$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38e37419-5359-477b-b124-89fea0fa6388.roa File: 38e37419-5359-477b-b124-89fea0fa6388.roa (raw, json) Hash identifier: +EsWCpQyckuY84w9DyJcnHRjZYc3ANKfn525MgHLKEA= Subject key identifier: 8D:B1:71:D5:93:7E:FC:E6:4B:AC:48:E2:B5:AB:EB:4F:17:F5:B0:0B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 15FD5754A46168A2CE0CF07E3B9872F8EC9BF410 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38e37419-5359-477b-b124-89fea0fa6388.roa Signing time: Thu 25 Sep 2025 23:21:58 +0000 ROA not before: Thu 25 Sep 2025 23:21:58 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fd:57:54:a4:61:68:a2:ce:0c:f0:7e:3b:98:72:f8:ec:9b:f4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:21:58 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=15ee0f253f2a71e4931979d0c14a2e45344f4e146c8cb54b43d85bba00707bbf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:b4:ee:ee:96:68:b7:cb:35:e8:0c:0b:8d: 82:4a:6a:53:10:57:d2:e9:da:4f:e9:b9:94:7e:73: 76:c6:28:26:ee:55:29:ec:ee:f9:1f:8d:d9:af:24: 1f:02:11:98:b1:12:2e:49:23:db:f4:c6:d2:e6:98: 84:f6:5a:96:95:7f:e5:2e:f0:2c:04:a5:1b:22:e2: 83:6c:7b:06:8e:c4:12:00:02:8f:7f:95:71:36:7a: 18:79:07:44:28:a3:3f:05:d8:7f:27:cb:9e:de:b3: 5d:96:46:c1:c3:19:29:b9:1a:02:60:89:ca:8c:17: a5:8c:5e:bd:0b:22:f1:dc:7f:29:5d:16:ef:e2:51: 3b:c4:0d:ca:f2:5a:ba:e3:af:d0:f4:c7:01:1b:a4: 63:3c:c0:82:4e:f3:8e:79:a7:e1:72:87:06:6b:81: c8:36:75:c3:19:b6:e7:49:bc:c9:36:3e:62:0d:f1: 4e:5b:99:b6:97:10:0d:3b:33:70:3a:cc:a2:fd:65: 60:05:22:27:10:1a:42:a7:59:62:96:9d:97:61:76: 8b:7e:2e:92:ce:8b:72:90:40:b1:e7:f0:3a:b8:01: 42:31:0f:1a:12:a3:1d:83:a9:2f:2d:e2:e5:e9:2a: fa:cd:2a:0c:81:7b:92:0a:47:cf:a7:0a:25:0c:aa: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B1:71:D5:93:7E:FC:E6:4B:AC:48:E2:B5:AB:EB:4F:17:F5:B0:0B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38e37419-5359-477b-b124-89fea0fa6388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.56.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:69:1f:1d:cf:5f:69:4b:dd:9c:01:26:ac:83:b1:f9:2f:c8: 8b:0d:fb:1e:dd:fc:03:f6:3a:33:08:cf:2b:36:b7:48:f5:13: ff:8e:de:36:4c:e9:b4:a4:0f:ce:b1:d5:b0:78:85:15:ce:98: 63:86:bd:20:c8:a6:53:26:99:14:fc:1d:1d:70:a7:a3:d4:e5: 83:b9:c3:93:13:19:9f:9b:31:db:28:01:ff:29:27:27:40:5f: cf:e8:37:98:4f:f1:df:9d:06:14:40:9e:e1:8f:0a:bf:21:0c: 68:f7:80:59:2c:af:eb:f3:9b:29:a8:63:97:9e:86:b2:b9:67: a9:bf:36:5e:5e:5f:89:c9:fb:8a:ed:93:e5:32:72:77:f6:a3: 29:06:41:ac:55:4e:92:07:85:f4:ed:f2:7a:6b:0e:79:84:e5: 3c:f6:b4:75:ec:d2:51:72:8c:1d:8f:34:cc:1d:29:68:a8:e6: 94:76:e3:17:68:c1:54:25:82:6e:de:2d:7b:b3:c4:5e:77:45: eb:86:7a:4b:be:c6:fc:df:59:61:e0:48:9b:81:c0:2f:af:10: f0:be:27:a0:0f:a3:42:f2:d4:7e:f1:92:f9:bf:08:aa:49:f6: e4:0e:be:03:95:a2:ce:74:57:68:16:63:c4:32:70:0a:aa:27: 95:97:84:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFf1XVKRhaKLODPB+O5hy+Oyb9BAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMyMTU4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNWVlMGYyNTNmMmE3MWU0OTMxOTc5ZDBjMTRhMmU0NTM0 NGY0ZTE0NmM4Y2I1NGI0M2Q4NWJiYTAwNzA3YmJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5XLTu7pZot8s16AwLjYJKalMQV9Lp2k/puZR+c3bGKCbu VSns7vkfjdmvJB8CEZixEi5JI9v0xtLmmIT2WpaVf+Uu8CwEpRsi4oNsewaOxBIA Ao9/lXE2ehh5B0Qooz8F2H8ny57es12WRsHDGSm5GgJgicqMF6WMXr0LIvHcfyld Fu/iUTvEDcryWrrjr9D0xwEbpGM8wIJO8455p+FyhwZrgcg2dcMZtudJvMk2PmIN 8U5bmbaXEA07M3A6zKL9ZWAFIicQGkKnWWKWnZdhdot+LpLOi3KQQLHn8Dq4AUIx DxoSox2DqS8t4uXpKvrNKgyBe5IKR8+nCiUMqv5xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjbFx1ZN+/OZLrEjitavrTxf1sAswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM4ZTM3NDE5LTUzNTktNDc3Yi1iMTI0LTg5ZmVhMGZhNjM4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrDgwDQYJKoZIhvcNAQELBQADggEBAA9pHx3PX2lL3ZwBJqyDsfkvyIsN +x7d/AP2OjMIzys2t0j1E/+O3jZM6bSkD86x1bB4hRXOmGOGvSDIplMmmRT8HR1w p6PU5YO5w5MTGZ+bMdsoAf8pJydAX8/oN5hP8d+dBhRAnuGPCr8hDGj3gFksr+vz mymoY5eehrK5Z6m/Nl5eX4nJ+4rtk+Uycnf2oykGQaxVTpIHhfTt8nprDnmE5Tz2 tHXs0lFyjB2PNMwdKWio5pR24xdowVQlgm7eLXuzxF53ReuGeku+xvzfWWHgSJuB wC+vEPC+J6APo0Ly1H7xkvm/CKpJ9uQOvgOVos50V2gWY8QycAqqJ5WXhLw= -----END CERTIFICATE-----Generated at Sat Oct 18 00:16:03 2025 by rpki-client