$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c128237-305d-40c8-90bd-a146b5d8bac3.roa File: 4c128237-305d-40c8-90bd-a146b5d8bac3.roa (raw, json) Hash identifier: m5CzrUrqo5NQgeipj/hf07YobC20xOOCJqahx+B+6YM= Subject key identifier: FD:47:33:25:08:85:09:E8:52:BC:A0:D5:F7:0C:E7:39:4C:68:6F:AB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2AE288729AD0CE4982EE2234C4F8CFA2E7142D5B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c128237-305d-40c8-90bd-a146b5d8bac3.roa Signing time: Thu 25 Sep 2025 23:40:10 +0000 ROA not before: Thu 25 Sep 2025 23:40:10 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e2:88:72:9a:d0:ce:49:82:ee:22:34:c4:f8:cf:a2:e7:14:2d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:40:10 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=048ceb11a908db167f2b7c3102e67e19305383e98ab5dd315c1dcbdea19d0143, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:17:a0:81:fd:91:c6:1b:07:34:9c:29:e2: 72:0d:22:70:cc:21:72:56:be:8e:0e:10:4e:2f:22: 99:51:22:bf:f5:3c:6e:5c:c7:2f:9a:70:da:87:7f: db:b5:79:a7:5e:c4:aa:a2:fc:15:94:ce:a0:9d:99: 44:07:34:ae:42:55:10:ea:a1:ac:e3:61:89:31:81: 2f:d7:b2:92:16:52:7c:1a:1e:3a:b8:f2:01:65:06: ff:5f:4f:50:c4:cb:d9:3f:f4:a0:4e:7d:e0:07:06: 19:97:05:38:23:43:bf:09:dd:38:72:b0:fc:66:9b: 4a:df:25:10:2e:4e:43:04:eb:b9:73:f7:67:58:3d: cc:31:c0:a8:72:ee:9e:11:f9:41:ab:ac:40:3b:49: 66:de:fb:e6:be:5b:5a:45:99:1f:0e:cf:83:1c:74: 59:8a:43:90:20:9e:9c:54:37:fc:1e:c7:61:46:25: 8a:62:4d:0b:b7:04:5c:69:d5:11:ba:eb:bd:18:28: 1f:22:67:07:38:bc:1c:9f:1e:06:a1:09:7d:da:be: 9c:19:88:bf:f1:00:d8:d1:f0:3f:45:f4:96:b1:63: 75:44:4c:bf:7e:98:34:a3:58:ad:85:29:dc:a1:d6: c4:01:af:fe:71:92:4d:87:d3:81:2b:aa:27:03:9b: ec:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:47:33:25:08:85:09:E8:52:BC:A0:D5:F7:0C:E7:39:4C:68:6F:AB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c128237-305d-40c8-90bd-a146b5d8bac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.62.0/23 Signature Algorithm: sha256WithRSAEncryption 52:49:1e:6c:0f:8b:ef:b9:51:6b:c2:cc:03:33:97:28:94:31: 1b:88:2a:0f:8c:36:84:42:78:1b:0e:9d:c4:f5:84:06:20:1e: 49:10:be:fe:0a:ab:5b:72:d3:69:df:b0:6d:6f:58:fc:9a:88: 65:19:31:b8:a5:fd:44:a1:3f:6b:4c:cb:0d:1a:1e:e8:06:81: f2:42:29:f4:de:35:b9:28:51:6e:2e:73:ab:74:0f:7c:ba:01: 32:bc:4a:69:bd:30:95:30:10:db:bc:1d:bd:23:4f:b5:1c:25: 7d:2b:3b:a9:93:b2:32:3e:97:aa:24:55:ca:93:7b:46:c9:d6: 21:e4:24:04:64:3a:7d:77:77:81:33:01:ef:b7:25:1f:a2:23: 1a:1b:cd:c3:93:e4:df:f7:99:73:dc:17:7e:36:2f:3f:ab:74: 37:bd:b4:bc:80:f1:69:f7:fe:55:29:9a:29:b5:90:1e:3f:55: 3c:2d:8b:61:75:c7:27:ff:15:6a:f2:ab:dc:56:5c:c0:5f:83: 14:e7:25:0e:d8:b5:8f:54:49:42:27:c0:cd:5a:a3:ca:02:23: fb:a2:81:49:39:ad:47:c3:14:29:87:72:7a:c8:74:e7:41:a9: bd:04:04:5e:29:4f:fa:6a:2c:6b:13:62:48:ca:e6:7e:30:5f: d7:f7:19:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKuKIcprQzkmC7iI0xPjPoucULVswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjM0MDEwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDhjZWIxMWE5MDhkYjE2N2YyYjdjMzEwMmU2N2UxOTMw NTM4M2U5OGFiNWRkMzE1YzFkY2JkZWExOWQwMTQzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0dheggf2RxhsHNJwp4nINInDMIXJWvo4OEE4vIplRIr/1 PG5cxy+acNqHf9u1eadexKqi/BWUzqCdmUQHNK5CVRDqoazjYYkxgS/XspIWUnwa Hjq48gFlBv9fT1DEy9k/9KBOfeAHBhmXBTgjQ78J3ThysPxmm0rfJRAuTkME67lz 92dYPcwxwKhy7p4R+UGrrEA7SWbe++a+W1pFmR8Oz4McdFmKQ5AgnpxUN/wex2FG JYpiTQu3BFxp1RG6670YKB8iZwc4vByfHgahCX3avpwZiL/xANjR8D9F9JaxY3VE TL9+mDSjWK2FKdyh1sQBr/5xkk2H04ErqicDm+ztAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/UczJQiFCehSvKDV9wznOUxob6swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjMTI4MjM3LTMwNWQtNDBjOC05MGJkLWExNDZiNWQ4YmFjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrj4wDQYJKoZIhvcNAQELBQADggEBAFJJHmwPi++5UWvCzAMzlyiUMRuI Kg+MNoRCeBsOncT1hAYgHkkQvv4Kq1ty02nfsG1vWPyaiGUZMbil/UShP2tMyw0a HugGgfJCKfTeNbkoUW4uc6t0D3y6ATK8Smm9MJUwENu8Hb0jT7UcJX0rO6mTsjI+ l6okVcqTe0bJ1iHkJARkOn13d4EzAe+3JR+iIxobzcOT5N/3mXPcF342Lz+rdDe9 tLyA8Wn3/lUpmim1kB4/VTwti2F1xyf/FWryq9xWXMBfgxTnJQ7YtY9USUInwM1a o8oCI/uigUk5rUfDFCmHcnrIdOdBqb0EBF4pT/pqLGsTYkjK5n4wX9f3GdQ= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:11 2025 by rpki-client