$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1add30ae-7aae-4fa8-b184-b3cc860712af.roa File: 1add30ae-7aae-4fa8-b184-b3cc860712af.roa (raw, json) Hash identifier: V1FJ8mY+d3F6lHioowh0F2PVGV3hA6h2XQhEcPGhjV0= Subject key identifier: 63:7F:E5:3E:67:83:70:4D:1A:4A:78:24:1F:A8:F2:F6:6E:BC:FF:05 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 30D4820F7985831475614D21C945A9152EAFBB66 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1add30ae-7aae-4fa8-b184-b3cc860712af.roa Signing time: Fri 31 Oct 2025 01:20:07 +0000 ROA not before: Fri 31 Oct 2025 01:20:07 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d4:82:0f:79:85:83:14:75:61:4d:21:c9:45:a9:15:2e:af:bb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 01:20:07 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=d23dde0c1ce3013bbae0482e4c4768d87d673f5b867f5b4db45b3e256d370578, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2a:f9:a3:ba:0a:a2:33:a6:a9:a3:a7:99:30: a8:f9:d7:0a:5b:94:ec:e2:1f:a2:3b:a8:db:de:12: f7:21:f7:62:b3:b5:6d:e8:16:77:0f:8a:92:6c:2f: 39:3b:03:ca:46:bb:ea:91:97:f5:47:21:03:70:6a: f6:66:80:e2:84:47:d5:db:08:fa:68:57:2f:da:62: 9f:17:96:4a:d6:2d:86:21:48:2c:c9:48:36:a3:78: d4:b0:30:cc:0c:3f:ec:d6:c0:7b:48:bf:91:79:af: 78:ab:ee:9b:20:20:14:f0:53:a7:87:8f:64:4e:0c: b8:42:6e:bf:51:ed:8b:15:cf:8c:ef:b8:48:5e:3e: d0:7e:97:7e:2c:a9:cc:5b:6b:2d:be:a5:81:14:d0: f9:bc:5d:bd:d6:12:fe:ea:26:d2:dc:be:be:f2:33: f2:e0:ae:20:b5:43:49:bf:a5:ce:9c:d2:1f:cf:56: 93:a8:94:b7:61:d1:06:7e:05:61:88:72:cd:24:66: e3:dd:f9:6a:ee:a5:d3:74:f6:41:01:fd:69:57:cb: ed:1f:96:2b:ac:4c:ff:24:da:c1:96:a7:69:c6:cb: 69:66:be:36:e2:8d:0f:ff:bc:fe:66:d5:0e:61:c1: d1:ef:18:51:e9:40:cd:18:05:a5:36:87:3a:7c:4f: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7F:E5:3E:67:83:70:4D:1A:4A:78:24:1F:A8:F2:F6:6E:BC:FF:05 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1add30ae-7aae-4fa8-b184-b3cc860712af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.75.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:ff:ec:84:10:3a:08:8d:8d:f9:82:27:96:55:fe:83:5d:e3: 0e:fc:db:05:39:fb:1d:dc:87:ed:29:15:2a:40:8b:bb:7e:7b: f7:0a:68:79:1f:94:8c:75:d7:b3:7b:90:92:76:10:17:7c:6d: d4:4f:ce:a8:5f:e7:41:7d:8a:ee:87:e1:f4:76:1f:b0:42:0c: 86:bc:98:66:09:fb:8d:ce:cc:01:bd:1d:8f:fc:8d:e1:f6:d4: 2d:cb:f0:16:a6:df:f1:75:fa:66:11:27:27:97:bc:51:ca:08: 9e:87:af:ea:19:e3:ec:a5:6c:27:21:18:f7:da:c4:b2:98:9e: 72:cb:02:ca:52:21:e2:6e:bc:81:4f:3c:8f:7b:2d:d3:09:13: cc:71:e2:a5:87:6b:f6:af:1b:03:5c:f4:92:03:80:f4:39:6c: 21:e6:c5:d4:1f:c8:23:a6:ee:f3:2c:70:f7:66:ae:b6:da:06: 88:33:5e:6b:c6:f7:70:74:07:46:7b:d7:1c:1b:47:12:07:49: 81:18:b8:31:9f:54:94:59:85:32:6b:6c:a4:87:96:44:01:ec: b1:78:53:74:f9:1c:15:79:a9:11:7f:ba:70:d6:88:40:05:50: 94:e6:9a:6c:31:5b:a8:c0:66:39:ed:cf:17:95:a8:08:01:99: 21:bb:a0:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMNSCD3mFgxR1YU0hyUWpFS6vu2YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMDEyMDA3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjNkZGUwYzFjZTMwMTNiYmFlMDQ4MmU0YzQ3NjhkODdk NjczZjViODY3ZjViNGRiNDViM2UyNTZkMzcwNTc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhKvmjugqiM6apo6eZMKj51wpblOziH6I7qNveEvch92Kz tW3oFncPipJsLzk7A8pGu+qRl/VHIQNwavZmgOKER9XbCPpoVy/aYp8XlkrWLYYh SCzJSDajeNSwMMwMP+zWwHtIv5F5r3ir7psgIBTwU6eHj2RODLhCbr9R7YsVz4zv uEhePtB+l34sqcxbay2+pYEU0Pm8Xb3WEv7qJtLcvr7yM/LgriC1Q0m/pc6c0h/P VpOolLdh0QZ+BWGIcs0kZuPd+WrupdN09kEB/WlXy+0fliusTP8k2sGWp2nGy2lm vjbijQ//vP5m1Q5hwdHvGFHpQM0YBaU2hzp8Tx2NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY3/lPmeDcE0aSngkH6jy9m68/wUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhZGQzMGFlLTdhYWUtNGZhOC1iMTg0LWIzY2M4NjA3MTJhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAkswDQYJKoZIhvcNAQELBQADggEBAF7/7IQQOgiNjfmCJ5ZV/oNd4w78 2wU5+x3ch+0pFSpAi7t+e/cKaHkflIx117N7kJJ2EBd8bdRPzqhf50F9iu6H4fR2 H7BCDIa8mGYJ+43OzAG9HY/8jeH21C3L8Bam3/F1+mYRJyeXvFHKCJ6Hr+oZ4+yl bCchGPfaxLKYnnLLAspSIeJuvIFPPI97LdMJE8xx4qWHa/avGwNc9JIDgPQ5bCHm xdQfyCOm7vMscPdmrrbaBogzXmvG93B0B0Z71xwbRxIHSYEYuDGfVJRZhTJrbKSH lkQB7LF4U3T5HBV5qRF/unDWiEAFUJTmmmwxW6jAZjntzxeVqAgBmSG7oAo= -----END CERTIFICATE-----Generated at Wed Nov 5 01:46:15 2025 by rpki-client