$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14d4c744-330b-4432-ad89-6e3cbaf0d17e.roa File: 14d4c744-330b-4432-ad89-6e3cbaf0d17e.roa (raw, json) Hash identifier: 7GPBWx+3NEIxgVJnyQVutwr778EgPeA3XIeYn0hE8+4= Subject key identifier: 30:90:08:53:D6:59:02:62:D9:A8:35:68:6C:A0:9B:3A:F4:EA:45:8B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A4D2B9249E92BFA1AC5A5B541044D555E9464D4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14d4c744-330b-4432-ad89-6e3cbaf0d17e.roa Signing time: Sun 19 Oct 2025 03:43:50 +0000 ROA not before: Sun 19 Oct 2025 03:43:50 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4d:2b:92:49:e9:2b:fa:1a:c5:a5:b5:41:04:4d:55:5e:94:64:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 03:43:50 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=630b9e5ba92344bb302761d32fef5e4924775805373afbc7f45b3c198143dd8c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:db:4c:9f:7c:a0:47:a4:d4:0f:69:66:f4:1b: d3:19:86:02:a6:ec:9b:89:c6:aa:bd:f8:ed:c6:65: b8:a0:22:0c:69:a9:4c:1f:67:03:7a:87:f7:31:db: f7:c2:3f:47:e6:66:91:e9:85:20:45:0f:4c:74:41: 58:56:88:6d:b5:df:6f:83:3a:fe:f7:88:70:82:18: 83:66:72:17:4e:4f:e1:e6:44:ea:ff:11:42:19:7a: 44:c3:5f:6f:ab:1e:d4:9d:e8:d4:bf:b5:5c:b3:dd: 61:0c:43:13:c1:7c:b2:da:1f:94:90:fc:37:df:f9: c8:f5:35:9c:e2:6c:94:0f:1c:b2:fc:43:93:5c:b8: 66:6f:e1:19:41:c6:88:94:b3:8d:b3:a5:ce:cf:02: f3:86:a3:47:a7:dc:61:d1:f9:4a:08:98:cc:97:17: 74:8c:ce:e3:ca:ae:d4:24:78:34:87:26:d5:23:7f: 19:be:fd:5e:3b:26:e4:4f:9b:25:c9:a6:86:05:80: 69:6e:e2:cd:36:a8:5c:d0:e6:f2:0d:01:e1:df:0c: 0e:9d:ab:c1:7f:66:ac:dd:e3:5f:b6:75:fa:7d:21: 11:8a:b0:1c:ed:8e:9a:3b:6b:0c:43:25:d2:55:66: dd:93:a0:e3:67:91:71:7f:b1:bc:cc:17:d1:b1:a5: f3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:90:08:53:D6:59:02:62:D9:A8:35:68:6C:A0:9B:3A:F4:EA:45:8B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14d4c744-330b-4432-ad89-6e3cbaf0d17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.32.0/19 Signature Algorithm: sha256WithRSAEncryption 11:89:67:e3:b7:9b:7f:19:c3:5f:f9:a7:06:9f:5b:e5:2d:f4: c3:80:de:ba:8c:8b:4d:d9:98:56:d3:b3:0d:93:bc:50:a4:24: ee:ba:2e:1b:44:7c:10:4f:53:50:c5:21:68:af:9d:2c:29:91: 86:85:a8:b4:70:f5:03:58:15:2b:8c:e0:48:45:f4:01:b1:de: cc:20:b7:b5:06:85:f4:49:63:56:a4:22:87:e0:bd:1e:65:61: 6e:e9:25:09:24:80:27:26:dc:1e:66:dc:c1:fa:9e:9d:3c:3e: 40:5f:2f:7f:24:60:e9:89:bd:ed:2e:c1:3c:f0:fb:1d:26:cb: 34:19:9b:04:f5:2c:59:0f:c6:a1:26:8a:2c:ec:1b:fc:73:68: 86:03:c9:44:5a:ea:61:79:db:46:61:6d:66:54:c5:9d:c3:dc: bf:31:94:e3:26:3e:ee:55:c5:66:eb:97:2c:d6:5b:76:b7:37: 8d:6f:35:18:a1:80:f4:9f:a6:f4:dc:a4:41:c4:d2:54:71:8f: 2c:0e:03:c7:cb:a8:c4:26:8f:79:a2:81:c6:37:7b:3f:56:4c: d0:6a:02:5b:d1:6f:bd:c2:8c:8c:75:10:6b:90:8d:57:c9:00: 5f:8d:d7:72:c6:0a:3b:f1:f2:6f:0c:c0:9c:c9:e8:cd:f1:d6: 56:6d:c1:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUak0rkknpK/oaxaW1QQRNVV6UZNQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDM0MzUwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzBiOWU1YmE5MjM0NGJiMzAyNzYxZDMyZmVmNWU0OTI0 Nzc1ODA1MzczYWZiYzdmNDViM2MxOTgxNDNkZDhjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQ20yffKBHpNQPaWb0G9MZhgKm7JuJxqq9+O3GZbigIgxp qUwfZwN6h/cx2/fCP0fmZpHphSBFD0x0QVhWiG2132+DOv73iHCCGINmchdOT+Hm ROr/EUIZekTDX2+rHtSd6NS/tVyz3WEMQxPBfLLaH5SQ/Dff+cj1NZzibJQPHLL8 Q5NcuGZv4RlBxoiUs42zpc7PAvOGo0en3GHR+UoImMyXF3SMzuPKrtQkeDSHJtUj fxm+/V47JuRPmyXJpoYFgGlu4s02qFzQ5vINAeHfDA6dq8F/Zqzd41+2dfp9IRGK sBztjpo7awxDJdJVZt2ToONnkXF/sbzMF9GxpfNZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMJAIU9ZZAmLZqDVobKCbOvTqRYswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE0ZDRjNzQ0LTMzMGItNDQzMi1hZDg5LTZlM2NiYWYwZDE3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUS7iAwDQYJKoZIhvcNAQELBQADggEBABGJZ+O3m38Zw1/5pwafW+Ut9MOA 3rqMi03ZmFbTsw2TvFCkJO66LhtEfBBPU1DFIWivnSwpkYaFqLRw9QNYFSuM4EhF 9AGx3swgt7UGhfRJY1akIofgvR5lYW7pJQkkgCcm3B5m3MH6np08PkBfL38kYOmJ ve0uwTzw+x0myzQZmwT1LFkPxqEmiizsG/xzaIYDyURa6mF520ZhbWZUxZ3D3L8x lOMmPu5VxWbrlyzWW3a3N41vNRihgPSfpvTcpEHE0lRxjywOA8fLqMQmj3migcY3 ez9WTNBqAlvRb73CjIx1EGuQjVfJAF+N13LGCjvx8m8MwJzJ6M3x1lZtwXM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:08:28 2025 by rpki-client