$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e1e5d76-756d-4726-8608-f5960ca51310.roa File: 4e1e5d76-756d-4726-8608-f5960ca51310.roa (raw, json) Hash identifier: YANGy44Q1AB1m5qATqUGHF73S63pHbBR+LCKYbn9u1c= Subject key identifier: AB:3A:A6:0B:D0:83:CB:6F:A7:55:3F:1B:43:B8:EC:D8:56:D8:9A:AD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3F5C0FDBB8095A6F0A5D34265E3650064E45DE48 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e1e5d76-756d-4726-8608-f5960ca51310.roa Signing time: Sun 19 Oct 2025 05:02:29 +0000 ROA not before: Sun 19 Oct 2025 05:02:29 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5c:0f:db:b8:09:5a:6f:0a:5d:34:26:5e:36:50:06:4e:45:de:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:02:29 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=a196edd06aa647fb05aea4714bebf5d5d0773b6546a6f0289b065bd297981e18, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bc:1d:8d:f2:af:ca:c3:5a:4e:03:3f:c0:05: a2:d8:79:15:3b:0e:88:1f:38:5e:a6:9d:d8:22:7b: 25:b4:5b:03:ad:12:08:58:9a:02:22:cd:ce:e7:b7: 5c:8d:f6:4e:35:71:0d:c5:a4:71:b0:14:c5:4f:40: 66:c5:6e:fc:e0:24:6b:eb:3f:a4:dd:9b:7e:21:2b: 46:28:08:2f:5a:a1:5a:cb:dd:0c:fc:f9:df:d9:6a: ad:7f:45:33:fe:ef:9b:42:91:07:9d:58:c1:d5:3c: b6:20:43:95:dd:02:68:96:0c:78:cc:d1:1a:73:b3: 72:f0:ec:1d:97:9c:74:f4:c3:3e:c0:39:18:0f:7e: 5f:31:4b:94:13:25:0f:cc:67:ab:7e:3b:bf:74:ab: c3:9a:b4:24:90:ea:b9:c8:00:cb:34:5e:e5:30:95: 96:ea:e5:3c:6e:e8:03:d7:94:cd:2e:0e:68:d6:a0: ad:ed:72:12:8c:a4:89:7d:5d:a8:1c:dc:b4:cd:82: f1:dd:a0:05:f5:82:20:0f:2b:72:8a:59:28:13:0d: 6d:62:1d:3d:4e:19:46:6e:2c:bb:bd:bf:3f:c8:9f: 70:b8:48:1d:b5:1f:59:0b:61:e2:bd:40:71:4b:33: 6f:ae:89:93:10:a2:79:04:3a:03:6c:49:c8:a3:0c: a0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3A:A6:0B:D0:83:CB:6F:A7:55:3F:1B:43:B8:EC:D8:56:D8:9A:AD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e1e5d76-756d-4726-8608-f5960ca51310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.93.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:04:39:35:20:21:bd:e4:ea:9a:70:c3:fd:fb:be:8b:2a:21: d3:d8:70:30:ba:cf:2e:a0:f9:cc:7e:00:e3:63:e7:b0:45:48: 44:b5:c2:41:c8:70:30:49:f8:67:ff:4e:fa:26:a7:25:cb:60: 23:be:26:14:5b:7a:4f:f6:ad:89:a0:1a:af:00:5a:30:17:3e: c9:1e:a4:10:ae:6e:8b:74:67:55:55:d2:ec:46:e8:d0:6d:89: df:0b:b1:19:36:6b:68:76:be:8e:fc:d4:59:f8:d6:e3:53:7f: 55:a6:73:a4:2e:18:e9:8b:8a:66:f3:bc:3f:e3:f9:43:07:cb: 5a:44:45:e5:55:7e:76:b8:12:95:41:45:89:bb:92:99:a1:4b: 47:a7:9e:ad:22:fe:d0:f5:d6:d6:ea:35:4c:3b:6e:5e:eb:07: 6d:2e:31:75:32:0d:63:2e:a6:e3:42:a2:21:f3:02:29:1a:b6: 2c:da:fb:a5:27:9f:de:13:cd:d2:c7:d8:75:f7:d4:a0:f9:c6: 7d:22:eb:9f:7a:a9:ba:0d:2c:77:1a:17:85:7a:17:4e:40:b5: 9c:9b:e8:bb:55:b2:17:9f:b9:e4:4c:0b:f3:b5:70:52:22:52: 44:46:f7:7a:f8:fe:f5:cf:c4:8d:c3:e4:0e:f8:ac:a7:42:28: 20:e4:0e:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP1wP27gJWm8KXTQmXjZQBk5F3kgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDUwMjI5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTk2ZWRkMDZhYTY0N2ZiMDVhZWE0NzE0YmViZjVkNWQw NzczYjY1NDZhNmYwMjg5YjA2NWJkMjk3OTgxZTE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXvB2N8q/Kw1pOAz/ABaLYeRU7DogfOF6mndgieyW0WwOt EghYmgIizc7nt1yN9k41cQ3FpHGwFMVPQGbFbvzgJGvrP6Tdm34hK0YoCC9aoVrL 3Qz8+d/Zaq1/RTP+75tCkQedWMHVPLYgQ5XdAmiWDHjM0Rpzs3Lw7B2XnHT0wz7A ORgPfl8xS5QTJQ/MZ6t+O790q8OatCSQ6rnIAMs0XuUwlZbq5Txu6APXlM0uDmjW oK3tchKMpIl9Xagc3LTNgvHdoAX1giAPK3KKWSgTDW1iHT1OGUZuLLu9vz/In3C4 SB21H1kLYeK9QHFLM2+uiZMQonkEOgNsScijDKCPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqzqmC9CDy2+nVT8bQ7js2FbYmq0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRlMWU1ZDc2LTc1NmQtNDcyNi04NjA4LWY1OTYwY2E1MTMxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASml0wDQYJKoZIhvcNAQELBQADggEBAE4EOTUgIb3k6ppww/37vosqIdPY cDC6zy6g+cx+AONj57BFSES1wkHIcDBJ+Gf/TvompyXLYCO+JhRbek/2rYmgGq8A WjAXPskepBCubot0Z1VV0uxG6NBtid8LsRk2a2h2vo781Fn41uNTf1Wmc6QuGOmL imbzvD/j+UMHy1pEReVVfna4EpVBRYm7kpmhS0ennq0i/tD11tbqNUw7bl7rB20u MXUyDWMupuNCoiHzAikatiza+6Unn94TzdLH2HX31KD5xn0i6596qboNLHcaF4V6 F05AtZyb6LtVshefueRMC/O1cFIiUkRG93r4/vXPxI3D5A74rKdCKCDkDq0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:06:21 2025 by rpki-client