$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06e90396-7511-4550-9c12-9dace3035dc1.roa File: 06e90396-7511-4550-9c12-9dace3035dc1.roa (raw, json) Hash identifier: GpRDyj4IKjxCmmWcn/R4egen5PMLncz7/K1a7jTwxr4= Subject key identifier: F8:DB:33:E4:44:E9:6C:9F:27:5F:25:19:1E:3F:B8:DE:4B:33:59:54 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 78D4CD37CEF7C7EADC3E9D0C765FEE4253CF0B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06e90396-7511-4550-9c12-9dace3035dc1.roa Signing time: Sat 18 Oct 2025 14:50:12 +0000 ROA not before: Sat 18 Oct 2025 14:50:12 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d4:cd:37:ce:f7:c7:ea:dc:3e:9d:0c:76:5f:ee:42:53:cf:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 14:50:12 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=52a4e3c7c4232b4d3097b3b4e5ca0796824a924490db6d57479e6d01dce0c758, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:17:e7:8c:16:e8:7a:19:85:38:38:63:64:bd: 7c:10:2c:2c:f6:a1:52:ce:71:3c:a7:86:e8:0e:15: 57:66:31:d4:36:2b:70:30:d0:c4:4c:7d:76:4e:dc: 87:72:9a:b5:dc:e4:7e:b6:29:45:d0:21:63:d6:c6: e2:f9:36:d6:68:4c:26:26:2b:df:90:03:6a:fa:7d: 20:e1:93:38:14:b5:c0:b4:c6:17:16:4f:3f:ef:8b: db:c9:b7:c7:2a:b0:cb:f4:99:63:b1:aa:95:2c:ee: f6:f9:c8:b4:b2:05:92:32:09:d2:a3:2c:b4:74:6b: b2:4e:1b:50:e4:58:94:00:9a:06:35:78:5a:d1:c3: fb:bb:6c:5a:57:a9:de:1c:2e:03:52:88:02:fa:45: ab:1c:ac:bd:2c:52:66:87:a6:b3:a7:9e:e9:7b:a5: 33:0c:ba:a8:fe:04:8c:ce:6f:67:b4:49:8f:f8:ce: d3:52:4f:c1:b1:5e:1d:c4:30:71:67:0f:01:79:61: 64:d1:d0:23:be:1a:69:97:e3:d0:f0:52:3b:32:f0: 49:06:03:67:d9:34:d0:6f:d5:f2:30:55:16:5a:b8: d6:f0:ed:af:90:0e:28:b5:ce:0b:fa:be:61:b7:bb: 2e:ff:5d:8f:ab:8e:41:73:e2:12:99:77:f8:67:ad: 67:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DB:33:E4:44:E9:6C:9F:27:5F:25:19:1E:3F:B8:DE:4B:33:59:54 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06e90396-7511-4550-9c12-9dace3035dc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.126.0/23 Signature Algorithm: sha256WithRSAEncryption 47:18:71:40:c1:1d:54:f7:e2:b0:c2:1f:13:86:85:29:3c:ca: ef:3b:82:c9:2e:af:47:2b:21:40:14:a0:63:8a:59:ca:48:24: 1d:b7:38:4f:e8:14:1e:55:cc:a2:27:96:68:ce:d8:7d:a4:8d: 02:44:72:c7:d1:de:22:21:71:2e:be:0a:6e:80:94:16:0f:d5: b3:f5:58:ef:6f:ac:eb:21:12:9c:9f:9a:50:45:ab:4a:fd:f5: e8:8d:26:e6:43:05:16:14:30:5a:bc:61:3e:3e:cd:b5:f0:51: 5d:17:b2:79:68:a0:25:2e:4d:9a:4b:6a:57:61:bf:cf:a0:8c: e6:d9:e1:14:86:f5:09:34:a6:27:b5:f6:32:53:28:43:75:fc: 57:b5:29:f1:25:c8:b0:a5:ed:32:36:90:74:4e:1e:8e:8e:58: 99:52:8b:11:c2:d4:b1:bb:ae:22:59:56:0d:c1:5f:44:0d:97: 7a:3b:a0:4d:2d:d6:d9:32:1f:d6:cc:de:8c:d1:b2:5b:5b:86: 25:2e:2a:5b:ae:93:ef:50:c8:80:43:de:d2:c6:73:5e:26:3d: 36:37:7a:20:ca:f1:56:63:af:56:f2:cf:dc:2f:34:cb:ce:b6: 41:7a:21:47:54:f5:23:77:6e:ef:01:93:94:94:2d:44:88:8a: 6c:f2:16:f9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITeNTNN873x+rcPp0Mdl/uQlPPCzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEwMTgxNDUwMTJaFw0yNTExMjIyMzU5NTla MHoxSTBHBgNVBAUTQDUyYTRlM2M3YzQyMzJiNGQzMDk3YjNiNGU1Y2EwNzk2ODI0 YTkyNDQ5MGRiNmQ1NzQ3OWU2ZDAxZGNlMGM3NTgxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKsX54wW6HoZhTg4Y2S9fBAsLPahUs5xPKeG6A4VV2Yx1DYr cDDQxEx9dk7ch3KatdzkfrYpRdAhY9bG4vk21mhMJiYr35ADavp9IOGTOBS1wLTG FxZPP++L28m3xyqwy/SZY7GqlSzu9vnItLIFkjIJ0qMstHRrsk4bUORYlACaBjV4 WtHD+7tsWlep3hwuA1KIAvpFqxysvSxSZoems6ee6XulMwy6qP4EjM5vZ7RJj/jO 01JPwbFeHcQwcWcPAXlhZNHQI74aaZfj0PBSOzLwSQYDZ9k00G/V8jBVFlq41vDt r5AOKLXOC/q+Ybe7Lv9dj6uOQXPiEpl3+GetZ7MCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBT42zPkROlsnydfJRkeP7jeSzNZVDAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMDZlOTAzOTYtNzUxMS00NTUwLTljMTItOWRhY2UzMDM1ZGMxLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEARLvfjANBgkqhkiG9w0BAQsFAAOCAQEARxhxQMEdVPfisMIfE4aFKTzK7zuC yS6vRyshQBSgY4pZykgkHbc4T+gUHlXMoieWaM7YfaSNAkRyx9HeIiFxLr4KboCU Fg/Vs/VY72+s6yESnJ+aUEWrSv316I0m5kMFFhQwWrxhPj7NtfBRXReyeWigJS5N mktqV2G/z6CM5tnhFIb1CTSmJ7X2MlMoQ3X8V7Up8SXIsKXtMjaQdE4ejo5YmVKL EcLUsbuuIllWDcFfRA2XejugTS3W2TIf1szejNGyW1uGJS4qW66T71DIgEPe0sZz XiY9Njd6IMrxVmOvVvLP3C80y862QXohR1T1I3du7wGTlJQtRIiKbPIW+Q== -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:03 2025 by rpki-client