$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/936ccfc3-a0da-452b-aaad-cea2db9df05a.roa File: 936ccfc3-a0da-452b-aaad-cea2db9df05a.roa (raw, json) Hash identifier: qw/1XXwPYJfWPil5UVeQPks6UoQ16tyeJZmY4bwY8Uk= Subject key identifier: A1:31:0A:FB:19:E5:7C:2E:38:7E:A2:B1:AF:E5:F8:A1:E8:76:D5:7D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1837CF608D02E63086E6586264CA1553CBD1D1A7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/936ccfc3-a0da-452b-aaad-cea2db9df05a.roa Signing time: Wed 24 Sep 2025 23:04:10 +0000 ROA not before: Wed 24 Sep 2025 23:04:10 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:37:cf:60:8d:02:e6:30:86:e6:58:62:64:ca:15:53:cb:d1:d1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 23:04:10 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=efca7d80f690d54682fb30a921f695964dd4d7e917856ee39b587adebd85c3b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c2:a8:7d:14:b4:ef:47:2e:c1:30:be:c4:16: 92:39:7d:ba:64:53:bc:12:07:17:3c:21:3d:91:8d: ae:14:ae:0e:28:b9:cf:e8:3b:16:62:13:e4:0f:ba: c5:5d:c5:8e:4c:f8:b9:98:56:8e:9a:1c:93:75:6a: 30:8f:bf:0b:3d:0a:9d:b1:89:47:7d:79:f1:67:91: 09:3d:b3:60:23:d0:08:30:00:66:67:9c:a3:50:31: 7e:86:64:5b:0e:98:3f:2e:8d:33:ea:c8:2e:c7:b9: b7:fb:87:12:ae:4d:c3:5c:da:56:0d:98:9a:9c:d8: a9:73:56:3e:c0:63:44:99:7e:8d:8a:0e:ff:90:bb: 16:a3:40:4f:41:7a:15:62:76:40:2f:00:81:83:fe: a3:a4:2b:8b:b3:c7:d6:69:a6:d8:24:08:00:4c:47: 80:a3:39:41:62:80:c2:14:57:b4:93:55:98:86:6c: 2d:61:36:4a:24:ed:7e:d0:27:b2:63:ef:31:e6:a5: 63:5c:95:80:43:0f:9c:87:bd:ad:61:4f:b7:72:13: 06:0c:d3:c5:52:ee:b8:6d:e9:85:ed:96:ce:84:a3: 3c:72:59:6a:5e:54:b5:d3:c1:6a:80:b9:06:73:9e: 20:20:f1:95:fd:f7:b1:38:e6:01:b6:74:0b:d2:ee: 5f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:31:0A:FB:19:E5:7C:2E:38:7E:A2:B1:AF:E5:F8:A1:E8:76:D5:7D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/936ccfc3-a0da-452b-aaad-cea2db9df05a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.216.0/21 Signature Algorithm: sha256WithRSAEncryption ab:6e:d7:26:80:88:58:1c:83:2e:c5:7c:30:a0:34:97:5e:aa: d2:d2:0b:5c:51:67:3b:77:4f:1b:c7:07:bf:1b:cc:01:a0:56: d9:10:a0:c5:78:80:fa:70:88:4a:4f:98:ff:3d:56:a9:df:cd: 97:65:04:06:fe:2c:15:86:ce:0f:da:34:0a:83:6e:e6:1d:cb: f8:68:69:9f:ea:74:8e:47:72:f3:ff:35:2b:ce:1f:74:5c:93: e3:96:05:82:32:c8:6d:ff:aa:92:71:3a:a3:42:12:f4:d6:61: 60:18:6b:99:20:bf:2c:3f:7e:6e:40:fb:ab:64:fd:d6:be:87: 0b:c2:a8:da:9d:83:f3:05:47:03:0f:61:a5:4b:c1:1c:79:39: 2f:eb:60:5c:97:17:1c:33:b8:c8:d0:5c:84:f6:03:6d:4f:66: 08:fd:a6:44:4f:ce:91:ba:71:07:1b:7c:a2:2b:9b:0d:bc:35: f9:e0:61:2f:53:4a:d9:3d:cd:35:5a:5c:2b:dc:5b:8c:19:a5: 81:5d:da:f7:2c:31:f9:09:9a:ae:4e:73:4b:d1:43:fb:c7:6d: 26:9f:1f:13:b0:c5:08:ce:40:75:ab:ee:2c:a7:60:8f:4f:b6: 69:37:04:68:83:35:44:d5:71:41:2d:e2:fa:bc:9a:b9:7d:f1: 02:c5:fa:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGDfPYI0C5jCG5lhiZMoVU8vR0acwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjMwNDEwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmNhN2Q4MGY2OTBkNTQ2ODJmYjMwYTkyMWY2OTU5NjRk ZDRkN2U5MTc4NTZlZTM5YjU4N2FkZWJkODVjM2IxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSwqh9FLTvRy7BML7EFpI5fbpkU7wSBxc8IT2Rja4Urg4o uc/oOxZiE+QPusVdxY5M+LmYVo6aHJN1ajCPvws9Cp2xiUd9efFnkQk9s2Aj0Agw AGZnnKNQMX6GZFsOmD8ujTPqyC7Hubf7hxKuTcNc2lYNmJqc2KlzVj7AY0SZfo2K Dv+QuxajQE9BehVidkAvAIGD/qOkK4uzx9ZpptgkCABMR4CjOUFigMIUV7STVZiG bC1hNkok7X7QJ7Jj7zHmpWNclYBDD5yHva1hT7dyEwYM08VS7rht6YXtls6Eozxy WWpeVLXTwWqAuQZzniAg8ZX997E45gG2dAvS7l8PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoTEK+xnlfC44fqKxr+X4oeh21X0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkzNmNjZmMzLWEwZGEtNDUyYi1hYWFkLWNlYTJkYjlkZjA1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMSQdgwDQYJKoZIhvcNAQELBQADggEBAKtu1yaAiFgcgy7FfDCgNJdeqtLS C1xRZzt3TxvHB78bzAGgVtkQoMV4gPpwiEpPmP89VqnfzZdlBAb+LBWGzg/aNAqD buYdy/hoaZ/qdI5HcvP/NSvOH3Rck+OWBYIyyG3/qpJxOqNCEvTWYWAYa5kgvyw/ fm5A+6tk/da+hwvCqNqdg/MFRwMPYaVLwRx5OS/rYFyXFxwzuMjQXIT2A21PZgj9 pkRPzpG6cQcbfKIrmw28NfngYS9TStk9zTVaXCvcW4wZpYFd2vcsMfkJmq5Oc0vR Q/vHbSafHxOwxQjOQHWr7iynYI9Ptmk3BGiDNUTVcUEt4vq8mrl98QLF+mU= -----END CERTIFICATE-----Generated at Sat Oct 18 02:17:23 2025 by rpki-client