$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/325ccbf1-9f17-45a4-ad0f-4e77907c3518.roa File: 325ccbf1-9f17-45a4-ad0f-4e77907c3518.roa (raw, json) Hash identifier: +jQuXEZZQCvt+3ilhcFOCBxZceY6UGjQBUVd4SmdviA= Subject key identifier: D1:19:4E:C5:5F:6B:E0:63:F8:84:D0:9E:A7:72:92:F2:B4:AD:0F:9D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2AC9F076DDB93153F07C366340AA0A9C1CC2947C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/325ccbf1-9f17-45a4-ad0f-4e77907c3518.roa Signing time: Fri 26 Sep 2025 01:57:10 +0000 ROA not before: Fri 26 Sep 2025 01:57:10 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c9:f0:76:dd:b9:31:53:f0:7c:36:63:40:aa:0a:9c:1c:c2:94:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:57:10 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=046b6a8a19701dd368c0098f2d9a666b23473a7560886a620ef221780930adc9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:55:22:4a:df:b4:dd:82:5a:31:4b:38:1a: fb:cf:24:07:28:2c:45:4d:76:70:10:e9:a7:9f:43: 81:49:d9:5f:73:b7:75:63:ea:36:1b:b8:d7:fb:83: c8:62:a5:08:f4:a0:4b:5d:4e:dd:1b:e9:7e:6a:f6: 68:59:8e:09:e8:95:7c:8d:86:08:43:76:fc:04:39: b9:7e:42:f4:83:7b:8a:c5:2b:1f:55:ce:c3:48:63: 57:dc:cd:c6:8a:8e:9f:9f:55:8a:25:78:24:ec:e6: 4a:55:e1:f6:8f:4a:48:8c:e3:df:37:23:d7:db:02: 70:f0:0d:05:0a:2c:9a:2d:ba:9d:f8:0b:0e:00:81: 3b:88:07:06:30:e8:00:09:22:d9:88:0c:b2:ca:6e: a4:6f:57:b9:74:99:15:b5:25:cc:f6:7c:17:0c:e1: f6:48:0e:66:8b:b6:0d:a0:fa:07:7f:96:95:45:8a: 9d:fe:90:13:d6:fc:1d:75:5f:3d:26:29:27:91:71: 98:2e:e4:52:14:8b:8b:1f:b8:3a:f9:2a:86:3d:ab: 1f:5e:dd:a3:f2:17:4d:a4:51:20:ba:00:fc:39:38: 2f:ce:cd:33:67:88:ea:9f:83:fd:d5:2a:8d:d5:30: ff:81:dc:62:06:d0:fa:75:f7:4c:11:e1:68:92:18: f1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:19:4E:C5:5F:6B:E0:63:F8:84:D0:9E:A7:72:92:F2:B4:AD:0F:9D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/325ccbf1-9f17-45a4-ad0f-4e77907c3518.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.112.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:ad:d3:61:d5:3a:ae:d5:d1:47:18:07:30:dd:91:c8:25:63: cd:cc:59:ea:58:b0:6e:7a:40:c7:a6:a7:ad:c5:bd:2d:6f:39: 5b:8a:ae:ed:6c:29:e8:7f:9b:5d:4a:d5:b0:5e:f0:2a:48:7f: 54:96:f1:84:36:fa:d8:d3:e4:c5:db:b0:2a:b0:08:0f:b7:a0: 66:44:81:62:40:59:f1:20:3b:c1:8e:3c:4b:13:90:49:15:cd: 6e:76:ac:94:ec:de:0e:72:1e:fb:6c:c1:f9:d6:7d:94:0c:20: 55:9c:f6:f9:36:52:41:1b:1a:a6:78:74:62:91:44:ae:ad:de: 71:e5:0b:a2:f6:cd:ac:fc:0a:bf:e6:83:11:f2:9b:fa:8e:22: 78:d0:4e:40:8e:af:e2:a5:04:5f:aa:d8:5e:c2:a8:91:5d:a4: 79:8a:83:50:ce:65:a3:20:c6:bd:33:cf:2e:cf:ff:3e:50:2e: 13:90:12:ae:cc:73:e5:8d:1a:6d:2b:62:1d:52:09:ae:d1:68: 74:d9:73:48:74:bc:30:ad:31:18:d1:49:a8:43:89:5f:26:b2: fd:26:2d:f8:62:9c:32:31:2d:d6:e9:23:1f:24:27:ac:26:87: 7e:56:8f:76:cb:26:b3:c3:e5:10:01:73:93:58:c0:74:30:aa: 93:4b:3c:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKsnwdt25MVPwfDZjQKoKnBzClHwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDE1NzEwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDZiNmE4YTE5NzAxZGQzNjhjMDA5OGYyZDlhNjY2YjIz NDczYTc1NjA4ODZhNjIwZWYyMjE3ODA5MzBhZGM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4jlUiSt+03YJaMUs4GvvPJAcoLEVNdnAQ6aefQ4FJ2V9z t3Vj6jYbuNf7g8hipQj0oEtdTt0b6X5q9mhZjgnolXyNhghDdvwEObl+QvSDe4rF Kx9VzsNIY1fczcaKjp+fVYoleCTs5kpV4faPSkiM4983I9fbAnDwDQUKLJotup34 Cw4AgTuIBwYw6AAJItmIDLLKbqRvV7l0mRW1Jcz2fBcM4fZIDmaLtg2g+gd/lpVF ip3+kBPW/B11Xz0mKSeRcZgu5FIUi4sfuDr5KoY9qx9e3aPyF02kUSC6APw5OC/O zTNniOqfg/3VKo3VMP+B3GIG0Pp190wR4WiSGPERAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0RlOxV9r4GP4hNCep3KS8rStD50wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMyNWNjYmYxLTlmMTctNDVhNC1hZDBmLTRlNzc5MDdjMzUxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDrXAwDQYJKoZIhvcNAQELBQADggEBAC2t02HVOq7V0UcYBzDdkcglY83M WepYsG56QMemp63FvS1vOVuKru1sKeh/m11K1bBe8CpIf1SW8YQ2+tjT5MXbsCqw CA+3oGZEgWJAWfEgO8GOPEsTkEkVzW52rJTs3g5yHvtswfnWfZQMIFWc9vk2UkEb GqZ4dGKRRK6t3nHlC6L2zaz8Cr/mgxHym/qOInjQTkCOr+KlBF+q2F7CqJFdpHmK g1DOZaMgxr0zzy7P/z5QLhOQEq7Mc+WNGm0rYh1SCa7RaHTZc0h0vDCtMRjRSahD iV8msv0mLfhinDIxLdbpIx8kJ6wmh35Wj3bLJrPD5RABc5NYwHQwqpNLPHI= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:51 2025 by rpki-client