$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20ceca2f-c4b0-48eb-b01d-48b873b9822b.roa File: 20ceca2f-c4b0-48eb-b01d-48b873b9822b.roa (raw, json) Hash identifier: JLmE/OdLPZ1tK7BjTjeYOZ4BgchXubzp4mNGa7nKnuI= Subject key identifier: 68:4C:38:65:65:CD:E0:53:B9:AA:33:1E:10:2A:92:06:48:5F:16:39 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E743C45F87AB61087F6CAA2048CDCA5DD33D4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20ceca2f-c4b0-48eb-b01d-48b873b9822b.roa Signing time: Thu 25 Sep 2025 19:24:46 +0000 ROA not before: Thu 25 Sep 2025 19:24:46 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:74:3c:45:f8:7a:b6:10:87:f6:ca:a2:04:8c:dc:a5:dd:33:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:24:46 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=73fd171be428966a81ee2d8847c1bd1a0fded085909bb6297a1c929c9d08450f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:7b:eb:c2:23:9d:7e:83:d0:37:1c:c4:f9: c9:3a:a0:ff:05:6e:3a:ce:ea:4e:3b:31:00:7f:3c: 38:2c:d1:47:c4:82:92:c2:87:fb:0f:79:6a:bc:ee: 72:f3:2c:79:bf:a8:51:db:90:aa:29:af:32:75:57: 5b:fb:cc:e8:25:9c:a9:f1:fe:53:71:20:bc:16:35: e3:82:40:1e:a0:1f:1e:d3:4e:c9:16:f1:d5:af:69: 0e:6c:d2:a9:ad:9c:0c:38:41:e4:eb:5e:50:e4:11: d9:12:be:1f:8b:77:5d:16:e6:7f:e1:f5:61:d7:71: 1c:86:cf:38:48:97:3e:d7:a6:f7:68:34:ed:05:a4: a7:3f:4c:28:d4:e7:a8:c7:01:bd:81:5c:75:c4:8a: 86:10:72:e3:f9:03:b7:cb:89:ed:c1:78:03:ba:75: 31:49:f4:92:01:89:33:dc:06:55:39:85:d1:b2:7f: c7:a9:3c:3a:7a:92:97:ea:e4:4c:f8:69:90:c5:b7: bf:60:d5:e7:7d:f4:c6:75:44:83:0e:07:b3:be:10: c0:19:35:e9:0f:79:2b:13:c5:6d:1e:69:c4:2c:d6: e4:cb:05:b7:fb:0a:98:cd:26:23:17:a3:f8:0e:fe: 6c:64:ee:28:8d:a9:6b:39:2f:8f:83:97:c2:27:21: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4C:38:65:65:CD:E0:53:B9:AA:33:1E:10:2A:92:06:48:5F:16:39 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20ceca2f-c4b0-48eb-b01d-48b873b9822b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.78.0/24 Signature Algorithm: sha256WithRSAEncryption 94:55:00:e1:2b:27:4f:9f:3c:9d:46:b2:58:b4:00:f5:e3:94: 24:63:e9:95:d5:31:9a:ad:98:b7:5f:be:3a:37:6d:a0:aa:5d: c4:35:d8:04:a3:a0:74:ba:5d:b4:32:bc:f6:ca:8c:11:d2:ff: b5:c5:f3:6d:e4:9e:30:83:c4:47:56:1d:24:90:44:37:3a:84: cb:82:09:67:c8:76:15:08:83:51:b1:2b:aa:08:ca:bc:58:08: c0:fb:e5:09:e4:32:3d:3a:54:5f:4a:f0:68:ab:64:16:60:c4: 18:2a:62:60:1c:b7:8e:e0:03:6b:c0:d9:11:aa:8a:ca:b8:e4: ad:24:38:66:e6:d0:73:10:f4:c6:48:cb:06:d5:4c:2d:9b:4d: a0:e6:35:41:e3:01:bc:fc:3a:49:8c:4f:20:80:f1:ad:47:34: 45:95:50:0f:42:2c:2f:86:16:aa:bb:ea:7a:0e:f8:4b:39:4f: a5:59:b6:16:dd:5f:ed:a4:04:54:8c:47:49:2a:bd:78:52:5b: 53:2d:f5:3e:20:b6:b3:4a:f9:af:c2:57:5e:cd:30:6b:3d:34: cc:f3:23:4e:21:80:d4:e9:b3:ec:4b:70:8e:1b:71:82:cb:af: 9c:3f:87:52:f5:56:ef:ef:36:ba:3f:30:2d:36:c2:e2:ba:08: 65:95:6d:4b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITDnQ8Rfh6thCH9sqiBIzcpd0z1DANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjUxOTI0NDZaFw0yNTEwMzAyMzU5NTla MHoxSTBHBgNVBAUTQDczZmQxNzFiZTQyODk2NmE4MWVlMmQ4ODQ3YzFiZDFhMGZk ZWQwODU5MDliYjYyOTdhMWM5MjljOWQwODQ1MGYxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAL3je+vCI51+g9A3HMT5yTqg/wVuOs7qTjsxAH88OCzRR8SC ksKH+w95arzucvMseb+oUduQqimvMnVXW/vM6CWcqfH+U3EgvBY144JAHqAfHtNO yRbx1a9pDmzSqa2cDDhB5OteUOQR2RK+H4t3XRbmf+H1YddxHIbPOEiXPtem92g0 7QWkpz9MKNTnqMcBvYFcdcSKhhBy4/kDt8uJ7cF4A7p1MUn0kgGJM9wGVTmF0bJ/ x6k8OnqSl+rkTPhpkMW3v2DV5330xnVEgw4Hs74QwBk16Q95KxPFbR5pxCzW5MsF t/sKmM0mIxej+A7+bGTuKI2pazkvj4OXwichlqkCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRoTDhlZc3gU7mqMx4QKpIGSF8WOTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMjBjZWNhMmYtYzRiMC00OGViLWIwMWQtNDhiODczYjk4MjJiLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAAOoTjANBgkqhkiG9w0BAQsFAAOCAQEAlFUA4SsnT588nUayWLQA9eOUJGPp ldUxmq2Yt1++OjdtoKpdxDXYBKOgdLpdtDK89sqMEdL/tcXzbeSeMIPER1YdJJBE NzqEy4IJZ8h2FQiDUbErqgjKvFgIwPvlCeQyPTpUX0rwaKtkFmDEGCpiYBy3juAD a8DZEaqKyrjkrSQ4ZubQcxD0xkjLBtVMLZtNoOY1QeMBvPw6SYxPIIDxrUc0RZVQ D0IsL4YWqrvqeg74SzlPpVm2Ft1f7aQEVIxHSSq9eFJbUy31PiC2s0r5r8JXXs0w az00zPMjTiGA1Omz7EtwjhtxgsuvnD+HUvVW7+82uj8wLTbC4roIZZVtSw== -----END CERTIFICATE-----Generated at Sat Oct 18 02:15:32 2025 by rpki-client