$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26f1961a-1415-48e1-bbb8-24757419cfa2.roa File: 26f1961a-1415-48e1-bbb8-24757419cfa2.roa (raw, json) Hash identifier: t58VgywUWLUfmEc1M8YCEdXhuCY24bsRN/ziwybDOak= Subject key identifier: 3B:EC:31:C7:30:A3:93:FA:91:8A:33:A2:B2:6A:E8:FA:06:43:A3:AE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2E9E21D0818EDABDCFA26840900671CF28DD6DAD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26f1961a-1415-48e1-bbb8-24757419cfa2.roa Signing time: Sat 18 Oct 2025 13:33:52 +0000 ROA not before: Sat 18 Oct 2025 13:33:52 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9e:21:d0:81:8e:da:bd:cf:a2:68:40:90:06:71:cf:28:dd:6d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 13:33:52 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=7944c4d2b8b7e6007134064c706411bb5891a54a6677ac38fc4eb77e9a823f76, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d4:7c:95:38:90:1d:5c:99:88:2a:ad:e1:9e: ea:c8:81:af:45:ae:90:24:bc:35:07:9c:a7:0c:4b: 0f:4c:ee:ca:9d:15:81:45:b3:dc:b1:b5:ed:d2:3c: 96:d5:01:0c:f6:04:6b:87:72:0d:4f:7a:f0:d3:8d: 49:4d:36:27:8d:c8:7d:f5:ab:83:2e:46:ce:d8:eb: 21:01:50:66:b8:16:dd:b6:84:5f:42:d2:6b:4c:83: 6f:4c:af:64:17:b0:b2:18:ce:c3:7a:f8:8e:a2:d8: cc:f3:cf:f9:98:76:a7:d3:2e:ae:ca:58:06:84:1e: 0d:83:4c:fb:a7:68:26:a4:9c:db:24:5a:47:2d:ef: 05:07:c5:1d:fb:45:2f:51:22:f8:ec:1e:ca:4e:7f: c8:ef:55:2d:ad:97:6e:f6:b3:20:36:e7:b0:db:1c: 77:ed:dd:40:a1:96:53:4a:c0:72:6d:bb:3b:b1:e1: 43:ff:00:bc:07:57:b7:8c:34:a7:77:f0:73:71:f0: 24:fa:ed:68:8a:f2:71:21:76:02:83:9b:c0:05:2a: db:6a:2a:fd:53:41:cc:c4:ea:47:95:1e:f5:b3:7f: 57:d0:ed:13:1c:79:77:63:fe:2f:b8:f7:89:07:e3: 80:f9:37:88:8d:47:b6:eb:21:2a:6f:2a:12:04:b7: cd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EC:31:C7:30:A3:93:FA:91:8A:33:A2:B2:6A:E8:FA:06:43:A3:AE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26f1961a-1415-48e1-bbb8-24757419cfa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.172.0/22 Signature Algorithm: sha256WithRSAEncryption 62:8a:ed:b7:ee:d3:70:07:93:e0:73:e5:43:3f:1d:3c:72:3a: d4:ae:a3:2c:a3:14:cb:41:e9:53:17:f3:e8:3f:6b:60:21:0e: 48:cb:50:9a:27:22:df:26:db:c3:d9:7b:4d:00:ec:2b:80:d2: 75:0e:4a:8d:94:de:07:21:40:48:3b:3a:88:b4:f2:9a:34:bc: d5:d6:e6:2c:de:0e:26:e9:f5:36:44:40:82:0b:b0:03:fb:16: 02:6e:ea:89:bc:c7:f6:03:60:bf:f3:cf:15:99:a1:c7:fb:4f: 3d:99:cc:d7:e4:df:07:98:4a:cb:42:78:e1:f6:f0:b5:50:30: cf:c7:a9:c5:b0:64:42:56:a7:56:85:77:cd:83:72:f8:bc:17: 8c:ba:1d:94:32:f4:6c:57:19:4d:53:53:1c:7f:67:8d:9e:eb: 9b:2a:50:89:49:bc:f6:4d:91:7c:d8:a9:0d:af:b4:4d:6d:37: a2:91:1a:84:3b:b0:96:7a:76:db:58:29:89:67:6c:d9:59:46: ff:f1:40:a8:af:36:82:f3:d8:6b:b2:76:af:07:75:9c:72:97: 57:b3:77:21:08:de:da:e5:89:85:ca:34:0e:c3:77:a5:46:24: 32:d6:87:24:d9:06:02:41:1c:c6:0c:c0:db:4a:2d:0e:52:a9: 6b:6e:36:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULp4h0IGO2r3PomhAkAZxzyjdba0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTMzMzUyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTQ0YzRkMmI4YjdlNjAwNzEzNDA2NGM3MDY0MTFiYjU4 OTFhNTRhNjY3N2FjMzhmYzRlYjc3ZTlhODIzZjc2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU1HyVOJAdXJmIKq3hnurIga9FrpAkvDUHnKcMSw9M7sqd FYFFs9yxte3SPJbVAQz2BGuHcg1PevDTjUlNNieNyH31q4MuRs7Y6yEBUGa4Ft22 hF9C0mtMg29Mr2QXsLIYzsN6+I6i2Mzzz/mYdqfTLq7KWAaEHg2DTPunaCaknNsk Wkct7wUHxR37RS9RIvjsHspOf8jvVS2tl272syA257DbHHft3UChllNKwHJtuzux 4UP/ALwHV7eMNKd38HNx8CT67WiK8nEhdgKDm8AFKttqKv1TQczE6keVHvWzf1fQ 7RMceXdj/i+494kH44D5N4iNR7brISpvKhIEt823AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO+wxxzCjk/qRijOismro+gZDo64wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI2ZjE5NjFhLTE0MTUtNDhlMS1iYmI4LTI0NzU3NDE5Y2ZhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISrKwwDQYJKoZIhvcNAQELBQADggEBAGKK7bfu03AHk+Bz5UM/HTxyOtSu oyyjFMtB6VMX8+g/a2AhDkjLUJonIt8m28PZe00A7CuA0nUOSo2U3gchQEg7Ooi0 8po0vNXW5izeDibp9TZEQIILsAP7FgJu6om8x/YDYL/zzxWZocf7Tz2ZzNfk3weY SstCeOH28LVQMM/HqcWwZEJWp1aFd82Dcvi8F4y6HZQy9GxXGU1TUxx/Z42e65sq UIlJvPZNkXzYqQ2vtE1tN6KRGoQ7sJZ6dttYKYlnbNlZRv/xQKivNoLz2Guydq8H dZxyl1ezdyEI3trliYXKNA7Dd6VGJDLWhyTZBgJBHMYMwNtKLQ5SqWtuNng= -----END CERTIFICATE-----Generated at Mon Oct 20 08:43:21 2025 by rpki-client