$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/736a2048-1e09-4034-be32-40e2246beade.roa File: 736a2048-1e09-4034-be32-40e2246beade.roa (raw, json) Hash identifier: Qi0RRQH089fygqUuqW7V7XM2aXL7ZwqG/6wPFUEXQ1Y= Subject key identifier: 29:3C:0A:B8:93:EF:9B:6D:D4:8E:0A:F2:FB:76:2E:A5:EC:6C:CA:1C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6B3277F6886A662F7A6497680B3EF8E9B4149715 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/736a2048-1e09-4034-be32-40e2246beade.roa Signing time: Sat 18 Oct 2025 22:20:10 +0000 ROA not before: Sat 18 Oct 2025 22:20:10 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:32:77:f6:88:6a:66:2f:7a:64:97:68:0b:3e:f8:e9:b4:14:97:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:20:10 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=668d3d91089548f84077ccb59da5d077d258b6e83fac5bc69ab980d1ad4d8141, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:57:7f:d5:27:79:e2:9e:5d:6e:0c:55:61: 56:0e:0a:f5:a7:9a:3e:5a:32:2b:65:c5:54:fd:bb: 89:97:32:5c:4e:03:ea:62:db:ff:03:86:18:3f:8c: c5:f4:97:ed:e2:5f:e3:11:ba:4f:31:0f:02:f8:dc: ff:e7:b8:d4:4d:e0:7b:5c:f4:3a:ed:fe:23:d5:07: a8:02:63:f6:79:21:85:82:f6:a8:9e:47:3a:3a:67: 30:8d:97:2a:ed:02:36:0c:17:c9:81:12:b4:6b:65: ef:f0:2a:41:0a:37:b0:9b:0c:4c:97:e6:59:dd:37: a5:1c:10:b7:7a:58:7d:ab:30:f5:22:a0:9d:c1:17: 00:ae:fa:d7:4a:0f:21:eb:97:24:3d:6e:0f:1a:bf: 9f:73:87:83:6f:5b:39:cf:48:d3:8f:52:6a:61:9e: 70:14:91:05:8d:eb:71:ec:a9:a1:df:56:95:cd:c7: 43:23:79:62:aa:34:95:e2:18:2b:54:94:7b:0b:12: 3d:11:56:2d:0d:82:17:51:9c:00:67:f8:2c:d2:50: 6f:0f:89:c4:b9:4d:97:e8:f5:e1:cc:47:76:16:b6: 61:db:14:9e:91:89:c8:99:4e:65:b7:96:63:c4:05: 19:b0:12:bf:82:29:51:1a:ff:ba:c4:c5:6d:49:a4: 58:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3C:0A:B8:93:EF:9B:6D:D4:8E:0A:F2:FB:76:2E:A5:EC:6C:CA:1C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/736a2048-1e09-4034-be32-40e2246beade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.100.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:f6:16:90:be:ae:67:c9:d2:f2:a5:7d:9b:70:87:10:d1:d0: 9b:1d:5b:96:a0:95:d1:bb:49:2a:ed:ad:64:37:72:c6:bf:b8: dc:4e:ac:7d:f5:ca:ec:ef:08:b6:3e:f2:09:16:dd:29:93:c0: 16:71:3f:d6:81:00:3a:43:ac:41:6d:46:af:0b:ec:89:c1:c2: e2:6e:fa:18:d0:64:81:9d:cf:b4:24:09:b5:92:05:3e:8b:45: 81:ae:d0:8b:10:e8:47:db:4b:31:62:d7:aa:fd:ad:55:f4:39: 8f:c8:e4:1e:73:e3:8d:a4:52:29:9c:b8:aa:19:99:13:26:32: fd:b4:05:f5:2f:90:cc:89:06:b7:c0:1e:1e:5b:c1:75:51:70: 58:e9:f7:28:25:09:54:2f:72:7f:8d:9b:15:4d:a1:59:1e:6a: 2f:92:a4:fa:31:d6:70:8a:e8:b2:c7:86:b4:b1:cc:ea:29:46: 3e:c6:ea:86:ff:97:8b:79:f6:1e:27:86:2a:4d:89:05:cd:fe: 6d:4d:8c:a6:5e:bb:1d:6b:bc:27:60:59:d5:b2:51:71:18:2e: ea:5e:c1:c0:cc:a2:e0:d1:d4:97:d9:21:bd:19:bb:d2:b5:c8: a8:47:20:8c:5f:ef:c4:81:ac:15:19:bc:cc:d5:9b:d0:6e:09: 8b:eb:a2:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUazJ39ohqZi96ZJdoCz746bQUlxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjIyMDEwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjhkM2Q5MTA4OTU0OGY4NDA3N2NjYjU5ZGE1ZDA3N2Qy NThiNmU4M2ZhYzViYzY5YWI5ODBkMWFkNGQ4MTQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuqld/1Sd54p5dbgxVYVYOCvWnmj5aMitlxVT9u4mXMlxO A+pi2/8Dhhg/jMX0l+3iX+MRuk8xDwL43P/nuNRN4Htc9Drt/iPVB6gCY/Z5IYWC 9qieRzo6ZzCNlyrtAjYMF8mBErRrZe/wKkEKN7CbDEyX5lndN6UcELd6WH2rMPUi oJ3BFwCu+tdKDyHrlyQ9bg8av59zh4NvWznPSNOPUmphnnAUkQWN63HsqaHfVpXN x0MjeWKqNJXiGCtUlHsLEj0RVi0NghdRnABn+CzSUG8PicS5TZfo9eHMR3YWtmHb FJ6RiciZTmW3lmPEBRmwEr+CKVEa/7rExW1JpFi9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKTwKuJPvm23Ujgry+3YupexsyhwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzczNmEyMDQ4LTFlMDktNDAzNC1iZTMyLTQwZTIyNDZiZWFkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISrGQwDQYJKoZIhvcNAQELBQADggEBAA72FpC+rmfJ0vKlfZtwhxDR0Jsd W5agldG7SSrtrWQ3csa/uNxOrH31yuzvCLY+8gkW3SmTwBZxP9aBADpDrEFtRq8L 7InBwuJu+hjQZIGdz7QkCbWSBT6LRYGu0IsQ6EfbSzFi16r9rVX0OY/I5B5z442k UimcuKoZmRMmMv20BfUvkMyJBrfAHh5bwXVRcFjp9yglCVQvcn+NmxVNoVkeai+S pPox1nCK6LLHhrSxzOopRj7G6ob/l4t59h4nhipNiQXN/m1NjKZeux1rvCdgWdWy UXEYLupewcDMouDR1JfZIb0Zu9K1yKhHIIxf78SBrBUZvMzVm9BuCYvrosc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:45:22 2025 by rpki-client