$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d47b02e-f1d1-4373-8b2e-5aa7940561a8.roa File: 6d47b02e-f1d1-4373-8b2e-5aa7940561a8.roa (raw, json) Hash identifier: UrsQWlLYKXlRtoaz2q1d98fUiWLo8Bd/VDWkLBySAKw= Subject key identifier: 3A:C9:85:20:39:6D:AE:7E:1A:C6:65:DA:D3:07:20:83:0F:33:66:CD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 74DB9FFBFB922CAFF210769DE70AC881B7A5C757 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d47b02e-f1d1-4373-8b2e-5aa7940561a8.roa Signing time: Thu 25 Sep 2025 19:24:33 +0000 ROA not before: Thu 25 Sep 2025 19:24:33 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:db:9f:fb:fb:92:2c:af:f2:10:76:9d:e7:0a:c8:81:b7:a5:c7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:24:33 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=ce1f53ccf8793a3e37a410335ef5881c2a01b570bc314cd3f1f2d2287c1660e8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a3:85:f6:9d:6e:8e:b0:b1:c2:fa:57:8f:2e: e3:6d:fc:a3:93:21:fb:27:9e:f4:ea:ee:7c:67:35: 89:d8:d1:77:37:b8:23:f1:55:41:66:c1:1c:89:ee: 01:75:fc:df:2a:d6:2a:24:30:12:de:2d:50:aa:64: 1d:75:96:5a:0c:04:fb:a2:25:f5:42:c4:9e:06:05: 7d:bd:51:e2:dc:3a:ba:ee:04:40:d2:92:b9:2d:c1: ac:95:da:01:ff:2b:83:e2:09:b9:1e:14:4b:f1:2d: cf:cf:3b:50:c0:68:7c:66:d5:f0:7b:d2:73:be:5b: ce:a5:06:79:f5:d8:9a:42:07:9e:d6:00:74:af:b0: 76:13:00:05:5a:93:01:07:1e:96:0f:03:d7:53:15: 08:d0:12:9a:2f:03:f7:87:50:d8:9f:86:34:cd:7f: 55:e1:eb:2b:0b:e3:4f:d2:c9:13:3c:0d:36:f5:3c: 60:87:9d:88:7c:bc:a4:be:fe:4e:3f:77:ae:ea:92: 73:87:27:55:83:fa:07:d1:eb:9c:8c:3d:9d:19:5c: d8:c0:40:c4:ff:b4:a0:9f:a0:0d:9d:62:62:02:6d: 1c:8c:36:aa:fe:b0:4a:62:99:4f:63:86:70:64:48: 01:a8:9b:4b:01:4b:c9:d6:88:8b:91:bd:a7:00:79: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C9:85:20:39:6D:AE:7E:1A:C6:65:DA:D3:07:20:83:0F:33:66:CD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d47b02e-f1d1-4373-8b2e-5aa7940561a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.66.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:f6:dd:cc:0b:e5:9b:62:d2:c0:55:60:54:e1:87:53:ae:26: 1a:91:df:de:f1:ec:37:3f:e0:63:a4:ec:6d:57:33:d3:3b:2a: dd:9c:55:41:96:aa:f5:e9:d1:0a:56:03:f0:2c:8b:60:ec:e9: 13:32:a1:45:2e:c1:6a:8c:3f:ab:9a:e6:e6:0d:94:ab:5e:88: 32:56:bc:10:b7:b5:fd:1b:b7:02:85:fe:2e:e8:0d:03:e7:08: ac:7c:7b:0b:b4:92:4d:90:bb:83:81:e6:a3:95:77:ad:99:09: 86:2e:e9:cc:7f:09:1a:c5:5f:69:91:3a:29:0f:21:da:24:53: ce:bd:63:af:c5:0e:e5:d7:d4:7c:95:ac:92:50:99:9e:dd:2a: b2:f9:ef:b9:3b:67:7e:a4:71:65:e7:ef:06:fb:ef:cf:c8:b2: 7d:75:54:1f:34:c0:17:28:f8:6d:0d:d8:76:93:0b:b0:dc:c1: 28:c2:80:a6:ca:66:80:20:7f:34:ff:85:73:91:7f:71:81:09: 40:6f:d3:e4:35:7b:7c:9a:95:cf:05:34:83:ef:d5:b8:98:5d: 27:4e:3f:cc:f0:de:f7:92:8d:11:5a:8d:b8:34:c4:2e:fc:1b: 3c:0b:6e:b0:f4:7f:04:16:4a:5b:ba:ef:53:ca:31:ca:8f:25: b2:d0:43:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdNuf+/uSLK/yEHad5wrIgbelx1cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkyNDMzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTFmNTNjY2Y4NzkzYTNlMzdhNDEwMzM1ZWY1ODgxYzJh MDFiNTcwYmMzMTRjZDNmMWYyZDIyODdjMTY2MGU4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyo4X2nW6OsLHC+lePLuNt/KOTIfsnnvTq7nxnNYnY0Xc3 uCPxVUFmwRyJ7gF1/N8q1iokMBLeLVCqZB11lloMBPuiJfVCxJ4GBX29UeLcOrru BEDSkrktwayV2gH/K4PiCbkeFEvxLc/PO1DAaHxm1fB70nO+W86lBnn12JpCB57W AHSvsHYTAAVakwEHHpYPA9dTFQjQEpovA/eHUNifhjTNf1Xh6ysL40/SyRM8DTb1 PGCHnYh8vKS+/k4/d67qknOHJ1WD+gfR65yMPZ0ZXNjAQMT/tKCfoA2dYmICbRyM Nqr+sEpimU9jhnBkSAGom0sBS8nWiIuRvacAef9fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOsmFIDltrn4axmXa0wcggw8zZs0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZkNDdiMDJlLWYxZDEtNDM3My04YjJlLTVhYTc5NDA1NjFhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqEIwDQYJKoZIhvcNAQELBQADggEBAA723cwL5Zti0sBVYFThh1OuJhqR 397x7Dc/4GOk7G1XM9M7Kt2cVUGWqvXp0QpWA/Asi2Ds6RMyoUUuwWqMP6ua5uYN lKteiDJWvBC3tf0btwKF/i7oDQPnCKx8ewu0kk2Qu4OB5qOVd62ZCYYu6cx/CRrF X2mROikPIdokU869Y6/FDuXX1HyVrJJQmZ7dKrL577k7Z36kcWXn7wb778/Isn11 VB80wBco+G0N2HaTC7DcwSjCgKbKZoAgfzT/hXORf3GBCUBv0+Q1e3yalc8FNIPv 1biYXSdOP8zw3veSjRFajbg0xC78GzwLbrD0fwQWSlu671PKMcqPJbLQQz8= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:26 2025 by rpki-client