$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/387a69d7-58e2-431c-af3e-acd93001d090.roa File: 387a69d7-58e2-431c-af3e-acd93001d090.roa (raw, json) Hash identifier: 0KrOfp7W5XWopMEhX9LZKJAKg2Ii/zJuxDapALPc91M= Subject key identifier: 9D:DB:9E:9F:2E:5D:1C:1C:9A:68:8E:71:9B:FE:DE:5B:BB:C4:4B:DE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3205CA20E9E9AE1D742A293719161B015A0B4881 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/387a69d7-58e2-431c-af3e-acd93001d090.roa Signing time: Thu 25 Sep 2025 23:29:40 +0000 ROA not before: Thu 25 Sep 2025 23:29:40 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:05:ca:20:e9:e9:ae:1d:74:2a:29:37:19:16:1b:01:5a:0b:48:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:29:40 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=47b439169c608e9f5c7ad329f1c25b7a150c4e70f4ecd31e1b95e4a0f25b4da4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:59:d0:fc:bc:a7:43:e5:b3:42:b9:e1:ea:a2: 13:c9:3f:52:48:39:91:82:13:31:65:ec:2b:99:58: 2e:b6:2b:bb:40:bf:21:55:e4:67:1c:74:31:1b:82: a8:07:24:94:b4:7f:3b:e0:b5:e0:e3:66:dc:85:c0: a4:56:d0:9a:1e:29:51:2b:f9:26:90:cc:7b:8f:d5: 8a:75:38:b4:f0:3b:0a:77:6e:19:29:a4:8b:95:2d: 89:14:07:04:27:4a:18:e2:e6:02:07:e4:39:61:e9: dc:44:52:21:2e:c7:61:27:62:28:61:11:a0:ff:45: 9d:5b:6f:70:92:a9:83:06:3b:80:10:22:ec:3f:98: 1f:76:71:d5:1d:18:1d:cb:2b:72:08:10:d3:2a:e0: d1:3b:af:40:8d:16:7a:a5:5d:54:9f:a5:7d:87:b8: 31:71:a0:b6:12:af:a3:89:99:bd:23:b6:00:79:2e: 8a:4a:31:d7:50:8c:d5:bf:da:4f:9f:3a:75:7c:29: 91:1d:ed:8e:84:46:a9:94:ae:93:14:cd:72:01:bc: 05:f3:50:8b:9f:46:94:38:76:d2:77:e9:98:13:3b: be:37:0c:bc:77:45:89:58:8a:26:da:5c:a7:e0:e7: d8:b4:97:c1:db:46:1b:86:3b:bf:69:3a:fb:3e:64: 74:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DB:9E:9F:2E:5D:1C:1C:9A:68:8E:71:9B:FE:DE:5B:BB:C4:4B:DE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/387a69d7-58e2-431c-af3e-acd93001d090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.56.0/23 Signature Algorithm: sha256WithRSAEncryption 52:73:4f:fd:05:92:3f:f5:ab:d8:3c:c7:37:0b:90:8f:d7:51: 35:cd:d5:8b:a7:f9:98:eb:03:d4:41:cb:87:de:2b:c8:5d:66: 39:6d:b5:23:4e:96:f5:6f:f7:4e:65:fb:3b:69:71:97:db:10: b3:17:57:83:3e:4b:d4:e0:cb:84:34:af:27:a6:83:7f:7a:2f: 99:e7:ea:76:f1:e0:2c:90:ab:3d:06:77:9a:8d:03:9b:5b:ea: 48:a3:5d:75:68:d0:01:cb:a6:7d:d1:b9:45:8c:67:f3:20:57: 54:6f:cd:a9:b1:20:41:37:db:8f:8b:82:7d:4d:72:c7:e9:32: e4:33:3f:8b:c0:36:9a:43:1c:e9:f4:57:d6:23:d8:00:8a:49: a1:d3:8f:df:0a:ba:a0:ae:5a:02:63:da:4e:44:c6:c3:a6:8f: 27:83:cd:f8:ba:fc:67:22:db:61:a8:bc:72:2e:28:c4:15:50: bf:4a:73:9d:7f:38:86:05:82:91:09:f3:80:fa:33:d6:32:79: 02:ca:be:b9:b9:93:0c:58:e2:50:c6:f1:8a:65:ef:6a:eb:f4: 88:5c:17:ea:b8:0a:a5:b0:8c:a1:f4:4f:2f:68:ce:4e:24:35: 5f:81:6a:8a:57:4f:98:38:8f:36:52:92:b4:6c:ed:6c:cc:6b: 01:da:cb:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMgXKIOnprh10Kik3GRYbAVoLSIEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMyOTQwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2I0MzkxNjljNjA4ZTlmNWM3YWQzMjlmMWMyNWI3YTE1 MGM0ZTcwZjRlY2QzMWUxYjk1ZTRhMGYyNWI0ZGE0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiWdD8vKdD5bNCueHqohPJP1JIOZGCEzFl7CuZWC62K7tA vyFV5GccdDEbgqgHJJS0fzvgteDjZtyFwKRW0JoeKVEr+SaQzHuP1Yp1OLTwOwp3 bhkppIuVLYkUBwQnShji5gIH5Dlh6dxEUiEux2EnYihhEaD/RZ1bb3CSqYMGO4AQ Iuw/mB92cdUdGB3LK3IIENMq4NE7r0CNFnqlXVSfpX2HuDFxoLYSr6OJmb0jtgB5 LopKMddQjNW/2k+fOnV8KZEd7Y6ERqmUrpMUzXIBvAXzUIufRpQ4dtJ36ZgTO743 DLx3RYlYiibaXKfg59i0l8HbRhuGO79pOvs+ZHSdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUndueny5dHByaaI5xm/7eW7vES94wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM4N2E2OWQ3LTU4ZTItNDMxYy1hZjNlLWFjZDkzMDAxZDA5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrTgwDQYJKoZIhvcNAQELBQADggEBAFJzT/0Fkj/1q9g8xzcLkI/XUTXN 1Yun+ZjrA9RBy4feK8hdZjlttSNOlvVv905l+ztpcZfbELMXV4M+S9Tgy4Q0ryem g396L5nn6nbx4CyQqz0Gd5qNA5tb6kijXXVo0AHLpn3RuUWMZ/MgV1RvzamxIEE3 24+Lgn1NcsfpMuQzP4vANppDHOn0V9Yj2ACKSaHTj98KuqCuWgJj2k5ExsOmjyeD zfi6/Gci22GovHIuKMQVUL9Kc51/OIYFgpEJ84D6M9YyeQLKvrm5kwxY4lDG8Ypl 72rr9IhcF+q4CqWwjKH0Ty9ozk4kNV+BaopXT5g4jzZSkrRs7WzMawHay6o= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:30 2025 by rpki-client