$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5e0c829-15ef-404d-a7b5-653011526425.roa File: c5e0c829-15ef-404d-a7b5-653011526425.roa (raw, json) Hash identifier: h39FuQz8SeXFPb1vC4+GsGv5yPnHK2M+c3TZvgACzEc= Subject key identifier: 9B:A0:40:05:83:B5:F6:65:0E:35:F9:70:04:31:10:D7:AF:9E:22:80 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E7627124A13537C87BDE517C684F9A55B6A22F4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5e0c829-15ef-404d-a7b5-653011526425.roa Signing time: Sat 18 Oct 2025 08:11:16 +0000 ROA not before: Sat 18 Oct 2025 08:11:16 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:76:27:12:4a:13:53:7c:87:bd:e5:17:c6:84:f9:a5:5b:6a:22:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:11:16 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=e7310d0916bccc45209b745137efe0ca62f6bea02543c4b1420728bba798d1df, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5f:ce:af:6f:b5:f0:88:7b:4f:05:b0:90:33: 03:d6:1e:3b:8f:ac:8f:39:55:12:bf:d5:ce:d6:8f: 6a:5c:32:5a:7f:9c:f9:38:6f:bc:02:65:31:f4:70: 88:11:8d:8c:20:50:73:a6:ee:d8:45:e4:07:21:b3: 40:5f:c7:c6:83:8e:df:e8:02:37:38:5f:b2:4a:2e: 39:1c:95:6d:f0:fc:4d:75:d4:a5:be:7c:72:a0:e6: 02:d6:9d:eb:bb:6c:92:aa:bb:3e:10:d6:63:84:c0: 2b:18:02:d8:4b:be:af:a6:66:76:7b:f1:a7:e2:97: de:c8:c8:55:ef:c3:17:73:df:a9:9c:b8:c1:ae:36: d4:f0:1d:8a:1e:c4:26:c7:b2:19:a1:a3:5f:f5:72: 56:bd:86:8c:5f:5a:1c:3b:50:aa:80:66:a6:48:d7: 18:0e:dc:4a:18:72:e1:d8:6d:eb:21:65:f5:86:0b: e5:00:41:ee:bb:44:be:2e:e6:ec:75:d8:ca:bc:75: 21:70:39:f3:07:7e:2d:3c:f7:54:ef:14:de:ab:23: fc:81:0a:c0:5f:43:e5:c5:b8:45:37:b4:79:da:b9: 46:8c:8e:84:e6:04:c0:20:49:a0:92:b9:9f:0d:38: 8f:d3:0a:8f:d1:7d:87:3d:7e:9a:29:3c:2e:f0:8b: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A0:40:05:83:B5:F6:65:0E:35:F9:70:04:31:10:D7:AF:9E:22:80 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5e0c829-15ef-404d-a7b5-653011526425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.32.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:98:b1:70:da:7f:3b:8c:38:b6:31:c5:72:53:28:49:68:b9: 99:c2:15:d3:40:07:48:41:3a:22:ac:b2:fe:ef:d0:26:f4:94: 8a:b7:12:93:5a:73:59:fa:f2:b3:1e:70:c4:72:fd:c6:9c:37: 83:47:a0:d5:e9:dd:98:61:1e:e1:e1:a6:28:30:7e:e0:55:de: fc:2a:f2:ee:33:e0:a8:8a:33:3e:0f:52:92:ed:8b:68:d7:1b: 8b:6b:b5:3f:71:e5:0f:c1:d4:89:3b:95:77:c1:d4:c0:a5:59: eb:91:8d:da:e3:5d:dd:bd:d4:23:4c:8c:8a:5f:c2:f6:48:44: fd:23:8e:3f:88:f2:cd:db:72:d0:98:97:d3:4f:2b:e1:34:db: ef:74:5b:85:b0:fc:3d:9a:f2:01:21:d6:0c:fd:af:e1:a4:80: 7b:5c:0d:b4:36:5f:2a:52:7f:47:dd:3d:5c:e8:13:7f:cf:61: 2a:17:9d:a6:ac:52:bb:5f:8c:9b:10:4b:a9:26:b3:bb:3c:26: 77:2f:38:ff:f8:00:59:59:d5:a0:d7:8f:9b:2c:97:de:a8:0d: 43:3b:66:42:73:73:04:f4:9b:de:7c:9d:d3:70:36:92:25:d5: 7d:69:d9:62:df:f9:5d:94:92:5b:91:ad:75:20:26:60:09:f3: 7d:3d:c1:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDnYnEkoTU3yHveUXxoT5pVtqIvQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDgxMTE2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzMxMGQwOTE2YmNjYzQ1MjA5Yjc0NTEzN2VmZTBjYTYy ZjZiZWEwMjU0M2M0YjE0MjA3MjhiYmE3OThkMWRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgX86vb7XwiHtPBbCQMwPWHjuPrI85VRK/1c7Wj2pcMlp/ nPk4b7wCZTH0cIgRjYwgUHOm7thF5Achs0Bfx8aDjt/oAjc4X7JKLjkclW3w/E11 1KW+fHKg5gLWneu7bJKquz4Q1mOEwCsYAthLvq+mZnZ78afil97IyFXvwxdz36mc uMGuNtTwHYoexCbHshmho1/1cla9hoxfWhw7UKqAZqZI1xgO3EoYcuHYbeshZfWG C+UAQe67RL4u5ux12Mq8dSFwOfMHfi0891TvFN6rI/yBCsBfQ+XFuEU3tHnauUaM joTmBMAgSaCSuZ8NOI/TCo/RfYc9fpopPC7wiy/5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUm6BABYO19mUONflwBDEQ16+eIoAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M1ZTBjODI5LTE1ZWYtNDA0ZC1hN2I1LTY1MzAxMTUyNjQyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7yAwDQYJKoZIhvcNAQELBQADggEBAHyYsXDafzuMOLYxxXJTKElouZnC FdNAB0hBOiKssv7v0Cb0lIq3EpNac1n68rMecMRy/cacN4NHoNXp3ZhhHuHhpigw fuBV3vwq8u4z4KiKMz4PUpLti2jXG4trtT9x5Q/B1Ik7lXfB1MClWeuRjdrjXd29 1CNMjIpfwvZIRP0jjj+I8s3bctCYl9NPK+E02+90W4Ww/D2a8gEh1gz9r+GkgHtc DbQ2XypSf0fdPVzoE3/PYSoXnaasUrtfjJsQS6kms7s8JncvOP/4AFlZ1aDXj5ss l96oDUM7ZkJzcwT0m958ndNwNpIl1X1p2WLf+V2UkluRrXUgJmAJ8309wfc= -----END CERTIFICATE-----Generated at Mon Oct 20 06:12:11 2025 by rpki-client