$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcf0f2e1-5792-49d8-96fd-f7fc6c753a8b.roa File: fcf0f2e1-5792-49d8-96fd-f7fc6c753a8b.roa (raw, json) Hash identifier: IOh8V5UEgQhrX9XDOrB3OFyd+iFEcJuUJzlJb9lVU5E= Subject key identifier: 86:25:49:C4:E5:EB:43:EE:01:E0:85:25:B7:32:30:7D:E9:DC:B1:74 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4FF2BF7D68C52785D7C11DB7CBCD1EF7C5EF2EB4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcf0f2e1-5792-49d8-96fd-f7fc6c753a8b.roa Signing time: Thu 25 Sep 2025 20:51:38 +0000 ROA not before: Thu 25 Sep 2025 20:51:38 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f2:bf:7d:68:c5:27:85:d7:c1:1d:b7:cb:cd:1e:f7:c5:ef:2e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:51:38 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=dc452fe0866b8bd0a1272d0191062c70e38509c59aad0a207809d6911a74728f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:10:f2:f0:cb:1f:dd:e1:06:e4:4e:44:84:c6: ec:51:66:39:1b:38:a9:b6:81:90:90:62:ac:cb:db: 88:18:20:b2:c9:9a:14:75:2b:ec:d3:33:67:a3:b7: 0a:1a:ef:14:21:11:75:e8:44:b9:ca:f3:70:b0:77: 31:ed:ea:7d:4b:da:f3:d1:32:1a:f6:5b:26:95:1e: e8:82:1d:ab:8c:c4:c4:84:f2:5a:17:c4:53:fa:84: cb:b6:6f:17:37:81:d7:3f:4c:17:ad:b7:de:e1:1c: ed:93:5a:54:19:ea:a0:8a:98:2d:17:f1:6f:e9:8a: e6:bc:09:7d:34:04:c9:25:55:91:d3:75:58:00:4e: 02:07:8b:db:9e:5f:14:72:49:8a:ff:67:36:73:40: 09:0d:0b:02:16:fb:86:cd:4a:96:17:d7:1d:ab:76: 61:9b:2a:e4:be:bf:fc:ce:14:1c:5e:0c:bf:16:8b: 8a:b1:ae:bd:4d:d5:f2:6f:ea:7d:81:2a:6f:c1:3e: c9:69:d8:b1:e1:db:dd:5f:ac:97:dd:4d:23:2c:9d: 11:f8:7f:56:3c:14:d3:30:08:52:77:6f:9f:29:33: 50:50:47:f6:2d:6b:00:a2:42:3e:58:bf:f3:cd:2f: 0a:c3:ff:c4:c3:f9:93:06:7b:3e:93:ff:b4:2e:4d: a5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:25:49:C4:E5:EB:43:EE:01:E0:85:25:B7:32:30:7D:E9:DC:B1:74 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcf0f2e1-5792-49d8-96fd-f7fc6c753a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.130.0/24 Signature Algorithm: sha256WithRSAEncryption 01:31:a8:4f:98:2b:d7:33:2b:ae:34:6f:bd:e9:39:35:71:bc: 5a:43:0d:ac:92:8e:0c:28:2b:f3:1f:0a:5b:14:a0:6a:73:3e: ba:c7:e4:2c:ca:1c:40:22:93:ab:c8:25:fa:b0:eb:c7:56:b7: 7c:01:bd:27:d9:bb:ad:bd:c7:f6:68:e1:1b:59:91:1b:a7:97: e7:c2:c5:80:5e:5f:fc:63:19:dd:e6:bc:ac:b7:20:ce:af:9c: 06:28:59:66:a4:e8:5c:b8:0b:21:13:ad:5c:eb:1d:24:38:ef: 9a:ae:27:48:96:6f:93:ca:fd:10:ac:dd:e9:c4:a4:04:f4:3c: 6b:e7:86:75:5e:21:88:2d:a8:d7:d5:02:35:ed:c3:9d:13:1f: 11:8f:de:06:fd:62:1c:b7:c4:fc:58:10:a3:7b:22:35:e7:4f: a1:68:7c:5a:00:12:9f:bd:0b:75:0c:2a:4b:32:08:71:f9:fb: bc:31:28:66:aa:a1:23:74:91:94:23:a1:68:50:ce:81:53:05: 45:54:bc:d1:5b:ba:2f:b9:a0:2e:bd:1c:8d:95:b4:5d:3c:44: 14:88:81:20:60:a2:d1:93:93:d9:7d:53:32:b2:45:cd:3c:0e: 9c:d8:ed:90:61:b4:eb:d7:e9:b5:60:78:d0:ad:f7:63:be:18: 57:e9:e3:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT/K/fWjFJ4XXwR23y80e98XvLrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjA1MTM4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzQ1MmZlMDg2NmI4YmQwYTEyNzJkMDE5MTA2MmM3MGUz ODUwOWM1OWFhZDBhMjA3ODA5ZDY5MTFhNzQ3MjhmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCREPLwyx/d4QbkTkSExuxRZjkbOKm2gZCQYqzL24gYILLJ mhR1K+zTM2ejtwoa7xQhEXXoRLnK83CwdzHt6n1L2vPRMhr2WyaVHuiCHauMxMSE 8loXxFP6hMu2bxc3gdc/TBett97hHO2TWlQZ6qCKmC0X8W/piua8CX00BMklVZHT dVgATgIHi9ueXxRySYr/ZzZzQAkNCwIW+4bNSpYX1x2rdmGbKuS+v/zOFBxeDL8W i4qxrr1N1fJv6n2BKm/BPslp2LHh291frJfdTSMsnRH4f1Y8FNMwCFJ3b58pM1BQ R/YtawCiQj5Yv/PNLwrD/8TD+ZMGez6T/7QuTaVvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhiVJxOXrQ+4B4IUltzIwfencsXQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZjZjBmMmUxLTU3OTItNDlkOC05NmZkLWY3ZmM2Yzc1M2E4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADroIwDQYJKoZIhvcNAQELBQADggEBAAExqE+YK9czK640b73pOTVxvFpD DaySjgwoK/MfClsUoGpzPrrH5CzKHEAik6vIJfqw68dWt3wBvSfZu629x/Zo4RtZ kRunl+fCxYBeX/xjGd3mvKy3IM6vnAYoWWak6Fy4CyETrVzrHSQ475quJ0iWb5PK /RCs3enEpAT0PGvnhnVeIYgtqNfVAjXtw50THxGP3gb9Yhy3xPxYEKN7IjXnT6Fo fFoAEp+9C3UMKksyCHH5+7wxKGaqoSN0kZQjoWhQzoFTBUVUvNFbui+5oC69HI2V tF08RBSIgSBgotGTk9l9UzKyRc08DpzY7ZBhtOvX6bVgeNCt92O+GFfp40A= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:33 2025 by rpki-client