$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d287e974-1d6d-48f0-b822-ecc3ea34d62a.roa File: d287e974-1d6d-48f0-b822-ecc3ea34d62a.roa (raw, json) Hash identifier: UF7GGMIm9Pf0lDjp3LpC1XRse0fU2uRgpiY0Mb/jGOU= Subject key identifier: 07:91:65:28:D6:7E:1E:77:93:D3:B6:24:1F:18:33:82:AD:29:6A:19 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 14A9CC36360CC3A6C272EFA96C23D1147AE8FAD0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d287e974-1d6d-48f0-b822-ecc3ea34d62a.roa Signing time: Thu 25 Sep 2025 20:24:46 +0000 ROA not before: Thu 25 Sep 2025 20:24:46 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a9:cc:36:36:0c:c3:a6:c2:72:ef:a9:6c:23:d1:14:7a:e8:fa:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:24:46 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=d13275caadf092a762bfb92ca6e08eafdf5bdc8de4535373f29e9300531465ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:35:e5:fa:72:b2:9c:2d:42:ea:36:64:6c:5f: 0e:88:43:79:b6:0e:b1:2b:8d:62:10:01:fc:8b:b6: ca:04:4b:a6:a0:50:72:d5:d2:f9:96:bf:0d:b0:cb: ec:08:0c:8f:f6:4b:c8:83:84:88:d5:3b:cf:8f:ae: 01:a1:06:ed:f9:dd:bf:11:df:e3:72:ae:1b:00:ed: fd:a3:dc:0c:82:b8:b4:53:ae:6e:de:b1:17:a7:67: 74:c1:50:c9:92:21:81:31:54:3d:37:30:7a:46:3e: a5:22:a5:46:14:ff:d9:13:27:8b:d2:de:65:29:fa: 15:79:87:07:70:da:33:ef:ef:7c:72:26:68:17:d8: 75:cd:0e:83:78:da:e1:1f:4a:d5:ca:7c:ea:23:83: e4:83:65:07:a8:00:5e:e7:11:7f:c9:f0:30:d9:50: 32:04:b5:4c:10:7c:42:33:ab:84:54:4e:83:bb:df: 15:ec:c1:cd:28:b5:3f:18:c8:8c:88:a6:ed:f3:13: ab:26:ef:0b:82:7c:1f:57:be:88:f4:ba:d9:98:1d: 57:c6:79:61:cf:a6:e1:80:2c:bb:6b:a0:98:dd:97: 54:bf:35:24:04:74:28:e4:74:fa:03:ed:71:9c:28: b6:4b:89:c4:8a:d4:7f:ca:20:0a:83:18:33:49:e1: 63:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:91:65:28:D6:7E:1E:77:93:D3:B6:24:1F:18:33:82:AD:29:6A:19 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d287e974-1d6d-48f0-b822-ecc3ea34d62a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.15.0/24 Signature Algorithm: sha256WithRSAEncryption 81:11:47:40:0b:6f:6d:fe:70:fd:23:73:b0:cb:e5:36:dc:2a: 81:3e:df:32:20:40:b7:ec:ea:e0:a8:e4:09:ef:1e:97:3c:77: 1b:0d:13:8d:8b:9b:b8:f9:bb:4c:88:af:a7:17:bb:45:e3:5d: 29:91:80:de:45:1a:41:2d:3a:59:83:e5:8a:14:ab:94:80:16: a8:c5:91:9b:f4:0f:c1:48:c1:60:bd:45:0f:07:84:72:c2:c2: d6:9b:7d:31:f9:f0:0c:86:94:9b:ea:92:38:7d:68:af:57:3f: c8:bf:1b:73:63:3f:5a:63:c9:39:68:78:49:40:d4:14:64:fb: ca:44:d8:dd:44:23:0b:c8:6b:d7:a9:67:eb:78:0d:a8:4a:b8: f7:ca:c9:59:01:31:9c:3f:71:28:9a:e4:17:69:21:bd:3c:39: 64:dc:09:80:ae:ad:fc:31:7b:c4:9f:95:fe:7b:7b:96:1b:f7: 0d:83:c1:70:8c:2f:6f:60:54:f5:65:ab:04:e1:d9:13:95:93: 39:c7:41:7b:0b:8f:cd:5d:2f:7c:a8:65:bd:8f:67:7b:b4:24: 14:e9:32:66:a9:b4:7a:8e:5b:be:13:94:2f:ed:4a:a9:90:3b: a7:9d:de:f7:33:7b:96:cc:8f:b6:48:c2:f1:f4:f8:31:0a:90: e8:a3:65:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFKnMNjYMw6bCcu+pbCPRFHro+tAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjAyNDQ2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTMyNzVjYWFkZjA5MmE3NjJiZmI5MmNhNmUwOGVhZmRm NWJkYzhkZTQ1MzUzNzNmMjllOTMwMDUzMTQ2NWNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWNeX6crKcLULqNmRsXw6IQ3m2DrErjWIQAfyLtsoES6ag UHLV0vmWvw2wy+wIDI/2S8iDhIjVO8+PrgGhBu353b8R3+NyrhsA7f2j3AyCuLRT rm7esRenZ3TBUMmSIYExVD03MHpGPqUipUYU/9kTJ4vS3mUp+hV5hwdw2jPv73xy JmgX2HXNDoN42uEfStXKfOojg+SDZQeoAF7nEX/J8DDZUDIEtUwQfEIzq4RUToO7 3xXswc0otT8YyIyIpu3zE6sm7wuCfB9Xvoj0utmYHVfGeWHPpuGALLtroJjdl1S/ NSQEdCjkdPoD7XGcKLZLicSK1H/KIAqDGDNJ4WM7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB5FlKNZ+HneT07YkHxgzgq0pahkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyODdlOTc0LTFkNmQtNDhmMC1iODIyLWVjYzNlYTM0ZDYyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrA8wDQYJKoZIhvcNAQELBQADggEBAIERR0ALb23+cP0jc7DL5TbcKoE+ 3zIgQLfs6uCo5AnvHpc8dxsNE42Lm7j5u0yIr6cXu0XjXSmRgN5FGkEtOlmD5YoU q5SAFqjFkZv0D8FIwWC9RQ8HhHLCwtabfTH58AyGlJvqkjh9aK9XP8i/G3NjP1pj yTloeElA1BRk+8pE2N1EIwvIa9epZ+t4DahKuPfKyVkBMZw/cSia5BdpIb08OWTc CYCurfwxe8Sflf57e5Yb9w2DwXCML29gVPVlqwTh2ROVkznHQXsLj81dL3yoZb2P Z3u0JBTpMmaptHqOW74TlC/tSqmQO6ed3vcze5bMj7ZIwvH0+DEKkOijZdc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:58:38 2025 by rpki-client