$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76052991-fd84-4de0-86a1-c2a0b1ab1e94.roa File: 76052991-fd84-4de0-86a1-c2a0b1ab1e94.roa (raw, json) Hash identifier: BSQwqZdv0yOQHwFx0pMl3dBxPY/lCTvW1cUH1GYElLc= Subject key identifier: D4:57:C2:CB:86:67:93:DF:1A:EE:29:F4:19:35:37:F8:BD:87:58:59 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A976FFDAD270991CC70D238D27BA8AF03D72446 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76052991-fd84-4de0-86a1-c2a0b1ab1e94.roa Signing time: Fri 03 Oct 2025 15:18:14 +0000 ROA not before: Fri 03 Oct 2025 15:18:14 +0000 ROA not after: Fri 07 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.2.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:97:6f:fd:ad:27:09:91:cc:70:d2:38:d2:7b:a8:af:03:d7:24:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 3 15:18:14 2025 GMT Not After : Nov 7 23:59:59 2025 GMT Subject: serialNumber=a3466ac23a4111a6ded5b5ca87e8249884c5685494b26e51e8e13628705a9421, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:e4:b1:bf:d2:3e:e0:d7:99:7a:a2:c6:b8: 95:e3:03:5e:95:17:7f:e1:35:12:5a:4e:fd:4d:f5: fd:f1:d0:fb:66:2d:95:ba:19:f3:d0:12:12:b7:3a: a5:e8:ee:86:95:23:3f:70:67:2f:27:9e:09:03:f9: 91:af:a0:4b:98:0e:39:7f:2d:ba:78:39:a6:61:4c: b6:c1:0e:59:cb:66:86:6c:aa:58:0e:09:2f:5e:0a: bc:ed:0a:3a:4c:5e:40:06:60:b2:2a:b8:a5:93:07: 29:1b:9b:79:fa:bd:d0:4e:d0:d1:e5:55:b8:92:a7: c1:5b:b7:80:27:d3:e2:a9:aa:be:20:f6:3a:a9:33: f1:6f:fe:f2:b7:f1:de:ae:13:1a:73:5d:9b:3e:a5: f9:31:42:3d:61:43:e6:c1:1a:17:a2:a2:46:60:5d: 09:ee:11:8d:fb:63:2f:60:6e:c4:ce:c4:f1:ab:c4: 17:94:62:79:b7:16:43:80:54:25:e1:c4:d4:2c:ea: b2:fe:2e:a6:a8:29:f1:34:bb:d0:e5:0d:91:00:8d: 16:1c:e0:59:d3:9c:b4:66:eb:6e:68:e4:8e:d3:bf: 1c:56:bc:cc:42:46:70:b6:a8:33:08:70:1a:1f:83: 5c:b7:8b:f4:9c:d1:4c:e6:ec:03:c5:03:07:cf:a3: 68:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:57:C2:CB:86:67:93:DF:1A:EE:29:F4:19:35:37:F8:BD:87:58:59 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76052991-fd84-4de0-86a1-c2a0b1ab1e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.64.0/24 Signature Algorithm: sha256WithRSAEncryption 30:bd:c3:e7:da:58:6b:37:8e:c4:40:a3:e8:00:69:92:3f:8b: 5e:96:b6:6e:29:7e:91:d9:7e:dd:87:54:b0:c2:b8:ee:10:32: e1:28:7d:65:4e:f6:db:c1:12:8d:cd:be:80:12:04:13:40:03: f7:e3:07:7b:78:30:37:95:a0:da:77:f4:1b:e4:19:9a:b1:59: 44:f1:6f:cd:e1:ef:de:ec:1e:0d:c2:7d:90:cf:0e:00:62:52: 58:94:d3:b3:63:63:3a:c6:b2:84:98:e6:7b:ee:fb:2b:aa:9c: e7:f6:b2:17:08:83:3f:5f:e5:9d:99:ce:5e:45:a3:2f:e2:98: 1b:23:14:9d:8b:b2:34:b8:c0:67:ba:a0:df:45:60:19:0d:e5: 16:9e:b6:ce:74:a8:23:23:03:51:7e:51:d5:2a:04:3b:2d:1c: d1:0c:45:11:b7:0a:d4:39:c0:54:71:bf:f0:0a:27:a2:d2:ee: 6b:49:09:12:ba:e6:da:a4:df:63:ec:11:38:38:07:05:8f:7c: 62:d7:4a:b7:f0:5c:0d:df:3f:a7:39:50:5a:33:1d:99:04:06: a5:77:36:1e:b9:b0:cf:47:74:d3:98:64:7c:40:ba:ac:63:b1: 29:2c:8b:7e:45:c4:ee:bd:9d:42:2a:5d:c1:b3:fe:6b:f8:95: 19:f1:34:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWpdv/a0nCZHMcNI40nuorwPXJEYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDAzMTUxODE0WhcNMjUxMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzQ2NmFjMjNhNDExMWE2ZGVkNWI1Y2E4N2U4MjQ5ODg0 YzU2ODU0OTRiMjZlNTFlOGUxMzYyODcwNWE5NDIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB5uSxv9I+4NeZeqLGuJXjA16VF3/hNRJaTv1N9f3x0Ptm LZW6GfPQEhK3OqXo7oaVIz9wZy8nngkD+ZGvoEuYDjl/Lbp4OaZhTLbBDlnLZoZs qlgOCS9eCrztCjpMXkAGYLIquKWTBykbm3n6vdBO0NHlVbiSp8Fbt4An0+Kpqr4g 9jqpM/Fv/vK38d6uExpzXZs+pfkxQj1hQ+bBGheiokZgXQnuEY37Yy9gbsTOxPGr xBeUYnm3FkOAVCXhxNQs6rL+LqaoKfE0u9DlDZEAjRYc4FnTnLRm625o5I7TvxxW vMxCRnC2qDMIcBofg1y3i/Sc0Uzm7APFAwfPo2jRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1FfCy4Znk98a7in0GTU3+L2HWFkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc2MDUyOTkxLWZkODQtNGRlMC04NmExLWMyYTBiMWFiMWU5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAkAwDQYJKoZIhvcNAQELBQADggEBADC9w+faWGs3jsRAo+gAaZI/i16W tm4pfpHZft2HVLDCuO4QMuEofWVO9tvBEo3NvoASBBNAA/fjB3t4MDeVoNp39Bvk GZqxWUTxb83h797sHg3CfZDPDgBiUliU07NjYzrGsoSY5nvu+yuqnOf2shcIgz9f 5Z2Zzl5Foy/imBsjFJ2LsjS4wGe6oN9FYBkN5Raets50qCMjA1F+UdUqBDstHNEM RRG3CtQ5wFRxv/AKJ6LS7mtJCRK65tqk32PsETg4BwWPfGLXSrfwXA3fP6c5UFoz HZkEBqV3Nh65sM9HdNOYZHxAuqxjsSksi35FxO69nUIqXcGz/mv4lRnxNJk= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:44 2025 by rpki-client