$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2897102-3080-4332-b036-15417c7c6fb7.roa File: a2897102-3080-4332-b036-15417c7c6fb7.roa (raw, json) Hash identifier: x8Vt50xpQfn9+3KynJnc5XB4dSvbfoEck4i70IizRxY= Subject key identifier: D8:51:0E:0C:F2:0F:2E:D0:0C:87:86:29:B5:25:92:22:AD:9D:04:A5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5F7C28203529C2C63612A20B55FC57A9948F1274 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2897102-3080-4332-b036-15417c7c6fb7.roa Signing time: Thu 25 Sep 2025 22:47:23 +0000 ROA not before: Thu 25 Sep 2025 22:47:23 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7c:28:20:35:29:c2:c6:36:12:a2:0b:55:fc:57:a9:94:8f:12:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:47:23 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=5d2d0ef5e658fb186712f5612c6d4bb0acb42ac608c1e289ee95f6288b4a9e2d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:42:83:23:f7:35:8b:d4:40:4a:d2:70:e1: 25:86:31:54:cc:ba:d7:0c:d8:6c:c7:0b:0d:08:3a: 59:c8:4e:c7:f7:e3:51:64:bb:e8:cb:01:fd:b1:38: d8:78:45:69:2e:a5:e1:59:c1:bf:e4:c2:93:d1:f7: 76:53:95:68:ac:55:f3:71:5e:37:be:5a:25:6b:de: 71:53:21:32:5f:98:eb:b3:92:db:4d:31:01:ab:3a: 2d:a9:37:4b:5a:55:db:41:75:6f:55:4f:19:a3:dc: f9:fb:ad:96:0a:f3:9a:de:5a:43:6e:b3:c8:c1:69: 68:65:a5:e7:f5:18:a9:ee:1c:71:65:47:80:92:e2: ab:03:b3:b1:13:63:41:72:c8:49:59:be:55:e7:5d: d6:c0:4b:79:1b:89:13:d0:ba:97:e1:6d:2c:b9:ea: ae:53:7e:3d:56:5a:5e:8f:cc:5d:2b:33:cb:c1:cd: 8e:d2:7c:25:6d:53:37:0e:7c:65:b9:c0:08:da:be: 1b:de:bc:aa:8b:68:87:eb:c8:6e:20:0a:63:c4:fe: 75:cf:56:27:c6:36:32:2f:0a:2f:22:01:3d:b8:9a: 2d:90:9a:5c:9e:e6:84:aa:74:f3:dc:3d:b9:97:37: 14:55:e0:63:59:dc:c9:5b:31:cf:dc:ab:6d:12:7e: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:51:0E:0C:F2:0F:2E:D0:0C:87:86:29:B5:25:92:22:AD:9D:04:A5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2897102-3080-4332-b036-15417c7c6fb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.94.0/23 Signature Algorithm: sha256WithRSAEncryption 82:2c:48:33:f0:2f:68:c9:fd:10:ef:6d:fa:0c:c4:9e:79:ba: 8f:89:d4:ec:d6:4b:71:9d:3d:49:31:32:f7:7a:e1:4d:0d:e6: d3:96:d0:08:4e:49:a4:a8:8c:d2:25:d8:c2:1b:dc:5b:37:67: 08:80:2d:9d:23:c5:e2:c0:5f:7b:ee:67:b7:f6:e0:71:d8:c0: 1e:ec:1a:26:13:77:59:0b:7d:ef:5d:f5:00:0f:7e:90:6d:71: 7e:71:78:7e:88:f3:0e:11:eb:5d:10:bb:c3:d2:b8:50:ef:7a: ea:d5:56:83:06:d0:d5:ec:cf:70:7d:eb:74:a5:9d:74:bd:bd: 40:44:27:52:99:ac:88:9f:39:9c:f8:b0:09:5c:ea:75:9b:29: 3c:0a:ac:0c:c6:79:71:38:b8:a1:7c:0c:b9:7d:20:ad:86:aa: c8:ca:47:36:fd:c3:c1:25:5a:0c:3d:20:69:57:99:6b:f6:bf: c4:59:19:3a:74:6c:2c:3d:cd:ef:9c:e3:34:8a:c9:69:c3:87: 4f:07:10:6c:c6:66:f5:b9:2b:ae:91:b4:b0:72:37:28:d4:15: 89:76:81:8f:ca:66:9a:d2:35:0a:62:28:77:e2:6d:a5:40:78: f0:16:d1:e3:e3:4d:4e:06:7e:26:f3:86:f3:0f:71:7e:b3:4c: 38:7d:76:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX3woIDUpwsY2EqILVfxXqZSPEnQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjI0NzIzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDJkMGVmNWU2NThmYjE4NjcxMmY1NjEyYzZkNGJiMGFj YjQyYWM2MDhjMWUyODllZTk1ZjYyODhiNGE5ZTJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCx0KDI/c1i9RAStJw4SWGMVTMutcM2GzHCw0IOlnITsf3 41Fku+jLAf2xONh4RWkupeFZwb/kwpPR93ZTlWisVfNxXje+WiVr3nFTITJfmOuz kttNMQGrOi2pN0taVdtBdW9VTxmj3Pn7rZYK85reWkNus8jBaWhlpef1GKnuHHFl R4CS4qsDs7ETY0FyyElZvlXnXdbAS3kbiRPQupfhbSy56q5Tfj1WWl6PzF0rM8vB zY7SfCVtUzcOfGW5wAjavhvevKqLaIfryG4gCmPE/nXPVifGNjIvCi8iAT24mi2Q mlye5oSqdPPcPbmXNxRV4GNZ3MlbMc/cq20Sfni7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2FEODPIPLtAMh4YptSWSIq2dBKUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyODk3MTAyLTMwODAtNDMzMi1iMDM2LTE1NDE3YzdjNmZiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqF4wDQYJKoZIhvcNAQELBQADggEBAIIsSDPwL2jJ/RDvbfoMxJ55uo+J 1OzWS3GdPUkxMvd64U0N5tOW0AhOSaSojNIl2MIb3Fs3ZwiALZ0jxeLAX3vuZ7f2 4HHYwB7sGiYTd1kLfe9d9QAPfpBtcX5xeH6I8w4R610Qu8PSuFDveurVVoMG0NXs z3B963SlnXS9vUBEJ1KZrIifOZz4sAlc6nWbKTwKrAzGeXE4uKF8DLl9IK2GqsjK Rzb9w8ElWgw9IGlXmWv2v8RZGTp0bCw9ze+c4zSKyWnDh08HEGzGZvW5K66RtLBy NyjUFYl2gY/KZprSNQpiKHfibaVAePAW0ePjTU4GfibzhvMPcX6zTDh9dn0= -----END CERTIFICATE-----Generated at Fri Oct 17 23:56:31 2025 by rpki-client