$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d37a7b68-3a06-45e9-9166-1c752fe55b8c.roa File: d37a7b68-3a06-45e9-9166-1c752fe55b8c.roa (raw, json) Hash identifier: VZFREY2/RpQZ4gHJpJqhuY19lIaEiQP10Z5Z+QWl/8g= Subject key identifier: D4:71:CE:5A:00:DF:1C:32:E4:44:77:16:0F:C2:00:4B:B1:D5:31:69 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 36251E869FB91A9807D9FF633B0137D0329099F2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d37a7b68-3a06-45e9-9166-1c752fe55b8c.roa Signing time: Tue 21 Oct 2025 06:11:21 +0000 ROA not before: Tue 21 Oct 2025 06:11:21 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:25:1e:86:9f:b9:1a:98:07:d9:ff:63:3b:01:37:d0:32:90:99:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 06:11:21 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=685aec258580e1c984c4968bab863c22512d9788b8edd27e626bcd757821be17, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:c6:c9:62:67:52:c8:42:b0:05:01:44:4d: 08:5e:1e:33:b6:00:16:63:2c:0c:c5:a0:7d:03:f6: 6e:3f:a2:f1:ad:81:9d:c6:ed:51:c9:04:17:07:97: c0:de:ac:c3:0a:c4:d3:dc:db:de:55:08:6b:97:fd: b8:05:73:73:25:83:f2:22:84:45:9a:ee:8f:8e:4e: 7f:c3:8f:41:15:ff:da:b8:84:2d:d1:b3:0e:d8:c3: 8b:0e:dc:8a:94:9b:c8:ef:69:32:4b:06:ad:9b:8b: ca:b7:8e:4c:14:9f:6e:e5:b2:39:74:a0:62:91:93: 0d:6f:e0:47:52:b2:b6:d2:1b:76:ad:77:44:83:57: 46:cd:d7:88:77:13:14:5a:80:75:55:aa:49:73:6a: 41:4c:19:52:22:a1:f5:e1:68:e2:18:27:d2:3d:d9: df:9f:70:c4:46:69:d7:47:77:cf:a7:c6:2d:a0:bf: bf:47:99:17:29:4c:c6:be:74:5c:29:89:3e:bc:38: ba:0a:ae:16:fc:f7:d9:c4:69:6c:ed:e1:88:7a:1a: cd:0f:bb:8e:32:e3:72:30:1a:60:fe:b6:31:29:11: 24:e3:4f:44:d3:e3:dc:a2:03:d6:95:7c:92:d2:fe: 4b:98:28:0b:2b:59:32:9e:d3:2d:47:6c:6b:1e:7d: 16:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:71:CE:5A:00:DF:1C:32:E4:44:77:16:0F:C2:00:4B:B1:D5:31:69 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d37a7b68-3a06-45e9-9166-1c752fe55b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.172.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:64:91:c8:46:50:27:54:53:6f:1d:cd:54:68:90:85:e5:c9: 5f:8b:e6:37:20:88:54:aa:66:31:e1:b2:55:d3:2f:30:ab:6f: 45:a8:f9:21:ff:33:ac:cf:f7:b1:a2:a7:ee:2f:8a:bc:53:b3: 85:03:a0:fe:1a:d5:02:fd:70:f6:0f:04:84:98:76:77:f8:51: a9:8d:7d:71:40:d9:e8:41:4f:7f:21:cd:04:b7:5a:6a:b4:75: 11:d0:85:bf:6b:c9:7d:b8:0d:4b:c0:d5:07:db:2f:bd:50:26: d0:6b:34:fa:fe:33:3b:6c:aa:ee:51:f1:aa:6d:72:bf:ae:9c: b4:26:e9:73:72:0d:5b:9b:b0:53:8a:22:12:ae:a5:8a:42:f6: af:8c:42:39:fa:02:a9:62:1b:5e:bd:0f:d9:34:f9:9d:b8:36: 83:fc:73:b3:29:cb:29:e3:32:fe:1d:6e:93:0c:ad:ef:1e:15: 31:35:97:51:18:1d:ff:d0:83:6c:49:49:a0:05:30:1e:9a:56: 7b:e0:12:67:b1:56:69:07:a0:49:9f:e8:4c:8f:57:6e:38:4a: 77:21:14:1b:e5:8b:47:1f:cd:e6:dd:74:03:4b:fe:2e:6b:ab: 68:69:27:23:1a:2c:79:d5:13:20:f9:90:f7:68:a7:82:75:b1: 93:cd:06:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNiUehp+5GpgH2f9jOwE30DKQmfIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDYxMTIxWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODVhZWMyNTg1ODBlMWM5ODRjNDk2OGJhYjg2M2MyMjUx MmQ5Nzg4YjhlZGQyN2U2MjZiY2Q3NTc4MjFiZTE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxpcbJYmdSyEKwBQFETQheHjO2ABZjLAzFoH0D9m4/ovGt gZ3G7VHJBBcHl8DerMMKxNPc295VCGuX/bgFc3Mlg/IihEWa7o+OTn/Dj0EV/9q4 hC3Rsw7Yw4sO3IqUm8jvaTJLBq2bi8q3jkwUn27lsjl0oGKRkw1v4EdSsrbSG3at d0SDV0bN14h3ExRagHVVqklzakFMGVIiofXhaOIYJ9I92d+fcMRGaddHd8+nxi2g v79HmRcpTMa+dFwpiT68OLoKrhb899nEaWzt4Yh6Gs0Pu44y43IwGmD+tjEpESTj T0TT49yiA9aVfJLS/kuYKAsrWTKe0y1HbGsefRaNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1HHOWgDfHDLkRHcWD8IAS7HVMWkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QzN2E3YjY4LTNhMDYtNDVlOS05MTY2LTFjNzUyZmU1NWI4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDrqwwDQYJKoZIhvcNAQELBQADggEBADxkkchGUCdUU28dzVRokIXlyV+L 5jcgiFSqZjHhslXTLzCrb0Wo+SH/M6zP97Gip+4virxTs4UDoP4a1QL9cPYPBISY dnf4UamNfXFA2ehBT38hzQS3Wmq0dRHQhb9ryX24DUvA1QfbL71QJtBrNPr+Mzts qu5R8aptcr+unLQm6XNyDVubsFOKIhKupYpC9q+MQjn6AqliG169D9k0+Z24NoP8 c7MpyynjMv4dbpMMre8eFTE1l1EYHf/Qg2xJSaAFMB6aVnvgEmexVmkHoEmf6EyP V244SnchFBvli0cfzebddANL/i5rq2hpJyMaLHnVEyD5kPdop4J1sZPNBqs= -----END CERTIFICATE-----Generated at Wed Nov 5 08:43:20 2025 by rpki-client