$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53d6062e-ef60-4119-8d03-62d254632f1d.roa File: 53d6062e-ef60-4119-8d03-62d254632f1d.roa (raw, json) Hash identifier: 6CE+08b9j6vmABwOstEDuvxUePk7jkO/hswF/73jiH8= Subject key identifier: AA:CF:A9:D5:8A:79:F7:0E:49:03:4B:76:64:AE:69:2D:79:DF:4E:F7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 253241DDC497158BE4C2E40083EC0B18D5669CB0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53d6062e-ef60-4119-8d03-62d254632f1d.roa Signing time: Mon 20 Oct 2025 13:40:13 +0000 ROA not before: Mon 20 Oct 2025 13:40:13 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:32:41:dd:c4:97:15:8b:e4:c2:e4:00:83:ec:0b:18:d5:66:9c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 13:40:13 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=2b28c713d7960844cdb3c5c30168258b2a1dd67699f9a3f60f84e75abda1fe70, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:18:b9:ca:80:a6:94:28:38:dd:58:d2:99: 6f:88:14:6b:c9:3b:a1:69:97:2c:ec:8a:e5:de:af: 9c:d0:3f:a3:40:69:ce:7c:79:91:1b:03:86:ea:23: 2c:b8:b3:6a:b3:35:c5:ec:31:38:ba:9a:17:7d:3a: d9:38:8d:05:c8:c3:92:8e:bc:da:c4:00:7d:d9:6c: 11:7a:8e:a2:ff:b6:6c:c8:a3:4e:a9:15:cd:ef:92: ec:49:db:eb:cd:06:34:06:ac:21:ce:eb:39:eb:7a: fa:71:e4:ea:19:c1:9f:58:69:9a:42:cc:e9:f5:04: 85:52:5a:eb:15:ba:69:bb:e3:7c:55:5e:cf:9f:72: 05:30:de:ce:26:36:57:32:ad:d8:25:9e:3a:e2:dc: 43:99:80:49:42:f8:56:c3:d9:60:34:44:66:97:ea: 77:9f:f3:4b:e4:fd:cf:be:a6:d2:9b:36:aa:85:36: ed:9e:7d:70:43:5a:f5:e3:a1:af:c4:fb:a4:d8:c0: b2:77:4d:f3:15:58:af:a3:71:27:fb:d2:95:60:f6: 73:55:c5:a5:6c:b4:b1:d1:72:6e:e7:27:31:74:19: 37:91:9d:d8:f6:02:a8:70:76:83:40:0d:b6:bb:2e: e8:c1:bd:8b:49:be:17:59:55:50:50:c4:25:51:ea: f7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CF:A9:D5:8A:79:F7:0E:49:03:4B:76:64:AE:69:2D:79:DF:4E:F7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53d6062e-ef60-4119-8d03-62d254632f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.138.0/23 Signature Algorithm: sha256WithRSAEncryption 02:39:b4:5e:4a:1b:fd:90:76:88:f3:bf:24:38:15:9b:c0:e3: 29:6e:6d:8a:f7:56:b9:d0:52:1d:b4:c7:47:93:c1:4e:74:89: 75:3d:e4:4b:16:31:89:62:84:fd:1c:55:85:e6:95:a1:58:00: a8:23:b8:20:72:29:6e:6b:83:22:7d:d4:17:df:7f:df:68:55: 51:d1:da:47:55:f1:03:15:bc:53:57:6f:97:60:22:48:9b:5e: cc:fd:33:e1:d8:3f:64:05:aa:82:c2:3d:38:56:75:4d:82:cf: 65:69:1b:8a:71:8c:1b:6b:f2:e4:ad:85:54:15:0e:7d:e8:35: 64:e0:c4:57:e9:e0:29:5a:d5:64:40:38:8d:06:c2:1c:7b:51: 17:ee:01:e0:13:65:ab:49:d2:e9:cf:44:07:b9:7a:c9:78:6b: 49:e7:5a:b7:4e:2f:2f:03:b3:dd:b9:e7:00:16:7f:74:52:70: 3d:bb:64:93:69:2f:85:2d:6d:d2:12:d3:d7:59:c3:19:bb:d8: 1c:27:a3:2d:76:b0:b3:4a:85:d3:76:9d:ea:fe:d0:34:a0:63: c2:46:69:a9:b2:e9:7a:c1:ef:2a:0b:ed:53:a2:04:95:7d:96: c7:86:49:06:07:38:45:de:30:14:23:00:f2:ae:cf:cc:94:a1: c0:42:a5:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJTJB3cSXFYvkwuQAg+wLGNVmnLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMTM0MDEzWhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjI4YzcxM2Q3OTYwODQ0Y2RiM2M1YzMwMTY4MjU4YjJh MWRkNjc2OTlmOWEzZjYwZjg0ZTc1YWJkYTFmZTcwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtwBi5yoCmlCg43VjSmW+IFGvJO6FplyzsiuXer5zQP6NA ac58eZEbA4bqIyy4s2qzNcXsMTi6mhd9Otk4jQXIw5KOvNrEAH3ZbBF6jqL/tmzI o06pFc3vkuxJ2+vNBjQGrCHO6znrevpx5OoZwZ9YaZpCzOn1BIVSWusVumm743xV Xs+fcgUw3s4mNlcyrdglnjri3EOZgElC+FbD2WA0RGaX6nef80vk/c++ptKbNqqF Nu2efXBDWvXjoa/E+6TYwLJ3TfMVWK+jcSf70pVg9nNVxaVstLHRcm7nJzF0GTeR ndj2AqhwdoNADba7LujBvYtJvhdZVVBQxCVR6vflAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqs+p1Yp59w5JA0t2ZK5pLXnfTvcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUzZDYwNjJlLWVmNjAtNDExOS04ZDAzLTYyZDI1NDYzMmYxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrYowDQYJKoZIhvcNAQELBQADggEBAAI5tF5KG/2QdojzvyQ4FZvA4ylu bYr3VrnQUh20x0eTwU50iXU95EsWMYlihP0cVYXmlaFYAKgjuCByKW5rgyJ91Bff f99oVVHR2kdV8QMVvFNXb5dgIkibXsz9M+HYP2QFqoLCPThWdU2Cz2VpG4pxjBtr 8uSthVQVDn3oNWTgxFfp4Cla1WRAOI0Gwhx7URfuAeATZatJ0unPRAe5esl4a0nn WrdOLy8Ds9255wAWf3RScD27ZJNpL4UtbdIS09dZwxm72Bwnoy12sLNKhdN2ner+ 0DSgY8JGaamy6XrB7yoL7VOiBJV9lseGSQYHOEXeMBQjAPKuz8yUocBCpa8= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:31 2025 by rpki-client