$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fde04680-35d1-41c7-afa0-f59b703e9c08.roa File: fde04680-35d1-41c7-afa0-f59b703e9c08.roa (raw, json) Hash identifier: TDm1wS2fPO1yJSAdJTepXMCIz1Sf2I7z55Fyx5+Qag0= Subject key identifier: 97:BB:19:3E:03:58:B2:1F:C8:20:09:AA:8F:86:BE:F8:8C:B3:6F:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A2AB56190782AC5517E5D5EBE3C457CEB06FB22 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fde04680-35d1-41c7-afa0-f59b703e9c08.roa Signing time: Thu 25 Sep 2025 23:18:00 +0000 ROA not before: Thu 25 Sep 2025 23:18:00 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2a:b5:61:90:78:2a:c5:51:7e:5d:5e:be:3c:45:7c:eb:06:fb:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:18:00 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=041255c76d57d0be2d246fe21377864d610a1b72c812d02ff55f9bcef6e9e775, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:e4:92:3f:8e:4e:91:da:56:06:9c:ef:7e: fc:6a:14:a8:de:51:3b:47:46:e3:1a:c0:79:4a:0e: 9b:73:b6:3b:1f:3e:04:e9:c0:53:48:2a:5a:23:ef: e2:a1:b5:63:9c:92:df:fe:8d:7b:1e:70:c8:60:3a: 3b:94:4a:05:83:8b:d9:43:23:93:43:25:a3:74:51: 2e:cb:6b:92:fa:04:13:a5:a3:74:7e:97:54:2d:f9: 88:e0:da:c7:0d:e3:44:57:07:1d:02:9b:d3:4e:d0: c2:27:15:d5:4e:90:da:4b:66:4b:05:d5:30:78:fc: bd:ca:e7:06:90:f8:fc:71:ec:9d:4d:3a:69:cc:7a: 50:db:21:51:86:4d:51:27:e9:87:73:c5:48:90:c7: ca:f8:a6:65:6d:4e:4b:bd:5e:02:18:e8:ba:49:b4: 67:82:0d:5e:d5:f1:64:4a:23:23:f3:62:6d:ed:44: 60:d7:0b:24:92:a5:99:25:7b:71:ea:11:d2:2d:57: f9:02:85:ee:c4:11:3b:90:86:72:2f:76:21:76:e6: 90:08:df:ba:be:d5:82:91:27:21:9e:dd:40:f4:6b: 8d:4e:45:73:73:ba:8d:89:4b:45:01:52:70:1e:4e: 88:0a:07:88:d1:41:80:31:3e:20:7a:54:60:1c:ef: 01:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BB:19:3E:03:58:B2:1F:C8:20:09:AA:8F:86:BE:F8:8C:B3:6F:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fde04680-35d1-41c7-afa0-f59b703e9c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.104.0/23 Signature Algorithm: sha256WithRSAEncryption ab:de:b2:d9:23:c8:f9:00:ed:cb:11:eb:8a:5a:a7:b2:6e:0b: cb:06:a5:84:73:a8:6d:72:fd:77:a7:cc:63:fa:f8:e1:a6:60: 08:c0:2a:38:3e:af:48:45:04:2b:ef:bd:fd:be:7e:7a:b3:6e: 72:37:1b:08:75:2b:5d:4e:bd:24:40:62:8e:eb:d7:cb:bb:e5: c4:74:7a:d0:3d:6d:a7:4f:e0:c0:a8:68:e0:44:6e:3d:f2:b8: e8:1c:4f:a2:c2:1f:5e:18:3f:a6:c8:b4:35:28:c3:71:17:2b: 3c:24:a7:ad:f1:f5:0b:47:be:fb:50:11:d8:76:25:e6:9a:75: ab:43:7e:2a:69:a0:4b:04:87:7e:a1:76:61:6d:b7:be:ea:02: 05:3a:0b:fa:b5:9d:9f:f3:6d:33:dd:12:36:c9:8f:0f:51:1e: 85:11:41:fc:4d:3b:35:e7:36:d6:a5:6d:7e:b1:b6:2a:da:f6: 7c:00:3b:54:c8:cf:74:6f:ea:f8:0b:2e:5f:12:86:00:1a:a8: 4e:31:eb:29:bc:05:3d:b7:00:f6:45:fe:50:1d:fe:5b:6f:9c: 39:43:70:db:c5:04:c0:b7:dd:e3:2e:cd:c0:51:41:a6:7c:9a: 56:a0:09:a6:61:ea:20:1a:2a:8b:e1:d5:0a:ad:8d:24:1d:9e: de:b0:a9:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWiq1YZB4KsVRfl1evjxFfOsG+yIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMxODAwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDEyNTVjNzZkNTdkMGJlMmQyNDZmZTIxMzc3ODY0ZDYx MGExYjcyYzgxMmQwMmZmNTVmOWJjZWY2ZTllNzc1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0L+SSP45OkdpWBpzvfvxqFKjeUTtHRuMawHlKDptztjsf PgTpwFNIKloj7+KhtWOckt/+jXsecMhgOjuUSgWDi9lDI5NDJaN0US7La5L6BBOl o3R+l1Qt+Yjg2scN40RXBx0Cm9NO0MInFdVOkNpLZksF1TB4/L3K5waQ+Pxx7J1N OmnMelDbIVGGTVEn6YdzxUiQx8r4pmVtTku9XgIY6LpJtGeCDV7V8WRKIyPzYm3t RGDXCySSpZkle3HqEdItV/kChe7EETuQhnIvdiF25pAI37q+1YKRJyGe3UD0a41O RXNzuo2JS0UBUnAeTogKB4jRQYAxPiB6VGAc7wG7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUl7sZPgNYsh/IIAmqj4a++Iyzb08wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZkZTA0NjgwLTM1ZDEtNDFjNy1hZmEwLWY1OWI3MDNlOWMwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrGgwDQYJKoZIhvcNAQELBQADggEBAKvestkjyPkA7csR64pap7JuC8sG pYRzqG1y/XenzGP6+OGmYAjAKjg+r0hFBCvvvf2+fnqzbnI3Gwh1K11OvSRAYo7r 18u75cR0etA9badP4MCoaOBEbj3yuOgcT6LCH14YP6bItDUow3EXKzwkp63x9QtH vvtQEdh2JeaadatDfippoEsEh36hdmFtt77qAgU6C/q1nZ/zbTPdEjbJjw9RHoUR QfxNOzXnNtalbX6xtira9nwAO1TIz3Rv6vgLLl8ShgAaqE4x6ym8BT23APZF/lAd /ltvnDlDcNvFBMC33eMuzcBRQaZ8mlagCaZh6iAaKovh1QqtjSQdnt6wqU8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:17:18 2025 by rpki-client