$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8fea18fa-be57-4bd6-be2c-eab23cf122d4.roa File: 8fea18fa-be57-4bd6-be2c-eab23cf122d4.roa (raw, json) Hash identifier: FdLnaXH9kM9vfa3ybj/Fb7qcsVz/yThLl1USjv+HcXs= Subject key identifier: B9:7B:65:5D:BB:6F:07:7A:A3:2C:D9:D4:3D:F8:D3:E6:10:D7:50:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D34F983FD5E05CCCD624FEF3B9CB185863B63CF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8fea18fa-be57-4bd6-be2c-eab23cf122d4.roa Signing time: Thu 25 Sep 2025 23:21:40 +0000 ROA not before: Thu 25 Sep 2025 23:21:40 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:34:f9:83:fd:5e:05:cc:cd:62:4f:ef:3b:9c:b1:85:86:3b:63:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:21:40 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=e7cda0d51dd95130002264093fcb62e375205cc1fee8a0dfe41afd2929874ef8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:88:9e:34:0e:a4:43:52:2e:68:5e:49:dd:80: 80:49:e2:3b:22:63:cc:c9:d5:60:5d:60:65:c1:51: b5:e8:3d:6e:24:f9:5d:74:0f:88:4d:36:0a:8f:b7: bc:84:92:88:81:02:b4:05:46:63:b9:f9:6a:01:89: d1:3c:9d:c1:15:50:f5:20:ff:a5:93:df:d7:65:7b: 9a:9f:57:f9:db:b3:76:72:9c:2b:c9:26:f0:36:db: b8:72:98:42:47:e7:c9:b9:87:bf:d5:f9:17:6d:68: 3f:cb:30:1b:52:9a:f6:f3:2b:30:62:70:d9:09:7a: d4:79:71:7d:cf:f2:5d:d9:1e:1e:73:f0:f1:4a:fb: 9e:67:0c:14:d4:80:15:87:04:86:50:67:ea:d7:7f: 75:ac:19:f6:2c:4f:79:ea:8c:e2:87:70:3d:2b:29: e3:11:2e:71:07:b0:5d:1e:e6:40:a1:be:da:ac:7d: 25:ce:ca:71:0e:79:7d:de:d4:67:8b:c1:f9:d2:3c: 47:3b:7e:aa:14:da:9a:79:4f:7e:4c:3b:9a:14:bc: 0f:39:92:59:a3:4b:00:73:ad:46:e8:fc:0c:13:97: c6:8f:e0:e8:a2:1a:14:62:7f:a9:72:01:6c:2d:14: 3d:d7:90:19:76:f3:47:30:2f:85:b4:ee:97:b8:a7: da:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7B:65:5D:BB:6F:07:7A:A3:2C:D9:D4:3D:F8:D3:E6:10:D7:50:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8fea18fa-be57-4bd6-be2c-eab23cf122d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.24.0/23 Signature Algorithm: sha256WithRSAEncryption 42:26:56:d3:6e:0d:b9:5f:54:9d:d1:ec:37:09:18:94:da:8e: df:29:38:60:f3:ba:b1:65:57:2e:eb:05:00:ee:50:84:d1:67: d1:64:41:d7:64:18:4f:fa:08:2c:b0:e4:ae:5c:1f:3e:8d:39: 0d:ab:87:b3:c0:ed:45:ef:d3:06:91:ac:d9:51:67:f6:f9:ff: 24:70:fa:e9:05:6e:9a:5c:bf:9f:c7:69:5e:c4:9f:40:b3:8a: d5:84:cf:57:e2:e6:32:82:a3:f6:c2:e8:01:e6:04:13:0f:b5: 53:84:b7:b9:cf:80:97:bd:90:bb:59:15:8f:8a:68:63:4d:9e: 68:b7:58:f5:fd:53:70:08:c2:1a:8b:32:e8:a2:d7:9d:6f:4e: 7e:b5:bb:bd:d8:f4:07:52:55:40:db:15:87:18:13:fd:e3:ac: 82:a7:0c:dc:07:3d:d9:89:db:da:30:4b:e0:aa:55:4b:21:d0: 68:81:aa:b6:cb:7b:e2:59:de:1b:f2:1d:57:c0:25:36:b1:4e: 13:c7:8a:ed:6f:fc:29:3d:27:17:9f:86:46:be:50:4a:7d:6b: 3b:3d:ce:12:dc:41:63:d8:f6:c5:ce:7c:51:4e:46:18:bf:40: 73:5f:69:17:2f:2c:1f:76:f7:6c:f2:4b:fa:06:36:dc:c7:b1: a5:1f:52:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbTT5g/1eBczNYk/vO5yxhYY7Y88wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMyMTQwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlN2NkYTBkNTFkZDk1MTMwMDAyMjY0MDkzZmNiNjJlMzc1 MjA1Y2MxZmVlOGEwZGZlNDFhZmQyOTI5ODc0ZWY4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjiJ40DqRDUi5oXkndgIBJ4jsiY8zJ1WBdYGXBUbXoPW4k +V10D4hNNgqPt7yEkoiBArQFRmO5+WoBidE8ncEVUPUg/6WT39dle5qfV/nbs3Zy nCvJJvA227hymEJH58m5h7/V+RdtaD/LMBtSmvbzKzBicNkJetR5cX3P8l3ZHh5z 8PFK+55nDBTUgBWHBIZQZ+rXf3WsGfYsT3nqjOKHcD0rKeMRLnEHsF0e5kChvtqs fSXOynEOeX3e1GeLwfnSPEc7fqoU2pp5T35MO5oUvA85klmjSwBzrUbo/AwTl8aP 4OiiGhRif6lyAWwtFD3XkBl280cwL4W07pe4p9plAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuXtlXbtvB3qjLNnUPfjT5hDXUDwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhmZWExOGZhLWJlNTctNGJkNi1iZTJjLWVhYjIzY2YxMjJkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrBgwDQYJKoZIhvcNAQELBQADggEBAEImVtNuDblfVJ3R7DcJGJTajt8p OGDzurFlVy7rBQDuUITRZ9FkQddkGE/6CCyw5K5cHz6NOQ2rh7PA7UXv0waRrNlR Z/b5/yRw+ukFbppcv5/HaV7En0CzitWEz1fi5jKCo/bC6AHmBBMPtVOEt7nPgJe9 kLtZFY+KaGNNnmi3WPX9U3AIwhqLMuii151vTn61u73Y9AdSVUDbFYcYE/3jrIKn DNwHPdmJ29owS+CqVUsh0GiBqrbLe+JZ3hvyHVfAJTaxThPHiu1v/Ck9Jxefhka+ UEp9azs9zhLcQWPY9sXOfFFORhi/QHNfaRcvLB9292zyS/oGNtzHsaUfUvE= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:01 2025 by rpki-client