$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/752519e7-f0e3-466e-9047-194311961cf1.roa File: 752519e7-f0e3-466e-9047-194311961cf1.roa (raw, json) Hash identifier: Z1O6F+5AbD4k4/pzDm8pA/MZTu/Wx3a4JUMRQDoUWC8= Subject key identifier: 69:18:EF:C2:6F:47:A3:D7:03:B3:EC:7B:40:49:BD:58:C0:4E:E8:94 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4B936B664EACBD397138616B3705115E563E6056 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/752519e7-f0e3-466e-9047-194311961cf1.roa Signing time: Fri 10 Oct 2025 15:34:19 +0000 ROA not before: Fri 10 Oct 2025 15:34:19 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.124.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:93:6b:66:4e:ac:bd:39:71:38:61:6b:37:05:11:5e:56:3e:60:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 15:34:19 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=f2b55660c6b38a3d5f7a1e2af87500e6bcfe7b659dd57621d41973b1cd2b6e66, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:dc:e5:ae:7d:c4:84:3b:e1:dd:5a:77:fc: ed:c1:7e:e4:27:17:98:60:91:42:70:2c:c8:e7:bf: af:cb:47:59:a7:b8:54:20:41:fe:8b:a6:71:c5:7e: 73:02:ac:1a:89:30:de:8d:cb:fc:be:63:2f:5d:81: 31:0f:ac:b9:85:9b:f9:6f:32:ad:cb:1b:e1:0c:1b: a0:73:f5:08:68:62:09:7e:a9:66:ac:44:97:af:02: 24:78:b9:ff:cc:d8:9f:2b:43:ab:25:20:83:a6:db: 5d:64:9e:04:5c:ef:17:be:80:96:ea:5f:41:10:3c: 38:f9:62:f5:c3:81:95:05:35:e7:d2:0f:ec:aa:2a: b2:3c:a5:c3:53:5d:08:68:d3:e0:8a:76:b0:4d:74: 4a:43:03:f6:2c:aa:34:e1:b3:73:1d:6e:fa:77:14: 23:e5:aa:ef:39:b5:00:e1:4a:1c:7f:eb:0e:38:74: 0f:07:a0:68:a4:c2:6c:f7:4c:cb:f5:c9:a9:aa:2c: d0:06:29:78:e8:73:e6:35:06:a7:d5:00:a2:08:78: 94:5e:e2:fd:ee:8d:1c:99:98:ca:59:13:dd:23:26: 8f:77:5a:ac:22:26:f2:30:5e:13:c7:46:b5:b7:9d: 88:9d:d4:cf:2d:94:9f:c7:cc:25:05:7c:a1:3e:e7: a7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:18:EF:C2:6F:47:A3:D7:03:B3:EC:7B:40:49:BD:58:C0:4E:E8:94 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/752519e7-f0e3-466e-9047-194311961cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.124.0.0/14 Signature Algorithm: sha256WithRSAEncryption 24:ba:14:85:20:89:be:69:ee:64:21:22:60:fb:1f:88:81:03: 7f:3f:25:bc:28:08:bc:d0:d6:f1:52:a4:66:e6:67:29:8a:6f: 0a:2c:14:a0:fd:23:ff:df:fa:3a:00:a9:0c:cf:6b:93:ac:22: 54:8a:e3:75:08:0e:51:08:4b:21:5c:c3:78:21:95:e2:34:8f: 18:65:da:08:93:1f:0a:90:72:6b:2e:70:a4:f0:c8:dc:65:ad: 65:26:20:db:ed:e8:87:27:36:72:9f:83:43:90:78:7f:2b:36: 17:67:6b:f7:e3:98:05:ed:6d:74:73:74:40:d3:ca:6f:fa:4d: d1:c8:6d:4c:65:47:71:74:cb:1b:f6:f7:2f:9c:35:56:0b:a1: 75:61:3d:19:fc:a5:9a:8e:3c:3d:c0:87:93:84:cd:91:24:91: f1:e9:6d:d6:e9:4c:03:e8:89:97:e4:e7:27:ba:0e:8d:bd:fb: 31:3f:92:76:66:cf:d7:b6:4a:8a:14:e1:60:d6:39:18:dd:76: 92:0f:0c:6a:3d:65:43:5d:65:2b:a9:39:9b:51:44:b7:1f:fb: 42:a5:e8:98:03:d1:35:8d:cf:31:46:62:d4:ee:28:16:09:39: c9:00:b7:e5:41:5e:9e:df:77:1e:eb:e2:99:3e:e8:ab:07:e9: 78:02:43:da -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUS5NrZk6svTlxOGFrNwURXlY+YFYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTUzNDE5WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmI1NTY2MGM2YjM4YTNkNWY3YTFlMmFmODc1MDBlNmJj ZmU3YjY1OWRkNTc2MjFkNDE5NzNiMWNkMmI2ZTY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw1dzlrn3EhDvh3Vp3/O3BfuQnF5hgkUJwLMjnv6/LR1mn uFQgQf6LpnHFfnMCrBqJMN6Ny/y+Yy9dgTEPrLmFm/lvMq3LG+EMG6Bz9QhoYgl+ qWasRJevAiR4uf/M2J8rQ6slIIOm211kngRc7xe+gJbqX0EQPDj5YvXDgZUFNefS D+yqKrI8pcNTXQho0+CKdrBNdEpDA/YsqjThs3Mdbvp3FCPlqu85tQDhShx/6w44 dA8HoGikwmz3TMv1yamqLNAGKXjoc+Y1BqfVAKIIeJRe4v3ujRyZmMpZE90jJo93 WqwiJvIwXhPHRrW3nYid1M8tlJ/HzCUFfKE+56chAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUaRjvwm9Ho9cDs+x7QEm9WMBO6JQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc1MjUxOWU3LWYwZTMtNDY2ZS05MDQ3LTE5NDMxMTk2MWNmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIDfDANBgkqhkiG9w0BAQsFAAOCAQEAJLoUhSCJvmnuZCEiYPsfiIEDfz8l vCgIvNDW8VKkZuZnKYpvCiwUoP0j/9/6OgCpDM9rk6wiVIrjdQgOUQhLIVzDeCGV 4jSPGGXaCJMfCpByay5wpPDI3GWtZSYg2+3ohyc2cp+DQ5B4fys2F2dr9+OYBe1t dHN0QNPKb/pN0chtTGVHcXTLG/b3L5w1VguhdWE9Gfylmo48PcCHk4TNkSSR8elt 1ulMA+iJl+TnJ7oOjb37MT+SdmbP17ZKihThYNY5GN12kg8Maj1lQ11lK6k5m1FE tx/7QqXomAPRNY3PMUZi1O4oFgk5yQC35UFent93HuvimT7oqwfpeAJD2g== -----END CERTIFICATE-----Generated at Sat Oct 18 04:52:59 2025 by rpki-client