$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a213dc19-65ee-4fc7-98e6-40bc86ee1c95.roa File: a213dc19-65ee-4fc7-98e6-40bc86ee1c95.roa (raw, json) Hash identifier: afFRyOBm52gzHgrX3hCFkM6rdVYRcDBbmyamK0EkanM= Subject key identifier: FC:A1:E7:D0:AF:DE:F6:4D:B9:07:0C:C4:D5:04:9F:FB:55:B9:8A:54 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3C6E1689AB285504070F5D57E0290B0BF92369F5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a213dc19-65ee-4fc7-98e6-40bc86ee1c95.roa Signing time: Sat 18 Oct 2025 11:10:13 +0000 ROA not before: Sat 18 Oct 2025 11:10:13 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:6e:16:89:ab:28:55:04:07:0f:5d:57:e0:29:0b:0b:f9:23:69:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:10:13 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=0ba75f506e309ba91c36c567dcc17c77f51f345ff95ee0cceab0adefb66c80c3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:64:48:b3:b9:eb:d4:42:1a:5a:26:66:e3:42: 7b:28:01:1d:64:b2:64:31:03:16:4f:83:ec:e5:86: f2:b5:d1:ea:53:a6:1d:d1:fe:dc:bc:e3:8f:a2:cb: c7:e5:fc:c0:df:a4:2e:c6:df:02:18:c1:21:f7:62: 1c:da:87:6e:70:71:5a:fe:35:aa:24:2f:e2:bb:96: fe:8a:e5:1e:a3:f1:d4:92:6f:c2:a9:7b:95:71:a3: d7:db:c7:19:38:7a:07:03:1d:90:4a:2d:38:ec:df: 15:86:4a:ad:4f:f4:bc:f3:1b:b6:5a:d3:de:01:fd: 29:b4:2b:62:7d:4a:a1:a8:bd:cd:99:7e:55:30:7e: b1:7c:cc:eb:b2:16:8b:c3:5d:b4:97:a3:91:cf:47: 84:32:e4:83:e3:71:33:8c:18:6f:da:59:09:ad:b9: 75:46:5a:e6:1d:b2:ec:b7:bb:b6:9e:7f:67:f8:ca: 94:22:35:ba:98:09:09:b1:30:3c:b0:9b:5e:d4:9c: 31:2e:fb:4c:83:9b:3d:be:5c:d2:7d:2d:ee:af:6c: 72:7c:06:6e:20:5f:c9:24:4b:70:f0:15:82:a4:a3: d0:2d:c4:99:3c:15:c4:25:9c:5d:a2:8f:5a:ec:0f: 30:8c:ff:d3:17:d0:de:76:29:f8:d4:30:63:21:f3: 80:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A1:E7:D0:AF:DE:F6:4D:B9:07:0C:C4:D5:04:9F:FB:55:B9:8A:54 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a213dc19-65ee-4fc7-98e6-40bc86ee1c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.128.0/21 Signature Algorithm: sha256WithRSAEncryption 36:58:50:1d:90:62:e3:da:dd:71:10:14:9d:f0:ff:69:2c:1f: e5:96:77:b4:c4:1c:be:bf:72:62:26:fd:9d:4c:59:bf:78:3c: 8b:be:0a:dd:e9:fa:e4:8f:d9:35:38:17:03:ff:85:1a:86:41: b5:91:48:e2:10:e2:3f:32:4a:f8:ab:60:82:92:aa:4d:56:17: 58:5f:1f:80:93:99:90:69:47:1c:46:fd:5d:3f:3a:5a:0e:41: 6d:d2:66:24:65:97:10:ac:a0:4b:6a:2b:fe:7c:e2:20:ad:58: 2f:bb:f2:27:9a:7a:9d:74:6b:fd:be:e6:50:a7:1e:17:a6:25: 81:98:93:8a:ad:65:52:b6:b8:8e:72:dc:48:b9:e7:bc:1d:d7: 8a:f6:ea:81:5f:03:c9:c6:10:f0:69:24:48:02:a8:47:be:4a: 88:3d:10:b5:94:a4:a8:49:f9:b8:5d:c8:e2:e0:a6:b9:9d:56: ea:25:93:3b:0f:93:0b:be:d7:54:1f:8a:27:19:fb:04:4b:5c: c9:1b:6b:1b:67:f0:5a:13:bd:ad:63:7f:75:56:5f:3c:8b:2a: 02:18:47:2e:90:4f:ef:96:7e:cf:f3:0a:d6:51:16:df:61:f1: 1a:2a:b1:28:82:d6:6f:91:3e:17:bc:47:85:e9:4c:77:45:b2: d0:83:67:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPG4WiasoVQQHD11X4CkLC/kjafUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTExMDEzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmE3NWY1MDZlMzA5YmE5MWMzNmM1NjdkY2MxN2M3N2Y1 MWYzNDVmZjk1ZWUwY2NlYWIwYWRlZmI2NmM4MGMzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcZEizuevUQhpaJmbjQnsoAR1ksmQxAxZPg+zlhvK10epT ph3R/ty844+iy8fl/MDfpC7G3wIYwSH3Yhzah25wcVr+NaokL+K7lv6K5R6j8dSS b8Kpe5Vxo9fbxxk4egcDHZBKLTjs3xWGSq1P9LzzG7Za094B/Sm0K2J9SqGovc2Z flUwfrF8zOuyFovDXbSXo5HPR4Qy5IPjcTOMGG/aWQmtuXVGWuYdsuy3u7aef2f4 ypQiNbqYCQmxMDywm17UnDEu+0yDmz2+XNJ9Le6vbHJ8Bm4gX8kkS3DwFYKko9At xJk8FcQlnF2ij1rsDzCM/9MX0N52KfjUMGMh84BDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/KHn0K/e9k25BwzE1QSf+1W5ilQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyMTNkYzE5LTY1ZWUtNGZjNy05OGU2LTQwYmM4NmVlMWM5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMS74AwDQYJKoZIhvcNAQELBQADggEBADZYUB2QYuPa3XEQFJ3w/2ksH+WW d7TEHL6/cmIm/Z1MWb94PIu+Ct3p+uSP2TU4FwP/hRqGQbWRSOIQ4j8ySvirYIKS qk1WF1hfH4CTmZBpRxxG/V0/OloOQW3SZiRllxCsoEtqK/584iCtWC+78ieaep10 a/2+5lCnHhemJYGYk4qtZVK2uI5y3Ei557wd14r26oFfA8nGEPBpJEgCqEe+Sog9 ELWUpKhJ+bhdyOLgprmdVuolkzsPkwu+11QfiicZ+wRLXMkbaxtn8FoTva1jf3VW XzyLKgIYRy6QT++Wfs/zCtZRFt9h8RoqsSiC1m+RPhe8R4XpTHdFstCDZ80= -----END CERTIFICATE-----Generated at Mon Oct 20 02:56:00 2025 by rpki-client