$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39483a31-6849-42a4-862c-401fc9e92002.roa File: 39483a31-6849-42a4-862c-401fc9e92002.roa (raw, json) Hash identifier: yzzeGxhntpURBfc3JlZ8FGrLkKIvmfwZSqN5C1SWR5U= Subject key identifier: 68:2D:DC:DF:8E:FA:58:33:8A:AE:90:D4:16:35:4C:30:5B:9F:3F:50 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2940CA9A76ED9E470A2044BCE2AC31669C662960 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39483a31-6849-42a4-862c-401fc9e92002.roa Signing time: Thu 25 Sep 2025 19:22:09 +0000 ROA not before: Thu 25 Sep 2025 19:22:09 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:40:ca:9a:76:ed:9e:47:0a:20:44:bc:e2:ac:31:66:9c:66:29:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:22:09 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=9d44223000709100fe22b6d1d4e795c6d26436998d2e7aecc00c2d0bbb754c21, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1d:b6:69:05:aa:92:55:10:ea:e7:ac:e5:bb: 8f:92:7c:f7:31:ed:ac:94:19:b9:21:5e:66:61:a8: 64:06:33:1d:ff:0f:74:05:43:af:57:05:4e:f9:09: 32:3a:42:33:0f:d8:b3:c7:42:27:60:71:c9:df:4c: 84:d1:88:c3:07:89:6e:24:50:aa:b5:45:86:f6:fd: d8:94:41:36:66:48:5c:ae:73:d5:7f:cf:27:59:41: d3:0c:69:5c:16:71:2c:d9:41:d0:01:ed:68:c8:da: cd:3c:8e:ff:1a:b0:fa:fb:5d:98:79:c6:ae:e7:42: 0b:98:1f:2c:8e:06:c2:ae:49:d6:6c:86:89:56:25: c0:28:2f:77:00:c9:ca:77:f7:1b:fd:fd:1e:72:b3: f1:11:d7:31:c6:9a:51:8b:9a:10:ea:dd:b3:63:57: 27:da:d6:e5:1f:38:9d:87:a8:57:67:16:1b:85:9f: 03:ea:9e:05:a5:5d:cd:ef:a9:52:ab:c1:e4:4c:1d: 32:95:29:a5:db:95:a8:0c:fe:c9:19:af:23:d8:e1: df:e6:dc:d1:3f:f4:b8:f3:42:93:94:f1:ca:2b:01: 41:e4:25:7e:64:0f:3f:44:31:48:1b:a7:6e:dc:a6: 4e:c4:d2:9c:46:38:77:8d:ae:03:f0:a5:9a:6d:9d: 54:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2D:DC:DF:8E:FA:58:33:8A:AE:90:D4:16:35:4C:30:5B:9F:3F:50 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39483a31-6849-42a4-862c-401fc9e92002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.45.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:4e:33:b0:6d:92:85:2d:e9:8e:7d:98:82:a0:7e:f3:35:72: 9d:2e:c6:12:e1:fb:30:5d:56:e9:e5:49:c7:59:57:0f:b3:fd: 06:2a:29:92:e6:e0:ec:ef:15:68:e2:bb:63:f5:44:e9:cf:67: 95:73:e5:c9:ef:5d:66:48:e9:3b:aa:89:c9:fe:bb:6f:8d:36: fd:79:e0:5a:9d:54:f6:a9:b1:ef:73:e2:76:d7:5a:37:4c:31: 5f:40:92:46:05:c6:5c:ec:0e:76:b9:7c:c9:69:29:54:66:f9: 03:b4:86:e5:cc:c6:a5:e9:72:2d:60:40:82:96:67:6c:fa:a3: b0:c6:63:a4:10:65:85:f2:9c:84:b8:ef:7b:42:18:a6:df:03: ad:34:27:3d:47:d7:dd:78:c3:3f:ca:ea:27:da:e5:f3:c9:ab: 8e:53:a5:6e:83:2b:c7:92:cb:30:ed:95:6f:6f:9a:84:0b:17: 15:58:a4:1d:da:02:08:28:57:f4:5c:8a:db:2d:f6:41:84:93: 69:83:c9:f6:5d:e2:d1:b6:74:2c:e1:96:2b:26:8b:12:5b:8e: 08:5a:cc:55:64:89:91:77:7c:03:b3:a8:3b:93:66:df:c4:b1: 0a:13:c7:39:79:e6:04:e3:5a:5a:3b:f4:8f:c6:17:1e:2e:83: 23:bf:0b:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKUDKmnbtnkcKIES84qwxZpxmKWAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkyMjA5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDQ0MjIzMDAwNzA5MTAwZmUyMmI2ZDFkNGU3OTVjNmQy NjQzNjk5OGQyZTdhZWNjMDBjMmQwYmJiNzU0YzIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcHbZpBaqSVRDq56zlu4+SfPcx7ayUGbkhXmZhqGQGMx3/ D3QFQ69XBU75CTI6QjMP2LPHQidgccnfTITRiMMHiW4kUKq1RYb2/diUQTZmSFyu c9V/zydZQdMMaVwWcSzZQdAB7WjI2s08jv8asPr7XZh5xq7nQguYHyyOBsKuSdZs holWJcAoL3cAycp39xv9/R5ys/ER1zHGmlGLmhDq3bNjVyfa1uUfOJ2HqFdnFhuF nwPqngWlXc3vqVKrweRMHTKVKaXblagM/skZryPY4d/m3NE/9LjzQpOU8corAUHk JX5kDz9EMUgbp27cpk7E0pxGOHeNrgPwpZptnVT9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaC3c3476WDOKrpDUFjVMMFufP1AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5NDgzYTMxLTY4NDktNDJhNC04NjJjLTQwMWZjOWU5MjAwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqC0wDQYJKoZIhvcNAQELBQADggEBAJ5OM7BtkoUt6Y59mIKgfvM1cp0u xhLh+zBdVunlScdZVw+z/QYqKZLm4OzvFWjiu2P1ROnPZ5Vz5cnvXWZI6Tuqicn+ u2+NNv154FqdVPapse9z4nbXWjdMMV9AkkYFxlzsDna5fMlpKVRm+QO0huXMxqXp ci1gQIKWZ2z6o7DGY6QQZYXynIS473tCGKbfA600Jz1H1914wz/K6ifa5fPJq45T pW6DK8eSyzDtlW9vmoQLFxVYpB3aAggoV/Rcitst9kGEk2mDyfZd4tG2dCzhlism ixJbjghazFVkiZF3fAOzqDuTZt/EsQoTxzl55gTjWlo79I/GFx4ugyO/C9k= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:55 2025 by rpki-client