$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d37a7b68-3a06-45e9-9166-1c752fe55b8c.roa File: d37a7b68-3a06-45e9-9166-1c752fe55b8c.roa (raw, json) Hash identifier: 4Xjp6XXg4E3iAELj7HTK94vpyeIBd3p+zJpFqgtMetc= Subject key identifier: 60:93:E8:BB:4C:45:31:AC:E3:D8:4F:FC:CF:40:F6:E1:CE:60:98:46 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 14D7CD4EC36738768392FDA230E8B372287B2D85 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d37a7b68-3a06-45e9-9166-1c752fe55b8c.roa Signing time: Fri 26 Sep 2025 00:56:27 +0000 ROA not before: Fri 26 Sep 2025 00:56:27 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d7:cd:4e:c3:67:38:76:83:92:fd:a2:30:e8:b3:72:28:7b:2d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:56:27 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=e5c37e9eb0ce9da7c8a89dccca72a354333f6037760383eb2c0c26953207d4cb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:5f:d7:97:6c:3a:1d:27:ec:0a:69:b4:89: 89:dc:53:02:da:76:bc:1b:a6:19:d4:15:36:18:b1: 03:fa:ef:f8:da:a5:22:52:32:ae:c6:4d:44:26:f6: 50:aa:7d:1a:81:ed:df:53:af:fe:81:1d:04:db:5f: 16:74:00:0b:f6:a1:02:cf:97:4c:39:01:4a:28:63: c1:01:6b:db:fa:93:29:5e:b7:91:d1:77:b0:6a:b6: bf:c5:95:48:f5:40:38:e2:14:52:b3:cc:62:cd:c8: 97:44:ca:b4:5e:9b:d0:dd:61:4e:05:27:a2:77:9a: ce:ec:a6:38:06:d4:21:fa:dc:29:f3:d7:24:21:a0: 84:4f:f8:b9:3f:d8:ff:bd:b1:54:c1:c6:15:eb:8e: 71:3a:09:88:6b:a5:08:45:a1:db:6d:3a:dc:88:44: 42:b8:97:de:07:68:73:03:89:1f:6c:6d:96:c4:c1: 03:62:a7:2a:2b:e7:4e:44:2f:4f:60:0e:52:aa:a6: 27:b4:22:74:47:30:21:3c:3d:51:3b:01:01:a5:71: c6:28:39:ca:5c:4d:e0:2a:a4:9a:3c:ae:40:bf:b8: fe:d1:55:32:8f:6c:36:68:4b:79:7d:76:69:36:90: b8:ad:25:24:ea:2a:7e:bc:21:60:ae:c4:39:1d:2e: ab:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:93:E8:BB:4C:45:31:AC:E3:D8:4F:FC:CF:40:F6:E1:CE:60:98:46 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d37a7b68-3a06-45e9-9166-1c752fe55b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.172.0/22 Signature Algorithm: sha256WithRSAEncryption 81:af:70:93:e6:ef:20:53:40:36:c6:fa:e3:86:16:c6:ec:4f: 44:b6:d1:88:33:4e:fb:27:89:21:cb:8e:fe:ee:43:ec:ed:bd: 04:ef:a6:8c:88:64:a1:87:a1:ff:df:8b:f7:61:14:59:f3:51: 8d:93:c5:97:9b:51:54:05:1b:ca:2c:aa:42:e8:0d:48:c4:42: b4:3c:a1:5f:f5:6f:df:77:be:b2:ac:2d:75:ed:cb:ad:38:15: b9:b8:9c:33:16:71:c5:72:dd:1a:19:a4:9f:99:36:d9:c2:0b: 71:92:ea:8b:0b:7f:45:be:66:16:11:73:c6:e7:2c:cd:21:be: 73:1a:38:d4:63:e4:ce:d5:af:d2:24:2a:6a:d1:d7:66:ec:2e: 85:2f:08:c8:01:15:eb:24:a9:fb:ce:2d:bf:56:d4:5f:9b:17: ce:b5:53:a5:51:0e:5c:a7:7a:61:7b:ec:33:05:4f:cb:4c:4a: 23:ff:d9:d3:ef:14:36:0b:37:58:10:f7:1b:32:3e:e3:c3:7d: 20:d2:22:97:68:de:49:35:9a:25:13:30:ed:b7:f3:1f:3e:95: 29:cd:26:ea:4b:71:21:63:36:68:36:b5:ac:4e:34:fb:f2:be: 61:be:13:e7:4b:cf:8b:fd:1d:cc:37:a5:00:54:b2:02:5c:31: 4e:c9:44:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFNfNTsNnOHaDkv2iMOizcih7LYUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDA1NjI3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNWMzN2U5ZWIwY2U5ZGE3YzhhODlkY2NjYTcyYTM1NDMz M2Y2MDM3NzYwMzgzZWIyYzBjMjY5NTMyMDdkNGNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi6F/Xl2w6HSfsCmm0iYncUwLadrwbphnUFTYYsQP67/ja pSJSMq7GTUQm9lCqfRqB7d9Tr/6BHQTbXxZ0AAv2oQLPl0w5AUooY8EBa9v6kyle t5HRd7Bqtr/FlUj1QDjiFFKzzGLNyJdEyrRem9DdYU4FJ6J3ms7spjgG1CH63Cnz 1yQhoIRP+Lk/2P+9sVTBxhXrjnE6CYhrpQhFodttOtyIREK4l94HaHMDiR9sbZbE wQNipyor505EL09gDlKqpie0InRHMCE8PVE7AQGlccYoOcpcTeAqpJo8rkC/uP7R VTKPbDZoS3l9dmk2kLitJSTqKn68IWCuxDkdLqsDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYJPou0xFMazj2E/8z0D24c5gmEYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QzN2E3YjY4LTNhMDYtNDVlOS05MTY2LTFjNzUyZmU1NWI4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDrqwwDQYJKoZIhvcNAQELBQADggEBAIGvcJPm7yBTQDbG+uOGFsbsT0S2 0YgzTvsniSHLjv7uQ+ztvQTvpoyIZKGHof/fi/dhFFnzUY2TxZebUVQFG8osqkLo DUjEQrQ8oV/1b993vrKsLXXty604Fbm4nDMWccVy3RoZpJ+ZNtnCC3GS6osLf0W+ ZhYRc8bnLM0hvnMaONRj5M7Vr9IkKmrR12bsLoUvCMgBFeskqfvOLb9W1F+bF861 U6VRDlynemF77DMFT8tMSiP/2dPvFDYLN1gQ9xsyPuPDfSDSIpdo3kk1miUTMO23 8x8+lSnNJupLcSFjNmg2taxONPvyvmG+E+dLz4v9Hcw3pQBUsgJcMU7JRJs= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:21 2025 by rpki-client