$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f85329a-2806-4440-b14f-3f732ddbacd7.roa File: 5f85329a-2806-4440-b14f-3f732ddbacd7.roa (raw, json) Hash identifier: WwyMv9DXNv+C8+LnlHWmO/F/nZblB1lrP5yXxmmxgME= Subject key identifier: C0:34:D9:95:9E:B3:8C:23:4F:A9:87:9D:61:9D:47:F1:39:FC:B7:E4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 15E260FC19BD96688607F280EF63D4FAE8C23908 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f85329a-2806-4440-b14f-3f732ddbacd7.roa Signing time: Thu 25 Sep 2025 19:09:52 +0000 ROA not before: Thu 25 Sep 2025 19:09:52 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e2:60:fc:19:bd:96:68:86:07:f2:80:ef:63:d4:fa:e8:c2:39:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:09:52 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=88927bf15f309633ee9679a44e4001c08465a8a6678af1e725bcef8652530250, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:d9:0e:7c:0f:32:c6:fa:a8:f2:0b:9f:7d: 39:ac:eb:c9:ee:01:88:3c:64:3e:4f:43:f9:9a:b1: 24:fe:04:a5:b2:46:c5:f2:7f:c0:46:2a:c9:5e:3e: 9d:a6:2e:9a:bb:0e:7b:15:2d:66:42:9e:b4:26:62: ab:e1:a3:81:3b:42:fe:76:47:fd:89:f6:09:7f:ca: 78:62:dd:cf:d3:3e:3d:28:ef:03:e8:37:f7:79:c5: 1c:9b:cc:9b:38:37:02:fd:0d:1d:e9:36:8c:6e:14: 95:f3:55:2d:bf:c4:a9:64:26:2c:29:fb:a6:a8:05: 4c:86:e2:f1:d7:d8:45:c9:36:e5:f5:5c:24:5a:b1: 36:cb:a8:44:66:a6:58:17:0d:6d:c7:b3:f7:0d:21: 31:c5:28:06:a0:89:0d:f2:4d:b7:4a:75:e1:3b:a2: 59:a9:e6:77:39:df:00:25:df:4e:54:ec:16:c1:87: 51:af:c7:75:94:72:bc:86:ae:6a:3a:c1:1d:83:33: 5b:60:12:97:0f:a5:a9:d5:d7:c1:45:bb:87:39:d3: 27:64:93:44:1a:74:ba:4b:6e:4d:25:0c:2e:de:e0: 4a:5f:2e:ab:06:e9:b1:4c:2e:0c:e9:c1:62:a1:77: cf:1f:01:f8:ee:4f:9b:0d:2a:68:36:1c:59:8b:6f: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:34:D9:95:9E:B3:8C:23:4F:A9:87:9D:61:9D:47:F1:39:FC:B7:E4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f85329a-2806-4440-b14f-3f732ddbacd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.123.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:f8:52:a3:31:b7:21:ab:5c:e1:1e:e5:e2:8e:b3:ca:97:74: 70:e0:e4:4c:fe:ca:f5:00:9b:01:be:40:2b:94:b4:e3:c6:b6: ef:84:76:8f:5f:61:ff:3b:ae:85:3c:e5:b7:1b:0a:b4:b4:a1: 3b:af:9d:0e:68:dc:27:40:67:4c:2f:84:20:9c:ea:74:c9:5d: fc:06:4f:0f:9d:77:08:6a:7d:f5:97:ae:e0:4f:b4:e0:a9:81: 2c:d2:3f:47:41:e7:a0:9d:75:ca:ad:fd:9a:f3:86:31:7a:94: 43:42:b3:f1:44:6f:b4:0c:90:38:b5:d3:e8:bc:15:44:10:e4: aa:ae:da:33:5b:f1:33:ef:8e:26:cf:3b:21:18:53:f7:62:89: af:a0:1b:2b:f9:37:58:d6:c3:11:d1:e6:4b:c3:58:a2:b2:b8: 95:f9:b3:f9:cb:fa:1c:11:04:cc:d8:fc:b6:47:e4:0d:8c:50: d1:86:0e:01:ab:98:76:f5:eb:56:fe:31:48:02:c9:bd:71:12: c7:56:64:50:70:0c:b4:f9:59:23:6d:9f:a9:c6:20:b7:24:a6: 61:da:d2:cd:74:ae:8c:e8:8b:50:9d:2b:a2:0a:18:49:bd:13: d0:38:ae:b6:0e:27:a7:ed:75:99:27:f1:9f:c2:c8:0b:63:1f: 29:ad:3d:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFeJg/Bm9lmiGB/KA72PU+ujCOQgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkwOTUyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODkyN2JmMTVmMzA5NjMzZWU5Njc5YTQ0ZTQwMDFjMDg0 NjVhOGE2Njc4YWYxZTcyNWJjZWY4NjUyNTMwMjUwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGYNkOfA8yxvqo8guffTms68nuAYg8ZD5PQ/masST+BKWy RsXyf8BGKslePp2mLpq7DnsVLWZCnrQmYqvho4E7Qv52R/2J9gl/ynhi3c/TPj0o 7wPoN/d5xRybzJs4NwL9DR3pNoxuFJXzVS2/xKlkJiwp+6aoBUyG4vHX2EXJNuX1 XCRasTbLqERmplgXDW3Hs/cNITHFKAagiQ3yTbdKdeE7olmp5nc53wAl305U7BbB h1Gvx3WUcryGrmo6wR2DM1tgEpcPpanV18FFu4c50ydkk0QadLpLbk0lDC7e4Epf LqsG6bFMLgzpwWKhd88fAfjuT5sNKmg2HFmLb7K9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwDTZlZ6zjCNPqYedYZ1H8Tn8t+QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVmODUzMjlhLTI4MDYtNDQ0MC1iMTRmLTNmNzMyZGRiYWNkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqHswDQYJKoZIhvcNAQELBQADggEBABr4UqMxtyGrXOEe5eKOs8qXdHDg 5Ez+yvUAmwG+QCuUtOPGtu+Edo9fYf87roU85bcbCrS0oTuvnQ5o3CdAZ0wvhCCc 6nTJXfwGTw+ddwhqffWXruBPtOCpgSzSP0dB56Cddcqt/ZrzhjF6lENCs/FEb7QM kDi10+i8FUQQ5Kqu2jNb8TPvjibPOyEYU/diia+gGyv5N1jWwxHR5kvDWKKyuJX5 s/nL+hwRBMzY/LZH5A2MUNGGDgGrmHb161b+MUgCyb1xEsdWZFBwDLT5WSNtn6nG ILckpmHa0s10rozoi1CdK6IKGEm9E9A4rrYOJ6ftdZkn8Z/CyAtjHymtPdk= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:22 2025 by rpki-client