$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65cc11fb-104e-4eea-92f2-1ddc6e8ecb98.roa File: 65cc11fb-104e-4eea-92f2-1ddc6e8ecb98.roa (raw, json) Hash identifier: 62jXHaZXGdwyz3p2dFh3oIQfbztUm3Y6LBcoGlYNHfA= Subject key identifier: 4B:FF:2D:DC:6B:C2:45:6E:BA:13:FD:45:F9:6C:31:C2:B2:E9:67:F1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20B8A3F3AE090C4DDF1C6C01E02389582BC99DDA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65cc11fb-104e-4eea-92f2-1ddc6e8ecb98.roa Signing time: Fri 26 Sep 2025 01:02:12 +0000 ROA not before: Fri 26 Sep 2025 01:02:12 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b8:a3:f3:ae:09:0c:4d:df:1c:6c:01:e0:23:89:58:2b:c9:9d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:02:12 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=47a580bf783106d86f0fb8126e7fb338d7f3d59888390b1ad9a91305a3eae6b4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:46:71:35:20:b4:08:31:66:7a:6b:aa:eb: 8f:97:cf:5a:78:d7:09:16:92:c0:b5:0b:fd:b3:0a: 04:97:1f:1c:36:e0:a9:5f:59:07:04:36:1a:da:59: 65:70:8c:d9:44:4c:10:89:12:c8:89:a1:68:2d:e3: 48:ef:db:4a:58:dd:1e:66:0e:a7:9e:8d:a4:fd:73: e8:4d:9c:f4:8f:61:43:95:22:db:58:fd:94:a5:f4: 46:27:80:5d:48:34:1e:dc:d4:f5:a4:f7:bc:1c:f6: 08:2b:d4:cc:c5:cc:d6:4b:14:07:0d:0f:90:93:cb: 96:97:3e:95:21:43:6b:8f:00:dc:a9:0f:77:a0:e9: f5:d3:51:ce:91:e2:d9:87:6b:87:41:46:a0:b7:94: 63:5e:78:59:f0:c0:c1:c1:2f:82:46:25:aa:94:1c: 2a:75:ac:3d:b0:b2:88:a4:8e:6f:2d:db:97:bb:c2: 91:85:e6:c8:e1:a6:4e:4d:d7:41:c5:ca:e1:22:87: a6:58:8e:9b:31:1f:a6:5f:5d:12:51:23:62:26:41: d9:d5:8b:17:b0:eb:8c:0e:da:5a:48:3d:a0:4e:b4: f4:65:4f:d2:e9:71:c9:24:b3:09:02:7b:67:66:83: 36:9e:c3:7a:d4:56:49:89:98:fa:ca:35:81:8f:fd: 6a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FF:2D:DC:6B:C2:45:6E:BA:13:FD:45:F9:6C:31:C2:B2:E9:67:F1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65cc11fb-104e-4eea-92f2-1ddc6e8ecb98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.20.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:7e:f4:ec:f3:91:09:60:2f:9d:96:6e:98:de:0c:8a:7b:ef: 06:17:f2:b0:56:9e:0a:b9:78:cb:4b:de:c3:cb:ee:c2:7c:54: 01:17:39:c5:c7:36:09:d4:39:cd:e3:40:94:71:0b:76:ff:10: 34:77:b0:c1:5d:9d:c4:d1:0d:16:6b:80:ab:3b:60:a8:ae:92: 9a:34:0a:cb:8e:ec:ce:ba:d8:15:c8:c7:99:6d:66:6a:a8:39: 9b:ec:b6:ca:66:d4:97:01:00:3a:c3:aa:c0:7a:c1:72:5c:47: 1a:09:84:79:c4:10:1b:16:a4:75:15:52:f0:00:8d:c9:d8:54: ce:a8:85:70:72:64:b3:71:8c:b8:cd:8d:36:39:6b:89:5d:9d: 19:bb:2e:af:d5:f7:58:6f:dc:4b:2a:9f:79:57:26:44:26:9e: 40:44:5e:9f:ae:49:e4:de:ec:3f:f2:0d:f3:2b:58:8b:20:16: ec:1f:3b:23:1e:cc:da:70:a1:34:1a:17:2a:df:6a:e3:1c:0c: db:96:11:1c:54:af:eb:9a:55:1b:54:74:eb:e5:bd:bb:64:2e: 9b:99:35:2b:51:17:54:a5:36:57:41:e7:da:06:57:f8:09:1e: b7:f3:99:1d:96:bb:20:63:3b:01:40:56:c2:1c:0a:71:c5:e1: ae:96:dd:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUILij864JDE3fHGwB4COJWCvJndowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEwMjEyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2E1ODBiZjc4MzEwNmQ4NmYwZmI4MTI2ZTdmYjMzOGQ3 ZjNkNTk4ODgzOTBiMWFkOWE5MTMwNWEzZWFlNmI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmbEZxNSC0CDFmemuq64+Xz1p41wkWksC1C/2zCgSXHxw2 4KlfWQcENhraWWVwjNlETBCJEsiJoWgt40jv20pY3R5mDqeejaT9c+hNnPSPYUOV IttY/ZSl9EYngF1INB7c1PWk97wc9ggr1MzFzNZLFAcND5CTy5aXPpUhQ2uPANyp D3eg6fXTUc6R4tmHa4dBRqC3lGNeeFnwwMHBL4JGJaqUHCp1rD2wsoikjm8t25e7 wpGF5sjhpk5N10HFyuEih6ZYjpsxH6ZfXRJRI2ImQdnVixew64wO2lpIPaBOtPRl T9LpcckkswkCe2dmgzaew3rUVkmJmPrKNYGP/WptAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS/8t3GvCRW66E/1F+WwxwrLpZ/EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY1Y2MxMWZiLTEwNGUtNGVlYS05MmYyLTFkZGM2ZThlY2I5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDrxQwDQYJKoZIhvcNAQELBQADggEBAB1+9OzzkQlgL52WbpjeDIp77wYX 8rBWngq5eMtL3sPL7sJ8VAEXOcXHNgnUOc3jQJRxC3b/EDR3sMFdncTRDRZrgKs7 YKiukpo0CsuO7M662BXIx5ltZmqoOZvstspm1JcBADrDqsB6wXJcRxoJhHnEEBsW pHUVUvAAjcnYVM6ohXByZLNxjLjNjTY5a4ldnRm7Lq/V91hv3Esqn3lXJkQmnkBE Xp+uSeTe7D/yDfMrWIsgFuwfOyMezNpwoTQaFyrfauMcDNuWERxUr+uaVRtUdOvl vbtkLpuZNStRF1SlNldB59oGV/gJHrfzmR2WuyBjOwFAVsIcCnHF4a6W3a4= -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:20 2025 by rpki-client