$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e39c5808-9652-4eff-8c33-ff73ce2e800c.roa File: e39c5808-9652-4eff-8c33-ff73ce2e800c.roa (raw, json) Hash identifier: j2NU+KN0yiyUaHQmjCeOvlWBmF40shK0XEF0ONnMa/A= Subject key identifier: F8:7C:17:D7:76:8E:47:04:09:4E:15:F4:EF:CD:80:DF:9A:A9:D1:E0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 75C3620525817B94E63F7C5E817AA989BA971118 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e39c5808-9652-4eff-8c33-ff73ce2e800c.roa Signing time: Thu 25 Sep 2025 23:17:51 +0000 ROA not before: Thu 25 Sep 2025 23:17:51 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c3:62:05:25:81:7b:94:e6:3f:7c:5e:81:7a:a9:89:ba:97:11:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:17:51 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=2de1763687f97004caa2d449c76795565cff0c4092067595fdabf4ef276de871, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b4:bb:34:94:0a:85:d1:6b:e9:c9:88:25:79: e8:cf:5d:bb:46:6b:a2:e5:a3:ee:7c:55:a8:be:45: 43:5c:a4:ab:0e:c7:f0:59:8c:ae:5e:2f:f9:d7:fa: e7:23:f9:2a:04:6b:b3:77:73:d5:44:5c:e7:da:71: 4c:e4:53:7d:3a:10:b5:d9:b7:84:cc:4b:f1:d5:87: 70:0b:ce:cf:88:4b:a3:c3:f8:df:ed:60:b2:6c:9b: e9:25:50:92:67:47:f9:27:51:7e:95:c3:fa:2e:f9: c5:0f:59:a5:6f:eb:7c:30:70:f5:40:32:bd:71:f5: ad:d4:30:e8:f7:9c:d5:8f:51:4e:ed:1f:ff:da:d2: b3:cf:45:18:65:80:ad:65:42:00:2f:b7:e0:1a:24: 03:3d:dd:f4:9f:16:6f:3b:c3:b1:c5:48:97:7f:dc: 9a:e5:fd:be:74:b5:dd:83:1e:cd:87:49:00:29:12: f6:14:33:36:6c:db:53:c5:a1:e6:1a:08:e7:ed:94: 7f:1d:9b:06:43:69:d4:db:a8:55:11:4a:1d:bb:b4: d0:8d:33:ed:11:70:e5:31:49:42:a7:77:fa:c0:66: 3e:c6:b1:7e:3d:7d:df:c8:fe:8c:bd:44:51:ef:20: fb:db:d6:54:53:dd:cf:3a:99:24:a1:32:09:3d:5a: 69:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7C:17:D7:76:8E:47:04:09:4E:15:F4:EF:CD:80:DF:9A:A9:D1:E0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e39c5808-9652-4eff-8c33-ff73ce2e800c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.92.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:63:5d:12:c6:04:be:53:65:d3:1e:c0:5d:31:d3:17:1a:eb: 8c:07:30:25:e0:6c:73:df:f8:3e:bb:e5:1a:f5:a3:8d:a4:7c: cb:30:dd:85:d0:bf:8a:28:8a:f7:25:5f:56:cf:dc:5f:a9:7d: a7:17:42:43:d4:da:95:ba:d7:8c:e8:dd:11:40:fb:7b:0d:1a: 6f:68:d2:bd:68:ec:d7:b0:f4:d8:a2:b6:8a:88:14:f8:77:b5: 2c:df:e1:6f:f9:64:70:48:76:83:dd:e6:5a:40:31:20:26:77: 74:58:64:6f:ea:16:ef:75:1f:bf:5b:80:dd:43:2c:52:6b:21: 84:0a:cf:69:f6:8d:26:fe:d6:f3:14:ce:82:3b:db:13:be:0d: 5c:e1:92:9b:01:ba:f7:f2:a0:cf:83:86:65:a7:be:ad:73:24: 93:e8:6c:d2:46:30:ed:7b:db:01:29:d6:33:76:77:c4:8c:82: f1:c6:2e:cb:9d:27:92:5e:50:fe:9f:2b:ec:ea:23:8a:b8:e3: c4:89:7b:25:e4:dd:25:27:c6:b0:de:e5:d9:df:c9:32:c7:bc: 91:4d:12:c5:fc:9c:4a:3d:96:1c:73:97:eb:ff:d0:9d:b9:64: 9f:ba:84:d8:5a:bf:af:94:a2:e1:e6:0a:2f:70:e4:54:51:e3: 7b:ca:af:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdcNiBSWBe5TmP3xegXqpibqXERgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMxNzUxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZGUxNzYzNjg3Zjk3MDA0Y2FhMmQ0NDljNzY3OTU1NjVj ZmYwYzQwOTIwNjc1OTVmZGFiZjRlZjI3NmRlODcxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDctLs0lAqF0WvpyYgleejPXbtGa6Llo+58Vai+RUNcpKsO x/BZjK5eL/nX+ucj+SoEa7N3c9VEXOfacUzkU306ELXZt4TMS/HVh3ALzs+IS6PD +N/tYLJsm+klUJJnR/knUX6Vw/ou+cUPWaVv63wwcPVAMr1x9a3UMOj3nNWPUU7t H//a0rPPRRhlgK1lQgAvt+AaJAM93fSfFm87w7HFSJd/3Jrl/b50td2DHs2HSQAp EvYUMzZs21PFoeYaCOftlH8dmwZDadTbqFURSh27tNCNM+0RcOUxSUKnd/rAZj7G sX49fd/I/oy9RFHvIPvb1lRT3c86mSShMgk9WmkdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+HwX13aORwQJThX0782A35qp0eAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UzOWM1ODA4LTk2NTItNGVmZi04YzMzLWZmNzNjZTJlODAwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDq1wwDQYJKoZIhvcNAQELBQADggEBAH5jXRLGBL5TZdMewF0x0xca64wH MCXgbHPf+D675Rr1o42kfMsw3YXQv4ooivclX1bP3F+pfacXQkPU2pW614zo3RFA +3sNGm9o0r1o7New9NiitoqIFPh3tSzf4W/5ZHBIdoPd5lpAMSAmd3RYZG/qFu91 H79bgN1DLFJrIYQKz2n2jSb+1vMUzoI72xO+DVzhkpsBuvfyoM+DhmWnvq1zJJPo bNJGMO172wEp1jN2d8SMgvHGLsudJ5JeUP6fK+zqI4q448SJeyXk3SUnxrDe5dnf yTLHvJFNEsX8nEo9lhxzl+v/0J25ZJ+6hNhav6+UouHmCi9w5FRR43vKr+w= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:41 2025 by rpki-client