$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5dbb3d3-c36b-4e0d-83b8-a0b0db74a6ae.roa File: b5dbb3d3-c36b-4e0d-83b8-a0b0db74a6ae.roa (raw, json) Hash identifier: YoJcoxs5UR4EPRls8uXIIiDsbEJZfCRBm06Y1aiUSiI= Subject key identifier: 20:8E:D4:3A:E8:8A:88:9B:C0:FF:75:E4:F9:97:18:6F:17:17:11:BB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 63E304C613B00B81BC5460F035B57E798055720B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5dbb3d3-c36b-4e0d-83b8-a0b0db74a6ae.roa Signing time: Thu 25 Sep 2025 16:36:57 +0000 ROA not before: Thu 25 Sep 2025 16:36:57 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e3:04:c6:13:b0:0b:81:bc:54:60:f0:35:b5:7e:79:80:55:72:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 16:36:57 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c82b48bcdbc68f3ca411f0ad4ff01d89d90326e7e7e2055af200db15365214aa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8e:8e:12:db:fe:ed:07:be:af:27:fc:25:9a: 5a:f4:3f:2c:ac:d7:6d:b6:98:53:b6:a5:7f:06:c9: b4:b1:82:db:5c:fb:ac:f7:7e:c4:b0:45:5c:06:2a: 8d:5d:9f:e2:8b:b6:c7:20:b2:43:7d:64:00:fc:f6: 6b:a0:7f:2f:d9:41:dc:ed:28:76:b7:97:8d:7c:f0: 46:a3:6b:1f:51:a7:7a:4e:0c:02:30:85:37:f9:1e: 61:51:da:ee:3b:ac:34:1b:29:b3:ff:d5:f1:d4:20: 91:50:a6:83:50:37:77:f7:73:16:78:79:78:b3:8d: c9:1b:35:ee:cb:e8:34:1e:ff:aa:a6:fe:a3:1f:2c: 9d:17:f1:f3:52:04:a4:1b:3b:97:0f:de:09:ab:44: 0c:2f:a1:b2:df:82:a0:12:a9:a2:11:f5:74:fa:3a: 42:57:de:b0:50:18:07:80:f8:e8:1b:66:53:e1:09: c9:62:92:f1:58:33:0d:e5:1c:23:89:b5:61:63:e9: de:14:86:cd:f2:51:e6:18:08:d1:2c:a0:f7:85:6f: fa:f7:15:91:5c:8e:5e:80:33:ee:1d:76:62:dc:38: 11:e0:35:9a:3c:e1:7e:e8:90:24:c3:05:8e:c0:13: 68:a6:02:19:c5:a8:4a:2d:78:61:24:c6:9d:01:00: 92:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8E:D4:3A:E8:8A:88:9B:C0:FF:75:E4:F9:97:18:6F:17:17:11:BB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5dbb3d3-c36b-4e0d-83b8-a0b0db74a6ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.128.0/17 Signature Algorithm: sha256WithRSAEncryption 71:25:8c:a3:16:90:d8:81:ef:dc:8d:5b:5d:fc:6f:95:8b:b2: 4d:88:1c:13:12:d8:f1:33:12:8b:c0:90:37:1f:93:0a:62:b5: 66:c5:df:67:ce:b8:d3:ad:b2:d0:d4:46:4d:a0:1e:c1:d4:27: 76:dc:e5:c5:96:71:3f:29:88:df:7b:27:67:7d:bc:8b:4d:67: 16:f5:60:88:a8:de:5d:24:9f:e6:eb:9f:bb:21:9b:5c:af:25: b9:50:b9:72:7c:26:ac:6f:a8:d8:db:0a:91:d3:e3:24:86:2b: f5:69:ff:c0:db:e0:dc:31:61:f4:c6:46:18:19:5f:2d:19:2a: e0:b3:97:dd:15:7d:26:42:ad:15:16:08:5c:bf:53:42:c0:48: fb:b2:2b:60:4e:d6:5e:c8:80:b1:35:fa:04:c2:9a:94:f0:52: a9:03:3d:41:19:8a:f7:a7:1c:11:15:55:b8:dc:80:b4:e9:99: 9e:b4:58:6b:2e:86:f9:aa:a0:f4:92:2e:5c:29:67:d2:65:c2: 4e:fc:f4:71:e6:c3:e0:93:bc:e0:ff:d9:18:0e:85:16:32:ce: fe:ef:84:49:17:6c:c8:eb:b4:ea:01:51:6b:11:bd:ec:e8:32: fc:0f:f3:ec:62:ec:f3:76:8a:a8:63:99:2b:fa:84:34:c2:a9: c0:68:58:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY+MExhOwC4G8VGDwNbV+eYBVcgswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTYzNjU3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjODJiNDhiY2RiYzY4ZjNjYTQxMWYwYWQ0ZmYwMWQ4OWQ5 MDMyNmU3ZTdlMjA1NWFmMjAwZGIxNTM2NTIxNGFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkjo4S2/7tB76vJ/wlmlr0Pyys1222mFO2pX8GybSxgttc +6z3fsSwRVwGKo1dn+KLtscgskN9ZAD89mugfy/ZQdztKHa3l4188Eajax9Rp3pO DAIwhTf5HmFR2u47rDQbKbP/1fHUIJFQpoNQN3f3cxZ4eXizjckbNe7L6DQe/6qm /qMfLJ0X8fNSBKQbO5cP3gmrRAwvobLfgqASqaIR9XT6OkJX3rBQGAeA+OgbZlPh CclikvFYMw3lHCOJtWFj6d4Uhs3yUeYYCNEsoPeFb/r3FZFcjl6AM+4ddmLcOBHg NZo84X7okCTDBY7AE2imAhnFqEoteGEkxp0BAJJFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUII7UOuiKiJvA/3Xk+ZcYbxcXEbswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1ZGJiM2QzLWMzNmItNGUwZC04M2I4LWEwYjBkYjc0YTZhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcDrIAwDQYJKoZIhvcNAQELBQADggEBAHEljKMWkNiB79yNW138b5WLsk2I HBMS2PEzEovAkDcfkwpitWbF32fOuNOtstDURk2gHsHUJ3bc5cWWcT8piN97J2d9 vItNZxb1YIio3l0kn+brn7shm1yvJblQuXJ8JqxvqNjbCpHT4ySGK/Vp/8Db4Nwx YfTGRhgZXy0ZKuCzl90VfSZCrRUWCFy/U0LASPuyK2BO1l7IgLE1+gTCmpTwUqkD PUEZivenHBEVVbjcgLTpmZ60WGsuhvmqoPSSLlwpZ9Jlwk789HHmw+CTvOD/2RgO hRYyzv7vhEkXbMjrtOoBUWsRvezoMvwP8+xi7PN2iqhjmSv6hDTCqcBoWOg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:20:45 2025 by rpki-client