$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12b7f07a-baf0-4204-914f-1ac160f7e932.roa File: 12b7f07a-baf0-4204-914f-1ac160f7e932.roa (raw, json) Hash identifier: FftBqLA+5KqKXlnH0G6WnboTDh4c1DQByXZS3lG3PIA= Subject key identifier: 3A:9F:07:5F:7B:55:31:D5:BC:20:EA:2B:CC:E8:8E:62:FA:A4:1F:A5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 23A4432365089F995E9F06C99A8938877C6528A0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12b7f07a-baf0-4204-914f-1ac160f7e932.roa Signing time: Thu 25 Sep 2025 23:27:16 +0000 ROA not before: Thu 25 Sep 2025 23:27:16 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a4:43:23:65:08:9f:99:5e:9f:06:c9:9a:89:38:87:7c:65:28:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:27:16 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c09e9a9dd06b5df884eb5f0845843e8d71ec005c82db84c2c27ba3e293544ba7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d5:b5:b3:32:b1:35:48:af:3b:f7:cb:a1:82: 07:83:f7:ff:c1:a4:ea:66:83:c9:63:54:3b:de:6b: ff:94:d8:57:fd:bc:51:2a:53:fd:bd:51:eb:5a:3d: 5c:d4:15:29:b2:74:75:92:ad:db:8d:8a:b3:61:07: 86:63:be:d4:52:bb:e0:4f:37:b5:ff:99:5f:80:79: 7d:08:90:c7:ea:28:d3:d2:f0:49:c5:fd:2b:99:19: 45:b1:88:2a:69:3d:20:61:90:e8:a5:2a:63:10:8b: 03:19:59:63:6c:8a:6c:f9:f6:8c:44:73:54:80:30: 4f:41:11:36:fe:0d:13:e4:7e:b2:cd:a8:03:8f:a6: b6:11:06:e9:6c:12:e7:42:cb:a0:ef:0e:84:ab:d4: ae:e7:c8:c9:87:54:60:f7:50:3f:7a:ce:fb:6f:50: 50:c6:7e:e2:59:3c:94:73:b2:a1:ca:2c:0c:8b:2b: e8:b2:d6:24:8b:14:f5:b6:d3:27:65:24:d7:07:9f: 90:6a:65:35:07:b7:d7:28:b7:d5:b4:38:b1:14:c9: 21:b7:62:a7:47:6c:2d:64:c9:89:16:bd:10:2f:7b: 91:56:9f:79:bb:65:5a:3b:06:04:32:26:65:71:f8: 49:20:87:7d:97:a2:6e:94:2a:77:2b:e2:c0:2f:fd: 12:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9F:07:5F:7B:55:31:D5:BC:20:EA:2B:CC:E8:8E:62:FA:A4:1F:A5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12b7f07a-baf0-4204-914f-1ac160f7e932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.24.0/23 Signature Algorithm: sha256WithRSAEncryption 66:dd:55:c5:9e:6b:19:db:a4:19:91:74:01:4c:1f:63:20:e9: aa:80:9d:1b:ca:92:ab:4c:d2:0f:af:11:da:bb:75:58:3f:5f: 8a:e0:7d:25:fc:d5:30:16:e7:e1:14:5f:96:cb:c0:63:d1:a3: 76:59:f8:56:a2:5f:f8:25:a0:ec:12:3b:23:70:ba:6d:30:ad: 9f:3b:ac:3e:f5:8d:f0:60:43:e9:7b:b9:29:25:a4:53:50:7b: 9a:d3:e1:74:3b:e6:a2:42:e2:80:e1:19:e4:d6:78:c9:57:4a: 57:79:1d:12:b4:c0:9c:03:bf:48:56:72:4a:00:43:c8:ce:05: 32:03:ad:00:ae:19:c3:30:c4:86:f1:b3:77:9d:a9:89:8d:a9: 04:f4:f7:a3:82:cd:fd:b0:22:a8:3c:c9:95:c1:1e:08:e1:2f: d2:88:15:a8:de:d5:38:25:3b:42:34:d9:80:5f:50:db:1c:1d: 32:fa:9c:0c:d6:fb:10:e4:b5:19:72:9d:9f:a6:6a:f4:eb:10: a2:6c:b9:cf:1f:10:bc:c3:e6:3d:25:0e:0e:b3:a2:02:51:cd: 69:2b:3f:99:c1:65:cd:d3:93:3a:30:bb:17:c8:43:fd:15:8f: db:26:6a:52:bf:34:c6:99:63:ea:a5:17:49:b6:df:1a:87:2a: 47:31:2d:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI6RDI2UIn5lenwbJmok4h3xlKKAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMyNzE2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDllOWE5ZGQwNmI1ZGY4ODRlYjVmMDg0NTg0M2U4ZDcx ZWMwMDVjODJkYjg0YzJjMjdiYTNlMjkzNTQ0YmE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDq1bWzMrE1SK8798uhggeD9//BpOpmg8ljVDvea/+U2Ff9 vFEqU/29UetaPVzUFSmydHWSrduNirNhB4ZjvtRSu+BPN7X/mV+AeX0IkMfqKNPS 8EnF/SuZGUWxiCppPSBhkOilKmMQiwMZWWNsimz59oxEc1SAME9BETb+DRPkfrLN qAOPprYRBulsEudCy6DvDoSr1K7nyMmHVGD3UD96zvtvUFDGfuJZPJRzsqHKLAyL K+iy1iSLFPW20ydlJNcHn5BqZTUHt9cot9W0OLEUySG3YqdHbC1kyYkWvRAve5FW n3m7ZVo7BgQyJmVx+Ekgh32Xom6UKncr4sAv/RLHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOp8HX3tVMdW8IOorzOiOYvqkH6UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEyYjdmMDdhLWJhZjAtNDIwNC05MTRmLTFhYzE2MGY3ZTkzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrRgwDQYJKoZIhvcNAQELBQADggEBAGbdVcWeaxnbpBmRdAFMH2Mg6aqA nRvKkqtM0g+vEdq7dVg/X4rgfSX81TAW5+EUX5bLwGPRo3ZZ+FaiX/gloOwSOyNw um0wrZ87rD71jfBgQ+l7uSklpFNQe5rT4XQ75qJC4oDhGeTWeMlXSld5HRK0wJwD v0hWckoAQ8jOBTIDrQCuGcMwxIbxs3edqYmNqQT096OCzf2wIqg8yZXBHgjhL9KI Faje1TglO0I02YBfUNscHTL6nAzW+xDktRlynZ+mavTrEKJsuc8fELzD5j0lDg6z ogJRzWkrP5nBZc3TkzowuxfIQ/0Vj9smalK/NMaZY+qlF0m23xqHKkcxLUE= -----END CERTIFICATE-----Generated at Sat Oct 18 02:14:14 2025 by rpki-client