$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79a933cb-7782-4cd8-ac2c-4fe629517dab.roa File: 79a933cb-7782-4cd8-ac2c-4fe629517dab.roa (raw, json) Hash identifier: JanWghFnQqzJY4555RSZYsrCMYN1KjaOz4R7pEx3x5s= Subject key identifier: 70:A3:1E:FE:42:11:9E:E9:0F:19:9D:DC:79:1C:30:2E:F7:11:E3:5C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3F5B03D95E296DD01040CFD9B4D24A05BEF388D8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79a933cb-7782-4cd8-ac2c-4fe629517dab.roa Signing time: Thu 25 Sep 2025 22:44:46 +0000 ROA not before: Thu 25 Sep 2025 22:44:46 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5b:03:d9:5e:29:6d:d0:10:40:cf:d9:b4:d2:4a:05:be:f3:88:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:44:46 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=98a2c38a3940424a115488c4dc5ea363ce0ea4fa85f28a4b78939a650c7b633a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:22:47:cf:a4:0c:76:45:aa:26:6e:e8:df:e8: a4:d2:e3:8a:2a:0b:91:68:39:ef:80:a9:13:bc:03: da:60:8e:88:06:06:fb:72:4e:3e:67:c3:83:83:cb: b1:00:f0:68:80:c9:3a:24:05:f9:06:ed:26:19:d5: 08:bf:ac:dc:5c:2e:7b:80:9d:fb:63:1f:cf:fd:ff: b3:25:bc:e4:3d:fb:98:99:b9:cc:82:b0:9c:21:b2: 99:74:40:b3:b2:0c:06:db:61:e5:5b:82:02:21:41: dc:5e:bc:dc:d1:a4:77:66:2d:2e:d3:43:2f:9c:f9: e4:a4:b1:c7:07:7f:f0:6f:92:83:5e:f6:5a:16:df: 77:df:34:dc:0f:a0:76:ee:ea:e6:67:73:37:c9:c8: 21:1c:b8:73:9e:e6:d2:8e:12:1c:45:07:36:bb:9d: 2c:d5:bc:f9:3d:25:d1:eb:60:cf:60:f6:13:0d:b9: b7:32:ab:24:1e:14:a1:60:3b:20:c4:e6:f1:e6:fa: 0a:ed:90:86:57:4e:01:92:6c:8f:2a:0e:61:8c:d3: b1:d1:42:b2:83:13:5c:9e:d6:26:0c:33:6d:5c:de: e0:1f:d6:e7:8b:97:6a:78:ca:d4:79:3c:32:67:6a: 13:76:00:4f:38:d7:a0:82:ca:10:9c:7e:84:81:74: 47:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A3:1E:FE:42:11:9E:E9:0F:19:9D:DC:79:1C:30:2E:F7:11:E3:5C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79a933cb-7782-4cd8-ac2c-4fe629517dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.252.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:68:28:0d:dc:69:97:be:d3:12:e7:89:4c:6c:6d:b9:67:b6: e2:b9:c2:99:9b:b0:45:96:37:2c:0a:98:be:14:8d:16:43:12: ae:61:2b:db:93:9e:97:3e:c3:67:75:e5:66:a8:00:63:fe:2b: 65:31:46:6a:0a:d7:71:fb:80:db:ff:9f:09:91:3c:59:26:c1: 01:e7:2a:af:80:21:5d:38:dd:99:80:7b:b7:e1:fb:d1:78:41: 16:5c:aa:47:5a:70:83:66:3f:e5:ad:bd:97:f6:74:c1:c3:f8: ab:4e:f8:59:dd:c9:8a:fa:61:67:e4:c2:45:7c:6b:c2:a0:90: 25:8e:e9:49:3a:11:22:d4:43:b2:10:c6:ef:c4:ec:e4:00:6e: ff:c0:06:b1:6b:0a:68:36:71:cd:3d:05:4f:cc:4a:cf:11:48: 16:b8:76:48:41:c8:da:45:3f:91:29:b5:aa:33:5c:3c:b3:d2: e6:b4:a9:7b:b3:17:41:9e:83:2d:84:8f:b1:f4:19:4f:62:9e: ed:67:72:f7:65:93:03:f0:8f:a7:9b:dd:91:87:2a:78:83:4d: 77:d6:25:5a:92:8c:54:76:4f:21:8d:84:67:dc:e2:75:ce:89: a9:6e:63:a0:a5:6a:ce:f6:c0:3e:dc:e0:09:73:05:e6:e4:b3: ca:21:89:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP1sD2V4pbdAQQM/ZtNJKBb7ziNgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjI0NDQ2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5OGEyYzM4YTM5NDA0MjRhMTE1NDg4YzRkYzVlYTM2M2Nl MGVhNGZhODVmMjhhNGI3ODkzOWE2NTBjN2I2MzNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0IkfPpAx2Raombujf6KTS44oqC5FoOe+AqRO8A9pgjogG BvtyTj5nw4ODy7EA8GiAyTokBfkG7SYZ1Qi/rNxcLnuAnftjH8/9/7MlvOQ9+5iZ ucyCsJwhspl0QLOyDAbbYeVbggIhQdxevNzRpHdmLS7TQy+c+eSksccHf/BvkoNe 9loW33ffNNwPoHbu6uZnczfJyCEcuHOe5tKOEhxFBza7nSzVvPk9JdHrYM9g9hMN ubcyqyQeFKFgOyDE5vHm+grtkIZXTgGSbI8qDmGM07HRQrKDE1ye1iYMM21c3uAf 1ueLl2p4ytR5PDJnahN2AE8416CCyhCcfoSBdEfxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcKMe/kIRnukPGZ3ceRwwLvcR41wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc5YTkzM2NiLTc3ODItNGNkOC1hYzJjLTRmZTYyOTUxN2RhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqPwwDQYJKoZIhvcNAQELBQADggEBAItoKA3caZe+0xLniUxsbblntuK5 wpmbsEWWNywKmL4UjRZDEq5hK9uTnpc+w2d15WaoAGP+K2UxRmoK13H7gNv/nwmR PFkmwQHnKq+AIV043ZmAe7fh+9F4QRZcqkdacINmP+WtvZf2dMHD+KtO+FndyYr6 YWfkwkV8a8KgkCWO6Uk6ESLUQ7IQxu/E7OQAbv/ABrFrCmg2cc09BU/MSs8RSBa4 dkhByNpFP5EptaozXDyz0ua0qXuzF0Gegy2Ej7H0GU9inu1ncvdlkwPwj6eb3ZGH KniDTXfWJVqSjFR2TyGNhGfc4nXOialuY6Clas72wD7c4AlzBebks8ohiY0= -----END CERTIFICATE-----Generated at Fri Oct 17 21:54:36 2025 by rpki-client