$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10120afb-90ae-4e16-9879-957f0af8002a.roa File: 10120afb-90ae-4e16-9879-957f0af8002a.roa (raw, json) Hash identifier: 6oWm17wkULL3Cb5ZHVw4h3VRxzovwYHT8wkdCNOy0/o= Subject key identifier: F3:AE:D9:19:79:3F:03:07:03:D4:B4:82:A6:C1:80:05:1E:9D:8B:CA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0AA8F46CEA1F42DB03288FEF65178A9A313F1AA2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10120afb-90ae-4e16-9879-957f0af8002a.roa Signing time: Fri 31 Oct 2025 01:10:08 +0000 ROA not before: Fri 31 Oct 2025 01:10:08 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a8:f4:6c:ea:1f:42:db:03:28:8f:ef:65:17:8a:9a:31:3f:1a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 01:10:08 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=89beb675567c23700db86a15f0e673739772d9d48e93f77ada62a5dc31ba4a05, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a1:1f:92:8e:53:da:84:3e:01:9f:7a:06:aa: ac:8a:f9:a1:4f:f2:b7:ab:b8:f3:6a:60:70:13:19: a8:6c:b9:23:18:18:76:a1:51:d8:ea:40:42:a8:17: 77:65:d9:64:10:64:42:b5:83:b9:ab:95:aa:65:66: 73:9a:6f:94:fd:7a:30:2a:06:a2:6e:2a:f1:eb:80: a2:43:ab:85:0c:76:bf:14:00:e0:4b:e9:2d:17:1c: 56:8b:3a:bc:05:34:12:9b:e0:32:b2:3e:35:24:f6: 2d:7d:4a:f3:e8:e0:62:8a:ab:d1:d4:00:77:2a:42: da:00:04:e4:59:32:15:00:da:e8:6a:ff:46:8f:b5: 98:f0:0a:fe:22:64:83:db:05:85:77:77:39:25:be: 30:70:6f:e2:03:01:c1:17:ab:69:66:4e:18:3f:d8: 8b:3c:ce:b1:b1:76:57:3f:44:04:12:b7:08:32:c2: 06:e2:08:db:ea:cd:de:59:32:e1:55:f1:0d:2d:ab: 6e:98:02:59:a3:f7:60:a4:28:a2:13:a9:40:7a:3b: 3b:f9:7e:49:d7:ab:21:29:85:3d:4b:74:cb:a4:e6: e4:da:cc:06:21:b8:9a:01:3a:bd:e6:7f:82:84:bd: 2c:a7:94:03:4b:7d:83:7b:65:1e:25:8f:b5:94:3a: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AE:D9:19:79:3F:03:07:03:D4:B4:82:A6:C1:80:05:1E:9D:8B:CA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10120afb-90ae-4e16-9879-957f0af8002a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.72.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:18:a2:65:07:36:1a:1f:42:4f:e5:20:10:a0:aa:7c:c3:26: 7d:bb:be:00:90:65:df:33:1a:e8:e1:cc:08:05:6b:26:10:04: 94:76:b3:2e:b5:d1:da:9c:d4:e2:1b:d0:fe:f3:a7:da:30:24: 6f:76:79:0e:f8:96:5b:2a:53:b1:0f:60:97:f9:b6:c6:a9:2d: f0:9e:ca:9a:8e:82:c5:26:de:b6:e4:ba:79:af:62:b9:6c:b3: 0a:ec:70:10:14:30:eb:49:6d:38:7e:36:6d:17:6a:b0:83:79: 03:95:6e:f7:fb:ef:4a:c6:78:db:e8:47:4a:47:5d:cf:b7:d8: b2:2e:76:e2:e4:8d:e4:c7:da:e6:f3:df:8e:5c:b6:6e:07:35: 97:47:bc:34:ac:24:7c:6a:e1:2f:c1:46:dd:d4:2c:47:5c:d2: e4:13:4d:55:c1:0a:65:46:40:cf:98:25:7c:b9:94:be:69:44: 6b:43:90:e3:27:f2:1a:44:a8:69:36:3d:1f:8a:e3:9c:39:dd: f2:9c:09:40:45:d6:07:f6:90:7b:26:ee:33:80:b2:37:d4:be: 9d:5b:c7:f6:73:d4:da:75:3c:f3:7c:7e:2c:1f:2d:ee:13:25: 37:1d:e2:d5:89:a8:5c:83:af:ee:61:1f:cc:c3:98:05:3a:45: 1a:29:70:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCqj0bOofQtsDKI/vZReKmjE/GqIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMDExMDA4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OWJlYjY3NTU2N2MyMzcwMGRiODZhMTVmMGU2NzM3Mzk3 NzJkOWQ0OGU5M2Y3N2FkYTYyYTVkYzMxYmE0YTA1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhoR+SjlPahD4Bn3oGqqyK+aFP8reruPNqYHATGahsuSMY GHahUdjqQEKoF3dl2WQQZEK1g7mrlaplZnOab5T9ejAqBqJuKvHrgKJDq4UMdr8U AOBL6S0XHFaLOrwFNBKb4DKyPjUk9i19SvPo4GKKq9HUAHcqQtoABORZMhUA2uhq /0aPtZjwCv4iZIPbBYV3dzklvjBwb+IDAcEXq2lmThg/2Is8zrGxdlc/RAQStwgy wgbiCNvqzd5ZMuFV8Q0tq26YAlmj92CkKKITqUB6Ozv5fknXqyEphT1LdMuk5uTa zAYhuJoBOr3mf4KEvSynlANLfYN7ZR4lj7WUOu4jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU867ZGXk/AwcD1LSCpsGABR6di8owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEwMTIwYWZiLTkwYWUtNGUxNi05ODc5LTk1N2YwYWY4MDAyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAkgwDQYJKoZIhvcNAQELBQADggEBAE0YomUHNhofQk/lIBCgqnzDJn27 vgCQZd8zGujhzAgFayYQBJR2sy610dqc1OIb0P7zp9owJG92eQ74llsqU7EPYJf5 tsapLfCeypqOgsUm3rbkunmvYrlsswrscBAUMOtJbTh+Nm0XarCDeQOVbvf770rG eNvoR0pHXc+32LIuduLkjeTH2ubz345ctm4HNZdHvDSsJHxq4S/BRt3ULEdc0uQT TVXBCmVGQM+YJXy5lL5pRGtDkOMn8hpEqGk2PR+K45w53fKcCUBF1gf2kHsm7jOA sjfUvp1bx/Zz1Np1PPN8fiwfLe4TJTcd4tWJqFyDr+5hH8zDmAU6RRopcGA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:53 2025 by rpki-client