$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99115971-22f4-43d7-8f4c-8214ed58b50d.roa File: 99115971-22f4-43d7-8f4c-8214ed58b50d.roa (raw, json) Hash identifier: rcQ9JRF3hOuDJ+IYP2UOCfRG7x+7mSGcQV0QRfYr4fk= Subject key identifier: D5:51:F2:9F:71:2E:60:AB:53:39:C4:2F:23:59:0E:9E:1B:DC:4B:4B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 552AED40EF9A33238BBE9DDB5E4A068AE3AB71C0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99115971-22f4-43d7-8f4c-8214ed58b50d.roa Signing time: Sat 18 Oct 2025 13:03:31 +0000 ROA not before: Sat 18 Oct 2025 13:03:31 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2a:ed:40:ef:9a:33:23:8b:be:9d:db:5e:4a:06:8a:e3:ab:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 13:03:31 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=7fb71b005090c7b3bb1eddaaf13d4955d7b1782f0dc98be207f17a790a7fc53f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:20:d0:19:1b:50:66:c5:63:dc:ad:33:91:b2: da:3b:e9:41:53:dd:96:66:eb:81:8f:32:85:c3:98: af:73:00:ee:ee:25:d9:6b:27:47:41:f5:2c:99:e0: dc:83:19:a5:75:b5:b5:a8:68:7d:9e:fd:41:a2:fa: c9:c4:8d:db:bd:b3:8b:f5:93:08:ed:fc:ca:b4:61: f1:8d:2c:88:c4:94:4a:2b:38:6e:81:43:42:25:d0: 70:d1:36:ed:f5:54:c2:13:a0:18:78:bc:a5:c7:1d: 55:26:6e:df:be:1b:c7:dc:cf:62:8f:bf:80:35:29: bd:c9:27:2e:9b:8b:cf:47:40:15:ea:9d:f4:bb:0c: 4d:1a:26:88:1b:3d:41:51:88:5f:95:59:5e:7f:6b: 92:8a:8e:c1:4f:7b:54:e0:ad:a0:c4:06:82:06:9e: b1:a7:90:35:be:b4:31:f5:f3:e9:2f:70:49:2a:82: 24:0f:52:f1:b7:ad:19:2c:b2:d4:91:44:1c:3d:7f: ed:ae:1d:26:19:1b:3b:79:45:06:65:77:f8:fb:fa: cd:df:fb:1a:bb:9a:9a:cf:94:e9:d1:b0:dd:c8:14: 43:3f:c6:6d:2b:cf:57:93:10:21:cd:e6:89:12:e9: 97:85:e8:db:9c:fe:21:15:e7:01:7a:c2:6c:55:ff: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:51:F2:9F:71:2E:60:AB:53:39:C4:2F:23:59:0E:9E:1B:DC:4B:4B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99115971-22f4-43d7-8f4c-8214ed58b50d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.144.0/24 Signature Algorithm: sha256WithRSAEncryption 54:9c:dd:1b:86:cb:3f:6a:0d:22:9f:59:50:bc:73:71:fd:cc: 6b:e8:f9:83:0b:42:17:d6:b6:84:5e:a2:15:3f:58:ac:e1:ed: b8:ec:cd:a9:cd:07:10:ba:98:fa:da:a1:c6:c8:a6:d4:48:68: f5:20:f0:aa:0f:f0:cb:35:ff:6c:b6:7c:82:c8:2c:60:ba:cd: aa:e0:d6:cd:b1:d2:3e:8f:6b:9d:5c:8e:98:8a:4c:79:ac:d5: a7:4f:2d:34:98:28:6c:42:36:ea:28:94:50:9e:32:d9:06:d6: 4f:91:b0:ab:e1:fe:ab:81:95:d2:d1:f2:31:ce:97:93:61:39: 3a:e6:5e:9b:7d:c5:b7:0b:da:0e:87:58:ae:71:fa:a2:e4:94: 5d:1a:f1:a8:b2:2c:2b:cf:9e:50:9e:3f:8b:cb:21:43:ba:d4: 33:d0:8b:29:09:44:bd:29:14:62:a2:e1:9a:39:4b:4a:76:53: f7:b9:4b:69:19:6e:9b:76:77:75:fa:ce:62:63:75:4a:0f:12: 70:ed:80:e4:32:11:1a:dd:02:9e:b7:e0:1c:79:c4:17:7d:10: 0e:17:08:f4:4d:aa:85:c8:6f:0e:32:bb:56:d1:0b:a3:66:7e: 07:4f:2d:76:85:9f:90:89:3b:43:32:cd:3a:b1:34:ce:75:89: 36:f5:5f:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVSrtQO+aMyOLvp3bXkoGiuOrccAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTMwMzMxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZmI3MWIwMDUwOTBjN2IzYmIxZWRkYWFmMTNkNDk1NWQ3 YjE3ODJmMGRjOThiZTIwN2YxN2E3OTBhN2ZjNTNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRINAZG1BmxWPcrTORsto76UFT3ZZm64GPMoXDmK9zAO7u JdlrJ0dB9SyZ4NyDGaV1tbWoaH2e/UGi+snEjdu9s4v1kwjt/Mq0YfGNLIjElEor OG6BQ0Il0HDRNu31VMIToBh4vKXHHVUmbt++G8fcz2KPv4A1Kb3JJy6bi89HQBXq nfS7DE0aJogbPUFRiF+VWV5/a5KKjsFPe1TgraDEBoIGnrGnkDW+tDH18+kvcEkq giQPUvG3rRksstSRRBw9f+2uHSYZGzt5RQZld/j7+s3f+xq7mprPlOnRsN3IFEM/ xm0rz1eTECHN5okS6ZeF6Nuc/iEV5wF6wmxV/z9JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1VHyn3EuYKtTOcQvI1kOnhvcS0swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk5MTE1OTcxLTIyZjQtNDNkNy04ZjRjLTgyMTRlZDU4YjUwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS75AwDQYJKoZIhvcNAQELBQADggEBAFSc3RuGyz9qDSKfWVC8c3H9zGvo +YMLQhfWtoReohU/WKzh7bjszanNBxC6mPraocbIptRIaPUg8KoP8Ms1/2y2fILI LGC6zarg1s2x0j6Pa51cjpiKTHms1adPLTSYKGxCNuoolFCeMtkG1k+RsKvh/quB ldLR8jHOl5NhOTrmXpt9xbcL2g6HWK5x+qLklF0a8aiyLCvPnlCeP4vLIUO61DPQ iykJRL0pFGKi4Zo5S0p2U/e5S2kZbpt2d3X6zmJjdUoPEnDtgOQyERrdAp634Bx5 xBd9EA4XCPRNqoXIbw4yu1bRC6NmfgdPLXaFn5CJO0MyzTqxNM51iTb1Xy8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:00:48 2025 by rpki-client