$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/382f8748-e942-4340-ab8e-19643c19d885.roa File: 382f8748-e942-4340-ab8e-19643c19d885.roa (raw, json) Hash identifier: e0RT40p6lEz2JiFsCcA+lsvlioJCAJlSPITpsRW/zWQ= Subject key identifier: C7:B2:8D:F3:59:04:EE:11:54:74:92:EA:97:AA:A6:07:62:F3:FD:75 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53D49B0F89D5BAA294DD992880820201E964A78D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/382f8748-e942-4340-ab8e-19643c19d885.roa Signing time: Thu 25 Sep 2025 21:21:51 +0000 ROA not before: Thu 25 Sep 2025 21:21:51 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d4:9b:0f:89:d5:ba:a2:94:dd:99:28:80:82:02:01:e9:64:a7:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 21:21:51 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=58d9e169401fb0fcaa67020346e5054a9ac9a6013a7a8b73357757dd55450d26, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:c9:65:0e:b3:0b:4b:bd:c3:82:1e:88:7f: fe:a0:87:8f:61:9f:de:97:cc:39:0e:05:7f:e6:f7: f5:23:39:28:2f:02:78:7e:d4:2f:78:0d:29:a4:7b: 33:83:0b:a4:a0:3d:93:1f:d1:65:8f:83:4f:c9:a7: cc:6f:04:d8:51:44:a8:e6:ce:2b:f7:63:08:64:0e: 7c:bf:b8:d1:84:28:42:8c:b7:fe:9f:fa:0d:56:7a: 84:11:93:31:1e:dd:95:da:46:5a:64:69:02:3e:99: c0:de:c4:0b:65:87:ff:2c:f4:7d:a1:f0:b3:ad:f9: 49:0a:bb:48:82:b7:a0:19:42:c3:0f:80:b0:f6:b6: 11:36:9d:d7:38:ea:ca:c9:9f:d1:11:73:92:e2:f6: 47:c3:5a:d8:bf:55:f7:bf:94:53:bf:d8:8b:63:a3: 4f:6e:77:be:2b:b1:c5:9b:b0:77:bf:ca:da:15:94: 6d:69:dc:35:02:74:71:60:ed:59:55:a0:d0:ce:c5: 07:b6:78:fa:5c:04:9e:a1:84:ab:e2:d5:5b:df:7e: 79:4c:46:f7:a2:86:6b:a1:df:91:a2:09:a4:3c:a7: 29:2e:aa:af:bf:5a:d1:48:42:80:8f:2d:75:dc:8e: ad:2a:4d:c0:3c:f1:6b:75:3b:44:53:77:f9:c3:71: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B2:8D:F3:59:04:EE:11:54:74:92:EA:97:AA:A6:07:62:F3:FD:75 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/382f8748-e942-4340-ab8e-19643c19d885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.7.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:46:09:30:b0:54:f2:00:37:33:00:ad:05:8c:da:32:c6:02: da:d5:d8:ff:74:49:b7:0c:61:a3:77:1b:e3:6b:04:f2:23:78: c0:57:ec:f9:8d:75:79:4d:9b:19:df:39:78:c7:71:61:0c:bc: cc:f3:a9:b0:29:07:2c:19:f2:90:30:54:d9:1b:ec:71:a1:a0: db:ea:c4:ce:92:06:1e:3d:1e:c6:e9:a8:ab:5e:e0:e1:b2:29: b5:c1:4e:a1:50:8c:ab:53:00:d0:93:14:7e:45:4f:35:ed:78: 16:52:63:46:43:ab:07:ff:c1:00:5f:94:54:91:b1:47:27:7c: cf:6d:3b:7d:83:08:9d:fd:a1:37:9d:93:ee:46:3e:a7:1c:14: 9f:1c:20:0e:47:2e:44:00:f6:f8:6a:f6:8b:da:2d:80:81:a7: e4:81:a8:ed:ef:ba:3c:17:1b:90:b0:52:64:4d:ef:32:eb:49: 50:5b:85:43:60:76:6b:0f:3a:a4:50:d5:76:f2:64:fb:7f:b7: 2a:56:10:76:9e:8c:ee:c2:c5:5e:99:6c:fa:ff:8c:36:2c:ba: f1:d3:5a:f2:cf:71:fd:b5:d0:6b:3b:a1:7e:43:37:cb:e3:59: 2e:51:83:80:1c:58:ee:14:d8:b8:08:da:bd:39:2a:ab:1a:20: ea:37:1b:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU9SbD4nVuqKU3ZkogIICAelkp40wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjEyMTUxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OGQ5ZTE2OTQwMWZiMGZjYWE2NzAyMDM0NmU1MDU0YTlh YzlhNjAxM2E3YThiNzMzNTc3NTdkZDU1NDUwZDI2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+D8llDrMLS73Dgh6If/6gh49hn96XzDkOBX/m9/UjOSgv Anh+1C94DSmkezODC6SgPZMf0WWPg0/Jp8xvBNhRRKjmziv3YwhkDny/uNGEKEKM t/6f+g1WeoQRkzEe3ZXaRlpkaQI+mcDexAtlh/8s9H2h8LOt+UkKu0iCt6AZQsMP gLD2thE2ndc46srJn9ERc5Li9kfDWti/Vfe/lFO/2Itjo09ud74rscWbsHe/ytoV lG1p3DUCdHFg7VlVoNDOxQe2ePpcBJ6hhKvi1VvffnlMRveihmuh35GiCaQ8pyku qq+/WtFIQoCPLXXcjq0qTcA88Wt1O0RTd/nDcZCbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx7KN81kE7hFUdJLql6qmB2Lz/XUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM4MmY4NzQ4LWU5NDItNDM0MC1hYjhlLTE5NjQzYzE5ZDg4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrwcwDQYJKoZIhvcNAQELBQADggEBAFxGCTCwVPIANzMArQWM2jLGAtrV 2P90SbcMYaN3G+NrBPIjeMBX7PmNdXlNmxnfOXjHcWEMvMzzqbApBywZ8pAwVNkb 7HGhoNvqxM6SBh49HsbpqKte4OGyKbXBTqFQjKtTANCTFH5FTzXteBZSY0ZDqwf/ wQBflFSRsUcnfM9tO32DCJ39oTedk+5GPqccFJ8cIA5HLkQA9vhq9ovaLYCBp+SB qO3vujwXG5CwUmRN7zLrSVBbhUNgdmsPOqRQ1XbyZPt/typWEHaejO7CxV6ZbPr/ jDYsuvHTWvLPcf210Gs7oX5DN8vjWS5Rg4AcWO4U2LgI2r05KqsaIOo3GyU= -----END CERTIFICATE-----Generated at Sat Oct 18 05:09:22 2025 by rpki-client