$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d09f320-6251-48ba-85d5-ec3792705e13.roa File: 1d09f320-6251-48ba-85d5-ec3792705e13.roa (raw, json) Hash identifier: P8mOMB7XRn3qm+R+5KiktlRICBMbJB1Dpkxqpsikh5Q= Subject key identifier: C2:4F:33:05:72:38:A8:77:DF:70:07:C1:AE:06:A4:9F:11:7E:5C:B8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 49E69EA2843DF139E650D510B0A9BCBA45DAFAC6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d09f320-6251-48ba-85d5-ec3792705e13.roa Signing time: Thu 25 Sep 2025 23:45:22 +0000 ROA not before: Thu 25 Sep 2025 23:45:22 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e6:9e:a2:84:3d:f1:39:e6:50:d5:10:b0:a9:bc:ba:45:da:fa:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:45:22 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=62958b0fe73bcfb2304a3d489382a46f3c85dfd603526cff398b25c62f93a117, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:6a:f0:fb:72:b7:99:c6:64:ad:b0:52:c0: b9:87:c9:e7:0e:74:88:10:6e:50:ba:c3:eb:3f:9f: fd:ef:40:24:2c:78:e7:d9:99:24:18:ae:84:1a:69: 8c:a1:69:74:1f:b5:9e:c5:1e:e6:f5:0a:0a:06:9f: 1d:5d:6c:02:6f:59:56:fe:8f:3a:2c:ee:d9:db:f2: 13:5b:c6:1b:b2:fc:88:2a:73:99:e9:8e:17:d7:98: b2:ff:c8:04:78:72:77:37:68:8d:cf:5a:c3:ed:4a: c3:57:96:aa:d4:63:60:72:d0:4f:d5:27:01:a1:ce: c5:68:d3:0e:35:42:0d:c0:6f:bf:41:93:9d:04:be: 2b:21:88:2e:25:3b:bd:9d:93:41:93:0a:2a:17:17: e4:29:26:79:90:f9:09:f4:41:bc:a4:33:7d:f8:61: d8:c4:45:6b:72:43:0a:4f:dd:91:da:8b:ca:47:4e: c5:79:4c:1b:35:9a:ad:e1:59:ac:bc:6d:4a:b0:bb: 98:db:70:41:59:61:fa:15:cc:86:cb:01:65:0b:09: 88:83:44:a3:dc:77:8c:4f:ba:b1:4c:d6:b6:df:a6: a7:5f:84:7c:ad:c7:83:37:de:15:14:e4:fa:ac:a2: 5a:64:88:6a:51:4d:cf:f1:73:d3:fe:92:d4:2f:c1: a8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4F:33:05:72:38:A8:77:DF:70:07:C1:AE:06:A4:9F:11:7E:5C:B8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d09f320-6251-48ba-85d5-ec3792705e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.176.0/23 Signature Algorithm: sha256WithRSAEncryption 76:a7:72:e8:3d:83:10:0c:f9:67:93:ee:f8:0a:6d:eb:b3:ff: c6:df:08:7d:71:2c:2d:c0:81:25:ee:f0:1f:13:8a:33:74:24: ca:60:d7:de:59:54:2c:83:b9:a7:56:c7:3c:1e:d3:38:20:30: be:76:7f:23:e1:e9:85:c6:62:c5:c4:87:13:7e:2d:a7:b7:72: 6a:4e:b5:98:ce:16:a0:a2:d7:c0:42:d8:5b:9b:01:75:e0:0f: 82:1e:f0:d5:68:4e:11:68:7b:f2:47:f1:a2:0b:6a:78:9e:9f: 0c:6b:0b:9c:83:05:0b:ed:6b:7c:cf:10:f6:03:60:9f:9f:78: cd:63:2e:64:e7:74:84:c8:eb:ab:bf:12:3e:4d:60:20:7a:74: d3:f3:7f:31:e8:e6:dc:36:5f:9b:cc:28:bf:69:1f:08:94:d2: 3e:61:3a:05:af:d8:78:ea:dc:eb:db:1f:5c:94:cc:e7:2d:1e: 3a:dd:24:63:54:8b:ef:07:87:ef:90:cd:d0:b4:47:9c:8a:df: 12:19:9b:c8:2d:db:15:dc:55:02:98:df:ff:c2:00:ca:0a:9e: bb:dd:77:07:df:77:41:eb:93:2f:28:9e:54:0a:37:d3:13:47: 37:36:2b:ea:37:3c:3f:03:08:b5:cd:5d:5c:e2:e8:ed:f2:4a: ab:e0:21:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSeaeooQ98TnmUNUQsKm8ukXa+sYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjM0NTIyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2Mjk1OGIwZmU3M2JjZmIyMzA0YTNkNDg5MzgyYTQ2ZjNj ODVkZmQ2MDM1MjZjZmYzOThiMjVjNjJmOTNhMTE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtrWrw+3K3mcZkrbBSwLmHyecOdIgQblC6w+s/n/3vQCQs eOfZmSQYroQaaYyhaXQftZ7FHub1CgoGnx1dbAJvWVb+jzos7tnb8hNbxhuy/Igq c5npjhfXmLL/yAR4cnc3aI3PWsPtSsNXlqrUY2By0E/VJwGhzsVo0w41Qg3Ab79B k50EvishiC4lO72dk0GTCioXF+QpJnmQ+Qn0QbykM334YdjERWtyQwpP3ZHai8pH TsV5TBs1mq3hWay8bUqwu5jbcEFZYfoVzIbLAWULCYiDRKPcd4xPurFM1rbfpqdf hHytx4M33hUU5PqsolpkiGpRTc/xc9P+ktQvwah5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwk8zBXI4qHffcAfBrgaknxF+XLgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFkMDlmMzIwLTYyNTEtNDhiYS04NWQ1LWVjMzc5MjcwNWUxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDr7AwDQYJKoZIhvcNAQELBQADggEBAHancug9gxAM+WeT7vgKbeuz/8bf CH1xLC3AgSXu8B8TijN0JMpg195ZVCyDuadWxzwe0zggML52fyPh6YXGYsXEhxN+ Lae3cmpOtZjOFqCi18BC2FubAXXgD4Ie8NVoThFoe/JH8aILanienwxrC5yDBQvt a3zPEPYDYJ+feM1jLmTndITI66u/Ej5NYCB6dNPzfzHo5tw2X5vMKL9pHwiU0j5h OgWv2Hjq3OvbH1yUzOctHjrdJGNUi+8Hh++QzdC0R5yK3xIZm8gt2xXcVQKY3//C AMoKnrvddwffd0Hrky8onlQKN9MTRzc2K+o3PD8DCLXNXVzi6O3ySqvgIYs= -----END CERTIFICATE-----Generated at Sat Oct 18 02:36:51 2025 by rpki-client