$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac76531c-1616-4611-bf85-68188445f88e.roa File: ac76531c-1616-4611-bf85-68188445f88e.roa (raw, json) Hash identifier: 2d0gMfMrthdkP8vRx8Rgb3NOgVvpZn3RZh8VVgBAX/I= Subject key identifier: A4:85:6C:63:FD:29:6E:D7:FE:20:C1:4B:7B:7F:47:D3:28:AD:58:DE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 09913C20795F61DDCCBC28DF942D870B71E7AA06 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac76531c-1616-4611-bf85-68188445f88e.roa Signing time: Thu 25 Sep 2025 19:15:04 +0000 ROA not before: Thu 25 Sep 2025 19:15:04 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:91:3c:20:79:5f:61:dd:cc:bc:28:df:94:2d:87:0b:71:e7:aa:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:15:04 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=16aad7fcb45c08933b1a9d6d62ce8ba1771c9d13228e055ecd65c4fb64d3e504, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:77:71:4d:ee:cc:d4:34:2d:af:d1:38:99:af: d6:e2:71:36:46:16:dc:0a:2d:71:87:f8:5f:df:a1: 5b:54:bd:b2:84:c2:2d:89:27:dc:8b:29:09:ef:ff: 11:68:b5:13:77:6b:1e:0d:ad:8b:94:74:f1:ce:62: 62:11:0f:12:7e:af:b5:b4:a3:e4:92:cb:83:67:87: 07:6b:53:2f:13:fa:c4:a5:64:19:db:c9:57:a1:8c: 73:a6:78:b1:17:85:24:32:19:a0:c3:ca:12:cb:c2: d4:76:fc:be:81:48:30:33:3b:4d:22:73:62:a9:71: 61:2f:e5:a6:df:bb:72:a9:fc:3f:a7:48:c9:f2:c1: 3e:d6:9c:23:24:c5:43:83:ff:ec:54:f1:a4:04:22: 50:f7:aa:e9:e6:9c:77:db:6f:54:a9:8e:ea:76:99: ef:34:df:7d:93:99:6a:53:78:c6:c6:83:ea:f7:8b: 44:18:9b:85:92:62:25:04:7a:b7:55:0c:28:91:f9: 87:a7:59:d7:e0:a3:1f:44:27:eb:db:97:16:28:9b: de:5d:72:8f:eb:08:29:e1:d9:ae:51:94:9d:9a:d9: 48:2a:b0:92:6d:00:cb:e4:16:d5:be:d4:c2:a4:c7: 62:c1:3f:96:16:72:78:58:32:e5:83:91:d5:c6:d6: d5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:85:6C:63:FD:29:6E:D7:FE:20:C1:4B:7B:7F:47:D3:28:AD:58:DE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac76531c-1616-4611-bf85-68188445f88e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.183.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:89:ec:03:62:d2:29:b4:b0:96:5e:bf:97:2a:fe:77:34:cb: 62:6a:a6:87:b5:26:e2:27:62:84:10:54:2f:5e:74:f0:ce:a7: 41:6c:38:b7:0f:39:94:3f:c5:a8:a7:b5:0a:85:0d:a6:2e:07: 15:eb:8a:34:f1:0c:ea:76:9d:5b:8b:c7:f0:23:78:75:ba:2d: 0f:be:f5:5b:6f:b4:9b:cf:cf:6b:d3:2a:66:f8:20:34:f1:ef: ae:66:3c:4f:28:c2:ef:2c:8b:a9:d4:72:83:83:05:6e:0d:62: 81:d5:43:c6:fc:55:ba:91:2a:b2:8d:61:ad:3f:62:ae:3b:04: 9f:36:02:6d:af:e4:b7:8e:23:1b:c5:91:8d:ff:1c:9a:97:91: db:6e:fb:9b:15:16:4c:08:fc:85:d6:7e:29:d6:f0:0d:7e:38: b2:16:9b:96:ca:8e:b8:06:d2:a8:14:aa:bd:cf:ab:9d:93:c1: 50:d2:b6:0e:97:d3:55:b1:03:cb:a8:26:f3:b4:9e:22:01:3c: 01:9b:aa:dd:3d:f0:48:da:58:7c:53:0d:df:50:b7:21:d1:c4: 48:37:01:59:b7:1a:5c:d8:84:32:ad:59:f0:6c:47:8a:08:15: a7:84:bb:18:a7:87:29:41:76:59:68:cd:2d:91:57:52:02:24: fe:9b:3b:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCZE8IHlfYd3MvCjflC2HC3HnqgYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkxNTA0WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNmFhZDdmY2I0NWMwODkzM2IxYTlkNmQ2MmNlOGJhMTc3 MWM5ZDEzMjI4ZTA1NWVjZDY1YzRmYjY0ZDNlNTA0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnd3FN7szUNC2v0TiZr9bicTZGFtwKLXGH+F/foVtUvbKE wi2JJ9yLKQnv/xFotRN3ax4NrYuUdPHOYmIRDxJ+r7W0o+SSy4NnhwdrUy8T+sSl ZBnbyVehjHOmeLEXhSQyGaDDyhLLwtR2/L6BSDAzO00ic2KpcWEv5abfu3Kp/D+n SMnywT7WnCMkxUOD/+xU8aQEIlD3qunmnHfbb1Spjup2me80332TmWpTeMbGg+r3 i0QYm4WSYiUEerdVDCiR+YenWdfgox9EJ+vblxYom95dco/rCCnh2a5RlJ2a2Ugq sJJtAMvkFtW+1MKkx2LBP5YWcnhYMuWDkdXG1tXXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpIVsY/0pbtf+IMFLe39H0yitWN4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjNzY1MzFjLTE2MTYtNDYxMS1iZjg1LTY4MTg4NDQ1Zjg4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqLcwDQYJKoZIhvcNAQELBQADggEBAJuJ7ANi0im0sJZev5cq/nc0y2Jq poe1JuInYoQQVC9edPDOp0FsOLcPOZQ/xaintQqFDaYuBxXrijTxDOp2nVuLx/Aj eHW6LQ++9VtvtJvPz2vTKmb4IDTx765mPE8owu8si6nUcoODBW4NYoHVQ8b8VbqR KrKNYa0/Yq47BJ82Am2v5LeOIxvFkY3/HJqXkdtu+5sVFkwI/IXWfinW8A1+OLIW m5bKjrgG0qgUqr3Pq52TwVDStg6X01WxA8uoJvO0niIBPAGbqt098EjaWHxTDd9Q tyHRxEg3AVm3GlzYhDKtWfBsR4oIFaeEuxinhylBdllozS2RV1ICJP6bOyI= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:01 2025 by rpki-client