$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3059f2e0-388e-442d-bc6d-0faab6ceaee1.roa File: 3059f2e0-388e-442d-bc6d-0faab6ceaee1.roa (raw, json) Hash identifier: ow8nApqbTjT8qbUYFg17QmxAYQ1nOt8L+hMBuv26Rdo= Subject key identifier: 12:9C:D6:63:4E:FF:1B:B8:4C:78:C4:B8:62:67:9A:42:0B:86:E1:B5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D6EF1B926F1CBDFDEC0C032990256161BF7C09A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3059f2e0-388e-442d-bc6d-0faab6ceaee1.roa Signing time: Thu 25 Sep 2025 22:47:02 +0000 ROA not before: Thu 25 Sep 2025 22:47:02 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6e:f1:b9:26:f1:cb:df:de:c0:c0:32:99:02:56:16:1b:f7:c0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:47:02 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=4082cd2875f92aa20c6f5c45f8724e6d25810023abe5d94ba5eb763309714c2b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:80:ec:35:5e:70:4b:b1:b2:39:8f:8f:b0: 60:06:7b:02:f2:b9:cb:f4:84:88:e7:2c:ee:96:fb: 62:dd:a5:57:ec:f3:22:5b:51:e6:ed:db:17:e6:49: e9:b2:82:c2:7f:39:23:04:c2:7f:57:42:62:7d:b4: 23:62:28:02:bb:57:a7:25:5c:a1:b3:cb:b5:0b:15: 70:2f:af:1b:bd:5a:da:e9:d7:dd:0c:ab:1d:50:7a: 8e:cd:d5:8c:8b:ea:d6:88:39:69:c3:b1:7f:56:7f: 80:f7:b0:1d:3d:a8:a3:93:52:3b:a2:76:0b:32:a2: 4a:d2:d5:93:63:ed:01:9e:25:96:81:f5:d2:e1:8d: 47:f3:14:6d:7e:26:c1:6e:04:a6:d0:c1:03:05:60: 09:c0:08:bb:8d:69:a5:fc:d7:cf:b3:d8:4c:15:dd: 71:64:7c:76:ec:06:67:e6:88:98:cf:a5:c7:98:21: b5:c5:a0:65:fc:53:59:04:b7:df:08:09:7b:9b:cd: 22:3e:89:61:a4:ec:23:84:b8:09:ca:07:fe:99:ea: cc:a8:1a:47:13:b5:69:14:ea:f5:a8:89:84:4b:e5: 6b:23:82:59:68:1e:b4:b2:c9:28:14:31:d0:76:12: 58:15:44:d9:f5:62:5f:08:55:6c:1b:a8:89:10:8b: ae:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9C:D6:63:4E:FF:1B:B8:4C:78:C4:B8:62:67:9A:42:0B:86:E1:B5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3059f2e0-388e-442d-bc6d-0faab6ceaee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.56.0/23 Signature Algorithm: sha256WithRSAEncryption 85:aa:9a:a7:c4:47:72:f8:7f:ab:76:ba:ea:82:3b:5d:9a:09: 3c:56:3a:ce:3b:58:b3:c8:ab:4c:bb:2d:c7:ca:eb:95:be:a0: e6:77:35:b2:e6:5f:05:f8:87:92:4a:88:bd:9b:0c:db:49:0a: e5:38:3f:e2:03:8c:65:17:6c:14:1d:9b:ef:b1:33:c3:78:76: 49:37:62:dc:a2:b2:80:ce:14:e4:13:0e:52:14:79:c1:00:c7: 77:cb:b2:25:3a:78:e7:3e:2f:3f:5c:b8:6d:d9:b6:a7:59:4f: 48:77:bc:28:79:ec:57:4c:96:bd:74:21:96:42:61:24:05:21: 8d:bd:d2:3e:8b:13:57:5a:7a:d5:c4:65:8f:eb:72:e9:ba:d5: c2:13:81:16:e5:5c:25:07:67:ca:e1:33:82:c1:46:5a:b6:1e: 44:40:17:2b:99:59:69:7c:86:16:58:32:bf:8b:00:13:7f:7c: 7a:f9:d4:7c:82:e2:b1:9e:63:c3:4c:bb:64:72:88:57:17:5b: df:52:34:b0:a2:fd:e4:d4:9f:89:88:f7:de:04:a1:c1:59:6e: c1:9d:82:0e:9b:df:29:1f:70:3a:8b:11:c3:bf:4f:e0:af:e0: fd:40:60:e7:1a:26:d1:15:77:9e:12:a9:91:05:b0:3b:7f:13: 8b:82:2d:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbW7xuSbxy9/ewMAymQJWFhv3wJowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjI0NzAyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDgyY2QyODc1ZjkyYWEyMGM2ZjVjNDVmODcyNGU2ZDI1 ODEwMDIzYWJlNWQ5NGJhNWViNzYzMzA5NzE0YzJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYMYDsNV5wS7GyOY+PsGAGewLyucv0hIjnLO6W+2LdpVfs 8yJbUebt2xfmSemygsJ/OSMEwn9XQmJ9tCNiKAK7V6clXKGzy7ULFXAvrxu9Wtrp 190Mqx1Qeo7N1YyL6taIOWnDsX9Wf4D3sB09qKOTUjuidgsyokrS1ZNj7QGeJZaB 9dLhjUfzFG1+JsFuBKbQwQMFYAnACLuNaaX818+z2EwV3XFkfHbsBmfmiJjPpceY IbXFoGX8U1kEt98ICXubzSI+iWGk7COEuAnKB/6Z6syoGkcTtWkU6vWoiYRL5Wsj glloHrSyySgUMdB2ElgVRNn1Yl8IVWwbqIkQi64dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEpzWY07/G7hMeMS4YmeaQguG4bUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMwNTlmMmUwLTM4OGUtNDQyZC1iYzZkLTBmYWFiNmNlYWVlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqDgwDQYJKoZIhvcNAQELBQADggEBAIWqmqfER3L4f6t2uuqCO12aCTxW Os47WLPIq0y7LcfK65W+oOZ3NbLmXwX4h5JKiL2bDNtJCuU4P+IDjGUXbBQdm++x M8N4dkk3YtyisoDOFOQTDlIUecEAx3fLsiU6eOc+Lz9cuG3ZtqdZT0h3vCh57FdM lr10IZZCYSQFIY290j6LE1daetXEZY/rcum61cITgRblXCUHZ8rhM4LBRlq2HkRA FyuZWWl8hhZYMr+LABN/fHr51HyC4rGeY8NMu2RyiFcXW99SNLCi/eTUn4mI994E ocFZbsGdgg6b3ykfcDqLEcO/T+Cv4P1AYOcaJtEVd54SqZEFsDt/E4uCLcQ= -----END CERTIFICATE-----Generated at Sat Oct 18 00:00:39 2025 by rpki-client