$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d23935a2-9875-4584-b901-c26dc0ac5330.roa File: d23935a2-9875-4584-b901-c26dc0ac5330.roa (raw, json) Hash identifier: De7GDw0MvtSUL3zmOdz/3pNAnuPT+8/PfAikzsuFHik= Subject key identifier: 4D:A1:12:8F:A0:D8:4B:21:F7:2D:60:C3:96:9C:A5:89:A5:53:BB:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6F78CA5A2CC1F397C72FD32A849F173E54279F1C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d23935a2-9875-4584-b901-c26dc0ac5330.roa Signing time: Fri 31 Oct 2025 01:20:11 +0000 ROA not before: Fri 31 Oct 2025 01:20:11 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:78:ca:5a:2c:c1:f3:97:c7:2f:d3:2a:84:9f:17:3e:54:27:9f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 01:20:11 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=381120293d2dc50b66f8ceffa243d0f495502d1a476cbbc2422e29731c542ab0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:c7:f7:1c:e3:52:ac:bf:06:10:b0:01:83: 9d:7d:85:c1:85:c2:c3:29:91:a0:71:b8:c0:f0:fc: b4:3f:d6:81:a9:9a:44:eb:5e:0c:ab:88:d3:e1:3b: cf:45:a4:84:e8:30:7f:c6:2a:d0:e3:7a:67:f1:52: d9:ac:8e:db:bd:de:91:6e:74:97:5b:9f:31:47:24: e9:b6:4c:d9:25:96:48:ac:b7:23:97:0e:7a:9f:d9: 63:b3:da:d0:a7:bb:b4:c5:89:c1:66:d2:49:dd:8f: e9:9f:1c:49:75:f1:d6:d8:b2:63:31:f0:54:96:f5: 26:f5:2d:f6:0c:36:6c:64:0f:78:7e:51:52:fa:57: 89:4d:21:a4:2b:1b:b5:4a:52:e7:ba:e8:5b:d6:32: 5c:25:98:41:b5:51:4f:90:42:3c:b2:1b:35:c0:46: 2c:2b:0e:47:e5:b9:84:ef:a7:97:9c:bc:4e:b2:5d: 90:cb:72:ef:2e:61:12:f1:46:aa:50:0c:ae:10:f2: bb:81:5f:a5:8f:6b:b1:8e:6c:dc:96:df:99:41:54: 95:e4:58:e4:98:60:2e:eb:35:87:d2:16:50:04:21: 7a:51:9f:e6:23:20:d5:2b:be:ba:36:fd:04:aa:45: cb:df:b1:da:68:2a:67:f2:8d:60:e8:47:84:6d:31: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A1:12:8F:A0:D8:4B:21:F7:2D:60:C3:96:9C:A5:89:A5:53:BB:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d23935a2-9875-4584-b901-c26dc0ac5330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.81.0/24 Signature Algorithm: sha256WithRSAEncryption 20:10:17:6c:6e:d3:e8:51:d2:14:5b:24:de:b8:4e:98:9d:29: fc:c0:6f:0a:49:4e:34:e1:d6:80:8d:03:b6:64:25:79:17:7c: 5b:13:51:7f:e9:00:96:ec:5b:a9:9e:59:69:09:4d:39:60:ad: a0:b0:f6:32:f6:31:66:a4:1d:f5:7e:2e:4e:47:f1:96:cc:0e: 4a:53:e7:80:64:86:16:03:4f:11:42:bd:e4:48:3d:da:35:53: 2b:fe:e0:90:f0:be:9c:34:39:98:19:d1:20:57:68:be:49:f0: a2:4b:86:88:6e:f5:70:3a:98:6f:83:04:f2:96:f0:be:aa:a4: 44:a2:e4:1e:10:a3:8f:8d:7b:d1:60:41:d0:34:01:38:2b:79: 39:c2:b0:9c:e6:3a:20:96:53:55:52:21:6d:9c:3d:f7:57:b3: df:c3:f6:43:82:0d:df:5c:ed:4f:87:a0:9c:50:48:81:eb:cc: a5:b0:4e:42:1e:46:f1:e8:41:5f:d5:44:b4:d7:49:7d:76:ab: a4:e9:5a:96:27:03:9f:ab:05:82:d1:01:08:dd:07:e2:fb:36: 82:b2:ba:39:0c:77:38:e4:de:13:21:df:05:c4:db:fd:5f:2d: 26:84:6d:14:90:cb:a5:0b:d7:1e:7f:8d:66:c2:9c:7f:23:81: d4:8c:aa:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb3jKWizB85fHL9MqhJ8XPlQnnxwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMDEyMDExWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzODExMjAyOTNkMmRjNTBiNjZmOGNlZmZhMjQzZDBmNDk1 NTAyZDFhNDc2Y2JiYzI0MjJlMjk3MzFjNTQyYWIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmMMf3HONSrL8GELABg519hcGFwsMpkaBxuMDw/LQ/1oGp mkTrXgyriNPhO89FpIToMH/GKtDjemfxUtmsjtu93pFudJdbnzFHJOm2TNkllkis tyOXDnqf2WOz2tCnu7TFicFm0kndj+mfHEl18dbYsmMx8FSW9Sb1LfYMNmxkD3h+ UVL6V4lNIaQrG7VKUue66FvWMlwlmEG1UU+QQjyyGzXARiwrDkfluYTvp5ecvE6y XZDLcu8uYRLxRqpQDK4Q8ruBX6WPa7GObNyW35lBVJXkWOSYYC7rNYfSFlAEIXpR n+YjINUrvro2/QSqRcvfsdpoKmfyjWDoR4RtMRhZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTaESj6DYSyH3LWDDlpyliaVTuzowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyMzkzNWEyLTk4NzUtNDU4NC1iOTAxLWMyNmRjMGFjNTMzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAlEwDQYJKoZIhvcNAQELBQADggEBACAQF2xu0+hR0hRbJN64TpidKfzA bwpJTjTh1oCNA7ZkJXkXfFsTUX/pAJbsW6meWWkJTTlgraCw9jL2MWakHfV+Lk5H 8ZbMDkpT54BkhhYDTxFCveRIPdo1Uyv+4JDwvpw0OZgZ0SBXaL5J8KJLhohu9XA6 mG+DBPKW8L6qpESi5B4Qo4+Ne9FgQdA0ATgreTnCsJzmOiCWU1VSIW2cPfdXs9/D 9kOCDd9c7U+HoJxQSIHrzKWwTkIeRvHoQV/VRLTXSX12q6TpWpYnA5+rBYLRAQjd B+L7NoKyujkMdzjk3hMh3wXE2/1fLSaEbRSQy6UL1x5/jWbCnH8jgdSMqq0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:49 2025 by rpki-client