$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5933b4db-ccbb-47a3-a37b-fa7ff2d0ad09.roa File: 5933b4db-ccbb-47a3-a37b-fa7ff2d0ad09.roa (raw, json) Hash identifier: l8lvaUPNCaHzddYt6vrGPvQE2zK7K5P6moHcl6b5GGc= Subject key identifier: 55:2D:3F:D0:D7:AF:4D:31:43:B6:9A:84:18:88:83:21:26:4C:37:86 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 501CBD5F774E0393016CE3981E9B70868D1E73E2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5933b4db-ccbb-47a3-a37b-fa7ff2d0ad09.roa Signing time: Fri 26 Sep 2025 16:06:08 +0000 ROA not before: Fri 26 Sep 2025 16:06:08 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.209.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1c:bd:5f:77:4e:03:93:01:6c:e3:98:1e:9b:70:86:8d:1e:73:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 16:06:08 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=6c8e1e690baf5a0ba024348d393004d6382e785ac941b9589598d6914d822c51, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ee:29:4d:e8:60:82:9b:2d:d1:a6:24:19:88: 85:5f:59:3a:93:c5:67:8b:9a:32:ca:e4:22:0a:8a: 98:85:1b:5b:a7:f2:dd:ee:88:48:65:f5:60:59:64: 57:16:07:41:e2:87:4c:31:f8:2c:aa:dd:13:11:ff: 6e:47:37:77:63:73:1b:9f:08:8c:2d:44:45:5c:96: 56:c6:90:73:2a:59:45:60:0c:69:ad:c9:cc:60:7c: 58:af:a5:e5:1c:27:73:c6:2f:90:a8:77:fa:74:39: f0:e0:d4:f6:b0:59:0e:11:2e:90:ff:65:9c:3b:51: 89:2b:7e:39:a3:5a:3c:59:7b:27:68:3b:df:b5:0d: 8e:dc:2b:dc:bb:05:59:59:69:1d:13:ba:8a:27:7f: 13:9d:f1:31:2b:64:73:62:76:fb:86:50:19:4f:09: d9:c4:dc:10:42:ba:a4:5a:5d:ff:86:0d:e3:3c:c1: 9d:4c:e4:e0:c8:05:c4:63:b6:3f:26:69:a4:b6:5c: d6:94:50:54:37:30:ee:e6:30:fe:01:4f:fc:98:1e: 8a:b5:a1:55:ae:53:7f:d2:99:12:56:df:96:fa:85: 27:99:33:4f:ca:27:1c:59:c4:fd:d7:91:a4:09:f4: da:00:35:0b:ea:f6:d0:00:4e:27:53:16:22:31:36: a3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2D:3F:D0:D7:AF:4D:31:43:B6:9A:84:18:88:83:21:26:4C:37:86 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5933b4db-ccbb-47a3-a37b-fa7ff2d0ad09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.209.0.0/16 Signature Algorithm: sha256WithRSAEncryption 50:6c:06:c5:a5:25:70:6d:92:f4:c1:65:52:34:ad:d0:8a:9c: 7f:cd:b8:ad:b1:7e:b8:6f:d8:fc:2f:eb:7e:29:37:04:e2:93: 5e:0e:34:4c:bb:05:d3:89:da:f8:da:b5:75:75:20:e3:14:a2: bb:d7:ce:c3:9f:06:72:cf:88:81:f6:e5:ce:af:92:5d:31:0d: 59:e9:fc:e5:9c:14:22:7f:a9:42:3c:28:55:91:af:dc:0d:ce: d0:ef:e4:79:b9:e5:fa:75:82:d9:f7:1b:ce:6e:90:52:ce:3e: d8:de:76:60:51:9c:9e:b4:47:2c:3f:26:9b:98:0b:0f:de:1f: aa:d4:1c:29:c9:16:5b:27:38:31:0d:05:68:1e:c8:5c:c1:9b: a3:6b:6b:63:a0:da:d7:28:3a:20:d5:c8:8e:6d:05:4c:bd:ed: d3:7e:36:52:93:b8:db:1e:36:70:37:29:2e:cb:44:00:fa:d3: cb:a9:6d:ca:51:40:67:3a:22:fc:3a:ac:e6:75:5c:d8:8c:ff: 00:04:9a:52:81:6e:4e:76:5b:08:b6:d6:f2:4c:ed:0b:a9:15: 27:36:c1:3e:9f:1a:f9:78:55:61:69:96:28:ea:e4:94:c5:8f: 32:16:c6:cb:7e:f2:6b:74:a3:42:3b:1e:25:ef:5f:eb:9c:37: af:a9:37:bd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUBy9X3dOA5MBbOOYHptwho0ec+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTYwNjA4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzhlMWU2OTBiYWY1YTBiYTAyNDM0OGQzOTMwMDRkNjM4 MmU3ODVhYzk0MWI5NTg5NTk4ZDY5MTRkODIyYzUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR7ilN6GCCmy3RpiQZiIVfWTqTxWeLmjLK5CIKipiFG1un 8t3uiEhl9WBZZFcWB0Hih0wx+Cyq3RMR/25HN3djcxufCIwtREVcllbGkHMqWUVg DGmtycxgfFivpeUcJ3PGL5Cod/p0OfDg1PawWQ4RLpD/ZZw7UYkrfjmjWjxZeydo O9+1DY7cK9y7BVlZaR0TuoonfxOd8TErZHNidvuGUBlPCdnE3BBCuqRaXf+GDeM8 wZ1M5ODIBcRjtj8maaS2XNaUUFQ3MO7mMP4BT/yYHoq1oVWuU3/SmRJW35b6hSeZ M0/KJxxZxP3XkaQJ9NoANQvq9tAATidTFiIxNqMRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVS0/0NevTTFDtpqEGIiDISZMN4YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU5MzNiNGRiLWNjYmItNDdhMy1hMzdiLWZhN2ZmMmQwYWQwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCf0TANBgkqhkiG9w0BAQsFAAOCAQEAUGwGxaUlcG2S9MFlUjSt0Iqcf824 rbF+uG/Y/C/rfik3BOKTXg40TLsF04na+Nq1dXUg4xSiu9fOw58Gcs+Igfblzq+S XTENWen85ZwUIn+pQjwoVZGv3A3O0O/kebnl+nWC2fcbzm6QUs4+2N52YFGcnrRH LD8mm5gLD94fqtQcKckWWyc4MQ0FaB7IXMGbo2trY6Da1yg6INXIjm0FTL3t0342 UpO42x42cDcpLstEAPrTy6ltylFAZzoi/Dqs5nVc2Iz/AASaUoFuTnZbCLbW8kzt C6kVJzbBPp8a+XhVYWmWKOrklMWPMhbGy37ya3SjQjseJe9f65w3r6k3vQ== -----END CERTIFICATE-----Generated at Mon Oct 20 03:04:39 2025 by rpki-client