$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e37ad38-0975-4cf4-ba58-ac774ad01037.roa File: 4e37ad38-0975-4cf4-ba58-ac774ad01037.roa (raw, json) Hash identifier: oZH2oufi8QyV1KylQcBpienjkKmVDBTv+C9YxiQjr0c= Subject key identifier: 8F:31:4A:EE:58:5A:B8:5E:9F:4C:09:A7:55:D0:00:F0:32:ED:64:9E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3B06A8413700FE0D7627796B225187608F043F4B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e37ad38-0975-4cf4-ba58-ac774ad01037.roa Signing time: Wed 24 Sep 2025 22:04:40 +0000 ROA not before: Wed 24 Sep 2025 22:04:40 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:06:a8:41:37:00:fe:0d:76:27:79:6b:22:51:87:60:8f:04:3f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:04:40 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=04107d5b95b51ba96531c079eecf0421104a8ffe7773dd61feb970ad5a7f0b81, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1e:f4:c2:ab:7c:9c:22:b9:7c:ae:ce:74:69: fb:e5:8c:38:b2:05:d9:87:6b:31:cc:81:63:8d:6a: f0:a9:d1:64:96:94:24:26:51:99:42:26:da:e0:77: 16:df:7d:b3:8a:1f:c7:50:23:2e:7c:35:d1:07:43: 64:71:fb:e7:b9:71:34:c2:11:fe:98:93:c4:b8:99: e6:e9:71:8c:1b:9f:ae:36:1f:0a:fe:bb:22:33:6b: 5d:31:d5:0a:44:98:25:4a:a5:50:ee:1b:5c:34:1a: 80:13:d6:c7:2a:86:81:4c:5a:a6:39:cb:5f:5f:3d: a8:b6:a7:10:a2:37:e4:83:6c:47:3d:8b:46:35:5c: e9:97:e9:39:d5:9a:e9:43:ea:cc:ab:5e:6d:ba:a0: 6a:0f:ea:7f:ce:dc:6a:6a:23:80:36:ac:83:68:75: 58:a3:0e:a5:c6:12:89:48:70:c2:93:1c:56:c7:0b: eb:37:48:18:57:a3:2e:12:b3:d9:e2:1f:a1:3d:e8: b9:b0:9b:ba:e4:04:14:e0:23:2d:16:1a:cb:f2:e6: 06:98:0c:f0:f7:5f:7e:b1:62:0a:d5:67:a5:47:84: 1d:65:5f:04:a5:aa:5f:9d:a6:c0:41:cb:2d:4d:8d: e6:6d:93:00:f2:f7:33:e0:01:c7:1c:1f:12:02:8a: 1c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:31:4A:EE:58:5A:B8:5E:9F:4C:09:A7:55:D0:00:F0:32:ED:64:9E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e37ad38-0975-4cf4-ba58-ac774ad01037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.200.0/24 Signature Algorithm: sha256WithRSAEncryption b1:bb:bc:74:63:f5:b3:15:52:1d:98:0e:63:06:32:6c:52:f8: 36:d7:ff:04:d3:6a:40:f5:ff:ef:b2:ac:a4:df:f6:20:7c:4d: 56:f7:a0:2c:33:c1:87:0b:5f:1b:97:12:a0:0d:f6:71:47:40: 4c:2f:7b:c7:aa:23:31:5f:d7:c8:16:54:e1:e8:30:c9:bc:3f: 54:3a:9f:99:dc:6e:77:d9:42:48:17:63:66:40:c4:37:44:da: 9d:e8:5d:11:ea:72:31:12:ca:2f:1e:09:54:00:bb:9b:be:2f: a9:39:51:85:da:1a:ad:ef:d8:a7:c5:f7:e2:f5:c0:6e:82:19: d9:38:d4:cb:5c:ff:e9:a6:81:60:e1:fc:4a:5b:1e:14:47:83: 09:c9:25:cf:92:70:3a:34:95:fe:74:e6:f5:65:05:a9:54:dd: 5e:b6:c2:9e:ad:c9:1b:3f:d7:69:88:68:75:f6:5c:53:96:bd: c3:df:d0:84:81:d4:4a:b2:08:3c:96:4a:b1:f1:59:37:d3:6c: 9e:04:42:99:28:03:7e:a5:63:24:b2:fb:36:fe:35:b7:24:06: ae:8f:e0:d4:b3:06:6e:b6:3e:ac:bc:30:1c:34:7e:ab:40:1c: 99:79:19:48:4b:40:07:9b:09:56:c1:3c:90:e8:d9:b5:ca:53: b0:14:76:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOwaoQTcA/g12J3lrIlGHYI8EP0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjIwNDQwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDEwN2Q1Yjk1YjUxYmE5NjUzMWMwNzllZWNmMDQyMTEw NGE4ZmZlNzc3M2RkNjFmZWI5NzBhZDVhN2YwYjgxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnHvTCq3ycIrl8rs50afvljDiyBdmHazHMgWONavCp0WSW lCQmUZlCJtrgdxbffbOKH8dQIy58NdEHQ2Rx++e5cTTCEf6Yk8S4mebpcYwbn642 Hwr+uyIza10x1QpEmCVKpVDuG1w0GoAT1scqhoFMWqY5y19fPai2pxCiN+SDbEc9 i0Y1XOmX6TnVmulD6syrXm26oGoP6n/O3GpqI4A2rINodVijDqXGEolIcMKTHFbH C+s3SBhXoy4Ss9niH6E96Lmwm7rkBBTgIy0WGsvy5gaYDPD3X36xYgrVZ6VHhB1l XwSlql+dpsBByy1NjeZtkwDy9zPgAcccHxICihyzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjzFK7lhauF6fTAmnVdAA8DLtZJ4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRlMzdhZDM4LTA5NzUtNGNmNC1iYTU4LWFjNzc0YWQwMTAzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQ8gwDQYJKoZIhvcNAQELBQADggEBALG7vHRj9bMVUh2YDmMGMmxS+DbX /wTTakD1/++yrKTf9iB8TVb3oCwzwYcLXxuXEqAN9nFHQEwve8eqIzFf18gWVOHo MMm8P1Q6n5ncbnfZQkgXY2ZAxDdE2p3oXRHqcjESyi8eCVQAu5u+L6k5UYXaGq3v 2KfF9+L1wG6CGdk41Mtc/+mmgWDh/EpbHhRHgwnJJc+ScDo0lf505vVlBalU3V62 wp6tyRs/12mIaHX2XFOWvcPf0ISB1EqyCDyWSrHxWTfTbJ4EQpkoA36lYySy+zb+ NbckBq6P4NSzBm62Pqy8MBw0fqtAHJl5GUhLQAebCVbBPJDo2bXKU7AUdvg= -----END CERTIFICATE-----Generated at Sat Oct 18 02:37:59 2025 by rpki-client