$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ed79d59-8044-42c6-925a-e99b7ecf3e9a.roa File: 3ed79d59-8044-42c6-925a-e99b7ecf3e9a.roa (raw, json) Hash identifier: 9RSrA1AXAzwn9FV2uQ00kJtRbIPtWFXBukNlk/CpERA= Subject key identifier: 94:03:9F:B7:5C:41:BD:74:01:29:B4:EB:F6:FF:74:DE:75:21:4F:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 63C1F7D694F2CF07185B068F1EF8DF11FDFDCE93 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ed79d59-8044-42c6-925a-e99b7ecf3e9a.roa Signing time: Wed 22 Oct 2025 19:36:53 +0000 ROA not before: Wed 22 Oct 2025 19:36:53 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c1:f7:d6:94:f2:cf:07:18:5b:06:8f:1e:f8:df:11:fd:fd:ce:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 22 19:36:53 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=11b7757858683db8d322bc7cb7561e2a69ca6e4589a273cc036e6f06cb133f47, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:df:fb:10:70:19:af:62:f9:c2:0b:ba:1e:4f: 1b:9a:26:e5:f0:33:41:eb:40:ef:f3:86:61:6e:f8: c9:e1:de:ae:44:69:f0:ae:d0:8b:4a:95:2f:1a:aa: 20:85:a6:4d:ae:7a:da:6f:4e:ff:7a:23:21:55:c7: 75:17:7a:0c:98:83:c3:91:1b:a0:1b:b6:3f:b5:cf: 34:4a:e2:2e:c4:69:54:8b:f5:82:20:5b:06:03:ac: 06:47:96:2b:3a:8f:7d:1e:76:e5:9b:d8:98:26:fd: 9e:ee:b8:4d:3f:a4:95:30:42:08:60:2b:dc:c1:88: 54:3b:30:48:b5:63:d0:b7:42:be:7b:c4:10:fb:4e: c8:cd:78:48:b0:c4:fb:fa:50:d9:13:0c:e1:16:f2: b4:33:33:7d:36:7e:39:51:48:63:47:87:73:40:06: 4b:b7:99:23:74:55:64:96:b1:5d:1d:9e:32:49:1a: 2e:ce:38:db:c7:2b:05:58:89:09:88:a2:d8:08:99: 77:53:79:b0:ad:f3:5c:9b:bd:42:f9:15:ba:14:f5: 13:ec:4f:6a:da:e1:4f:aa:03:ab:2a:32:e4:47:d4: ba:1d:5e:d7:13:6b:82:0b:72:e2:20:0a:3c:fb:4e: 07:83:a0:4b:b3:b3:ff:52:da:3d:93:3e:a3:db:6e: 8f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:03:9F:B7:5C:41:BD:74:01:29:B4:EB:F6:FF:74:DE:75:21:4F:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ed79d59-8044-42c6-925a-e99b7ecf3e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.176.0/23 Signature Algorithm: sha256WithRSAEncryption 60:cd:aa:c7:36:d9:d4:55:45:04:8e:86:c4:94:3a:fc:99:b4: a5:0b:e5:ab:4a:2c:4b:4e:c5:b7:23:72:d8:45:5f:0c:cf:df: 46:c8:e5:ec:22:62:0c:90:af:dc:6e:4c:52:0d:75:c1:c6:0b: e9:85:89:3e:97:e9:01:f0:32:77:f3:a9:d6:55:b4:f8:8f:65: 3e:2c:36:16:cd:5e:4c:a3:70:3c:8a:43:03:ee:b6:ad:8e:e2: fa:e9:8e:d3:1c:db:b7:93:5d:8d:26:8e:79:dd:05:d8:3d:c2: 1c:e4:14:4c:08:95:08:d1:da:66:ed:69:81:3e:d3:de:4e:13: 13:df:47:fa:16:3c:6c:8c:78:80:36:72:45:62:27:83:31:a4: 8c:6d:41:b0:13:e0:95:3d:87:50:05:46:04:0e:58:8e:a0:3b: be:c3:52:9c:a7:d7:df:64:37:33:2d:8f:ed:61:11:70:c9:45: de:4c:86:b3:50:7a:8a:fa:cf:92:19:a2:52:bd:8c:a0:d2:91: b9:6e:70:cf:e4:4c:dc:bc:7b:1f:41:5d:9c:f8:77:71:46:3d: 3b:06:d1:b8:4c:d8:7d:72:97:84:ff:19:d4:ab:18:07:05:07: e6:51:a4:26:13:02:a6:78:24:d5:4d:04:3d:a4:63:cb:56:a8: 3d:c2:ca:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY8H31pTyzwcYWwaPHvjfEf39zpMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIyMTkzNjUzWhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMWI3NzU3ODU4NjgzZGI4ZDMyMmJjN2NiNzU2MWUyYTY5 Y2E2ZTQ1ODlhMjczY2MwMzZlNmYwNmNiMTMzZjQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCT3/sQcBmvYvnCC7oeTxuaJuXwM0HrQO/zhmFu+Mnh3q5E afCu0ItKlS8aqiCFpk2uetpvTv96IyFVx3UXegyYg8ORG6Abtj+1zzRK4i7EaVSL 9YIgWwYDrAZHlis6j30eduWb2Jgm/Z7uuE0/pJUwQghgK9zBiFQ7MEi1Y9C3Qr57 xBD7TsjNeEiwxPv6UNkTDOEW8rQzM302fjlRSGNHh3NABku3mSN0VWSWsV0dnjJJ Gi7OONvHKwVYiQmIotgImXdTebCt81ybvUL5FboU9RPsT2ra4U+qA6sqMuRH1Lod XtcTa4ILcuIgCjz7TgeDoEuzs/9S2j2TPqPbbo/hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlAOft1xBvXQBKbTr9v903nUhT08wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNlZDc5ZDU5LTgwNDQtNDJjNi05MjVhLWU5OWI3ZWNmM2U5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE28LAwDQYJKoZIhvcNAQELBQADggEBAGDNqsc22dRVRQSOhsSUOvyZtKUL 5atKLEtOxbcjcthFXwzP30bI5ewiYgyQr9xuTFINdcHGC+mFiT6X6QHwMnfzqdZV tPiPZT4sNhbNXkyjcDyKQwPutq2O4vrpjtMc27eTXY0mjnndBdg9whzkFEwIlQjR 2mbtaYE+095OExPfR/oWPGyMeIA2ckViJ4MxpIxtQbAT4JU9h1AFRgQOWI6gO77D Upyn199kNzMtj+1hEXDJRd5MhrNQeor6z5IZolK9jKDSkblucM/kTNy8ex9BXZz4 d3FGPTsG0bhM2H1yl4T/GdSrGAcFB+ZRpCYTAqZ4JNVNBD2kY8tWqD3CyjY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:46:34 2025 by rpki-client