$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c8c35a0-ccb4-4971-bb22-762ae63deb31.roa File: 7c8c35a0-ccb4-4971-bb22-762ae63deb31.roa (raw, json) Hash identifier: Bc1Jv93rolym+nCMmDNBGaiUR46Gm/dnLN07X3LqMbE= Subject key identifier: 78:9E:6E:55:48:5E:F6:83:3A:03:B7:6F:D1:1E:A2:06:FF:D4:69:38 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 69D0E2E454CB09BB6D2F4D58FBE28BF05EC8991E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c8c35a0-ccb4-4971-bb22-762ae63deb31.roa Signing time: Thu 25 Sep 2025 23:32:10 +0000 ROA not before: Thu 25 Sep 2025 23:32:10 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d0:e2:e4:54:cb:09:bb:6d:2f:4d:58:fb:e2:8b:f0:5e:c8:99:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:32:10 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=b178275ef6ad397a7daa5efe833e4ceaec8be5e5d4a5d065b17c8bb8529f7c8b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bf:2a:23:58:b8:3d:d3:c6:08:9c:a6:23:e7: 74:8d:d9:d5:6e:ef:34:5e:60:52:8a:ae:84:cf:64: 4d:8b:e1:76:2b:c0:57:ac:65:b4:e8:9f:0a:ed:97: 54:2d:3b:49:34:be:c2:d4:8f:00:40:6c:d0:fb:75: d1:f3:0f:47:c2:03:c5:61:6e:64:75:05:5a:ef:88: 07:eb:0d:ed:63:9c:a7:2a:32:ca:ab:cd:6e:a1:a6: 4d:d5:b8:b8:da:11:db:72:14:e2:eb:7f:74:93:76: ac:70:51:f4:06:79:fa:0f:a3:21:2e:50:90:b1:88: 21:97:9d:34:c6:63:95:60:c5:3d:47:52:a2:64:1a: 5e:a0:d9:26:cc:e1:dd:d7:ae:e3:26:e5:02:5a:7b: 49:7b:fa:aa:6e:a8:5b:77:f8:80:cf:49:09:8a:3c: 81:30:23:c8:ed:f2:0a:12:97:50:f2:a1:ef:b0:8f: b2:11:0c:2d:0d:48:9a:c7:e2:69:f4:9a:ca:c4:a8: a4:8c:ed:69:a1:c7:f4:0a:18:a1:eb:d8:2d:ff:ce: 4c:65:7e:4d:63:21:af:bd:09:54:1b:8b:e2:0e:bf: 02:00:86:a7:85:57:08:c4:20:6f:0f:3c:65:8a:66: 47:ca:d5:e9:b1:6a:1b:3e:fa:54:c3:4d:a6:5c:67: bf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9E:6E:55:48:5E:F6:83:3A:03:B7:6F:D1:1E:A2:06:FF:D4:69:38 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c8c35a0-ccb4-4971-bb22-762ae63deb31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.102.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:17:e8:de:7e:c6:88:a3:bd:ad:a4:18:89:69:26:ed:ac:09: e9:78:aa:70:94:38:73:9b:94:5f:33:b1:d4:89:f6:64:fb:5c: 2b:c7:a6:7f:98:7e:b6:d8:a2:8c:ed:1a:b5:96:76:c3:20:e7: 3e:59:99:e7:43:93:40:44:e9:b4:9e:6b:af:c8:17:f8:3d:55: 51:76:a5:bd:ba:99:b6:7a:57:ff:dc:3a:a1:3f:08:20:2d:a5: a7:26:dd:85:ba:d4:5f:5c:05:1b:81:05:bb:40:6a:f2:ea:09: 2a:b6:c8:a3:1f:26:87:fb:61:ff:84:a6:26:12:f7:7f:59:f6: 37:ad:c2:a3:bd:b1:6e:6c:13:c8:7b:5b:94:00:0c:54:5c:54: 2b:66:44:98:98:17:7c:29:cf:35:11:b6:30:ad:32:ab:3d:1e: e6:e2:1c:ec:9a:ef:c0:9f:fd:9e:a2:5f:4a:d8:c7:1b:9f:e9: 30:c7:2b:73:66:87:ab:b8:c2:d1:7a:67:e3:e7:21:5c:da:9d: 54:53:61:ff:56:70:33:e1:83:36:fe:f2:8a:e8:25:c0:14:af: b9:db:30:6d:e4:46:7b:95:60:46:ff:da:74:71:29:e6:04:da: 0d:7e:d0:62:fe:b5:f0:8e:bd:44:a5:d1:e0:8a:67:c5:88:af: cb:30:15:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUadDi5FTLCbttL01Y++KL8F7ImR4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMzMjEwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTc4Mjc1ZWY2YWQzOTdhN2RhYTVlZmU4MzNlNGNlYWVj OGJlNWU1ZDRhNWQwNjViMTdjOGJiODUyOWY3YzhiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWvyojWLg908YInKYj53SN2dVu7zReYFKKroTPZE2L4XYr wFesZbTonwrtl1QtO0k0vsLUjwBAbND7ddHzD0fCA8VhbmR1BVrviAfrDe1jnKcq MsqrzW6hpk3VuLjaEdtyFOLrf3STdqxwUfQGefoPoyEuUJCxiCGXnTTGY5VgxT1H UqJkGl6g2SbM4d3XruMm5QJae0l7+qpuqFt3+IDPSQmKPIEwI8jt8goSl1Dyoe+w j7IRDC0NSJrH4mn0msrEqKSM7Wmhx/QKGKHr2C3/zkxlfk1jIa+9CVQbi+IOvwIA hqeFVwjEIG8PPGWKZkfK1emxahs++lTDTaZcZ7/tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeJ5uVUhe9oM6A7dv0R6iBv/UaTgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdjOGMzNWEwLWNjYjQtNDk3MS1iYjIyLTc2MmFlNjNkZWIzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrmYwDQYJKoZIhvcNAQELBQADggEBAJ8X6N5+xoijva2kGIlpJu2sCel4 qnCUOHOblF8zsdSJ9mT7XCvHpn+YfrbYooztGrWWdsMg5z5ZmedDk0BE6bSea6/I F/g9VVF2pb26mbZ6V//cOqE/CCAtpacm3YW61F9cBRuBBbtAavLqCSq2yKMfJof7 Yf+EpiYS939Z9jetwqO9sW5sE8h7W5QADFRcVCtmRJiYF3wpzzURtjCtMqs9Hubi HOya78Cf/Z6iX0rYxxuf6TDHK3Nmh6u4wtF6Z+PnIVzanVRTYf9WcDPhgzb+8oro JcAUr7nbMG3kRnuVYEb/2nRxKeYE2g1+0GL+tfCOvUSl0eCKZ8WIr8swFTg= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:11 2025 by rpki-client