$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d0f49b19-1e8a-409f-85d4-a8f2d2e171ec.roa File: d0f49b19-1e8a-409f-85d4-a8f2d2e171ec.roa (raw, json) Hash identifier: 3bMmjzI8RxA9InTIyzd+Y3MYQDGFqa6Xw0kxcHm9ecU= Subject key identifier: 42:AF:6F:2B:43:F9:1A:01:20:4C:2A:A7:54:64:DB:07:A8:13:5F:9E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 12C79BB21D8C7050CE75D8C1C121876259E777F6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d0f49b19-1e8a-409f-85d4-a8f2d2e171ec.roa Signing time: Tue 28 Oct 2025 17:36:48 +0000 ROA not before: Tue 28 Oct 2025 17:36:48 +0000 ROA not after: Tue 02 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c7:9b:b2:1d:8c:70:50:ce:75:d8:c1:c1:21:87:62:59:e7:77:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 28 17:36:48 2025 GMT Not After : Dec 2 23:59:59 2025 GMT Subject: serialNumber=e88b33da25a276c1b1d30d1a6ce8a7929f50df841711f1a23989815c7ccf2fa3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fd:8d:0a:6a:93:9a:99:9e:90:b9:62:3b:f3: 8f:5f:c4:d2:06:99:21:8d:c0:8b:6d:4b:5c:85:03: 94:a9:e6:22:89:bb:7b:42:e9:81:8b:ef:f3:07:96: fc:5d:4a:ef:3d:ad:e0:ee:56:93:72:1d:5e:df:28: 9b:e8:a6:2a:dd:50:02:fa:60:bf:0f:6e:0d:a5:86: c2:f1:46:6a:27:0d:38:ea:04:a7:84:2f:f8:90:21: 70:26:02:25:81:dd:05:a8:4e:8c:f0:49:52:d7:aa: e2:97:1c:e3:02:90:bf:dd:58:41:98:ba:55:5b:42: da:e4:5e:fb:b1:e5:b2:9b:b0:ed:a1:83:6a:6c:2b: ec:6c:a9:29:bd:fd:0d:5b:99:0b:4e:67:d7:b5:23: 0e:3e:bd:c0:c7:7f:bb:ab:77:bb:c7:88:02:62:cd: c9:11:61:0c:9e:18:db:87:e8:eb:28:bc:b4:ce:b7: d8:44:67:e8:6c:44:3c:52:11:49:f7:5e:d3:6a:40: 60:0c:ed:d5:c7:a5:1e:cf:d4:10:01:88:48:b2:09: ae:8f:4e:6a:5b:42:54:c1:e8:2e:3a:6e:3c:ac:d6: 67:53:3b:eb:3d:43:ab:11:63:68:32:77:dc:6f:f8: db:c3:73:06:b1:90:e5:f6:ac:e0:b3:73:b5:b5:11: da:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AF:6F:2B:43:F9:1A:01:20:4C:2A:A7:54:64:DB:07:A8:13:5F:9E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d0f49b19-1e8a-409f-85d4-a8f2d2e171ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.206.0/23 Signature Algorithm: sha256WithRSAEncryption 47:b6:16:04:9e:63:dd:4c:32:5d:f0:26:ec:f1:d5:78:c0:d2: f9:4c:49:02:9b:73:d8:6e:6e:e9:a0:c4:b1:80:59:42:68:63: 46:e6:2e:3f:9b:3a:cf:12:8d:5d:28:24:8c:2c:3b:e5:60:a0: 43:37:e3:74:ca:a5:99:07:31:60:9e:16:28:11:a7:87:89:b7: 3f:60:5c:c0:94:26:4e:b6:61:88:74:44:79:d9:23:66:13:67: da:74:f4:7a:df:63:ae:cb:6f:e4:60:04:2b:70:65:f3:82:8c: 53:c1:a2:4c:4a:f7:f0:8d:52:84:c1:40:7b:5c:06:dd:c2:b7: 7d:1c:fb:4a:09:d5:1c:3a:37:5f:a1:3f:a4:63:30:37:3c:d8: 7e:df:78:29:ff:a5:b1:e7:eb:95:ea:28:aa:3d:6b:5e:6c:09: 7a:b2:20:f1:3b:e5:63:c0:55:9b:42:5d:5f:aa:a6:13:c1:c9: 86:6c:d1:e9:00:8f:48:6e:4e:2a:83:47:d1:5d:b3:7b:cb:4c: ef:a1:a0:50:cf:b9:b1:af:d8:8f:fb:8a:2d:3f:47:16:37:f1: f0:9e:62:0a:16:31:af:30:7c:a5:43:20:47:3e:21:42:5b:7e: 65:6e:f5:ab:8f:bc:37:b4:e2:3e:5f:3b:bb:55:0f:e3:1a:f1: 7f:89:2b:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEsebsh2McFDOddjBwSGHYlnnd/YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDI4MTczNjQ4WhcNMjUxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlODhiMzNkYTI1YTI3NmMxYjFkMzBkMWE2Y2U4YTc5Mjlm NTBkZjg0MTcxMWYxYTIzOTg5ODE1YzdjY2YyZmEzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM/Y0KapOamZ6QuWI7849fxNIGmSGNwIttS1yFA5Sp5iKJ u3tC6YGL7/MHlvxdSu89reDuVpNyHV7fKJvopirdUAL6YL8Pbg2lhsLxRmonDTjq BKeEL/iQIXAmAiWB3QWoTozwSVLXquKXHOMCkL/dWEGYulVbQtrkXvux5bKbsO2h g2psK+xsqSm9/Q1bmQtOZ9e1Iw4+vcDHf7urd7vHiAJizckRYQyeGNuH6OsovLTO t9hEZ+hsRDxSEUn3XtNqQGAM7dXHpR7P1BABiEiyCa6PTmpbQlTB6C46bjys1mdT O+s9Q6sRY2gyd9xv+NvDcwaxkOX2rOCzc7W1EdqVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQq9vK0P5GgEgTCqnVGTbB6gTX54wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QwZjQ5YjE5LTFlOGEtNDA5Zi04NWQ0LWE4ZjJkMmUxNzFlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrs4wDQYJKoZIhvcNAQELBQADggEBAEe2FgSeY91MMl3wJuzx1XjA0vlM SQKbc9hubumgxLGAWUJoY0bmLj+bOs8SjV0oJIwsO+VgoEM343TKpZkHMWCeFigR p4eJtz9gXMCUJk62YYh0RHnZI2YTZ9p09HrfY67Lb+RgBCtwZfOCjFPBokxK9/CN UoTBQHtcBt3Ct30c+0oJ1Rw6N1+hP6RjMDc82H7feCn/pbHn65XqKKo9a15sCXqy IPE75WPAVZtCXV+qphPByYZs0ekAj0huTiqDR9Fds3vLTO+hoFDPubGv2I/7ii0/ RxY38fCeYgoWMa8wfKVDIEc+IUJbfmVu9auPvDe04j5fO7tVD+Ma8X+JK5I= -----END CERTIFICATE-----Generated at Thu Nov 6 05:46:45 2025 by rpki-client