$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9feb7ee-1f1c-4c24-9dd7-b16c8adbd2e4.roa File: d9feb7ee-1f1c-4c24-9dd7-b16c8adbd2e4.roa (raw, json) Hash identifier: lxgMlXxk9jAFewphZhPFaPcbJoS/wCFcB0mz3P0h0hY= Subject key identifier: 5F:E5:6C:3C:8B:A1:7B:77:2C:39:08:86:81:E1:A1:DA:8E:B2:16:08 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2679817D211676E28E8FD462B1E723CB34197ABE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9feb7ee-1f1c-4c24-9dd7-b16c8adbd2e4.roa Signing time: Fri 31 Oct 2025 01:10:53 +0000 ROA not before: Fri 31 Oct 2025 01:10:53 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:79:81:7d:21:16:76:e2:8e:8f:d4:62:b1:e7:23:cb:34:19:7a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 01:10:53 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=433c812d062aac8f0a4e48a2a3cf317c9a5e300e913df008cbf20c96add1e6fe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:82:3a:13:18:52:f8:8e:2a:d7:0d:cc:f9:45: 1f:c5:86:a2:11:e2:90:24:0d:80:00:c8:99:9b:d9: 11:41:93:3d:00:30:ab:b0:90:4e:50:cc:3f:80:78: 84:63:92:1e:05:45:6d:d3:16:59:23:44:10:ae:18: 02:df:73:21:60:99:f2:e0:ff:f9:ca:79:77:0e:c9: 5a:69:ad:83:f7:8f:fc:81:0f:df:f3:55:b3:3a:d5: 1f:1e:e0:76:6a:c4:03:6c:ea:c9:bc:83:34:3d:9c: d9:31:62:9f:d4:52:a6:31:96:7d:c7:e7:96:68:2a: bf:65:2f:5c:7c:3d:b7:e0:fb:9e:35:6b:f5:93:97: c4:4b:0d:a0:a1:92:c7:01:08:b9:08:46:02:67:02: cf:de:18:76:9d:df:24:bf:5f:8d:3f:21:92:d9:77: d0:0c:3b:8b:36:0a:9d:40:30:ea:3a:87:01:79:c7: 91:56:72:21:8d:d7:ea:24:0e:44:c3:6b:d6:5f:15: ea:0a:30:09:34:2d:df:75:e6:a6:96:e0:c9:02:c2: 13:20:45:22:f4:ba:c7:f1:fa:c8:b2:63:4f:e0:2b: c7:df:d5:76:ae:73:ba:5c:31:82:e2:1b:dc:7b:d3: c9:8a:81:14:0f:49:70:48:e5:77:31:25:8a:4b:da: 3f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E5:6C:3C:8B:A1:7B:77:2C:39:08:86:81:E1:A1:DA:8E:B2:16:08 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9feb7ee-1f1c-4c24-9dd7-b16c8adbd2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.68.0/24 Signature Algorithm: sha256WithRSAEncryption 56:99:6d:ab:28:b7:83:cc:e9:03:10:b9:bb:ec:e5:5a:00:d3: 73:aa:0f:cc:ad:41:51:1f:4e:b7:72:cf:dc:08:39:07:c6:3f: 62:b6:66:4f:a4:75:d2:70:4d:d2:6e:1f:18:85:08:a3:c8:43: 72:4b:a6:7a:c4:8b:d0:11:9c:7f:2f:f0:9a:72:7e:17:2c:48: 21:43:c0:70:e7:e6:15:c4:e7:88:22:b5:fa:28:56:34:a4:9f: 91:7a:ab:8b:23:6d:4b:14:cb:cd:34:c8:b9:03:23:26:c3:35: 97:a2:43:36:aa:02:91:25:24:57:9f:5e:38:28:00:ee:f8:0e: fb:e5:fd:3e:4a:9f:de:d0:a0:6a:c2:e3:a8:ad:cd:73:4b:c6: 4d:18:6e:6b:47:a0:35:5c:dd:36:bf:c0:2b:9b:06:fe:c9:2d: 3c:a3:fc:76:09:a7:88:8a:23:22:fb:c0:6a:c9:9f:ea:1b:ce: 8a:07:b9:2f:f4:e9:8a:df:6e:34:6a:4d:8a:5f:85:50:f3:f9: 82:53:a0:04:d5:8e:80:c3:79:96:16:55:4f:0d:57:a8:f2:f2: 64:d9:5b:0b:47:94:a7:95:ae:79:19:a8:60:73:3c:44:37:b0: 05:86:c9:e2:17:c3:d2:91:95:73:58:9f:ca:17:1d:de:99:21: ea:db:9a:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJnmBfSEWduKOj9RisecjyzQZer4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMDExMDUzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzNjODEyZDA2MmFhYzhmMGE0ZTQ4YTJhM2NmMzE3Yzlh NWUzMDBlOTEzZGYwMDhjYmYyMGM5NmFkZDFlNmZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwgjoTGFL4jirXDcz5RR/FhqIR4pAkDYAAyJmb2RFBkz0A MKuwkE5QzD+AeIRjkh4FRW3TFlkjRBCuGALfcyFgmfLg//nKeXcOyVpprYP3j/yB D9/zVbM61R8e4HZqxANs6sm8gzQ9nNkxYp/UUqYxln3H55ZoKr9lL1x8Pbfg+541 a/WTl8RLDaChkscBCLkIRgJnAs/eGHad3yS/X40/IZLZd9AMO4s2Cp1AMOo6hwF5 x5FWciGN1+okDkTDa9ZfFeoKMAk0Ld915qaW4MkCwhMgRSL0usfx+siyY0/gK8ff 1Xauc7pcMYLiG9x708mKgRQPSXBI5XcxJYpL2j/TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX+VsPIuhe3csOQiGgeGh2o6yFggwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q5ZmViN2VlLTFmMWMtNGMyNC05ZGQ3LWIxNmM4YWRiZDJlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAkQwDQYJKoZIhvcNAQELBQADggEBAFaZbasot4PM6QMQubvs5VoA03Oq D8ytQVEfTrdyz9wIOQfGP2K2Zk+kddJwTdJuHxiFCKPIQ3JLpnrEi9ARnH8v8Jpy fhcsSCFDwHDn5hXE54gitfooVjSkn5F6q4sjbUsUy800yLkDIybDNZeiQzaqApEl JFefXjgoAO74Dvvl/T5Kn97QoGrC46itzXNLxk0YbmtHoDVc3Ta/wCubBv7JLTyj /HYJp4iKIyL7wGrJn+obzooHuS/06YrfbjRqTYpfhVDz+YJToATVjoDDeZYWVU8N V6jy8mTZWwtHlKeVrnkZqGBzPEQ3sAWGyeIXw9KRlXNYn8oXHd6ZIerbmtk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:43:30 2025 by rpki-client