$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/936ca04f-2b43-4929-b9e6-da32e54f926c.roa File: 936ca04f-2b43-4929-b9e6-da32e54f926c.roa (raw, json) Hash identifier: OajMDi1d5U8GRDMbeVzc5DamrrArcwZwn3SukLLpTwA= Subject key identifier: FE:4A:A6:84:46:7B:3C:28:E5:8A:9B:52:E6:5C:BA:6F:4C:73:8B:F8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D1D11223E431DD80B9746EA7CE2712E447794F8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/936ca04f-2b43-4929-b9e6-da32e54f926c.roa Signing time: Thu 16 Oct 2025 16:16:24 +0000 ROA not before: Thu 16 Oct 2025 16:16:24 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:1d:11:22:3e:43:1d:d8:0b:97:46:ea:7c:e2:71:2e:44:77:94:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 16:16:24 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=e13205442c542f789fd26b8a2197364a2a57ffa4c6cb14185997fb78f736c8f5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:03:e7:28:ea:71:38:62:10:f7:d9:05:00: 79:39:3f:be:a1:4b:75:50:e8:31:86:56:6d:1e:4d: 34:e6:39:2c:bd:bb:3b:b3:a6:fb:ef:18:c5:97:e6: c6:c7:15:cd:73:a7:aa:6d:84:82:a5:43:56:e2:b0: 8a:25:6e:b8:25:07:93:d8:10:c6:04:ce:03:ed:81: 05:8d:98:c9:d9:c6:79:1a:ac:99:87:09:b1:a4:e8: 39:29:ad:23:05:c9:bb:77:73:aa:a6:75:75:cb:8c: ab:6f:81:47:9c:a2:57:51:a2:34:a5:54:da:64:32: 0e:3c:fc:6b:7b:d7:12:1c:07:2f:30:a4:01:0d:0f: 09:d9:eb:af:b2:4e:fc:3a:67:0b:c7:08:ff:de:08: 92:67:18:ff:a3:08:39:70:f2:98:77:ef:0b:68:7b: 30:a8:36:fc:9b:46:57:de:ca:8c:b4:97:94:a9:84: 8b:31:e5:47:5d:28:66:34:7e:c8:75:46:78:f9:c7: 71:aa:84:80:6c:7f:c7:38:3c:a8:25:54:85:10:c7: f3:71:f9:7f:80:47:ed:e7:99:84:e7:28:c1:84:e6: 92:2d:8b:f7:15:2b:d3:29:0e:05:78:f5:d7:2f:51: f4:61:2a:7b:70:06:90:88:18:08:7b:48:20:c9:24: 92:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4A:A6:84:46:7B:3C:28:E5:8A:9B:52:E6:5C:BA:6F:4C:73:8B:F8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/936ca04f-2b43-4929-b9e6-da32e54f926c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.195.0/24 Signature Algorithm: sha256WithRSAEncryption 62:fe:bf:87:4c:96:8b:27:0b:8f:dd:a4:c7:fa:52:e5:fe:ba: 55:31:c6:e4:61:44:54:df:a0:2c:8e:23:bd:b6:b0:d9:0d:53: 68:f0:fb:9c:8a:18:9a:b2:f4:3e:f6:19:52:c7:bf:28:2f:c7: 7e:e4:30:38:84:b2:03:d7:1d:e9:c1:28:24:3d:24:20:ef:07: 72:0c:7c:d8:34:b2:6f:e0:43:5f:58:62:f6:62:76:e8:7b:c4: 0d:a7:40:de:04:b2:29:fa:70:98:d1:69:fc:d6:4a:13:12:f8: cf:0d:d9:37:18:7b:ef:6c:fa:ca:1f:22:07:c6:06:f7:1d:f8: 52:a4:97:ce:0f:a4:64:ed:63:1a:db:37:14:fe:64:20:15:b3: 3e:ef:79:07:28:ba:63:fa:9c:96:44:ae:22:40:1f:a3:c3:ac: ee:17:69:67:04:3a:2b:58:8b:30:6b:0a:0c:4b:c9:ae:d2:39: d9:40:eb:17:4d:48:83:70:c9:c2:c1:4b:b8:40:e9:37:cc:74: 3f:3f:5b:5d:37:f4:2d:48:70:0a:2d:8c:8c:dd:92:0c:7c:06: 05:97:5a:ef:98:9c:89:e1:4f:0f:17:ee:ad:c2:37:a0:fb:e6: aa:25:c6:80:45:db:d0:4d:4a:ff:92:26:eb:4e:fe:ba:29:c8: 37:10:87:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTR0RIj5DHdgLl0bqfOJxLkR3lPgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTYxNjI0WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTMyMDU0NDJjNTQyZjc4OWZkMjZiOGEyMTk3MzY0YTJh NTdmZmE0YzZjYjE0MTg1OTk3ZmI3OGY3MzZjOGY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgGQPnKOpxOGIQ99kFAHk5P76hS3VQ6DGGVm0eTTTmOSy9 uzuzpvvvGMWX5sbHFc1zp6pthIKlQ1bisIolbrglB5PYEMYEzgPtgQWNmMnZxnka rJmHCbGk6DkprSMFybt3c6qmdXXLjKtvgUecoldRojSlVNpkMg48/Gt71xIcBy8w pAENDwnZ66+yTvw6ZwvHCP/eCJJnGP+jCDlw8ph37wtoezCoNvybRlfeyoy0l5Sp hIsx5UddKGY0fsh1Rnj5x3GqhIBsf8c4PKglVIUQx/Nx+X+AR+3nmYTnKMGE5pIt i/cVK9MpDgV49dcvUfRhKntwBpCIGAh7SCDJJJL/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/kqmhEZ7PCjliptS5ly6b0xzi/gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkzNmNhMDRmLTJiNDMtNDkyOS1iOWU2LWRhMzJlNTRmOTI2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRMMwDQYJKoZIhvcNAQELBQADggEBAGL+v4dMlosnC4/dpMf6UuX+ulUx xuRhRFTfoCyOI722sNkNU2jw+5yKGJqy9D72GVLHvygvx37kMDiEsgPXHenBKCQ9 JCDvB3IMfNg0sm/gQ19YYvZiduh7xA2nQN4Esin6cJjRafzWShMS+M8N2TcYe+9s +sofIgfGBvcd+FKkl84PpGTtYxrbNxT+ZCAVsz7veQcoumP6nJZEriJAH6PDrO4X aWcEOitYizBrCgxLya7SOdlA6xdNSINwycLBS7hA6TfMdD8/W1039C1IcAotjIzd kgx8BgWXWu+YnInhTw8X7q3CN6D75qolxoBF29BNSv+SJutO/ropyDcQhz4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:53:10 2025 by rpki-client