$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcb22d6a-92f8-4a9d-bf6f-35dd3fcb3fae.roa File: dcb22d6a-92f8-4a9d-bf6f-35dd3fcb3fae.roa (raw, json) Hash identifier: LgrJ8ozm1/xkeNgYrX6LvWbv3yv4FHMQFSFvdRTsrHQ= Subject key identifier: 2A:94:B3:E1:81:24:36:04:6D:E4:60:81:0C:E9:F1:EC:E8:19:F6:0D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7A0690FCC6390E89F042B6D5C5A0EFD4B06BD2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcb22d6a-92f8-4a9d-bf6f-35dd3fcb3fae.roa Signing time: Thu 25 Sep 2025 19:24:27 +0000 ROA not before: Thu 25 Sep 2025 19:24:27 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:06:90:fc:c6:39:0e:89:f0:42:b6:d5:c5:a0:ef:d4:b0:6b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:24:27 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=f49d4b51bc4a52f66e5b11290959977e70e7a4f4f847f532140776f15da81199, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:b2:29:1e:2d:5e:00:eb:a7:c2:ad:e8:d6: 33:f9:f4:42:2f:e8:f6:e5:22:ad:a8:02:86:e2:b7: 69:da:51:ef:12:63:dc:78:f2:1e:0a:5a:89:2a:7e: ec:07:be:67:ea:d2:bc:ea:26:bb:fb:c7:25:ba:b2: 83:1f:57:10:3f:aa:70:02:83:39:80:5b:5a:d9:19: 8b:d4:da:da:1c:7a:d6:dd:7f:a1:8e:02:01:d8:e2: 46:65:80:c0:47:7f:c0:69:22:9c:25:22:88:06:bc: 31:d0:31:39:b6:1b:ed:25:de:c5:0f:eb:6f:ef:fa: c0:35:a3:b3:f5:ec:03:b9:36:70:22:de:38:2a:33: 03:ea:0d:91:e7:b9:7e:18:06:90:9b:27:06:1f:6f: 47:d3:bd:53:b7:13:05:d7:a4:b8:cb:99:ee:03:94: b6:8b:44:2c:48:a9:67:aa:e5:a6:e7:29:df:26:8c: 96:f9:46:76:29:c8:47:0d:80:ac:ab:c7:f5:f5:3e: 07:28:62:dd:07:e5:a8:a5:7a:ff:3c:53:b7:cb:2f: e0:ae:0c:fd:cf:18:8c:0d:e9:7b:05:be:71:49:f9: 6c:bb:77:b4:a1:3a:25:94:46:5b:d7:23:14:43:d0: 74:85:36:9f:da:5f:54:79:f8:ed:4a:2b:8b:43:4b: f5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:94:B3:E1:81:24:36:04:6D:E4:60:81:0C:E9:F1:EC:E8:19:F6:0D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcb22d6a-92f8-4a9d-bf6f-35dd3fcb3fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.62.0/24 Signature Algorithm: sha256WithRSAEncryption 26:5b:39:8b:ac:6f:67:ca:d2:46:42:28:f1:66:28:0f:37:0c: 9c:b0:a4:88:af:c8:4c:96:4c:0b:bb:d6:5d:f4:f0:8f:e5:b7: 82:f1:2f:45:d0:d4:42:07:a0:88:a9:29:25:9e:ef:c2:b0:04: e2:b8:9a:ee:c6:8d:a8:5d:83:ee:51:a9:0f:f5:ad:87:7e:64: 24:6c:3c:64:ee:84:4e:e2:2d:63:66:a6:aa:f8:48:04:ea:88: 0e:30:64:4d:9c:1f:dc:7b:33:2d:33:0b:5d:c4:7a:25:e7:18: d4:18:6f:8b:08:b4:15:19:37:cb:85:2d:3e:ef:3b:77:f3:77: 1c:c0:cb:f3:08:97:23:e3:82:e5:1d:e2:77:f0:7d:82:1c:14: 56:5a:96:18:89:42:76:a0:44:12:6c:a1:11:b9:49:4a:91:81: 51:c3:32:32:4d:6e:8b:f4:15:90:9b:75:cd:22:a3:f0:6f:ab: f0:ef:cf:bf:26:b6:0a:df:72:42:ee:87:e0:16:81:07:51:65: 15:6b:29:a6:cc:04:56:dc:e9:af:cc:d7:11:29:be:dc:9f:b6: aa:51:06:28:72:0f:b1:e2:1a:8f:39:88:8d:fc:9a:4f:9b:50: 01:b6:5c:37:ad:e3:5a:67:61:5f:36:c9:75:e7:0e:e8:f1:b7: d7:24:a1:0a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITegaQ/MY5DonwQrbVxaDv1LBr0jANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjUxOTI0MjdaFw0yNTEwMzAyMzU5NTla MHoxSTBHBgNVBAUTQGY0OWQ0YjUxYmM0YTUyZjY2ZTViMTEyOTA5NTk5NzdlNzBl N2E0ZjRmODQ3ZjUzMjE0MDc3NmYxNWRhODExOTkxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAOCYsikeLV4A66fCrejWM/n0Qi/o9uUiragChuK3adpR7xJj 3HjyHgpaiSp+7Ae+Z+rSvOomu/vHJbqygx9XED+qcAKDOYBbWtkZi9Ta2hx61t1/ oY4CAdjiRmWAwEd/wGkinCUiiAa8MdAxObYb7SXexQ/rb+/6wDWjs/XsA7k2cCLe OCozA+oNkee5fhgGkJsnBh9vR9O9U7cTBdekuMuZ7gOUtotELEipZ6rlpucp3yaM lvlGdinIRw2ArKvH9fU+Byhi3QflqKV6/zxTt8sv4K4M/c8YjA3pewW+cUn5bLt3 tKE6JZRGW9cjFEPQdIU2n9pfVHn47Uori0NL9VUCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQqlLPhgSQ2BG3kYIEM6fHs6Bn2DTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvZGNiMjJkNmEtOTJmOC00YTlkLWJmNmYtMzVkZDNmY2IzZmFlLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAAOoPjANBgkqhkiG9w0BAQsFAAOCAQEAJls5i6xvZ8rSRkIo8WYoDzcMnLCk iK/ITJZMC7vWXfTwj+W3gvEvRdDUQgegiKkpJZ7vwrAE4ria7saNqF2D7lGpD/Wt h35kJGw8ZO6ETuItY2amqvhIBOqIDjBkTZwf3HszLTMLXcR6JecY1Bhviwi0FRk3 y4UtPu87d/N3HMDL8wiXI+OC5R3id/B9ghwUVlqWGIlCdqBEEmyhEblJSpGBUcMy Mk1ui/QVkJt1zSKj8G+r8O/Pvya2Ct9yQu6H4BaBB1FlFWsppswEVtzpr8zXESm+ 3J+2qlEGKHIPseIajzmIjfyaT5tQAbZcN63jWmdhXzbJdecO6PG31yShCg== -----END CERTIFICATE-----Generated at Mon Oct 20 11:01:45 2025 by rpki-client