$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92aed9e1-9741-4d05-a6f4-8e3cafdf2a4d.roa File: 92aed9e1-9741-4d05-a6f4-8e3cafdf2a4d.roa (raw, json) Hash identifier: r+K164TmHiWKak0GVxDHrAsA4ZmSi3EFlTUlI5WVWqU= Subject key identifier: C2:2C:96:6E:7D:7D:F8:83:E8:6B:72:F2:FA:90:59:26:13:72:CF:16 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 26B34386AEC75C84F419B93B223314D2B09148AE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92aed9e1-9741-4d05-a6f4-8e3cafdf2a4d.roa Signing time: Tue 21 Oct 2025 05:41:20 +0000 ROA not before: Tue 21 Oct 2025 05:41:20 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.2.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b3:43:86:ae:c7:5c:84:f4:19:b9:3b:22:33:14:d2:b0:91:48:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 05:41:20 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=1efaa157399dd19ece389fc134ef6aa5f5560c2a643229f8b31a9b32f4622b52, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2e:5b:b9:ba:73:f2:18:ee:c0:e0:45:68:79: e9:29:3f:ce:d1:7e:3a:d7:8c:3a:35:b3:84:02:7f: bf:1f:fc:de:bb:21:3a:13:0e:89:94:d6:b3:6d:28: b0:f5:81:c4:67:63:21:ed:e6:87:55:7f:34:c1:13: 0e:1b:36:8e:15:7e:d1:bf:26:9c:12:bb:3b:f2:97: 36:c7:4f:0d:d2:3b:14:2e:c6:24:21:da:9a:ba:ac: 7f:e7:cb:13:dc:d9:70:0f:59:4c:ce:3c:14:c6:1f: d7:da:43:81:96:0d:93:3e:bb:a2:ff:85:1e:e9:71: 37:2c:97:0d:b1:ef:ec:cb:f5:5d:50:df:da:9a:dc: ef:73:b6:9c:8f:1d:0c:3c:12:b2:a6:1c:e4:0e:63: 93:c5:a4:b8:b5:dd:08:54:b2:8b:59:1d:ca:96:28: ab:5a:87:01:95:b2:5d:d6:07:b7:f7:0e:ea:b3:01: 18:90:0a:29:fe:06:8e:f7:bf:99:5b:ad:fb:2e:77: 32:ee:09:2c:f5:e1:00:31:b1:e4:fb:7f:66:c0:7e: 7b:5d:34:aa:30:b9:1d:1e:df:47:79:52:7f:a5:3f: 3e:22:33:eb:9d:73:3e:b8:c5:7f:f1:33:6f:1c:6e: 18:cb:a8:6c:f0:07:09:64:69:c2:b1:0f:54:ed:3a: 53:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2C:96:6E:7D:7D:F8:83:E8:6B:72:F2:FA:90:59:26:13:72:CF:16 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92aed9e1-9741-4d05-a6f4-8e3cafdf2a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.52.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:19:bd:f1:e6:90:76:08:e9:34:6c:fe:8e:6d:f8:81:7c:55: 64:75:af:01:3b:db:25:70:2a:fc:b5:29:0c:6c:7d:a4:5f:9c: af:f6:60:bd:65:1c:eb:82:cb:6b:75:ab:cb:f4:94:2d:2f:ff: c9:34:b7:6d:d0:c3:93:aa:b9:5f:9d:9d:1e:6a:6f:9b:a1:56: c9:22:32:88:9f:9b:e4:07:44:a5:c5:39:24:7f:33:d4:1a:a0: 00:c2:ec:85:19:1c:c2:e7:dd:dd:a7:36:34:ab:c9:e2:6f:a0: fb:0a:56:21:02:af:8a:f9:63:df:1e:66:3e:20:ea:c5:5d:d8: ef:25:4c:a2:2b:78:18:55:10:94:d0:43:d7:64:f3:52:c3:d5: 34:20:ce:dc:ed:99:b1:94:32:4b:19:8e:ec:2a:bb:29:b6:e5: 1e:0d:1d:a1:05:ef:ea:42:65:d4:58:59:02:8e:ce:d6:ec:31: cc:a1:fe:b5:85:9f:ba:b2:3a:bf:bc:92:7c:54:2c:5e:86:7a: 6f:93:16:4c:56:57:a3:32:bc:1d:fe:81:c9:f2:3f:6e:32:ba: 0e:ce:27:80:89:96:99:1d:b6:2f:a1:28:6c:bc:ad:50:67:38: f6:df:f2:1c:fc:75:7b:4c:f2:32:4c:b1:a5:fe:7a:e7:58:9a: 06:2a:43:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJrNDhq7HXIT0Gbk7IjMU0rCRSK4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDU0MTIwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZWZhYTE1NzM5OWRkMTllY2UzODlmYzEzNGVmNmFhNWY1 NTYwYzJhNjQzMjI5ZjhiMzFhOWIzMmY0NjIyYjUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYLlu5unPyGO7A4EVoeekpP87RfjrXjDo1s4QCf78f/N67 IToTDomU1rNtKLD1gcRnYyHt5odVfzTBEw4bNo4VftG/JpwSuzvylzbHTw3SOxQu xiQh2pq6rH/nyxPc2XAPWUzOPBTGH9faQ4GWDZM+u6L/hR7pcTcslw2x7+zL9V1Q 39qa3O9ztpyPHQw8ErKmHOQOY5PFpLi13QhUsotZHcqWKKtahwGVsl3WB7f3Duqz ARiQCin+Bo73v5lbrfsudzLuCSz14QAxseT7f2bAfntdNKowuR0e30d5Un+lPz4i M+udcz64xX/xM28cbhjLqGzwBwlkacKxD1TtOlM3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwiyWbn19+IPoa3Ly+pBZJhNyzxYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkyYWVkOWUxLTk3NDEtNGQwNS1hNmY0LThlM2NhZmRmMmE0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAjQwDQYJKoZIhvcNAQELBQADggEBAF4ZvfHmkHYI6TRs/o5t+IF8VWR1 rwE72yVwKvy1KQxsfaRfnK/2YL1lHOuCy2t1q8v0lC0v/8k0t23Qw5OquV+dnR5q b5uhVskiMoifm+QHRKXFOSR/M9QaoADC7IUZHMLn3d2nNjSryeJvoPsKViECr4r5 Y98eZj4g6sVd2O8lTKIreBhVEJTQQ9dk81LD1TQgztztmbGUMksZjuwquym25R4N HaEF7+pCZdRYWQKOztbsMcyh/rWFn7qyOr+8knxULF6Gem+TFkxWV6MyvB3+gcny P24yug7OJ4CJlpkdti+hKGy8rVBnOPbf8hz8dXtM8jJMsaX+eudYmgYqQ9E= -----END CERTIFICATE-----Generated at Wed Nov 5 01:53:53 2025 by rpki-client