$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d7a9f2b-a8a4-4cb1-8567-18b1e44e81dc.roa File: 2d7a9f2b-a8a4-4cb1-8567-18b1e44e81dc.roa (raw, json) Hash identifier: Cqlsb34Y1j/R/nXFSdy6PgPn8Ts6zbNAYCCwZ/ZeFIs= Subject key identifier: BC:95:9C:7C:BD:85:A1:C6:C4:66:48:68:ED:60:3E:CD:60:E3:22:DF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 51D99FDD6AFCE0C03F17254C07F0F5D314DC186B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d7a9f2b-a8a4-4cb1-8567-18b1e44e81dc.roa Signing time: Fri 26 Sep 2025 00:45:37 +0000 ROA not before: Fri 26 Sep 2025 00:45:37 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d9:9f:dd:6a:fc:e0:c0:3f:17:25:4c:07:f0:f5:d3:14:dc:18:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:45:37 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=c4b7e21b34abe6fdb37c408760f476b65d5e1051b2a3b0e75b6ecac25d47738b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b9:2e:62:29:15:a2:31:f3:a6:3f:d6:2d:79: d9:38:4e:44:f2:c7:3a:31:39:8b:ad:fa:59:19:7a: cf:80:8f:9d:92:8e:4e:bb:63:f5:73:d5:37:f7:50: 01:a3:d6:bf:b5:26:f1:03:bc:6f:0e:12:96:1e:42: ba:b3:8f:2b:0d:02:7f:d5:f2:30:15:66:23:fe:ac: 25:9d:e0:dc:5e:6b:be:93:11:ae:02:31:64:f7:a9: 11:2d:95:e6:09:c2:a7:d7:78:ce:09:9c:48:50:cb: f9:1f:bd:ad:a1:9f:96:21:5b:7b:d8:9a:db:f1:bd: 9c:67:f3:fb:f2:7a:36:9a:ed:30:8e:a0:ab:59:d6: 92:3a:ae:61:41:9a:98:37:80:f9:53:1f:8a:52:18: 9b:b6:cd:a3:e3:6a:45:2d:63:64:6f:90:4e:5c:b6: d2:a1:e0:52:ca:16:55:db:ae:18:1d:7b:64:16:b3: 8f:d0:de:ff:9d:85:e0:68:42:62:b6:5f:1a:39:bb: 1f:5f:10:f3:02:8f:ec:ba:9d:1d:ee:0d:97:8f:34: d2:59:d2:ee:d2:7f:38:41:92:20:d9:42:f6:cf:63: b2:83:89:df:59:22:46:26:b2:d1:56:89:b1:17:e2: e8:f2:85:31:17:65:f2:c7:65:93:c0:8c:60:cc:92: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:95:9C:7C:BD:85:A1:C6:C4:66:48:68:ED:60:3E:CD:60:E3:22:DF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d7a9f2b-a8a4-4cb1-8567-18b1e44e81dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.20.0/22 Signature Algorithm: sha256WithRSAEncryption 90:08:18:9d:53:3d:c6:65:2b:0c:13:98:54:4f:2c:79:2d:5f: 4d:e4:23:5e:63:67:96:7c:83:48:c4:96:fe:a6:15:88:31:73: 3a:0f:aa:a5:b4:05:58:84:56:1b:a5:06:93:5d:99:94:38:5c: 9f:8f:2b:4b:cc:38:e8:91:cf:d2:fa:f6:a9:f6:4e:b5:b2:0b: 9c:e6:a5:c5:96:bd:d6:90:8c:00:bb:37:b8:56:01:f2:94:52: 1b:65:c9:96:29:b6:9c:81:c6:c1:3f:63:15:ce:55:a8:a2:cb: 55:3f:7d:63:0e:fe:59:b0:87:95:e9:53:ac:eb:a4:bc:d8:7e: 91:e1:a2:f3:0c:0f:87:8d:be:6f:16:e1:67:9a:59:b7:23:33: 1f:1d:79:01:f0:91:16:f1:89:74:f1:ce:94:d8:79:26:c0:46: cf:08:f2:a4:42:7f:7a:96:d2:fe:38:36:d9:38:43:16:21:11: 91:f5:9c:76:87:85:7f:8c:12:71:86:78:91:09:60:01:b1:e6: fb:0b:81:47:2f:ef:71:bd:9d:86:84:4c:4b:bd:be:8d:6f:16: c4:b1:a8:f9:1e:f3:de:ad:d3:b9:0f:f9:44:3a:65:be:4c:8b: db:de:6a:53:c7:35:13:9f:d7:ef:ad:a8:ec:c6:9a:a6:da:68: ba:53:8b:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUdmf3Wr84MA/FyVMB/D10xTcGGswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDA0NTM3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNGI3ZTIxYjM0YWJlNmZkYjM3YzQwODc2MGY0NzZiNjVk NWUxMDUxYjJhM2IwZTc1YjZlY2FjMjVkNDc3MzhiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLuS5iKRWiMfOmP9Ytedk4TkTyxzoxOYut+lkZes+Aj52S jk67Y/Vz1Tf3UAGj1r+1JvEDvG8OEpYeQrqzjysNAn/V8jAVZiP+rCWd4Nxea76T Ea4CMWT3qREtleYJwqfXeM4JnEhQy/kfva2hn5YhW3vYmtvxvZxn8/vyejaa7TCO oKtZ1pI6rmFBmpg3gPlTH4pSGJu2zaPjakUtY2RvkE5cttKh4FLKFlXbrhgde2QW s4/Q3v+dheBoQmK2Xxo5ux9fEPMCj+y6nR3uDZePNNJZ0u7SfzhBkiDZQvbPY7KD id9ZIkYmstFWibEX4ujyhTEXZfLHZZPAjGDMkoabAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvJWcfL2FocbEZkho7WA+zWDjIt8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkN2E5ZjJiLWE4YTQtNGNiMS04NTY3LTE4YjFlNDRlODFkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDqxQwDQYJKoZIhvcNAQELBQADggEBAJAIGJ1TPcZlKwwTmFRPLHktX03k I15jZ5Z8g0jElv6mFYgxczoPqqW0BViEVhulBpNdmZQ4XJ+PK0vMOOiRz9L69qn2 TrWyC5zmpcWWvdaQjAC7N7hWAfKUUhtlyZYptpyBxsE/YxXOVaiiy1U/fWMO/lmw h5XpU6zrpLzYfpHhovMMD4eNvm8W4WeaWbcjMx8deQHwkRbxiXTxzpTYeSbARs8I 8qRCf3qW0v44Ntk4QxYhEZH1nHaHhX+MEnGGeJEJYAGx5vsLgUcv73G9nYaETEu9 vo1vFsSxqPke896t07kP+UQ6Zb5Mi9vealPHNROf1++tqOzGmqbaaLpTi88= -----END CERTIFICATE-----Generated at Sat Oct 18 02:12:02 2025 by rpki-client