$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3870ae3a-c60d-47a0-8fcd-701b22a22955.roa File: 3870ae3a-c60d-47a0-8fcd-701b22a22955.roa (raw, json) Hash identifier: Qrz34C2Io/r4602uvhqr9lcmhFHg/DItpNJ96FKP4/I= Subject key identifier: 4A:75:BC:49:11:E0:5B:8B:FC:9D:DE:4A:FC:95:C3:10:41:F0:FA:9E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1DF3D3452651389F067B08A162A226DAB9496682 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3870ae3a-c60d-47a0-8fcd-701b22a22955.roa Signing time: Sat 18 Oct 2025 06:10:13 +0000 ROA not before: Sat 18 Oct 2025 06:10:13 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f3:d3:45:26:51:38:9f:06:7b:08:a1:62:a2:26:da:b9:49:66:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:10:13 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=232adf1757b49b9d9439c67bda4eb39b508d728a951facf93338b84bf2cb73fb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:09:77:b7:6c:c4:0d:91:c3:9d:61:41:a6: 42:e8:b3:ad:5f:4f:7a:6d:06:95:b6:21:7b:70:a9: 29:a5:c9:02:0f:4f:bd:ff:32:1d:ab:e6:06:b0:b3: 4e:71:ce:2a:e7:72:7c:53:47:01:af:1a:80:e8:ef: 1a:4e:0c:eb:29:67:cc:f4:c1:bc:28:45:5a:00:a9: 26:71:6e:c2:66:33:a5:2d:2d:87:32:e3:56:16:43: a0:7c:f3:f0:a8:34:97:82:26:9a:ba:ed:61:55:90: 76:48:45:cc:62:56:95:ab:23:c7:05:d6:9c:17:49: 57:0d:1f:2a:c2:64:08:91:cb:55:4d:aa:cb:22:e2: 19:43:7c:e0:e1:d3:e6:dc:62:31:9c:97:b0:3e:38: 95:b1:a7:39:f3:54:e4:3e:57:34:5b:a1:d1:08:73: 7f:fb:03:d4:01:22:e7:1c:29:e3:65:a0:fe:db:ad: 3a:c5:75:ad:b5:b6:5a:88:74:e8:7f:49:ab:1b:15: 70:c4:f1:9f:41:79:95:6b:d5:6a:b1:ed:3d:9e:a8: 52:00:6d:53:57:72:67:e8:8d:59:02:86:8c:26:39: d8:4c:99:00:4a:d0:24:94:30:8d:bd:74:b0:ea:94: 3a:58:d6:2f:f3:9b:5f:fc:84:c7:7d:f7:7c:cd:e4: fb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:75:BC:49:11:E0:5B:8B:FC:9D:DE:4A:FC:95:C3:10:41:F0:FA:9E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3870ae3a-c60d-47a0-8fcd-701b22a22955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.142.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:c5:3e:da:7e:14:66:d0:c7:53:fb:09:40:36:b3:d7:bc:75: 59:5c:86:9f:65:5d:2c:92:c4:64:3f:4d:b4:89:ff:13:ba:39: 49:29:af:21:bb:e5:64:d0:8d:31:5a:2b:60:e9:09:f2:2f:ad: 20:df:e3:22:d9:33:50:bd:c9:b1:e9:32:d8:3e:c7:33:26:a4: ef:0b:e2:29:24:d3:25:5b:68:44:04:30:67:76:c0:18:a2:a6: 4c:ca:6f:f0:54:8c:31:fc:a3:48:ca:31:e2:19:6b:cd:c0:a6: 86:f2:e6:5d:8e:0e:41:99:5d:62:fe:a2:93:d0:e8:46:4d:31: 62:d5:1a:7e:43:9d:0a:a9:21:b9:2f:be:ac:65:09:63:90:3c: 8b:1d:0d:68:a2:25:0f:a7:e4:1e:c3:c9:38:67:3a:80:86:bc: 10:f2:47:90:35:4b:84:10:f3:9f:25:0c:60:cf:8b:db:5e:d2: 43:97:d2:95:cf:b5:0e:0f:0f:31:a4:09:25:10:20:72:1b:7b: 86:fa:1b:83:e7:55:01:7e:39:7f:d8:77:75:25:40:15:15:b7: 2a:a2:91:af:5e:68:57:55:9f:f4:9e:c9:05:40:90:46:67:15: c5:63:36:bd:84:1b:72:58:ce:66:35:e5:40:5d:03:7b:92:12: 6d:7f:72:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHfPTRSZROJ8GewihYqIm2rlJZoIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYxMDEzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzJhZGYxNzU3YjQ5YjlkOTQzOWM2N2JkYTRlYjM5YjUw OGQ3MjhhOTUxZmFjZjkzMzM4Yjg0YmYyY2I3M2ZiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMNgl3t2zEDZHDnWFBpkLos61fT3ptBpW2IXtwqSmlyQIP T73/Mh2r5gaws05xzirncnxTRwGvGoDo7xpODOspZ8z0wbwoRVoAqSZxbsJmM6Ut LYcy41YWQ6B88/CoNJeCJpq67WFVkHZIRcxiVpWrI8cF1pwXSVcNHyrCZAiRy1VN qssi4hlDfODh0+bcYjGcl7A+OJWxpznzVOQ+VzRbodEIc3/7A9QBIuccKeNloP7b rTrFda21tlqIdOh/SasbFXDE8Z9BeZVr1Wqx7T2eqFIAbVNXcmfojVkChowmOdhM mQBK0CSUMI29dLDqlDpY1i/zm1/8hMd993zN5PtXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSnW8SRHgW4v8nd5K/JXDEEHw+p4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM4NzBhZTNhLWM2MGQtNDdhMC04ZmNkLTcwMWIyMmEyMjk1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VI4wDQYJKoZIhvcNAQELBQADggEBAD7FPtp+FGbQx1P7CUA2s9e8dVlc hp9lXSySxGQ/TbSJ/xO6OUkpryG75WTQjTFaK2DpCfIvrSDf4yLZM1C9ybHpMtg+ xzMmpO8L4ikk0yVbaEQEMGd2wBiipkzKb/BUjDH8o0jKMeIZa83Apoby5l2ODkGZ XWL+opPQ6EZNMWLVGn5DnQqpIbkvvqxlCWOQPIsdDWiiJQ+n5B7DyThnOoCGvBDy R5A1S4QQ858lDGDPi9te0kOX0pXPtQ4PDzGkCSUQIHIbe4b6G4PnVQF+OX/Yd3Ul QBUVtyqika9eaFdVn/SeyQVAkEZnFcVjNr2EG3JYzmY15UBdA3uSEm1/cqk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:59 2025 by rpki-client