$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4a2243d-f5a3-4268-9ca2-74b5ba482e3e.roa File: b4a2243d-f5a3-4268-9ca2-74b5ba482e3e.roa (raw, json) Hash identifier: qi4GYY+jn+OIvYLlBer55H1gza4uDz/Oqzk10g8vOo8= Subject key identifier: D4:73:AA:4F:BB:56:BF:B7:D6:D5:73:E2:30:5E:73:35:7A:D4:9A:6A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 181F9D367AAADD86A4ADD7B43F1DBBE60A0004E2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4a2243d-f5a3-4268-9ca2-74b5ba482e3e.roa Signing time: Thu 16 Oct 2025 15:11:16 +0000 ROA not before: Thu 16 Oct 2025 15:11:16 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1f:9d:36:7a:aa:dd:86:a4:ad:d7:b4:3f:1d:bb:e6:0a:00:04:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 15:11:16 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=9c7898d066c259179be99ceb0ac9a5da491d1a5c5efcb93060d002eeb1d49830, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:08:ed:91:30:82:ae:7f:88:9f:62:f8:bd: 23:e6:23:30:56:f8:87:46:33:bb:39:81:7f:35:a6: 92:1b:1a:6a:44:b5:d9:49:aa:8f:b1:53:a5:34:ad: 64:79:fa:6a:fc:74:79:cb:bf:50:a6:a1:eb:8c:60: 34:34:80:5c:15:95:e9:a9:2f:e7:9e:df:2f:e1:e6: a5:50:ad:de:cc:4e:cb:92:af:38:18:bd:b1:dc:22: 66:c2:f4:ea:be:83:e4:86:ad:7c:3b:c0:d8:e4:30: 02:f4:43:dc:09:05:a4:ae:1d:27:f3:16:dc:d2:6b: fd:17:d4:bb:e0:6b:e5:70:f2:dd:76:b6:53:a0:60: 81:c1:7a:6a:6f:51:89:48:33:29:96:67:c5:ff:96: 86:66:d0:a8:d1:e7:fe:7c:a8:67:00:db:99:d5:2d: 0e:e1:de:ca:6f:42:b7:62:03:d2:38:83:2e:83:17: f6:fd:c2:61:3a:8e:2f:44:a8:a7:ba:aa:dd:8d:d9: 21:20:56:6a:f8:50:ae:13:8d:82:65:1a:c4:f5:87: 48:f6:9e:6a:51:2c:1e:ed:b9:e7:7c:05:a1:f2:63: 8e:c3:c3:b6:7d:95:c0:28:f2:6f:55:c0:c2:ad:54: c4:9a:6e:71:9d:b2:68:da:ef:9a:8c:c0:e2:24:6b: af:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:73:AA:4F:BB:56:BF:B7:D6:D5:73:E2:30:5E:73:35:7A:D4:9A:6A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4a2243d-f5a3-4268-9ca2-74b5ba482e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.26.0/23 Signature Algorithm: sha256WithRSAEncryption 46:7b:2a:b8:2e:e9:0f:f7:d2:c6:ce:70:e6:31:80:7f:cc:c4: ed:47:e9:6f:7e:14:e0:5c:c6:d3:10:5d:ad:04:e9:39:ab:49: b3:e5:6b:26:33:af:69:60:a5:12:43:b3:49:cd:97:b1:91:54: 24:ad:e7:07:64:f1:bf:48:eb:d8:df:6a:ea:ab:4b:ab:ac:04: 2d:22:b6:07:5c:db:fa:ee:66:5b:01:5d:11:e7:5b:4a:81:99: 41:db:82:24:3c:22:e6:de:28:c8:36:63:2d:58:02:d0:d4:29: e7:ff:5f:3a:fa:0a:3a:28:19:0b:19:83:06:01:44:34:be:0e: b1:b0:3f:25:f6:7d:1d:13:04:d7:f7:94:d4:94:40:f6:7c:42: d3:96:c2:44:bf:a6:2b:84:09:45:9d:92:bd:5f:99:fd:b5:7b: 96:58:df:0f:e0:45:54:e5:1f:15:68:e3:19:51:2a:9b:c6:84: 10:b3:12:58:90:17:10:dd:f9:43:f4:5f:b1:8b:c8:29:6c:17: be:0b:40:25:dd:f5:49:a2:51:50:46:b3:19:8b:e0:ec:61:3a: f7:94:e9:80:db:9c:e4:a2:1f:d9:4d:72:75:de:66:79:c4:31: 00:22:5c:f5:46:39:35:da:aa:bf:d8:ea:84:e0:cd:46:39:e0: 03:e5:99:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGB+dNnqq3Yakrde0Px275goABOIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTUxMTE2WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5Yzc4OThkMDY2YzI1OTE3OWJlOTljZWIwYWM5YTVkYTQ5 MWQxYTVjNWVmY2I5MzA2MGQwMDJlZWIxZDQ5ODMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5jgjtkTCCrn+In2L4vSPmIzBW+IdGM7s5gX81ppIbGmpE tdlJqo+xU6U0rWR5+mr8dHnLv1CmoeuMYDQ0gFwVlempL+ee3y/h5qVQrd7MTsuS rzgYvbHcImbC9Oq+g+SGrXw7wNjkMAL0Q9wJBaSuHSfzFtzSa/0X1Lvga+Vw8t12 tlOgYIHBempvUYlIMymWZ8X/loZm0KjR5/58qGcA25nVLQ7h3spvQrdiA9I4gy6D F/b9wmE6ji9EqKe6qt2N2SEgVmr4UK4TjYJlGsT1h0j2nmpRLB7tued8BaHyY47D w7Z9lcAo8m9VwMKtVMSabnGdsmja75qMwOIka6+TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1HOqT7tWv7fW1XPiMF5zNXrUmmowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I0YTIyNDNkLWY1YTMtNDI2OC05Y2EyLTc0YjViYTQ4MmUzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESRBowDQYJKoZIhvcNAQELBQADggEBAEZ7Krgu6Q/30sbOcOYxgH/MxO1H 6W9+FOBcxtMQXa0E6TmrSbPlayYzr2lgpRJDs0nNl7GRVCSt5wdk8b9I69jfauqr S6usBC0itgdc2/ruZlsBXRHnW0qBmUHbgiQ8IubeKMg2Yy1YAtDUKef/Xzr6Cjoo GQsZgwYBRDS+DrGwPyX2fR0TBNf3lNSUQPZ8QtOWwkS/piuECUWdkr1fmf21e5ZY 3w/gRVTlHxVo4xlRKpvGhBCzEliQFxDd+UP0X7GLyClsF74LQCXd9UmiUVBGsxmL 4OxhOveU6YDbnOSiH9lNcnXeZnnEMQAiXPVGOTXaqr/Y6oTgzUY54APlmTY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:24 2025 by rpki-client