$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d23935a2-9875-4584-b901-c26dc0ac5330.roa File: d23935a2-9875-4584-b901-c26dc0ac5330.roa (raw, json) Hash identifier: dyEz/b8B3dCnAXsMA20vQ7v8oBcS2YNdvpQ+egxURNI= Subject key identifier: EF:06:10:E2:3E:27:58:51:3A:B4:04:E8:4C:C5:B1:56:0F:3B:42:7B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D11998E14FA2CC8E974A15B74D0F8CC0D06B89A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d23935a2-9875-4584-b901-c26dc0ac5330.roa Signing time: Mon 06 Oct 2025 17:03:36 +0000 ROA not before: Mon 06 Oct 2025 17:03:36 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:11:99:8e:14:fa:2c:c8:e9:74:a1:5b:74:d0:f8:cc:0d:06:b8:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 6 17:03:36 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=002c0acc3df323676536f57898c288352ba1efafb90caf2f1f45246c72419a10, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:08:ea:04:11:d8:ce:54:82:76:11:e1:65:8a: 4f:df:d6:c7:a2:28:d5:8f:80:a2:38:aa:8a:65:8e: 8f:23:65:d2:7b:20:a7:7d:bb:5d:d5:f7:ca:04:8b: cd:de:c2:d7:ea:fa:80:5e:5c:d3:eb:14:c4:34:75: ff:e6:5e:42:62:4e:1f:cf:80:40:e8:f1:7e:10:08: 0d:65:9b:71:bf:31:6b:89:4d:1d:6b:47:77:e7:49: 43:b7:6c:df:32:dc:e6:5c:03:d3:08:2d:3f:8a:80: 0a:54:41:66:fa:22:c5:39:7d:f8:9f:13:27:a3:fc: d7:01:a7:1a:cb:d4:1e:87:f2:e0:8e:fa:cf:44:ce: ba:ee:89:13:91:bc:27:67:ab:6f:44:08:38:2f:6a: 98:6e:97:06:e7:08:31:41:b5:89:00:e7:f5:7a:d1: 5e:ab:35:74:d3:b3:32:6a:e4:ab:83:07:36:20:1c: 23:d0:4b:ea:4a:50:f2:ae:10:29:d1:1d:4a:14:c1: e2:ac:b8:ad:70:b3:58:c2:fe:41:ec:c9:2e:47:13: ec:3e:c6:fa:d7:81:4d:34:77:e0:aa:85:72:70:49: 12:fd:3f:05:31:cd:2e:36:98:53:42:63:f1:92:f4: ad:de:0d:0b:bf:8a:46:5e:6f:c9:b4:87:f1:28:c0: 5b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:06:10:E2:3E:27:58:51:3A:B4:04:E8:4C:C5:B1:56:0F:3B:42:7B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d23935a2-9875-4584-b901-c26dc0ac5330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.81.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:30:c3:f4:73:3b:16:55:21:1d:37:04:cb:4b:7c:bf:42:0d: 39:13:03:84:78:c3:1b:29:2f:bd:4f:b4:ae:de:ec:91:5a:87: 76:77:1f:67:a9:ce:b4:2a:c0:da:f6:25:b5:e7:44:f1:fc:af: be:a9:7c:4d:80:80:ae:a0:b3:76:6b:78:2a:5a:36:a4:70:0e: 36:af:b8:37:b0:e6:3b:a5:f2:14:e6:af:37:13:3c:f7:1c:c7: 94:d6:d6:6e:9e:86:6d:5e:cd:ec:e1:88:d3:64:8e:45:55:f3: 50:bb:8b:50:52:44:3d:27:48:8d:6e:43:59:88:cd:96:ed:de: 8d:18:f9:f4:6b:4a:5c:9d:5f:06:28:11:04:34:f3:14:65:d9: 72:45:c2:76:6f:d1:cf:41:2a:9f:de:b1:39:15:b0:11:12:37: c2:d4:74:09:17:0e:30:59:11:6d:70:dc:41:cf:45:c8:a6:2a: 90:a6:24:2d:d1:31:4a:05:d4:52:bf:ff:43:29:3f:dd:b1:f5: b6:08:b9:3a:4b:92:11:dd:1e:8e:90:bc:10:63:39:5f:47:af: fb:e6:58:2f:9c:af:61:f4:ca:ef:8e:d3:e4:0f:12:22:f5:f5: 64:78:17:53:ab:d9:7c:c4:a8:0a:0e:b3:8c:be:87:79:6f:66: 1e:b8:65:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDRGZjhT6LMjpdKFbdND4zA0GuJowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDA2MTcwMzM2WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDJjMGFjYzNkZjMyMzY3NjUzNmY1Nzg5OGMyODgzNTJi YTFlZmFmYjkwY2FmMmYxZjQ1MjQ2YzcyNDE5YTEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHCOoEEdjOVIJ2EeFlik/f1seiKNWPgKI4qopljo8jZdJ7 IKd9u13V98oEi83ewtfq+oBeXNPrFMQ0df/mXkJiTh/PgEDo8X4QCA1lm3G/MWuJ TR1rR3fnSUO3bN8y3OZcA9MILT+KgApUQWb6IsU5ffifEyej/NcBpxrL1B6H8uCO +s9EzrruiRORvCdnq29ECDgvaphulwbnCDFBtYkA5/V60V6rNXTTszJq5KuDBzYg HCPQS+pKUPKuECnRHUoUweKsuK1ws1jC/kHsyS5HE+w+xvrXgU00d+CqhXJwSRL9 PwUxzS42mFNCY/GS9K3eDQu/ikZeb8m0h/EowFsZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7wYQ4j4nWFE6tAToTMWxVg87QnswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyMzkzNWEyLTk4NzUtNDU4NC1iOTAxLWMyNmRjMGFjNTMzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAlEwDQYJKoZIhvcNAQELBQADggEBAG4ww/RzOxZVIR03BMtLfL9CDTkT A4R4wxspL71PtK7e7JFah3Z3H2epzrQqwNr2JbXnRPH8r76pfE2AgK6gs3ZreCpa NqRwDjavuDew5jul8hTmrzcTPPccx5TW1m6ehm1ezezhiNNkjkVV81C7i1BSRD0n SI1uQ1mIzZbt3o0Y+fRrSlydXwYoEQQ08xRl2XJFwnZv0c9BKp/esTkVsBESN8LU dAkXDjBZEW1w3EHPRcimKpCmJC3RMUoF1FK//0MpP92x9bYIuTpLkhHdHo6QvBBj OV9Hr/vmWC+cr2H0yu+O0+QPEiL19WR4F1Or2XzEqAoOs4y+h3lvZh64ZeA= -----END CERTIFICATE-----Generated at Wed Oct 8 21:35:59 2025 by rpki-client