$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/916f41ba-92d7-481a-8312-8bc8f3f57740.roa File: 916f41ba-92d7-481a-8312-8bc8f3f57740.roa (raw, json) Hash identifier: UkgKW1SuKvZo9cYo7NfbzDtZT34fy1g//3+Fm+Vymtc= Subject key identifier: 9D:9C:00:AA:6F:6B:55:E8:5D:2C:FF:60:69:38:79:93:27:51:86:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20104CA676872FC96D0B4D5B39193B597A6200CA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/916f41ba-92d7-481a-8312-8bc8f3f57740.roa Signing time: Thu 25 Sep 2025 20:27:00 +0000 ROA not before: Thu 25 Sep 2025 20:27:00 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:10:4c:a6:76:87:2f:c9:6d:0b:4d:5b:39:19:3b:59:7a:62:00:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:27:00 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=8a55b018f34afb2a41d536d44207605858505b0675f71d3958a07d4b866f59a6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2f:66:46:f9:a2:50:b9:12:d9:f1:c1:77:1e: f6:42:57:c3:f0:c6:e9:95:77:e1:b6:c0:bf:3e:5c: b9:3c:0d:b1:36:c8:13:41:a3:3f:e2:42:b1:88:b0: 8b:38:5b:c2:1c:71:b0:4d:f1:01:fd:cf:40:56:c8: 91:eb:2b:ad:8e:cc:f9:f4:09:04:88:2b:8a:c1:99: b9:03:5c:68:aa:a6:fd:35:0d:4d:c9:53:3f:5d:01: 95:2c:d7:a1:7b:e6:f0:36:fa:68:61:4a:d1:ba:85: 80:13:c6:ea:22:f9:a7:ed:23:41:6d:ea:ae:25:a0: 93:7a:28:e9:de:1c:fe:60:5b:67:57:66:50:d7:03: b9:7f:9c:77:9e:94:41:57:50:e1:39:10:88:9a:b5: 94:f1:95:7f:c9:fe:67:8b:17:13:0c:c1:15:25:2d: 7c:f7:69:9e:91:5d:19:da:bd:8e:f1:b9:49:77:a0: 6b:48:76:94:5a:b6:c6:85:aa:86:de:f7:07:3d:40: aa:c2:d6:5b:77:9a:8f:13:7f:0b:1f:0b:5a:77:9b: 77:7e:c0:69:aa:96:8c:5d:87:f0:d3:1a:03:50:e0: 48:4c:06:12:ce:2b:d7:d4:ad:2c:3f:d9:4c:84:81: 9b:77:02:52:44:d9:68:44:64:46:4c:ac:bb:39:5b: 79:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9C:00:AA:6F:6B:55:E8:5D:2C:FF:60:69:38:79:93:27:51:86:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/916f41ba-92d7-481a-8312-8bc8f3f57740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.5.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:47:67:ef:b6:67:07:33:55:fc:78:5d:7b:88:27:2b:96:b7: c5:46:e4:45:f3:cf:1a:9c:de:b2:16:85:15:f7:e6:4b:20:67: 29:3d:12:a1:38:59:38:ba:2a:71:70:7f:af:85:e2:6c:56:bb: 8f:01:a3:f3:a3:62:fc:fc:ff:41:de:20:1d:de:f3:82:2d:f1: e0:79:d4:e8:10:14:3d:0e:d2:21:2a:57:52:ab:7c:05:f6:bb: dc:73:07:d7:c4:db:a4:b4:d0:c5:48:87:7e:fb:65:1b:9f:95: 6d:90:88:e3:c4:cd:31:22:6a:5e:9f:3e:a6:b0:48:7f:14:71: b2:a3:c5:1d:b5:51:65:a7:67:28:23:ac:dd:0c:6f:c5:f3:a1: cf:58:b6:e6:1c:4a:4d:48:6a:ce:29:d3:97:f4:c5:14:fd:77: 54:45:ac:10:bd:49:a3:57:6b:2d:13:ed:f8:d5:ba:d5:0e:f8: 58:a8:b2:6b:b4:0c:da:f3:44:6b:c6:82:63:08:21:95:57:5c: 9b:e5:6d:ec:23:e7:ee:a6:d6:09:c4:e7:43:07:ce:20:4e:32: 16:9f:d9:d8:66:68:44:80:bf:5b:f7:61:27:72:bb:c9:21:67: bd:e4:6c:3e:5e:1e:35:d7:87:21:8c:f9:39:2c:7d:13:38:84: bf:5e:f7:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIBBMpnaHL8ltC01bORk7WXpiAMowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjAyNzAwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTU1YjAxOGYzNGFmYjJhNDFkNTM2ZDQ0MjA3NjA1ODU4 NTA1YjA2NzVmNzFkMzk1OGEwN2Q0Yjg2NmY1OWE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeL2ZG+aJQuRLZ8cF3HvZCV8PwxumVd+G2wL8+XLk8DbE2 yBNBoz/iQrGIsIs4W8IccbBN8QH9z0BWyJHrK62OzPn0CQSIK4rBmbkDXGiqpv01 DU3JUz9dAZUs16F75vA2+mhhStG6hYATxuoi+aftI0Ft6q4loJN6KOneHP5gW2dX ZlDXA7l/nHeelEFXUOE5EIiatZTxlX/J/meLFxMMwRUlLXz3aZ6RXRnavY7xuUl3 oGtIdpRatsaFqobe9wc9QKrC1lt3mo8TfwsfC1p3m3d+wGmqloxdh/DTGgNQ4EhM BhLOK9fUrSw/2UyEgZt3AlJE2WhEZEZMrLs5W3mfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnZwAqm9rVehdLP9gaTh5kydRhjwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkxNmY0MWJhLTkyZDctNDgxYS04MzEyLThiYzhmM2Y1Nzc0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrAUwDQYJKoZIhvcNAQELBQADggEBAEpHZ++2ZwczVfx4XXuIJyuWt8VG 5EXzzxqc3rIWhRX35ksgZyk9EqE4WTi6KnFwf6+F4mxWu48Bo/OjYvz8/0HeIB3e 84It8eB51OgQFD0O0iEqV1KrfAX2u9xzB9fE26S00MVIh377ZRuflW2QiOPEzTEi al6fPqawSH8UcbKjxR21UWWnZygjrN0Mb8Xzoc9YtuYcSk1Ias4p05f0xRT9d1RF rBC9SaNXay0T7fjVutUO+Fiosmu0DNrzRGvGgmMIIZVXXJvlbewj5+6m1gnE50MH ziBOMhaf2dhmaESAv1v3YSdyu8khZ73kbD5eHjXXhyGM+TksfRM4hL9e9/s= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:46 2025 by rpki-client