$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3d70848-1302-4b70-8ab4-caeabcaff24e.roa File: a3d70848-1302-4b70-8ab4-caeabcaff24e.roa (raw, json) Hash identifier: hls68cblNbMWap35NGwwf5H6CWLjTR6bYg3BgdLAYqs= Subject key identifier: D4:FF:13:9D:16:0D:BC:B0:0A:D1:29:9D:E9:9D:3F:1E:51:C5:EE:34 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 752BEDF99C5DB48B6B4A741301C27EC805616326 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3d70848-1302-4b70-8ab4-caeabcaff24e.roa Signing time: Tue 04 Nov 2025 02:01:40 +0000 ROA not before: Tue 04 Nov 2025 02:01:40 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.30.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2b:ed:f9:9c:5d:b4:8b:6b:4a:74:13:01:c2:7e:c8:05:61:63:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 02:01:40 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=a8e47aa6ba7bc3d8bbdc76eb990b576c5fe27b4aa59d031125b98fb6eaeeefda, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:af:1d:fa:9d:85:e1:98:92:7a:54:13:b0:e0: 99:40:7d:15:94:bb:5e:b4:f1:73:df:d2:92:94:54: d5:97:56:6e:8a:55:14:d7:52:e7:d1:ff:72:7e:1b: 0d:66:5e:bd:5f:aa:4e:65:55:1e:aa:7b:8d:6d:bb: e5:b5:0e:a6:1c:4b:33:0c:80:61:e0:ee:60:97:7b: c6:0d:4a:52:bf:8a:3d:57:0f:5a:d4:96:25:dc:86: d0:ea:2e:9c:eb:c7:86:78:0f:1f:9c:39:d3:41:94: 91:86:56:ad:b9:84:c8:ff:7a:6b:a5:82:69:1c:0f: 38:97:64:94:b4:0c:b1:91:6b:b0:3d:fc:17:d4:1b: 3e:62:b4:e2:ae:99:58:51:ef:fd:52:1b:24:d2:f3: 77:81:9e:cd:55:1a:c7:5c:a9:ec:8f:03:d1:98:70: b7:be:34:7b:1c:b2:6e:33:40:0b:d2:8c:d5:82:03: 56:55:26:fb:23:3f:56:e2:6f:7d:94:6b:77:54:f7: 5b:c3:07:b9:72:7f:4f:9b:2a:ea:cf:6f:4b:15:8a: 06:69:63:18:70:56:6c:8c:e6:d7:6e:74:a1:d0:32: c0:51:ed:c0:e2:0a:5c:bb:6c:cf:60:61:e3:7f:ee: 1b:be:aa:cf:c5:2f:21:67:d7:95:fd:b2:b9:b4:5a: 01:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FF:13:9D:16:0D:BC:B0:0A:D1:29:9D:E9:9D:3F:1E:51:C5:EE:34 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3d70848-1302-4b70-8ab4-caeabcaff24e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.30.0.0/15 Signature Algorithm: sha256WithRSAEncryption 66:07:38:ca:86:e4:2a:bf:cc:75:4d:e1:7b:2d:fb:3f:19:e4: af:6a:f4:a8:d4:1e:fc:1c:3a:d6:01:43:ca:dd:fd:3b:2b:a1: fd:78:cf:8f:72:6e:ff:3c:b6:78:e0:67:0f:ad:41:89:16:17: 08:a4:8c:21:ba:50:93:31:0b:24:e3:c7:39:63:62:8d:16:14: 3c:88:b3:c2:51:aa:0e:b9:ae:22:08:3c:8f:63:7d:72:4f:20: b0:73:f6:c6:b8:e2:da:17:11:6b:3f:ae:0e:41:63:8d:b0:bc: 45:d8:1d:af:48:23:49:02:26:28:ff:be:47:32:fd:64:27:de: b8:e9:db:1d:70:76:1f:cd:57:1f:73:63:58:cc:6e:ec:c2:bc: d4:e0:31:f3:15:5a:09:c4:a6:8a:7d:04:46:cb:41:fe:14:c9: 3c:b9:94:3b:1e:67:5a:e7:28:65:dd:8f:7c:de:5d:43:bc:fd: ef:bc:a3:dd:77:60:4f:c7:7a:27:a9:66:55:d7:22:54:a7:eb: 93:cc:4b:03:5d:2d:9b:1b:b2:d5:a7:f4:2f:e3:bf:d8:e4:36: 80:10:5c:fd:44:04:0d:56:0d:28:79:74:14:d4:e3:d2:29:86: 6f:83:3f:0d:30:64:24:bd:ba:83:36:bd:ac:e9:c0:06:4c:01: 16:da:a2:da -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdSvt+ZxdtItrSnQTAcJ+yAVhYyYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDIwMTQwWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOGU0N2FhNmJhN2JjM2Q4YmJkYzc2ZWI5OTBiNTc2YzVm ZTI3YjRhYTU5ZDAzMTEyNWI5OGZiNmVhZWVlZmRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDErx36nYXhmJJ6VBOw4JlAfRWUu1608XPf0pKUVNWXVm6K VRTXUufR/3J+Gw1mXr1fqk5lVR6qe41tu+W1DqYcSzMMgGHg7mCXe8YNSlK/ij1X D1rUliXchtDqLpzrx4Z4Dx+cOdNBlJGGVq25hMj/emulgmkcDziXZJS0DLGRa7A9 /BfUGz5itOKumVhR7/1SGyTS83eBns1VGsdcqeyPA9GYcLe+NHscsm4zQAvSjNWC A1ZVJvsjP1bib32Ua3dU91vDB7lyf0+bKurPb0sVigZpYxhwVmyM5tdudKHQMsBR 7cDiCly7bM9gYeN/7hu+qs/FLyFn15X9srm0WgFdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1P8TnRYNvLAK0Smd6Z0/HlHF7jQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EzZDcwODQ4LTEzMDItNGI3MC04YWI0LWNhZWFiY2FmZjI0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0HjANBgkqhkiG9w0BAQsFAAOCAQEAZgc4yobkKr/MdU3hey37Pxnkr2r0 qNQe/Bw61gFDyt39Oyuh/XjPj3Ju/zy2eOBnD61BiRYXCKSMIbpQkzELJOPHOWNi jRYUPIizwlGqDrmuIgg8j2N9ck8gsHP2xrji2hcRaz+uDkFjjbC8Rdgdr0gjSQIm KP++RzL9ZCfeuOnbHXB2H81XH3NjWMxu7MK81OAx8xVaCcSmin0ERstB/hTJPLmU Ox5nWucoZd2PfN5dQ7z977yj3XdgT8d6J6lmVdciVKfrk8xLA10tmxuy1af0L+O/ 2OQ2gBBc/UQEDVYNKHl0FNTj0imGb4M/DTBkJL26gza9rOnABkwBFtqi2g== -----END CERTIFICATE-----Generated at Wed Nov 5 01:47:23 2025 by rpki-client