$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/026cf801-6c0b-488b-bebc-338623d2848a.roa File: 026cf801-6c0b-488b-bebc-338623d2848a.roa (raw, json) Hash identifier: xhY3yPgi9jUYg2E3lJ5mXLG02i87Vz60OXKlLh7EwfM= Subject key identifier: C5:8A:9D:F7:CA:16:5C:A0:A1:9E:0B:D7:47:5C:E2:0D:8D:C1:B5:99 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 61B574285282937E9901FF4AA246436E75C0B4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/026cf801-6c0b-488b-bebc-338623d2848a.roa Signing time: Wed 24 Sep 2025 22:44:47 +0000 ROA not before: Wed 24 Sep 2025 22:44:47 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b5:74:28:52:82:93:7e:99:01:ff:4a:a2:46:43:6e:75:c0:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:44:47 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=eb4c30ed7c2dfa393f9448baf54b911557efd888ecce99d58925fd7eea47f264, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:fe:85:19:84:c6:ba:1e:48:af:9a:49:ea: 11:56:d9:46:9f:7e:81:5a:35:dd:55:e3:88:60:54: d8:f8:4e:ab:cc:1c:c7:46:70:57:b8:5f:38:f0:cd: dc:4e:e0:19:63:a1:b2:06:b8:aa:f2:5a:38:fe:a9: 7e:f9:29:ca:28:a5:59:1d:35:34:cf:f4:dc:30:12: a7:52:7c:87:f5:fc:4c:5c:cb:57:c5:21:7b:d5:ed: c0:c8:2d:89:49:11:4f:72:3b:3a:64:fe:9d:04:35: 58:57:5b:a6:0f:13:15:0a:e9:29:48:bb:8e:6f:25: e1:71:57:a1:eb:ac:97:58:6b:bc:a8:46:14:94:6b: 3a:ec:6a:1f:4c:a6:c6:59:5f:af:93:88:4c:7a:ee: b4:dd:92:3d:98:7d:1c:70:2d:65:a9:18:23:7e:5e: 5f:1f:65:53:60:ab:c0:60:19:b0:bf:61:49:8c:4e: 7e:db:ce:31:b5:da:d7:3a:24:52:29:77:c8:5f:95: ab:da:3b:48:6c:37:69:0a:e3:19:4b:6e:33:a3:5a: 8f:3b:a9:fb:b6:07:8b:1f:d5:fc:3a:51:7d:ac:72: a5:a0:4e:ce:bb:ff:85:ed:60:19:a5:f5:3a:73:ea: d9:29:71:b8:6e:0f:cc:47:cd:e1:a0:19:f6:2e:e4: a7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8A:9D:F7:CA:16:5C:A0:A1:9E:0B:D7:47:5C:E2:0D:8D:C1:B5:99 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/026cf801-6c0b-488b-bebc-338623d2848a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.168.0/22 Signature Algorithm: sha256WithRSAEncryption 13:c6:b7:74:00:15:95:56:58:b9:88:9d:c9:85:35:dc:f3:f0: 50:c5:ae:b6:4f:87:10:04:36:46:c7:73:2b:0c:e1:a3:ab:38: c8:86:03:b9:97:3c:d5:1b:3d:74:81:44:b6:e8:ac:d3:d0:79: 36:ba:cd:f4:a9:4f:06:bb:e6:b7:06:ff:3d:40:3b:25:45:e5: 53:ae:50:2f:5a:bd:ef:57:75:0c:68:bb:fd:6b:4f:f7:60:49: ba:b7:ff:37:23:f5:7a:19:ab:c5:06:34:bc:58:a0:3f:e9:49: af:1a:f6:41:5f:41:8c:15:fd:ad:2f:4f:a9:ec:b7:c2:b4:f7: 9d:22:f4:c3:03:6b:55:ce:a1:50:e0:b4:e2:ab:04:d2:ac:49: 52:83:41:31:ac:a0:f4:b7:7d:36:39:7e:3d:88:24:0a:ff:41: f3:10:38:0c:96:96:cf:58:2f:7a:4e:a4:73:a6:1d:1f:bd:4a: 13:2e:99:8d:c2:ed:05:9c:bd:35:d1:a2:df:34:ef:ce:12:54: 5f:c2:9d:3e:15:74:b9:a8:0e:56:82:d3:36:d0:22:54:f6:65: 81:96:35:ec:6e:c9:a5:81:8e:b9:c0:1b:30:95:c7:2d:fa:c3: fd:25:69:f0:22:3d:02:3f:1e:89:4a:9f:12:be:48:77:fa:86: 66:83:c2:e3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITYbV0KFKCk36ZAf9KokZDbnXAtDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjQyMjQ0NDdaFw0yNTEwMjkyMzU5NTla MHoxSTBHBgNVBAUTQGViNGMzMGVkN2MyZGZhMzkzZjk0NDhiYWY1NGI5MTE1NTdl ZmQ4ODhlY2NlOTlkNTg5MjVmZDdlZWE0N2YyNjQxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALW4/oUZhMa6HkivmknqEVbZRp9+gVo13VXjiGBU2PhOq8wc x0ZwV7hfOPDN3E7gGWOhsga4qvJaOP6pfvkpyiilWR01NM/03DASp1J8h/X8TFzL V8Uhe9XtwMgtiUkRT3I7OmT+nQQ1WFdbpg8TFQrpKUi7jm8l4XFXoeusl1hrvKhG FJRrOuxqH0ymxllfr5OITHrutN2SPZh9HHAtZakYI35eXx9lU2CrwGAZsL9hSYxO ftvOMbXa1zokUil3yF+Vq9o7SGw3aQrjGUtuM6Najzup+7YHix/V/DpRfaxypaBO zrv/he1gGaX1OnPq2SlxuG4PzEfN4aAZ9i7kpyECAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTFip33yhZcoKGeC9dHXOINjcG1mTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMDI2Y2Y4MDEtNmMwYi00ODhiLWJlYmMtMzM4NjIzZDI4NDhhLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAhJAqDANBgkqhkiG9w0BAQsFAAOCAQEAE8a3dAAVlVZYuYidyYU13PPwUMWu tk+HEAQ2RsdzKwzho6s4yIYDuZc81Rs9dIFEtuis09B5NrrN9KlPBrvmtwb/PUA7 JUXlU65QL1q971d1DGi7/WtP92BJurf/NyP1ehmrxQY0vFigP+lJrxr2QV9BjBX9 rS9Pqey3wrT3nSL0wwNrVc6hUOC04qsE0qxJUoNBMayg9Ld9Njl+PYgkCv9B8xA4 DJaWz1gvek6kc6YdH71KEy6ZjcLtBZy9NdGi3zTvzhJUX8KdPhV0uagOVoLTNtAi VPZlgZY17G7JpYGOucAbMJXHLfrD/SVp8CI9Aj8eiUqfEr5Id/qGZoPC4w== -----END CERTIFICATE-----Generated at Sat Oct 18 05:08:54 2025 by rpki-client