$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c79ff9f4-a4bb-4f2e-be5e-a38589b98932.roa File: c79ff9f4-a4bb-4f2e-be5e-a38589b98932.roa (raw, json) Hash identifier: Nw2EbZMdEBYtMz9T9buAFodq10RqltnyKcwQgsK8MWk= Subject key identifier: 04:EB:16:99:F2:B5:C8:72:6C:FB:A6:4D:C5:4E:82:AE:A5:E3:6C:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2BEA4264C3BBC4F87114DAF11706F5884E064F79 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c79ff9f4-a4bb-4f2e-be5e-a38589b98932.roa Signing time: Tue 21 Oct 2025 10:42:35 +0000 ROA not before: Tue 21 Oct 2025 10:42:35 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ea:42:64:c3:bb:c4:f8:71:14:da:f1:17:06:f5:88:4e:06:4f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 10:42:35 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=0d145027c7a12a32fe17dd97b52c9850b94e2bc741df3931f9c2620da699ab6d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:57:a6:8f:e8:e8:b5:c5:b7:e6:34:33:52:20: 66:a7:3d:85:f4:61:15:40:c2:5e:a8:c0:73:25:cf: 63:61:07:cc:0a:52:92:ef:a0:49:10:a0:e9:3c:6b: 9e:25:f5:18:6c:e3:6c:c0:bc:36:fd:7f:73:ae:63: 9c:ab:a9:d8:4d:8d:d1:b4:5d:bc:f3:82:9a:08:0e: d7:d8:69:e2:86:39:71:df:4b:ac:6b:91:89:b7:26: 7c:6f:00:48:3e:a8:00:9d:4f:28:7b:05:75:0a:2d: f5:93:87:bd:e1:d8:e9:d5:ce:ba:29:5d:e2:34:7a: b7:59:c9:19:f3:80:58:48:a3:90:a4:68:21:95:44: 16:a1:c3:e1:2c:18:de:c6:62:af:b6:66:d7:67:6c: 21:00:3c:1b:ae:2f:a8:60:bf:72:20:ae:d7:71:16: 28:2a:26:4e:c8:fd:43:6c:72:e6:2e:9f:b6:cc:93: 45:7c:99:5f:d7:2e:be:ef:6c:c6:0e:8f:71:a4:f8: b8:58:c4:ca:01:db:05:b6:86:e6:c2:71:6a:aa:46: 39:cd:e9:e4:1e:d5:26:05:73:94:1d:e1:e5:14:6d: ae:80:95:59:8f:36:fc:db:4e:97:8d:24:57:c5:dd: f6:e7:8f:05:78:52:14:75:42:28:84:95:d1:5d:8f: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EB:16:99:F2:B5:C8:72:6C:FB:A6:4D:C5:4E:82:AE:A5:E3:6C:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c79ff9f4-a4bb-4f2e-be5e-a38589b98932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.152.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:56:6b:21:28:87:6a:55:2d:e3:65:bd:99:f5:90:da:23:16: 9b:86:44:76:87:5d:21:1b:8f:cb:20:92:94:eb:72:b1:62:ed: 78:f2:96:81:33:f7:3d:eb:25:c1:07:54:d3:cc:de:ec:a6:7f: 6c:9f:c2:5c:6a:a2:b9:d1:71:78:da:85:b1:d7:6c:09:e1:4a: 6c:f2:b1:84:c8:2b:5d:af:78:95:88:3a:55:44:9c:f4:2e:e9: 05:d1:b9:f7:26:08:bb:ef:7b:99:de:62:80:ca:b6:f4:b9:04: a8:a3:e0:b2:39:47:17:00:17:b7:3f:c9:49:b1:b8:26:c2:44: 0a:4d:9d:53:26:20:de:bc:63:0c:50:4c:d1:43:5e:66:1c:a7: 4c:ad:29:29:2f:d8:59:17:88:d6:89:ee:37:6f:c6:ab:03:10: c6:76:e7:12:15:47:ad:93:2a:2e:50:dc:00:b7:97:09:62:08: 92:8c:0d:64:cf:73:8c:ca:34:96:f2:b3:8d:b4:75:b4:6e:f3: 0d:8e:60:0d:a7:06:4f:31:bc:4a:f9:1e:de:05:d9:ba:84:3d: 53:95:8d:70:6e:26:10:00:ab:61:6d:30:9b:48:8d:7a:93:14: 98:57:bb:4e:c1:9a:38:d1:11:13:85:7e:c4:c3:a4:f0:a2:2e: 3e:e7:37:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK+pCZMO7xPhxFNrxFwb1iE4GT3kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMTA0MjM1WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDE0NTAyN2M3YTEyYTMyZmUxN2RkOTdiNTJjOTg1MGI5 NGUyYmM3NDFkZjM5MzFmOWMyNjIwZGE2OTlhYjZkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqV6aP6Oi1xbfmNDNSIGanPYX0YRVAwl6owHMlz2NhB8wK UpLvoEkQoOk8a54l9Rhs42zAvDb9f3OuY5yrqdhNjdG0XbzzgpoIDtfYaeKGOXHf S6xrkYm3JnxvAEg+qACdTyh7BXUKLfWTh73h2OnVzropXeI0erdZyRnzgFhIo5Ck aCGVRBahw+EsGN7GYq+2ZtdnbCEAPBuuL6hgv3IgrtdxFigqJk7I/UNscuYun7bM k0V8mV/XLr7vbMYOj3Gk+LhYxMoB2wW2hubCcWqqRjnN6eQe1SYFc5Qd4eUUba6A lVmPNvzbTpeNJFfF3fbnjwV4UhR1QiiEldFdj9XHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBOsWmfK1yHJs+6ZNxU6CrqXjbEUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M3OWZmOWY0LWE0YmItNGYyZS1iZTVlLWEzODU4OWI5ODkzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDrZgwDQYJKoZIhvcNAQELBQADggEBAD1WayEoh2pVLeNlvZn1kNojFpuG RHaHXSEbj8sgkpTrcrFi7XjyloEz9z3rJcEHVNPM3uymf2yfwlxqornRcXjahbHX bAnhSmzysYTIK12veJWIOlVEnPQu6QXRufcmCLvve5neYoDKtvS5BKij4LI5RxcA F7c/yUmxuCbCRApNnVMmIN68YwxQTNFDXmYcp0ytKSkv2FkXiNaJ7jdvxqsDEMZ2 5xIVR62TKi5Q3AC3lwliCJKMDWTPc4zKNJbys420dbRu8w2OYA2nBk8xvEr5Ht4F 2bqEPVOVjXBuJhAAq2FtMJtIjXqTFJhXu07BmjjREROFfsTDpPCiLj7nNxk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:43:23 2025 by rpki-client