$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56ce9bf0-a004-4c27-925f-fbd2ec444e7a.roa File: 56ce9bf0-a004-4c27-925f-fbd2ec444e7a.roa (raw, json) Hash identifier: Oem8oQBrJi8VVnzHu+ifRnsW1DvzsPMkMXdtBv5bP7M= Subject key identifier: 3A:B8:74:CD:92:07:3C:47:78:6E:94:2B:5A:D3:D8:15:3D:B1:1E:0E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 30A67ED1B085072286835F701090DFA8A220A7CB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56ce9bf0-a004-4c27-925f-fbd2ec444e7a.roa Signing time: Sat 18 Oct 2025 22:11:27 +0000 ROA not before: Sat 18 Oct 2025 22:11:27 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a6:7e:d1:b0:85:07:22:86:83:5f:70:10:90:df:a8:a2:20:a7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:11:27 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=3a2d78924237085c04e244747af6de1b31e520d5f5925088aacee731a1402d45, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:38:c7:f9:54:6a:4e:a2:8c:d7:54:cc:76:f2: 96:2e:3a:74:20:4e:24:f4:c6:2c:a5:d4:35:25:26: 0d:95:b7:1b:00:bb:2b:e9:07:07:38:d1:61:44:c0: 82:db:25:20:b3:f1:86:75:b2:64:ab:57:bf:f5:b5: b9:77:a0:b7:dd:ed:b8:38:cc:7f:a5:9d:8f:3d:8a: 3e:d4:6f:6f:1c:f4:ff:1c:ad:75:95:ec:db:c6:5e: 50:42:44:3a:4d:15:6f:79:8a:6e:5c:5b:cb:41:ef: 82:3d:8b:33:0b:9f:6d:51:e1:0f:de:8d:b5:10:28: 40:05:8a:8e:2e:85:92:cc:61:6d:51:dc:c5:11:48: b4:73:5d:50:20:95:cd:a2:43:5d:60:fc:85:14:e7: 20:b7:3f:4a:c2:8b:ad:26:df:af:9d:99:39:4d:a2: 66:d5:13:f1:a4:59:0f:cc:50:8b:83:ae:3e:2f:91: 38:53:10:96:75:b2:4b:0a:47:42:2a:2b:aa:97:2d: fd:e0:d8:9d:2f:60:f2:e2:40:dc:0c:40:86:50:9a: 2d:21:97:0e:ff:f6:65:66:d0:3b:4a:e2:48:17:d4: 7f:05:db:68:ce:cb:4b:cd:6f:59:cf:49:0a:2c:39: d3:b8:7b:35:40:86:56:0f:c3:d1:40:de:76:e7:cd: 66:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B8:74:CD:92:07:3C:47:78:6E:94:2B:5A:D3:D8:15:3D:B1:1E:0E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56ce9bf0-a004-4c27-925f-fbd2ec444e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.32.0/19 Signature Algorithm: sha256WithRSAEncryption 19:0d:75:24:8a:84:bd:a4:39:20:ae:46:0f:5c:ff:9a:4e:7c: 61:01:cc:37:17:29:91:56:8d:b6:f8:79:16:84:8d:4f:8c:02: c0:39:b5:ff:89:40:18:b4:1b:29:9d:ee:f2:08:3d:67:a7:0b: a5:31:5c:f5:9a:da:24:89:c5:8c:93:9f:fb:e1:eb:8e:93:45: 7c:93:2e:83:31:7f:e8:4b:44:3e:e9:f3:51:17:70:5d:04:13: 29:2d:07:45:e5:49:e3:dc:e3:6d:33:d7:3e:27:94:f0:a3:0c: 20:c8:84:b6:30:ee:ce:cc:3d:25:9c:fe:80:0d:9c:3e:10:fc: 68:62:58:76:d1:25:18:b1:3f:f3:ed:60:8c:16:34:c6:53:bd: 7d:65:36:a4:1b:7c:e6:5d:79:ae:29:60:47:37:24:cc:c3:cf: 75:f7:4c:eb:18:38:a3:8f:dc:15:76:97:8a:44:82:b4:98:8c: 10:27:94:b9:f6:fd:66:55:d7:69:3a:68:8a:95:91:5a:1d:f1: 46:12:12:4c:b0:39:41:5f:5b:b5:da:f9:7f:27:87:7b:be:c4: 7e:9d:9a:4c:a5:96:d5:5b:0e:aa:c1:84:18:1a:f4:c0:34:e6: c8:09:d5:48:4c:c2:30:97:90:b6:28:58:7c:62:fe:04:f4:9f: 5a:c7:4d:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMKZ+0bCFByKGg19wEJDfqKIgp8swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjIxMTI3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTJkNzg5MjQyMzcwODVjMDRlMjQ0NzQ3YWY2ZGUxYjMx ZTUyMGQ1ZjU5MjUwODhhYWNlZTczMWExNDAyZDQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOOMf5VGpOoozXVMx28pYuOnQgTiT0xiyl1DUlJg2VtxsA uyvpBwc40WFEwILbJSCz8YZ1smSrV7/1tbl3oLfd7bg4zH+lnY89ij7Ub28c9P8c rXWV7NvGXlBCRDpNFW95im5cW8tB74I9izMLn21R4Q/ejbUQKEAFio4uhZLMYW1R 3MURSLRzXVAglc2iQ11g/IUU5yC3P0rCi60m36+dmTlNombVE/GkWQ/MUIuDrj4v kThTEJZ1sksKR0IqK6qXLf3g2J0vYPLiQNwMQIZQmi0hlw7/9mVm0DtK4kgX1H8F 22jOy0vNb1nPSQosOdO4ezVAhlYPw9FA3nbnzWYDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOrh0zZIHPEd4bpQrWtPYFT2xHg4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU2Y2U5YmYwLWEwMDQtNGMyNy05MjVmLWZiZDJlYzQ0NGU3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUSrCAwDQYJKoZIhvcNAQELBQADggEBABkNdSSKhL2kOSCuRg9c/5pOfGEB zDcXKZFWjbb4eRaEjU+MAsA5tf+JQBi0Gymd7vIIPWenC6UxXPWa2iSJxYyTn/vh 646TRXyTLoMxf+hLRD7p81EXcF0EEyktB0XlSePc420z1z4nlPCjDCDIhLYw7s7M PSWc/oANnD4Q/GhiWHbRJRixP/PtYIwWNMZTvX1lNqQbfOZdea4pYEc3JMzDz3X3 TOsYOKOP3BV2l4pEgrSYjBAnlLn2/WZV12k6aIqVkVod8UYSEkywOUFfW7Xa+X8n h3u+xH6dmkylltVbDqrBhBga9MA05sgJ1UhMwjCXkLYoWHxi/gT0n1rHTfs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:59:08 2025 by rpki-client