$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f712d53d-25bc-4ec4-a15d-8224fa5626c3.roa File: f712d53d-25bc-4ec4-a15d-8224fa5626c3.roa (raw, json) Hash identifier: suK9BqAWcl5CLyBeQjixNJafxrEbtiKlR3qw1+3Rhi4= Subject key identifier: 74:A9:1C:A4:A4:92:92:2C:43:AD:37:D7:99:47:81:7A:89:ED:B6:E9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0326C629CA9D09B7FC10840DAD74EF51AF436C54 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f712d53d-25bc-4ec4-a15d-8224fa5626c3.roa Signing time: Thu 25 Sep 2025 20:27:38 +0000 ROA not before: Thu 25 Sep 2025 20:27:38 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:26:c6:29:ca:9d:09:b7:fc:10:84:0d:ad:74:ef:51:af:43:6c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:27:38 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=880618df2fccdcea47e2717e1e533b492fb2c6670abed94d5a8617d478709f66, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:91:47:2f:75:f9:e5:15:c1:83:49:3d:7e:d1: fa:7c:df:e8:43:d0:ca:32:72:01:00:75:bb:fa:4a: 30:45:9c:b1:54:b2:d6:12:f8:14:dd:b7:9c:1d:36: 6e:03:c1:ea:60:75:41:32:67:61:ad:38:40:01:23: 23:72:b7:54:91:2a:8a:3b:60:b7:d9:7b:42:22:f3: ac:e0:a6:1c:4b:54:f3:c5:76:34:26:b8:2b:07:1f: 75:da:ad:49:ac:5d:13:ef:ec:95:a7:b8:eb:22:6e: 58:79:ad:b9:35:d7:3b:47:a6:47:55:37:7b:41:31: bf:3a:b0:25:f9:32:5f:7d:07:1a:03:f8:b6:cd:d2: ee:d4:61:cb:08:84:a4:76:d8:e0:4d:34:3b:d0:57: 46:27:10:84:32:ba:c2:77:42:b3:12:69:30:f5:ed: b7:ec:c9:92:f2:6c:eb:5c:65:27:b5:0e:75:cf:46: 77:f8:6d:21:67:fd:fe:b8:6f:af:c8:c8:a5:ad:1c: 4b:b0:14:dc:a8:59:b0:0a:b2:eb:91:7f:05:c6:bc: 5c:13:5b:a1:13:46:f3:70:1b:1b:be:c5:78:e1:f7: a4:d3:6b:23:b0:fb:86:3b:51:ad:c3:b9:4d:f9:ca: c1:f8:ff:d3:13:d8:e5:e6:b3:78:1d:0d:f1:19:d9: 60:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A9:1C:A4:A4:92:92:2C:43:AD:37:D7:99:47:81:7A:89:ED:B6:E9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f712d53d-25bc-4ec4-a15d-8224fa5626c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.78.0/24 Signature Algorithm: sha256WithRSAEncryption 81:62:e9:15:f8:c7:da:d5:27:86:fc:61:d8:f2:f1:6b:c6:56: ca:ca:88:a3:5b:21:b2:fd:eb:1a:f6:0b:97:e5:c5:cb:ed:21: a0:26:64:d9:f3:93:fe:76:58:36:97:96:4c:f0:61:ef:32:83: 53:ad:75:9c:b2:34:c3:7a:2c:8b:c1:04:a0:8c:77:4a:34:15: 8f:b8:67:a7:50:ea:89:c3:87:b3:d2:32:28:cb:70:2b:7a:18: 95:05:10:43:47:6b:4d:1d:9d:76:32:cf:b1:09:20:33:f7:3b: 64:00:b3:3e:4a:c7:08:0d:c5:36:ed:31:64:89:fa:3a:20:20: 57:93:82:19:45:3e:00:93:27:bc:83:dd:e9:49:64:57:60:7b: e1:88:dc:72:bc:d4:e0:21:fd:ad:9d:c8:03:b0:93:27:02:f2: c4:ad:5b:c6:b1:b2:d9:0c:66:d1:cb:33:7c:15:3c:91:70:b7: 55:5a:1e:fb:af:b4:a9:2e:62:a1:6e:4e:87:88:f4:fb:ca:77: 0a:9e:bd:80:6f:db:14:2a:18:a3:15:b7:08:54:0e:91:a2:c3: 62:53:9f:9a:13:4a:4e:df:aa:cf:bb:48:94:a9:0e:8a:39:57: 90:ea:fb:41:51:d6:d4:cb:fb:04:d5:a0:3d:9a:97:17:8f:9e: d3:d5:9c:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAybGKcqdCbf8EIQNrXTvUa9DbFQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjAyNzM4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODA2MThkZjJmY2NkY2VhNDdlMjcxN2UxZTUzM2I0OTJm YjJjNjY3MGFiZWQ5NGQ1YTg2MTdkNDc4NzA5ZjY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAkUcvdfnlFcGDST1+0fp83+hD0MoycgEAdbv6SjBFnLFU stYS+BTdt5wdNm4DwepgdUEyZ2GtOEABIyNyt1SRKoo7YLfZe0Ii86zgphxLVPPF djQmuCsHH3XarUmsXRPv7JWnuOsiblh5rbk11ztHpkdVN3tBMb86sCX5Ml99BxoD +LbN0u7UYcsIhKR22OBNNDvQV0YnEIQyusJ3QrMSaTD17bfsyZLybOtcZSe1DnXP Rnf4bSFn/f64b6/IyKWtHEuwFNyoWbAKsuuRfwXGvFwTW6ETRvNwGxu+xXjh96TT ayOw+4Y7Ua3DuU35ysH4/9MT2OXms3gdDfEZ2WAhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdKkcpKSSkixDrTfXmUeBeonttukwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y3MTJkNTNkLTI1YmMtNGVjNC1hMTVkLTgyMjRmYTU2MjZjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrE4wDQYJKoZIhvcNAQELBQADggEBAIFi6RX4x9rVJ4b8Ydjy8WvGVsrK iKNbIbL96xr2C5flxcvtIaAmZNnzk/52WDaXlkzwYe8yg1OtdZyyNMN6LIvBBKCM d0o0FY+4Z6dQ6onDh7PSMijLcCt6GJUFEENHa00dnXYyz7EJIDP3O2QAsz5KxwgN xTbtMWSJ+jogIFeTghlFPgCTJ7yD3elJZFdge+GI3HK81OAh/a2dyAOwkycC8sSt W8axstkMZtHLM3wVPJFwt1VaHvuvtKkuYqFuToeI9PvKdwqevYBv2xQqGKMVtwhU DpGiw2JTn5oTSk7fqs+7SJSpDoo5V5Dq+0FR1tTL+wTVoD2alxePntPVnPM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:43 2025 by rpki-client