e:25: cc:62:81:0d:ac:f5:7b:2c:16:98:c4:ad:23:6e:19: 7f:a9:28:a1:d2:bb:91:89:f6:1e:d5:66:58:6e:a3: 3a:4a:53:28:51:09:b4:29:25:83:64:f4:ee:53:65: 0a:e9:ca:7d:80:e7:71:f9:c4:2c:86:67:0f:a8:89: 51:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:81:E3:E8:43:CE:5E:81:CE:88:EF:35:E8:19:C1:F8:90:E0:DB:DC X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.169.128.0/17 Signature Algorithm: sha256WithRSAEncryption 2b:d8:3d:58:86:78:1d:8f:53:45:ee:66:d8:2a:f4:a0:d3:5e: bc:d2:92:c2:d5:a3:8b:30:6c:91:8d:94:ea:54:c0:0d:26:f9: 7f:be:34:73:54:f1:1a:8b:7f:d6:69:c8:0a:58:bf:87:97:f3: 43:d0:c2:38:bd:27:48:36:e3:a3:ab:ef:06:89:7a:4e:c4:e1: 30:44:37:40:cb:31:c8:7a:44:74:63:1c:e9:5c:21:7b:43:1e: 3e:03:a2:b6:da:9b:45:c7:43:db:c7:be:6b:3f:7e:f1:62:e2: cb:f5:18:e4:d9:ef:1e:a8:8f:e0:62:b2:b7:4f:78:5e:63:bb: 6d:a5:78:0e:36:ae:6c:be:3d:9e:f6:75:76:18:a6:53:d0:74: 94:a6:e1:de:80:1b:39:51:87:2c:1d:e3:61:b8:e6:d7:5e:4a: f4:a1:c8:34:95:f6:82:ab:6b:73:e9:29:9d:3e:de:fd:0e:8f: c5:d2:fe:80:b8:4f:0b:7d:1f:5d:da:71:e6:9c:d8:91:ee:a0: a5:4e:98:e6:f1:74:80:0d:a6:6a:78:2a:bf:93:db:8c:e3:70: cb:03:ab:b8:3c:de:be:69:c5:57:7b:60:ad:de:48:8c:93:90: 5e:6f:ec:c5:ce:fe:41:9c:fe:c2:d8:c2:de:6d:7e:35:06:b6: bc:6c:e3:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHxFUOFfDY6wfPtpV3K5CiN8INNMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUxMDE4MDAwMDIyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTYzN2QzMzVmNGNmYjM1ODdkYzFhYjk5YWI0ZDUzOTI0 YzBmMzBjZjI4MjFjZTBlNTFkYzdkOGM1MTY3ZjkzMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUfhWNc2z6hOyyufbDStwmbzZWH///ArlPQ48QPZrUWo1T 63zi8e/DdnCgESa1XyoUSYikUcTTETL+7iIJWCLNEerFsy+A6/cOSk0zNngY2isk WiicD4rWzVShCs36oVCmcWtwUFL7xMGCiAOqtb3g/cmddXekjfFZtoZXXt2bdnrS t08Ksw1/q8elIwsiSZ+1DZ9FpDgCS6pwojgFgOgq5xFcWYBDnHl++RsjqSnftZgk sfpQFncSOJtCg4c9278uJcxigQ2s9XssFpjErSNuGX+pKKHSu5GJ9h7VZlhuozpK UyhRCbQpJYNk9O5TZQrpyn2A53H5xCyGZw+oiVELAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUo4Hj6EPOXoHOiO816BnB+JDg29wwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzlkY2EzODkwLWJlZTAtNGNkMC04ZmQ4LTBkZWU3MGIwYmEzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe4qYAwDQYJKoZIhvcNAQELBQADggEBACvYPViGeB2PU0XuZtgq9KDTXrzS ksLVo4swbJGNlOpUwA0m+X++NHNU8RqLf9ZpyApYv4eX80PQwji9J0g246Or7waJ ek7E4TBEN0DLMch6RHRjHOlcIXtDHj4Dorbam0XHQ9vHvms/fvFi4sv1GOTZ7x6o j+BisrdPeF5ju22leA42rmy+PZ72dXYYplPQdJSm4d6AGzlRhywd42G45tdeSvSh yDSV9oKra3PpKZ0+3v0Oj8XS/oC4Twt9H13aceac2JHuoKVOmObxdIANpmp4Kr+T 24zjcMsDq7g83r5pxVd7YK3eSIyTkF5v7MXO/kGc/sLYwt5tfjUGtrxs4wo= -----END CERTIFICATE-----Generated at Tue Oct 21 01:35:50 2025 by rpki-client