$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b2b6277-0699-40dd-838e-978c0deef6d2.roa File: 3b2b6277-0699-40dd-838e-978c0deef6d2.roa (raw, json) Hash identifier: LTn3qOQNwdibPleWOhtdZqSeUDFsH1McWbVBZfNoJAI= Subject key identifier: BC:3F:07:3D:BB:C5:57:30:5A:70:AD:09:51:23:07:FE:C6:BA:91:CE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 173966B3BDBB493202657C7D0115F9C63358AE09 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b2b6277-0699-40dd-838e-978c0deef6d2.roa Signing time: Sat 18 Oct 2025 10:11:22 +0000 ROA not before: Sat 18 Oct 2025 10:11:22 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:39:66:b3:bd:bb:49:32:02:65:7c:7d:01:15:f9:c6:33:58:ae:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 10:11:22 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=caa02c5557b3afffd93ef278f5098ce72a7e33e891fb1bdf90113d1d81d3f7ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:80:58:83:d3:e0:66:42:cf:a0:5e:d9:f5: 8d:cb:99:28:0d:ba:ad:5d:a3:85:ad:c5:58:bb:cc: 3e:92:2f:e1:11:91:d1:f7:65:1e:26:2c:5e:84:5d: e5:2b:49:52:a5:11:d3:39:fe:31:eb:fe:dc:dd:fc: 7f:af:d7:23:00:aa:2e:09:d8:e7:15:fc:7c:e7:46: 80:97:72:9f:c9:7f:f1:7c:f7:08:ee:59:f9:47:4b: c9:87:3e:4b:39:31:c0:94:9d:86:07:a7:d1:91:89: 16:05:fd:c4:f1:12:cf:47:b1:b9:0e:9d:f4:41:5a: 07:ba:b2:e9:f7:9f:00:df:6e:30:27:ae:1b:18:55: 5e:b1:a1:4d:5e:db:19:0d:76:df:29:d4:8c:28:74: e7:0b:e1:e5:b4:8b:32:7d:ff:bd:15:15:be:42:d0: 1a:fe:ed:2a:c1:30:1f:62:ad:3e:81:46:d3:6d:35: b1:53:85:e8:3d:bc:b0:ec:9a:d4:d9:1e:56:0b:f2: b9:79:32:5d:70:5b:3e:53:2c:5c:29:14:d3:20:b0: a0:3e:86:66:6a:cf:a6:90:c0:2b:d5:ec:06:b3:f9: 05:f7:e4:41:a0:ad:ba:e9:71:63:12:43:b0:46:e5: 6d:dd:68:f5:a0:98:28:36:bb:8b:b9:01:28:dc:a9: f6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3F:07:3D:BB:C5:57:30:5A:70:AD:09:51:23:07:FE:C6:BA:91:CE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b2b6277-0699-40dd-838e-978c0deef6d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.10.0/24 Signature Algorithm: sha256WithRSAEncryption 93:62:51:a7:2f:3d:df:65:e6:f5:09:5a:6a:86:ff:cc:6d:4f: 00:10:39:2c:dd:46:19:65:58:e3:11:0d:96:a2:e1:42:32:14: e3:ea:43:d6:ea:84:a9:51:84:c9:08:dc:83:02:b0:b3:3b:48: f9:6b:af:de:95:e9:4b:40:bf:48:0c:16:47:a7:75:01:4f:1e: 4c:7a:5c:44:ca:5b:82:56:91:98:4e:1d:ed:1f:4b:59:7c:ec: d8:62:57:14:bf:1e:6f:c0:ea:d4:26:44:75:e3:d7:16:8f:8a: 5a:21:5b:2c:a5:fd:45:d1:7c:bf:29:b2:66:ce:4d:ae:78:5f: c5:9c:54:c7:5b:0d:09:61:1f:19:fb:f1:6e:ac:32:9b:b5:be: 17:95:86:17:43:56:a4:c9:c5:91:56:22:1e:8f:87:40:dc:d7: 04:ba:ad:51:e3:94:c4:43:82:b3:66:ec:07:5c:70:da:bd:fc: 61:58:e2:50:db:18:1d:2b:e5:4c:b9:4c:ea:b2:e0:f7:57:10: f2:95:2a:e0:d0:83:a1:21:be:49:52:83:18:8d:a6:c9:6f:f1: ef:d8:87:b7:9a:e8:86:72:36:bb:a4:1d:6b:9d:8b:bf:c0:53: f9:83:83:4a:21:00:f4:86:0f:fd:a3:2a:6b:d6:fb:4f:94:72: 29:8d:8d:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFzlms727STICZXx9ARX5xjNYrgkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTAxMTIyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYWEwMmM1NTU3YjNhZmZmZDkzZWYyNzhmNTA5OGNlNzJh N2UzM2U4OTFmYjFiZGY5MDExM2QxZDgxZDNmN2NlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChuYBYg9PgZkLPoF7Z9Y3LmSgNuq1do4WtxVi7zD6SL+ER kdH3ZR4mLF6EXeUrSVKlEdM5/jHr/tzd/H+v1yMAqi4J2OcV/HznRoCXcp/Jf/F8 9wjuWflHS8mHPks5McCUnYYHp9GRiRYF/cTxEs9HsbkOnfRBWge6sun3nwDfbjAn rhsYVV6xoU1e2xkNdt8p1IwodOcL4eW0izJ9/70VFb5C0Br+7SrBMB9irT6BRtNt NbFTheg9vLDsmtTZHlYL8rl5Ml1wWz5TLFwpFNMgsKA+hmZqz6aQwCvV7Aaz+QX3 5EGgrbrpcWMSQ7BG5W3daPWgmCg2u4u5ASjcqfZVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvD8HPbvFVzBacK0JUSMH/sa6kc4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiMmI2Mjc3LTA2OTktNDBkZC04MzhlLTk3OGMwZGVlZjZkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0LgowDQYJKoZIhvcNAQELBQADggEBAJNiUacvPd9l5vUJWmqG/8xtTwAQ OSzdRhllWOMRDZai4UIyFOPqQ9bqhKlRhMkI3IMCsLM7SPlrr96V6UtAv0gMFken dQFPHkx6XETKW4JWkZhOHe0fS1l87NhiVxS/Hm/A6tQmRHXj1xaPilohWyyl/UXR fL8psmbOTa54X8WcVMdbDQlhHxn78W6sMpu1vheVhhdDVqTJxZFWIh6Ph0Dc1wS6 rVHjlMRDgrNm7AdccNq9/GFY4lDbGB0r5Uy5TOqy4PdXEPKVKuDQg6EhvklSgxiN pslv8e/Yh7ea6IZyNrukHWudi7/AU/mDg0ohAPSGD/2jKmvW+0+UcimNjQE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:48:49 2025 by rpki-client