$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/457bcb7b-0dd7-4201-a1fd-066ee5adba87.roa File: 457bcb7b-0dd7-4201-a1fd-066ee5adba87.roa (raw, json) Hash identifier: n3MeOtfygzOSIoWEJsZtyquMzoFx0udAi80pcRjw97U= Subject key identifier: E6:AC:96:E0:9F:1E:BC:69:B2:83:00:B7:5E:11:43:8A:9A:9B:F4:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 272938DA6F4ED33DFA4360D2687FC56461693021 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/457bcb7b-0dd7-4201-a1fd-066ee5adba87.roa Signing time: Thu 25 Sep 2025 19:15:19 +0000 ROA not before: Thu 25 Sep 2025 19:15:19 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:29:38:da:6f:4e:d3:3d:fa:43:60:d2:68:7f:c5:64:61:69:30:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:15:19 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=efc7715545ca89bddce8e1916e19ef63b10a7bb96bc9289c826d78ea50ce3b52, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:59:fb:e3:5c:4a:f7:25:e8:b1:f3:28:9e: 79:34:89:1e:20:91:41:36:a5:3e:2c:76:7d:27:85: 8e:e6:d7:ee:29:86:32:3b:82:54:26:3e:fe:61:19: 7d:0e:69:78:d0:b4:93:9e:15:1c:8a:30:bc:52:ec: 37:eb:fb:e9:d6:3e:a7:91:2e:27:78:d6:8a:b3:d1: 37:98:ad:84:2b:08:f0:09:be:b6:31:ab:fa:89:a1: 37:34:7e:25:c0:29:3c:0d:26:19:48:f2:10:80:16: 03:bf:e3:e0:7c:a4:3d:cb:49:26:d0:92:e1:98:36: 0a:cf:75:22:e4:5c:79:03:1b:11:44:d5:ad:1b:8d: da:8a:73:a7:e0:ab:ed:93:e9:a5:5b:ed:02:36:9c: 8e:72:77:8c:b4:aa:3e:10:38:fd:1a:01:a2:fd:77: 23:6d:27:a8:69:62:e8:6f:57:bd:0c:63:91:71:2d: 18:00:02:62:27:c3:dc:98:4d:d3:21:4a:6c:12:9a: 4a:0c:6a:43:94:4c:aa:e1:98:ad:e6:5d:26:b9:20: b0:dd:95:0b:eb:24:76:00:ee:34:27:00:be:6a:44: f8:d9:c8:8a:5e:6d:96:cb:b0:f2:18:12:58:42:31: f3:ef:ba:4e:92:29:0f:0a:a3:22:34:73:a4:7a:c6: f4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AC:96:E0:9F:1E:BC:69:B2:83:00:B7:5E:11:43:8A:9A:9B:F4:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/457bcb7b-0dd7-4201-a1fd-066ee5adba87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.195.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:19:28:90:29:51:bc:7f:58:91:26:6c:b7:9c:2e:9a:89:a2: 70:9c:38:b4:15:45:b5:22:8e:51:0d:5f:11:9f:67:90:4f:87: 37:df:11:a9:ea:50:05:ed:8f:94:ba:d9:73:5c:30:d4:73:b8: 61:1d:46:47:84:9a:f8:f0:46:47:08:3a:56:77:96:41:7e:38: c2:df:b5:5b:d1:f7:96:fa:18:a0:4d:a6:b3:0a:3d:60:f6:ee: 06:55:1c:ab:6f:1d:8a:01:a7:16:7a:b4:7a:35:7f:39:92:ac: 98:d7:6d:0e:02:96:e4:ee:aa:fb:95:c7:31:96:30:13:89:15: e5:3f:cc:b2:ce:24:ab:0d:b3:b4:e1:2d:ee:ff:37:93:e4:1e: 28:6c:9f:9e:ef:4c:c3:82:07:de:ae:7b:c4:3a:ef:83:db:d0: 5c:a5:4d:bd:91:3f:8d:9d:dc:58:ee:9d:16:65:cc:8b:5e:4e: 56:2f:e4:0b:58:91:42:e4:df:43:e9:d3:d1:32:c7:b6:02:f7: 25:69:bd:4a:9b:3f:4c:55:31:13:1a:e4:08:fa:a5:0c:a6:94: c7:c8:6a:b4:24:56:0c:ff:23:35:f9:34:ac:a4:ce:07:d7:e0: 8e:b2:2c:de:e7:d5:7d:dc:50:df:34:25:fb:83:e2:ad:ff:a6: 44:66:f5:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJyk42m9O0z36Q2DSaH/FZGFpMCEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkxNTE5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmM3NzE1NTQ1Y2E4OWJkZGNlOGUxOTE2ZTE5ZWY2M2Ix MGE3YmI5NmJjOTI4OWM4MjZkNzhlYTUwY2UzYjUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1Nln741xK9yXosfMonnk0iR4gkUE2pT4sdn0nhY7m1+4p hjI7glQmPv5hGX0OaXjQtJOeFRyKMLxS7Dfr++nWPqeRLid41oqz0TeYrYQrCPAJ vrYxq/qJoTc0fiXAKTwNJhlI8hCAFgO/4+B8pD3LSSbQkuGYNgrPdSLkXHkDGxFE 1a0bjdqKc6fgq+2T6aVb7QI2nI5yd4y0qj4QOP0aAaL9dyNtJ6hpYuhvV70MY5Fx LRgAAmInw9yYTdMhSmwSmkoMakOUTKrhmK3mXSa5ILDdlQvrJHYA7jQnAL5qRPjZ yIpebZbLsPIYElhCMfPvuk6SKQ8KoyI0c6R6xvRXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5qyW4J8evGmygwC3XhFDipqb9EkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ1N2JjYjdiLTBkZDctNDIwMS1hMWZkLTA2NmVlNWFkYmE4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqMMwDQYJKoZIhvcNAQELBQADggEBAB4ZKJApUbx/WJEmbLecLpqJonCc OLQVRbUijlENXxGfZ5BPhzffEanqUAXtj5S62XNcMNRzuGEdRkeEmvjwRkcIOlZ3 lkF+OMLftVvR95b6GKBNprMKPWD27gZVHKtvHYoBpxZ6tHo1fzmSrJjXbQ4CluTu qvuVxzGWMBOJFeU/zLLOJKsNs7ThLe7/N5PkHihsn57vTMOCB96ue8Q674Pb0Fyl Tb2RP42d3FjunRZlzIteTlYv5AtYkULk30Pp09Eyx7YC9yVpvUqbP0xVMRMa5Aj6 pQymlMfIarQkVgz/IzX5NKykzgfX4I6yLN7n1X3cUN80JfuD4q3/pkRm9XY= -----END CERTIFICATE-----Generated at Fri Oct 17 22:14:56 2025 by rpki-client