$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3f92274-9d40-4451-8755-c2dbfb4c256a.roa File: e3f92274-9d40-4451-8755-c2dbfb4c256a.roa (raw, json) Hash identifier: 97MVxEhLv1ZC7T90fzWIA5y4nHIO1F9RWpRywCa1YUM= Subject key identifier: 91:E4:D1:26:FC:14:9C:D3:26:96:00:8B:0A:2A:15:7A:7F:10:4E:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D43C721301C0C1C1A6D29DC9D097371C635F97E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3f92274-9d40-4451-8755-c2dbfb4c256a.roa Signing time: Thu 25 Sep 2025 20:47:47 +0000 ROA not before: Thu 25 Sep 2025 20:47:47 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:43:c7:21:30:1c:0c:1c:1a:6d:29:dc:9d:09:73:71:c6:35:f9:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:47:47 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c51cf816801c292202e132576d8ff8aa20d4c20be5aacbd30bbebe770e8a2533, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0b:65:9f:93:33:0c:de:5f:76:d7:99:ff:e9: 75:ef:2b:d5:25:4f:5e:44:75:1b:4a:9a:bc:18:e2: 24:ee:9f:6f:40:aa:13:b5:ec:e8:5e:99:cf:8d:3c: b1:1f:2c:db:88:f2:a4:25:56:d9:0f:6a:54:62:e1: 75:e4:5c:54:6c:31:32:3e:9b:7e:eb:ae:98:d5:6f: 18:ce:9b:0c:ca:87:04:ee:20:cb:a3:6d:36:18:e6: c7:3d:9d:45:8d:c4:74:f5:71:85:b6:8e:6e:0e:05: ec:fb:b2:75:34:e5:ae:19:25:34:66:6c:36:23:cf: 40:e5:33:a4:16:80:83:a4:f1:c9:b3:8a:f1:74:92: 53:13:09:1e:e0:bb:80:f0:18:1f:7e:ff:9c:83:52: b5:13:8a:c3:70:18:3d:1d:38:fd:07:1c:34:99:b0: f5:49:44:5e:54:01:10:b1:a4:2b:c6:0d:98:d6:d8: 1c:6f:16:cc:3a:dc:13:5d:d7:09:e4:07:3f:c3:d1: 4f:f8:9a:15:2b:be:06:79:a7:64:b1:d9:fc:94:66: cd:53:0a:35:a1:cb:c4:c0:a1:d4:b2:c2:9f:13:a1: 78:0c:dd:de:7b:77:50:3d:80:d1:0b:82:55:78:66: 5b:06:5e:81:ae:c9:7b:b2:cc:6c:c8:89:f9:d5:2c: 99:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E4:D1:26:FC:14:9C:D3:26:96:00:8B:0A:2A:15:7A:7F:10:4E:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3f92274-9d40-4451-8755-c2dbfb4c256a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.0.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:af:e9:21:72:ca:17:60:1c:e9:55:09:0e:6e:cf:4e:66:04: d7:f9:c7:b3:15:34:da:d4:04:f7:f4:87:04:98:3e:ec:26:f0: c4:e9:ce:96:38:dc:0b:69:6c:76:c4:4a:7f:74:39:5f:7f:db: 6b:65:33:31:52:20:97:bf:e2:89:ec:fc:bc:e2:0a:3d:43:b8: 50:d0:5c:1a:84:aa:06:91:42:ec:a9:85:53:95:32:10:e8:96: 99:c3:1e:1d:33:c9:a6:16:50:f8:4b:19:0f:3f:94:06:71:f9: c6:04:2c:33:9f:2b:94:2a:96:f7:7e:6c:75:59:55:17:2e:90: d9:83:b4:67:a2:30:e3:eb:0b:61:95:42:50:94:f1:cd:a2:6a: 40:cd:05:88:e0:6f:e3:e7:ad:d4:46:55:3a:b6:f9:88:f7:e6: 7c:25:a1:3b:58:cc:9b:70:2b:ff:4f:bf:03:4e:db:cf:3b:bc: b5:b9:9b:ed:23:10:2e:77:4e:4f:d9:c9:1d:79:b2:8e:36:f9: 47:3e:bf:7c:dc:44:47:eb:1f:e4:8e:5e:b1:43:40:a2:c0:87: 9e:a1:fb:31:26:06:91:d3:ff:f1:9d:a1:d0:1c:6f:49:57:dd: 08:4b:2d:6b:d6:4b:f3:34:b8:86:06:62:da:bb:d7:aa:95:9c: 39:a4:e6:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPUPHITAcDBwabSncnQlzccY1+X4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjA0NzQ3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTFjZjgxNjgwMWMyOTIyMDJlMTMyNTc2ZDhmZjhhYTIw ZDRjMjBiZTVhYWNiZDMwYmJlYmU3NzBlOGEyNTMzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSC2WfkzMM3l9215n/6XXvK9UlT15EdRtKmrwY4iTun29A qhO17Ohemc+NPLEfLNuI8qQlVtkPalRi4XXkXFRsMTI+m37rrpjVbxjOmwzKhwTu IMujbTYY5sc9nUWNxHT1cYW2jm4OBez7snU05a4ZJTRmbDYjz0DlM6QWgIOk8cmz ivF0klMTCR7gu4DwGB9+/5yDUrUTisNwGD0dOP0HHDSZsPVJRF5UARCxpCvGDZjW 2BxvFsw63BNd1wnkBz/D0U/4mhUrvgZ5p2Sx2fyUZs1TCjWhy8TAodSywp8ToXgM 3d57d1A9gNELglV4ZlsGXoGuyXuyzGzIifnVLJn/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkeTRJvwUnNMmlgCLCioVen8QTsUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UzZjkyMjc0LTlkNDAtNDQ1MS04NzU1LWMyZGJmYjRjMjU2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrgAwDQYJKoZIhvcNAQELBQADggEBAE2v6SFyyhdgHOlVCQ5uz05mBNf5 x7MVNNrUBPf0hwSYPuwm8MTpzpY43AtpbHbESn90OV9/22tlMzFSIJe/4ons/Lzi Cj1DuFDQXBqEqgaRQuyphVOVMhDolpnDHh0zyaYWUPhLGQ8/lAZx+cYELDOfK5Qq lvd+bHVZVRcukNmDtGeiMOPrC2GVQlCU8c2iakDNBYjgb+PnrdRGVTq2+Yj35nwl oTtYzJtwK/9PvwNO2887vLW5m+0jEC53Tk/ZyR15so42+Uc+v3zcREfrH+SOXrFD QKLAh56h+zEmBpHT//GdodAcb0lX3QhLLWvWS/M0uIYGYtq716qVnDmk5tM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:06:51 2025 by rpki-client