$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b5aec0a-b38f-45de-9892-53aee6caa4ff.roa File: 1b5aec0a-b38f-45de-9892-53aee6caa4ff.roa (raw, json) Hash identifier: z9Au5k6jtQunT21rDOor16GvI4BvItFxdn3nfmz25xg= Subject key identifier: 04:C1:1E:36:12:00:B0:21:58:8C:1C:DC:90:BF:94:17:A9:BA:28:EC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7CDEE416342E91512934D4C040DB9FF58B6881D6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b5aec0a-b38f-45de-9892-53aee6caa4ff.roa Signing time: Thu 25 Sep 2025 19:24:31 +0000 ROA not before: Thu 25 Sep 2025 19:24:31 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:de:e4:16:34:2e:91:51:29:34:d4:c0:40:db:9f:f5:8b:68:81:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:24:31 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=5fb3d6878884270c6efb740de8af8e65aa99bd442a9a4dc22a31f07cb0d675a3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c1:95:89:39:63:40:2d:fe:64:86:d1:25:4d: da:4a:46:0c:79:7b:7b:f9:40:f2:44:66:c2:a9:79: 52:62:04:6b:13:f5:1b:74:3c:79:41:75:91:58:7b: a2:31:9b:8f:5f:3e:ef:80:3e:49:51:c2:61:df:c4: 32:e8:21:f7:d1:4d:47:9f:63:89:be:2c:23:4f:04: e5:c5:07:d3:19:ca:c4:8a:38:0d:b0:54:b6:c9:7b: 4c:0e:31:11:e2:9b:3c:a0:85:81:80:d2:f2:ab:95: f0:f7:48:dd:b9:f8:d2:b5:c2:6d:50:5f:02:fa:28: 58:0f:f1:14:3f:a2:11:dc:ed:32:95:12:6f:e3:7c: a1:cd:f7:f0:a5:bc:64:7e:93:22:56:a1:cf:01:f0: 4a:e4:14:41:cb:49:51:2f:62:2e:90:d8:b2:89:40: aa:b8:f5:97:dd:7a:71:dd:78:d9:19:2a:54:3b:bc: c4:af:17:47:1f:fb:17:e3:26:c0:e8:75:37:40:17: 00:ca:cf:7e:1c:16:76:f3:21:68:bc:5e:c1:55:e6: 7d:82:20:9f:f4:8b:77:9e:bf:6a:b0:1d:84:53:b8: 9e:90:91:5e:fc:1d:15:12:1e:f3:5a:38:77:f7:9d: df:3f:bc:41:6e:18:d7:23:09:f0:47:3d:49:a4:1c: d4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C1:1E:36:12:00:B0:21:58:8C:1C:DC:90:BF:94:17:A9:BA:28:EC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b5aec0a-b38f-45de-9892-53aee6caa4ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.64.0/24 Signature Algorithm: sha256WithRSAEncryption 68:5f:6e:79:25:4e:54:fa:7d:8f:48:59:28:2c:83:56:42:22: 9d:9f:79:a5:32:0b:c7:f2:03:3c:1c:d1:1d:1a:16:91:54:02: f2:26:81:3f:02:71:e3:3c:91:4f:10:63:24:7a:5c:e8:26:24: 10:47:02:a5:ea:bf:8a:a8:10:70:94:3d:08:d1:fb:b7:46:d3: 2c:76:2c:c1:a9:b1:59:3b:9d:3c:3d:70:0d:79:0d:c3:a6:a7: ab:dd:5d:fb:ab:25:30:40:c7:5a:82:64:7d:e2:f4:d2:ea:0d: b2:53:b8:68:e4:f2:53:61:1c:01:99:4d:b9:51:dc:77:8e:5e: ca:b9:8c:eb:11:94:13:a2:fc:73:28:ed:2f:2a:e1:a5:84:22: e6:a6:70:36:88:60:4e:fc:00:3b:4a:60:3e:78:8f:e4:9d:9b: 83:88:20:4f:9d:72:fb:8f:02:2b:fa:d2:70:21:ef:b6:03:ff: 47:ce:4b:8f:8d:f2:3a:a9:29:bc:60:1f:4c:5f:b9:45:11:58: 60:a0:21:ec:3d:84:6f:f8:b1:70:0b:29:1e:22:f4:b5:8d:8b: f1:fc:8d:2e:01:4c:e6:c6:36:5a:57:f2:e8:06:72:3c:8a:be: e0:99:9d:1b:3b:71:a2:44:28:1d:8b:6e:bd:f1:cf:7e:31:40: 46:4d:5d:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfN7kFjQukVEpNNTAQNuf9YtogdYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkyNDMxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmIzZDY4Nzg4ODQyNzBjNmVmYjc0MGRlOGFmOGU2NWFh OTliZDQ0MmE5YTRkYzIyYTMxZjA3Y2IwZDY3NWEzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWwZWJOWNALf5khtElTdpKRgx5e3v5QPJEZsKpeVJiBGsT 9Rt0PHlBdZFYe6Ixm49fPu+APklRwmHfxDLoIffRTUefY4m+LCNPBOXFB9MZysSK OA2wVLbJe0wOMRHimzyghYGA0vKrlfD3SN25+NK1wm1QXwL6KFgP8RQ/ohHc7TKV Em/jfKHN9/ClvGR+kyJWoc8B8ErkFEHLSVEvYi6Q2LKJQKq49ZfdenHdeNkZKlQ7 vMSvF0cf+xfjJsDodTdAFwDKz34cFnbzIWi8XsFV5n2CIJ/0i3eev2qwHYRTuJ6Q kV78HRUSHvNaOHf3nd8/vEFuGNcjCfBHPUmkHNQ/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBMEeNhIAsCFYjBzckL+UF6m6KOwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFiNWFlYzBhLWIzOGYtNDVkZS05ODkyLTUzYWVlNmNhYTRmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqEAwDQYJKoZIhvcNAQELBQADggEBAGhfbnklTlT6fY9IWSgsg1ZCIp2f eaUyC8fyAzwc0R0aFpFUAvImgT8CceM8kU8QYyR6XOgmJBBHAqXqv4qoEHCUPQjR +7dG0yx2LMGpsVk7nTw9cA15DcOmp6vdXfurJTBAx1qCZH3i9NLqDbJTuGjk8lNh HAGZTblR3HeOXsq5jOsRlBOi/HMo7S8q4aWEIuamcDaIYE78ADtKYD54j+Sdm4OI IE+dcvuPAiv60nAh77YD/0fOS4+N8jqpKbxgH0xfuUURWGCgIew9hG/4sXALKR4i 9LWNi/H8jS4BTObGNlpX8ugGcjyKvuCZnRs7caJEKB2Lbr3xz34xQEZNXY8= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:04 2025 by rpki-client