$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95c9b44c-7af8-484a-895f-77121123d437.roa File: 95c9b44c-7af8-484a-895f-77121123d437.roa (raw, json) Hash identifier: Gc3LfXDM/FwBAYKQxn99XcJZ9f5utvk8NuE0FV745mM= Subject key identifier: C9:A0:C8:A0:D2:CC:9D:2A:77:12:14:7A:11:DC:FF:4A:EB:CF:C7:64 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 17CCB7B9B80A0833908C9C00041043A5B44110DA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95c9b44c-7af8-484a-895f-77121123d437.roa Signing time: Thu 25 Sep 2025 19:18:06 +0000 ROA not before: Thu 25 Sep 2025 19:18:06 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:cc:b7:b9:b8:0a:08:33:90:8c:9c:00:04:10:43:a5:b4:41:10:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:18:06 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c03ce264853fbeebad7f9135b527f2cc97f4796b5b5f9b98e73e8b167c695f4e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4e:df:2f:36:a7:bd:88:67:fb:58:75:a8:06: 9b:b2:d3:13:16:93:0e:6e:ac:fd:f8:aa:63:b8:df: 8c:e0:4f:77:61:50:dc:1a:e8:92:54:d1:8c:d8:bb: b8:29:8d:21:8e:f6:c6:1a:8d:1c:63:30:4b:87:8b: 25:20:bb:34:7c:b7:54:6d:88:9f:f6:fa:ad:09:b5: f0:48:fd:b2:9a:e0:33:26:0a:f9:2c:7d:bc:21:1f: 5b:8d:71:02:78:54:a1:64:89:05:66:80:77:9c:90: c2:01:d2:2d:82:d1:34:e8:bd:14:73:fd:aa:a4:84: 3e:fc:aa:6e:c3:02:20:44:50:3b:80:df:af:a0:42: bf:5a:a9:2c:2b:0d:eb:54:4b:c6:64:92:55:47:b1: 77:61:dd:3f:46:e1:84:ce:3b:4f:8c:69:70:8c:5c: b1:5b:d5:12:ab:03:ed:fc:1c:41:cc:16:b4:8b:2b: 87:9d:38:c2:0f:66:40:ed:36:8f:2a:0b:53:eb:c6: df:d7:df:ec:46:bb:7a:a7:2e:2e:48:04:3f:48:85: b4:6a:6e:33:a1:4c:91:ba:92:e5:63:1a:3c:bb:af: f6:17:1a:10:3c:1b:d7:31:ef:8d:f4:c5:ad:05:73: 01:2b:df:d8:99:66:01:1c:55:fb:27:bc:9e:95:cd: 44:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A0:C8:A0:D2:CC:9D:2A:77:12:14:7A:11:DC:FF:4A:EB:CF:C7:64 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95c9b44c-7af8-484a-895f-77121123d437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.235.0/24 Signature Algorithm: sha256WithRSAEncryption 77:2e:4d:6e:ca:1a:dc:6c:b7:93:91:09:b5:03:b7:ca:04:2d: 99:92:35:12:dd:e7:40:3e:44:4d:6a:d4:fd:35:5a:e7:59:5b: bb:ef:03:81:5c:f1:18:3b:b5:33:40:2d:22:bd:e9:45:ba:7b: 7e:90:e7:5b:4b:cd:cc:20:19:ca:9b:ca:c9:0d:7e:2d:d4:1b: 5f:a7:ed:39:8a:f2:73:54:1d:97:27:59:38:a5:1e:d5:2e:50: d3:d4:b4:19:ad:15:90:30:9a:f7:1f:0d:ed:e4:04:73:5e:b9: 15:d6:be:d6:a7:74:43:d8:11:c5:fd:0f:f8:08:03:50:c4:17: 51:5b:b7:8e:54:1c:2f:2e:fb:0a:5e:35:17:25:1d:ec:cc:90: 8d:85:82:2a:49:bc:d9:17:15:f5:24:c9:c9:d6:1a:f3:d5:ca: d5:d8:c5:56:4f:de:4a:b1:2b:ad:6d:45:2c:8a:73:94:aa:a4: 4e:85:e6:c6:77:91:51:74:dd:32:8b:70:f4:23:ed:fa:b6:cf: 33:78:e9:c4:16:ed:24:7e:68:74:f1:f9:aa:5c:9c:15:4d:f6: 3e:07:d5:2d:72:72:62:9d:a7:fd:0f:ed:84:b7:59:8d:a3:37: 1c:4a:63:4b:63:90:f9:e1:36:59:95:60:49:c0:e9:32:9b:12: 13:68:87:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF8y3ubgKCDOQjJwABBBDpbRBENowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkxODA2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDNjZTI2NDg1M2ZiZWViYWQ3ZjkxMzViNTI3ZjJjYzk3 ZjQ3OTZiNWI1ZjliOThlNzNlOGIxNjdjNjk1ZjRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiTt8vNqe9iGf7WHWoBpuy0xMWkw5urP34qmO434zgT3dh UNwa6JJU0YzYu7gpjSGO9sYajRxjMEuHiyUguzR8t1RtiJ/2+q0JtfBI/bKa4DMm CvksfbwhH1uNcQJ4VKFkiQVmgHeckMIB0i2C0TTovRRz/aqkhD78qm7DAiBEUDuA 36+gQr9aqSwrDetUS8ZkklVHsXdh3T9G4YTOO0+MaXCMXLFb1RKrA+38HEHMFrSL K4edOMIPZkDtNo8qC1Prxt/X3+xGu3qnLi5IBD9IhbRqbjOhTJG6kuVjGjy7r/YX GhA8G9cx7430xa0FcwEr39iZZgEcVfsnvJ6VzUQfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyaDIoNLMnSp3EhR6Edz/SuvPx2QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk1YzliNDRjLTdhZjgtNDg0YS04OTVmLTc3MTIxMTIzZDQzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqOswDQYJKoZIhvcNAQELBQADggEBAHcuTW7KGtxst5ORCbUDt8oELZmS NRLd50A+RE1q1P01WudZW7vvA4Fc8Rg7tTNALSK96UW6e36Q51tLzcwgGcqbyskN fi3UG1+n7TmK8nNUHZcnWTilHtUuUNPUtBmtFZAwmvcfDe3kBHNeuRXWvtandEPY EcX9D/gIA1DEF1Fbt45UHC8u+wpeNRclHezMkI2FgipJvNkXFfUkycnWGvPVytXY xVZP3kqxK61tRSyKc5SqpE6F5sZ3kVF03TKLcPQj7fq2zzN46cQW7SR+aHTx+apc nBVN9j4H1S1ycmKdp/0P7YS3WY2jNxxKY0tjkPnhNlmVYEnA6TKbEhNoh5M= -----END CERTIFICATE-----Generated at Sat Oct 18 02:19:13 2025 by rpki-client