$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/926a7910-1728-411d-a427-4a6e78a2edb9.roa File: 926a7910-1728-411d-a427-4a6e78a2edb9.roa (raw, json) Hash identifier: 1/zu80DxZKA+HOFM5pM22KmgNS+qDV7c0Uj8VmK/lhc= Subject key identifier: E5:17:09:72:90:29:8B:3E:86:C5:6C:7A:EB:54:D3:86:3B:F6:F5:67 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4EA834447E58A4A3C39294C101D49CEB66E8D3BC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/926a7910-1728-411d-a427-4a6e78a2edb9.roa Signing time: Tue 21 Oct 2025 05:52:35 +0000 ROA not before: Tue 21 Oct 2025 05:52:35 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.246.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a8:34:44:7e:58:a4:a3:c3:92:94:c1:01:d4:9c:eb:66:e8:d3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 05:52:35 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=67516dcdc7ca86d4af689d2c7324ee478bc0f2bf8c8807c81934ff3ca6a6ea9a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:8f:47:71:24:d2:c4:b1:de:72:91:cc:9c: e0:07:22:ab:80:d5:b3:f9:fe:5f:95:23:56:f7:dc: 80:0c:de:1f:30:2e:43:db:ed:6d:47:9a:89:1c:96: 42:5b:11:2a:55:7d:f1:1a:4d:60:35:ca:9e:7c:3e: eb:83:b0:ae:3c:c6:f4:a7:66:1e:27:ea:73:b3:b4: a2:7c:17:58:4d:81:c0:a6:72:ff:cf:51:82:55:48: 2d:12:12:f8:ef:99:ec:8b:6b:e7:cf:e8:f2:7d:ff: 0e:7b:9c:de:54:fc:fd:f9:d6:84:55:f8:93:70:9b: 59:03:79:3b:58:72:87:a8:1c:73:cf:bb:5d:64:71: 64:a6:46:b9:c1:72:04:14:2a:e9:0d:f2:d3:2f:0b: 12:9e:75:e0:f5:63:b0:a3:82:50:98:00:da:ee:40: c6:98:4a:d7:0c:cf:c0:5e:cd:a8:64:59:17:46:d0: fd:9e:1f:49:cf:f2:a2:fb:c4:62:72:cd:05:6b:95: a7:e0:2d:01:8c:14:a4:57:93:d1:73:e5:c1:77:3a: ba:25:5c:29:c5:7a:29:e5:c5:01:0e:a5:0e:29:14: 7c:e9:e3:9d:99:01:52:05:d7:11:19:26:f9:e7:f6: 47:51:5d:45:59:71:6f:d4:7c:7b:c6:3c:3c:c7:f6: c4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:17:09:72:90:29:8B:3E:86:C5:6C:7A:EB:54:D3:86:3B:F6:F5:67 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/926a7910-1728-411d-a427-4a6e78a2edb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.246.0.0/16 Signature Algorithm: sha256WithRSAEncryption a8:5c:88:ca:de:4d:95:c0:1b:9e:d1:c3:f9:08:8c:7e:f7:28: 14:49:8f:06:5d:39:46:15:cd:28:51:18:48:55:f8:64:3d:ce: 04:cb:d8:d4:ed:ad:8d:6c:ec:73:0e:8e:c3:86:7b:1e:99:50: da:dc:3b:8a:00:eb:03:f6:82:19:d3:d9:a6:48:33:38:64:49: 62:a5:15:9e:06:7f:cf:44:86:a7:1e:c9:28:88:cc:2c:cc:c2: 92:60:16:23:05:23:2e:b5:10:c0:60:2e:62:8a:f3:ed:ea:8c: a5:fb:f3:9d:e8:0f:d9:d4:98:e1:19:8a:e7:d5:2c:a2:da:d2: d6:25:ee:11:ea:d2:5d:34:26:f6:a2:fa:c9:ce:0c:34:79:a4: e0:da:61:5c:30:ab:e0:c7:3b:57:f0:58:2a:32:e6:8a:a7:83: b7:45:59:cd:94:9c:7b:5a:dc:a2:52:25:f0:86:63:b0:89:1c: e1:7b:9e:a2:7d:51:9d:f5:b9:61:74:42:67:59:ad:54:a8:8b: 5b:25:d8:41:49:1e:60:fb:cf:e4:9d:c9:a7:4d:bc:72:02:e1: f4:7b:87:fd:be:0d:eb:17:39:2b:1f:3e:af:ab:78:00:08:b9: 6c:01:a4:11:c8:03:99:ee:45:cb:95:3a:25:01:60:eb:2c:49: 6b:3c:14:54 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTqg0RH5YpKPDkpTBAdSc62bo07wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDU1MjM1WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzUxNmRjZGM3Y2E4NmQ0YWY2ODlkMmM3MzI0ZWU0Nzhi YzBmMmJmOGM4ODA3YzgxOTM0ZmYzY2E2YTZlYTlhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFnI9HcSTSxLHecpHMnOAHIquA1bP5/l+VI1b33IAM3h8w LkPb7W1HmokclkJbESpVffEaTWA1yp58PuuDsK48xvSnZh4n6nOztKJ8F1hNgcCm cv/PUYJVSC0SEvjvmeyLa+fP6PJ9/w57nN5U/P351oRV+JNwm1kDeTtYcoeoHHPP u11kcWSmRrnBcgQUKukN8tMvCxKedeD1Y7CjglCYANruQMaYStcMz8BezahkWRdG 0P2eH0nP8qL7xGJyzQVrlafgLQGMFKRXk9Fz5cF3OrolXCnFeinlxQEOpQ4pFHzp 452ZAVIF1xEZJvnn9kdRXUVZcW/UfHvGPDzH9sRtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5RcJcpApiz6GxWx661TThjv29WcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkyNmE3OTEwLTE3MjgtNDExZC1hNDI3LTRhNmU3OGEyZWRiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAS9jANBgkqhkiG9w0BAQsFAAOCAQEAqFyIyt5NlcAbntHD+QiMfvcoFEmP Bl05RhXNKFEYSFX4ZD3OBMvY1O2tjWzscw6Ow4Z7HplQ2tw7igDrA/aCGdPZpkgz OGRJYqUVngZ/z0SGpx7JKIjMLMzCkmAWIwUjLrUQwGAuYorz7eqMpfvznegP2dSY 4RmK59UsotrS1iXuEerSXTQm9qL6yc4MNHmk4NphXDCr4Mc7V/BYKjLmiqeDt0VZ zZSce1rcolIl8IZjsIkc4Xueon1RnfW5YXRCZ1mtVKiLWyXYQUkeYPvP5J3Jp028 cgLh9HuH/b4N6xc5Kx8+r6t4AAi5bAGkEcgDme5Fy5U6JQFg6yxJazwUVA== -----END CERTIFICATE-----Generated at Wed Nov 5 01:48:22 2025 by rpki-client