$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d58b6794-09cb-42ff-b75a-267abeb8507b.roa File: d58b6794-09cb-42ff-b75a-267abeb8507b.roa (raw, json) Hash identifier: nsiEYyWIHnnl3uZ23YafnpLrUzwvZYcvCGdmcZSiAYE= Subject key identifier: F5:BB:70:EA:40:D4:1B:E9:85:D0:A3:49:DC:1B:BB:A9:53:C7:51:6D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3556EEDC376753C930BFF8D337064D45E058190B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d58b6794-09cb-42ff-b75a-267abeb8507b.roa Signing time: Sun 19 Oct 2025 04:51:31 +0000 ROA not before: Sun 19 Oct 2025 04:51:31 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:56:ee:dc:37:67:53:c9:30:bf:f8:d3:37:06:4d:45:e0:58:19:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 04:51:31 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=0ba38e4cbc6d5e5d383650e682da8378550df638fa6cefb9b8d54612f398f049, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a9:57:bf:fc:4a:d8:87:86:15:2d:50:c9:3c: 78:ae:85:c3:0b:f8:b3:73:da:45:fd:89:66:ac:ee: f8:a6:b2:1e:bb:6a:49:a1:9b:78:f9:6f:41:ae:f4: 96:da:d0:89:56:77:cd:f9:73:81:3c:20:8c:10:ce: 7c:ea:50:32:2d:66:f5:f1:3f:67:92:40:45:75:9d: b6:15:23:99:7e:d3:b2:b6:77:10:19:11:9f:61:4c: d5:a4:1d:f1:df:9d:a6:74:a6:00:0c:80:d5:28:5e: ed:2e:a7:4a:68:33:f2:36:49:0c:e6:67:98:1a:24: 11:51:73:b0:f0:3c:89:7e:f8:db:18:70:d0:b8:4d: 26:a9:64:b5:00:65:cc:4a:ae:39:11:8a:69:3c:29: 2f:fd:45:ab:be:8f:9f:cb:d6:c7:c1:56:3e:51:e0: 29:64:7e:a7:bd:40:b9:c7:cc:05:74:51:0a:39:25: b4:8e:38:2c:4a:66:26:75:ce:a9:83:80:2c:4c:b1: 3d:76:61:06:a3:7b:25:8a:c1:50:75:e3:4b:8e:0a: 41:3b:54:cd:01:77:97:65:c9:b9:83:a4:3d:14:8a: 23:b7:00:9c:ca:0f:08:72:98:7e:88:65:e8:e7:55: 8b:4d:3f:70:89:0d:6a:b4:8b:e9:b1:54:25:ad:a6: b2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BB:70:EA:40:D4:1B:E9:85:D0:A3:49:DC:1B:BB:A9:53:C7:51:6D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d58b6794-09cb-42ff-b75a-267abeb8507b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.96.0/19 Signature Algorithm: sha256WithRSAEncryption 78:37:e3:e8:e9:e9:4b:d2:b5:7f:85:f3:a5:95:3b:67:f1:6b: 60:e9:82:2b:1c:44:1c:01:fd:e3:b6:f4:45:25:2e:33:c4:8d: ca:07:52:fc:bd:a3:88:16:ea:80:46:43:9b:56:12:9e:58:ce: 52:70:45:66:5a:02:b9:31:ea:c2:26:9d:54:d3:24:b7:86:c2: 06:b2:8b:3b:e7:f1:e6:b9:61:f3:ca:8b:56:90:34:c0:4a:e7: 54:cc:10:0c:00:f0:ca:05:a1:fc:19:95:13:9e:c5:07:77:00: 57:51:a3:dc:f7:44:73:07:77:d9:29:f4:38:19:fb:ad:c4:0d: b4:d8:18:f0:50:be:6a:3e:73:09:b0:35:24:fb:c5:c7:67:35: 45:63:c7:3b:1e:85:43:49:02:11:cf:c6:6b:ab:ea:e9:ad:6a: ce:51:53:62:a6:3f:9f:ce:8b:55:f9:23:82:16:5d:60:8b:2c: 57:f6:91:d4:f1:5d:a5:07:63:46:68:c1:24:3d:7e:81:8d:b4: ae:c1:c9:a5:47:a5:03:2d:7c:a8:9e:1c:ef:af:58:0a:98:2c: 6d:ce:6e:2a:0e:7d:5a:00:72:ca:27:dc:17:3d:34:40:fb:58: ed:83:bf:e9:98:71:84:3d:33:42:87:b9:5c:ad:14:b5:47:3a: 71:16:d9:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNVbu3DdnU8kwv/jTNwZNReBYGQswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDQ1MTMxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmEzOGU0Y2JjNmQ1ZTVkMzgzNjUwZTY4MmRhODM3ODU1 MGRmNjM4ZmE2Y2VmYjliOGQ1NDYxMmYzOThmMDQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGqVe//ErYh4YVLVDJPHiuhcML+LNz2kX9iWas7vimsh67 akmhm3j5b0Gu9Jba0IlWd835c4E8IIwQznzqUDItZvXxP2eSQEV1nbYVI5l+07K2 dxAZEZ9hTNWkHfHfnaZ0pgAMgNUoXu0up0poM/I2SQzmZ5gaJBFRc7DwPIl++NsY cNC4TSapZLUAZcxKrjkRimk8KS/9Rau+j5/L1sfBVj5R4Clkfqe9QLnHzAV0UQo5 JbSOOCxKZiZ1zqmDgCxMsT12YQajeyWKwVB140uOCkE7VM0Bd5dlybmDpD0UiiO3 AJzKDwhymH6IZejnVYtNP3CJDWq0i+mxVCWtprLFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9btw6kDUG+mF0KNJ3Bu7qVPHUW0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q1OGI2Nzk0LTA5Y2ItNDJmZi1iNzVhLTI2N2FiZWI4NTA3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUS7mAwDQYJKoZIhvcNAQELBQADggEBAHg34+jp6UvStX+F86WVO2fxa2Dp giscRBwB/eO29EUlLjPEjcoHUvy9o4gW6oBGQ5tWEp5YzlJwRWZaArkx6sImnVTT JLeGwgayizvn8ea5YfPKi1aQNMBK51TMEAwA8MoFofwZlROexQd3AFdRo9z3RHMH d9kp9DgZ+63EDbTYGPBQvmo+cwmwNST7xcdnNUVjxzsehUNJAhHPxmur6umtas5R U2KmP5/Oi1X5I4IWXWCLLFf2kdTxXaUHY0ZowSQ9foGNtK7ByaVHpQMtfKieHO+v WAqYLG3ObioOfVoAcson3Bc9NED7WO2Dv+mYcYQ9M0KHuVytFLVHOnEW2X4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:08:18 2025 by rpki-client