$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a13aabc-134f-4ee1-bee6-d797fbf6632d.roa File: 6a13aabc-134f-4ee1-bee6-d797fbf6632d.roa (raw, json) Hash identifier: ysYOTrAu2f0KMnK8H3wT1A/msLhtbJkrWwVCAokjWXA= Subject key identifier: 00:FF:9D:0F:24:5F:64:42:33:17:B7:19:05:3F:DE:17:99:AF:EC:8D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53CEBA41811DCCE0AC8015921AF9A56DEE373D61 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a13aabc-134f-4ee1-bee6-d797fbf6632d.roa Signing time: Fri 26 Sep 2025 00:33:14 +0000 ROA not before: Fri 26 Sep 2025 00:33:14 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ce:ba:41:81:1d:cc:e0:ac:80:15:92:1a:f9:a5:6d:ee:37:3d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:33:14 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=85da42e31e2302f0f9eaaa244f05910803173193c3fe3d649fb173c3ce599f15, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:5d:e8:1e:a2:86:ea:eb:eb:ca:82:74:a1: 95:9f:b8:da:ac:5f:29:ae:39:f8:d2:62:4a:fb:d6: 23:6a:d4:77:0e:d4:29:4e:63:cf:f1:2f:eb:60:16: ce:fe:66:c5:5e:01:99:48:ab:9d:71:80:43:01:3f: f7:14:df:b8:bc:93:fd:12:9b:f5:a9:d4:9e:4c:ca: ef:c8:77:f8:d4:c1:06:6f:2d:0c:b9:48:2f:ec:26: 6f:a7:59:4a:35:01:96:91:49:98:e2:2c:60:26:1d: 24:18:0c:80:7e:73:63:27:fc:27:84:6c:a1:94:1b: b1:ce:bb:cd:46:e8:c3:8b:5b:44:d3:d1:32:5e:2a: 98:e6:bd:5d:5f:63:9d:f6:69:14:05:85:08:c0:5c: b2:72:2b:0d:79:65:65:18:ff:dd:6c:67:cd:8d:3e: 16:55:83:53:c9:81:94:8e:83:c4:9f:a6:c1:0f:41: 6b:de:43:3d:46:e1:3e:8a:c4:a6:b6:c8:25:e5:a4: 9a:57:2e:1d:d4:d5:04:40:6a:89:d1:35:c9:1a:23: 93:5d:43:c0:b3:a1:31:c9:31:ec:80:f3:41:f7:81: 05:59:29:73:6c:62:1e:13:b6:a1:ae:db:df:7a:a8: 73:88:ae:6c:85:71:24:1d:c8:c7:6d:05:3c:aa:b6: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FF:9D:0F:24:5F:64:42:33:17:B7:19:05:3F:DE:17:99:AF:EC:8D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a13aabc-134f-4ee1-bee6-d797fbf6632d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.96.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:f5:fc:c1:b0:e3:94:27:23:a8:8a:33:08:72:8c:18:d5:88: 04:46:6f:ca:e4:50:46:8a:7c:7b:2a:ea:1e:4c:e2:13:d5:56: f3:33:4f:0e:6b:de:3f:81:a1:2d:c5:a8:5e:50:6a:9f:33:da: e8:2a:36:02:0b:70:c4:c1:7e:7e:04:78:21:02:9e:ce:e1:bd: 1e:11:73:97:e2:bf:6a:cf:d7:fb:37:83:a6:3b:c9:df:73:e5: cf:3e:03:b8:30:1c:95:91:e2:f3:fe:89:b1:ff:18:65:64:4f: 5a:57:1c:eb:fe:35:28:c7:45:7a:65:f8:1c:eb:ff:d2:5b:a1: 57:f5:c8:35:f6:7f:f8:8f:c8:85:a6:73:98:87:31:b8:8a:35: 44:7d:59:d7:51:53:93:d1:c1:2e:b6:2b:8e:f1:39:ae:bd:74: 55:4b:57:c1:86:7d:33:f2:56:9e:56:a4:f1:db:ba:ee:47:4c: ab:62:e9:16:7b:b5:a9:a9:f0:ea:4d:d6:c7:52:12:c1:f0:a3: d3:5d:0e:d8:41:90:b2:ab:61:e7:c3:03:5a:34:66:82:f5:7d: 37:0d:7c:2a:5d:9c:1d:21:f5:03:e4:ec:b8:d2:ec:35:fc:e8: 10:8d:79:0c:30:d2:41:19:19:33:bf:f8:c9:77:fb:90:8c:6d: 8c:4b:69:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU866QYEdzOCsgBWSGvmlbe43PWEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDAzMzE0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWRhNDJlMzFlMjMwMmYwZjllYWFhMjQ0ZjA1OTEwODAz MTczMTkzYzNmZTNkNjQ5ZmIxNzNjM2NlNTk5ZjE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyTl3oHqKG6uvryoJ0oZWfuNqsXymuOfjSYkr71iNq1HcO 1ClOY8/xL+tgFs7+ZsVeAZlIq51xgEMBP/cU37i8k/0Sm/Wp1J5Myu/Id/jUwQZv LQy5SC/sJm+nWUo1AZaRSZjiLGAmHSQYDIB+c2Mn/CeEbKGUG7HOu81G6MOLW0TT 0TJeKpjmvV1fY532aRQFhQjAXLJyKw15ZWUY/91sZ82NPhZVg1PJgZSOg8SfpsEP QWveQz1G4T6KxKa2yCXlpJpXLh3U1QRAaonRNckaI5NdQ8CzoTHJMeyA80H3gQVZ KXNsYh4TtqGu2996qHOIrmyFcSQdyMdtBTyqttddAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAP+dDyRfZEIzF7cZBT/eF5mv7I0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZhMTNhYWJjLTEzNGYtNGVlMS1iZWU2LWQ3OTdmYmY2NjMyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDqGAwDQYJKoZIhvcNAQELBQADggEBAJ31/MGw45QnI6iKMwhyjBjViARG b8rkUEaKfHsq6h5M4hPVVvMzTw5r3j+BoS3FqF5Qap8z2ugqNgILcMTBfn4EeCEC ns7hvR4Rc5fiv2rP1/s3g6Y7yd9z5c8+A7gwHJWR4vP+ibH/GGVkT1pXHOv+NSjH RXpl+Bzr/9JboVf1yDX2f/iPyIWmc5iHMbiKNUR9WddRU5PRwS62K47xOa69dFVL V8GGfTPyVp5WpPHbuu5HTKti6RZ7tamp8OpN1sdSEsHwo9NdDthBkLKrYefDA1o0 ZoL1fTcNfCpdnB0h9QPk7LjS7DX86BCNeQww0kEZGTO/+Ml3+5CMbYxLabw= -----END CERTIFICATE-----Generated at Fri Oct 17 23:46:42 2025 by rpki-client