$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c9d8a9a-9007-4c6b-8854-88dc727d35b7.roa File: 3c9d8a9a-9007-4c6b-8854-88dc727d35b7.roa (raw, json) Hash identifier: 0TxMKGM6z04XWzXzcCHhUUCsEmMz5HljpKk+ZKAIM4w= Subject key identifier: 79:F9:69:17:E4:04:4D:C8:01:33:56:43:B1:33:FB:66:26:A9:81:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D328A52BB79428201B5353B8A9631BE96AE182B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c9d8a9a-9007-4c6b-8854-88dc727d35b7.roa Signing time: Fri 26 Sep 2025 02:31:59 +0000 ROA not before: Fri 26 Sep 2025 02:31:59 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:32:8a:52:bb:79:42:82:01:b5:35:3b:8a:96:31:be:96:ae:18:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:31:59 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=72163df1eb933aac407eac08edd5a70da00d28068540fb2bb6a8c367f4de7534, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:ac:a5:62:a3:19:3e:7c:21:3a:6a:7f:8d: 99:16:f9:d7:03:d1:4b:ce:df:8e:38:e0:c5:5f:4a: 13:29:8c:ad:d8:f1:a6:60:e2:8a:ff:45:21:11:1f: 66:06:97:e1:ca:13:49:a2:7a:1f:15:6b:e0:c3:cb: 9d:07:5b:7b:31:f2:c2:e7:2d:90:04:65:c2:26:96: 05:c4:de:d9:fd:53:10:06:f4:dc:6e:55:dc:dc:f5: 32:1a:3a:bc:ba:59:0b:af:0f:0b:7e:38:c8:18:9b: f5:83:fd:f9:94:92:90:80:63:8d:59:39:9c:bf:28: 8f:5c:a9:cf:26:5e:dd:e8:94:06:dc:40:23:fb:ea: 27:38:bc:34:86:62:0d:0b:8d:3c:7d:61:28:10:9e: b4:c6:df:f2:5b:63:c4:0b:97:e7:a8:2f:61:94:17: b2:e2:bb:a6:2c:cf:0a:88:3b:86:ff:76:10:6f:63: 88:cc:36:bc:38:af:c3:fc:6c:76:19:8d:6a:1f:2f: da:35:2c:8d:02:4c:e3:80:a6:a0:57:cb:e3:d8:26: a4:f5:da:6b:0d:77:78:46:4e:2e:2b:63:c6:3d:c2: c9:81:a1:4f:e5:cf:0e:a2:9e:b0:36:12:1a:e6:e9: 89:d1:c3:0e:b2:8d:00:d5:fc:27:4b:78:a5:7c:6e: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F9:69:17:E4:04:4D:C8:01:33:56:43:B1:33:FB:66:26:A9:81:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c9d8a9a-9007-4c6b-8854-88dc727d35b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.3.0/24 Signature Algorithm: sha256WithRSAEncryption aa:99:68:ef:40:bd:3f:ad:19:cd:e8:11:08:e0:91:87:c8:9a: 5d:54:1f:64:cf:08:de:38:47:1e:fc:05:4b:a6:a1:22:c0:92: 8c:02:f1:04:50:e2:9b:40:bc:16:6f:ac:81:66:6d:f7:69:ce: de:c8:fd:45:87:0a:16:e1:5f:47:4e:a3:bd:f9:9c:de:a4:9f: 36:8f:0d:e0:ad:b3:67:46:01:b9:a8:ed:c3:10:0e:c9:8a:b6: 0b:0b:2e:1c:05:55:35:a8:c4:1f:f0:46:d0:93:08:31:43:d6: e7:70:83:f1:56:41:e5:db:dc:dd:d5:2e:9e:40:69:f7:50:8c: 80:15:e3:82:1f:94:e8:12:fc:59:41:9a:39:37:8a:28:f9:fc: a6:f4:cf:41:ac:ea:3e:42:86:97:ee:d9:db:9f:91:16:96:a2: df:9e:6a:b7:9e:8d:d4:c2:49:31:18:7f:5b:40:4a:b0:de:9a: cc:44:bb:a8:9d:95:4b:42:9e:e4:42:25:a5:49:67:ef:ef:39: 44:80:21:12:41:a8:e1:54:63:61:fc:37:6c:fd:56:5c:62:97: 95:3c:cf:3c:7e:2b:7f:7a:4c:33:ad:e1:03:4d:d0:42:64:91: 94:40:c5:88:97:be:97:eb:a0:1a:2d:f8:fd:09:ec:04:44:ca: 7a:84:2f:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPTKKUrt5QoIBtTU7ipYxvpauGCswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIzMTU5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjE2M2RmMWViOTMzYWFjNDA3ZWFjMDhlZGQ1YTcwZGEw MGQyODA2ODU0MGZiMmJiNmE4YzM2N2Y0ZGU3NTM0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxaKylYqMZPnwhOmp/jZkW+dcD0UvO34444MVfShMpjK3Y 8aZg4or/RSERH2YGl+HKE0mieh8Va+DDy50HW3sx8sLnLZAEZcImlgXE3tn9UxAG 9NxuVdzc9TIaOry6WQuvDwt+OMgYm/WD/fmUkpCAY41ZOZy/KI9cqc8mXt3olAbc QCP76ic4vDSGYg0LjTx9YSgQnrTG3/JbY8QLl+eoL2GUF7Liu6YszwqIO4b/dhBv Y4jMNrw4r8P8bHYZjWofL9o1LI0CTOOApqBXy+PYJqT12msNd3hGTi4rY8Y9wsmB oU/lzw6inrA2Ehrm6YnRww6yjQDV/CdLeKV8blVtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeflpF+QETcgBM1ZDsTP7ZiapgYkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNjOWQ4YTlhLTkwMDctNGM2Yi04ODU0LTg4ZGM3MjdkMzViNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA25gMwDQYJKoZIhvcNAQELBQADggEBAKqZaO9AvT+tGc3oEQjgkYfIml1U H2TPCN44Rx78BUumoSLAkowC8QRQ4ptAvBZvrIFmbfdpzt7I/UWHChbhX0dOo735 nN6knzaPDeCts2dGAbmo7cMQDsmKtgsLLhwFVTWoxB/wRtCTCDFD1udwg/FWQeXb 3N3VLp5AafdQjIAV44IflOgS/FlBmjk3iij5/Kb0z0Gs6j5Chpfu2dufkRaWot+e areejdTCSTEYf1tASrDemsxEu6idlUtCnuRCJaVJZ+/vOUSAIRJBqOFUY2H8N2z9 Vlxil5U8zzx+K396TDOt4QNN0EJkkZRAxYiXvpfroBot+P0J7AREynqEL90= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:53 2025 by rpki-client