$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c75f515c-3f2b-46dd-b80e-ab098aaf4506.roa File: c75f515c-3f2b-46dd-b80e-ab098aaf4506.roa (raw, json) Hash identifier: E9X+7QqyOhMpVrMVqlSYLn4iUJDU2KKiO3zGHEPnIl8= Subject key identifier: E5:B8:C1:D6:F8:C6:36:5E:72:30:F8:82:A2:E9:0D:8A:CB:91:90:D5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 61516715A76E93B126280C8A0992BB121AA87665 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c75f515c-3f2b-46dd-b80e-ab098aaf4506.roa Signing time: Thu 25 Sep 2025 21:22:09 +0000 ROA not before: Thu 25 Sep 2025 21:22:09 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:51:67:15:a7:6e:93:b1:26:28:0c:8a:09:92:bb:12:1a:a8:76:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 21:22:09 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=bd6d4702648a6f4ab2b1c388cf436c4a49f73b8f1d79731e47e0b4e92d6ce0d1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:12:8d:59:a1:f6:33:95:ca:5a:aa:75:4d:55: 6c:c7:60:1f:ae:76:c2:01:ee:92:03:5d:b9:e5:b2: d7:4c:5b:69:ca:a6:f3:84:f3:8a:31:77:ed:ea:0a: 45:0d:69:20:61:0d:90:e7:35:ce:2c:a2:3b:8f:54: 90:4f:c1:e5:c8:02:6f:3d:8a:03:cc:9d:3a:36:d9: b9:fb:c9:06:6f:04:c3:df:ca:52:91:d4:c1:6d:cb: 98:e2:5a:20:00:12:84:58:04:f2:c4:c2:da:8c:fe: 30:d9:1e:6a:47:15:e0:97:79:e9:68:fe:55:dd:31: 78:68:27:2c:5a:d2:3c:1d:08:8a:f5:c6:34:01:33: 07:a9:0a:0d:18:91:36:36:35:26:f2:5a:ca:2d:99: 87:75:5b:63:37:88:44:6e:9e:3e:8b:56:2d:27:dd: b2:42:34:6e:a7:fe:d2:3b:0d:f2:e3:3e:3f:e9:1f: 43:5c:a5:b9:97:e7:28:4a:1a:2a:df:84:e8:92:1e: 40:98:01:af:c7:b6:63:00:d1:19:38:c9:39:c6:a6: 8a:07:0d:d7:54:01:be:fe:0c:28:a5:09:bc:ee:0a: 87:f3:84:2d:79:c5:ce:da:1b:7e:f5:e3:25:67:cd: ca:2b:51:c2:f2:f5:7f:c9:74:1c:2b:f9:8e:66:0b: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B8:C1:D6:F8:C6:36:5E:72:30:F8:82:A2:E9:0D:8A:CB:91:90:D5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c75f515c-3f2b-46dd-b80e-ab098aaf4506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.88.0/24 Signature Algorithm: sha256WithRSAEncryption 48:d5:91:0b:c9:be:f7:9a:eb:b5:e4:72:ca:82:01:b9:31:53: 7b:d4:3f:db:c0:e6:4b:0a:f8:5d:f9:11:1c:fa:5e:0f:a0:d9: 99:72:d8:ba:2e:b2:2d:d4:1b:91:27:a8:b6:f8:72:ab:dc:19: 86:b8:fe:f9:19:4c:8a:a8:6f:c1:96:1d:ef:81:ab:99:42:e1: e3:fd:0f:f7:a9:95:5f:bc:7f:3a:f2:ff:d7:bf:ef:33:6c:ad: b4:52:65:fd:a7:85:29:2b:6b:51:db:c7:e4:59:75:f7:7a:cd: 43:bf:9e:18:77:df:9b:16:d1:32:ee:d6:02:da:38:d0:f1:ef: 6e:f6:62:8d:35:e2:ac:c8:67:a1:5a:9b:34:e3:66:62:54:d6: 11:8e:9d:62:ba:ec:0e:7b:e9:60:91:c3:ad:04:ab:df:ad:f9: 49:b1:8d:9e:59:e9:de:73:87:90:87:f1:b6:7e:59:82:70:40: d2:c3:17:2c:12:a7:ca:d9:aa:81:3c:c4:8e:38:06:d8:e0:39: 51:69:e4:41:f0:87:55:79:24:02:80:0a:04:91:be:23:3c:32: b8:b3:a0:4e:5f:d3:e6:eb:54:eb:91:a3:bd:3b:73:0e:78:4e: ab:b3:af:81:f3:90:cf:c2:b1:cd:94:d2:17:05:f8:37:80:2f: 90:91:c3:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYVFnFaduk7EmKAyKCZK7EhqodmUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjEyMjA5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDZkNDcwMjY0OGE2ZjRhYjJiMWMzODhjZjQzNmM0YTQ5 ZjczYjhmMWQ3OTczMWU0N2UwYjRlOTJkNmNlMGQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaEo1ZofYzlcpaqnVNVWzHYB+udsIB7pIDXbnlstdMW2nK pvOE84oxd+3qCkUNaSBhDZDnNc4sojuPVJBPweXIAm89igPMnTo22bn7yQZvBMPf ylKR1MFty5jiWiAAEoRYBPLEwtqM/jDZHmpHFeCXeelo/lXdMXhoJyxa0jwdCIr1 xjQBMwepCg0YkTY2NSbyWsotmYd1W2M3iERunj6LVi0n3bJCNG6n/tI7DfLjPj/p H0NcpbmX5yhKGirfhOiSHkCYAa/HtmMA0Rk4yTnGpooHDddUAb7+DCilCbzuCofz hC15xc7aG3714yVnzcorUcLy9X/JdBwr+Y5mC5y3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5bjB1vjGNl5yMPiCoukNisuRkNUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M3NWY1MTVjLTNmMmItNDZkZC1iODBlLWFiMDk4YWFmNDUwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADr1gwDQYJKoZIhvcNAQELBQADggEBAEjVkQvJvvea67XkcsqCAbkxU3vU P9vA5ksK+F35ERz6Xg+g2Zly2Lousi3UG5EnqLb4cqvcGYa4/vkZTIqob8GWHe+B q5lC4eP9D/eplV+8fzry/9e/7zNsrbRSZf2nhSkra1Hbx+RZdfd6zUO/nhh335sW 0TLu1gLaONDx7272Yo014qzIZ6FamzTjZmJU1hGOnWK67A576WCRw60Eq9+t+Umx jZ5Z6d5zh5CH8bZ+WYJwQNLDFywSp8rZqoE8xI44BtjgOVFp5EHwh1V5JAKACgSR viM8MrizoE5f0+brVOuRo707cw54Tquzr4HzkM/Csc2U0hcF+DeAL5CRwzk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:37 2025 by rpki-client