$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a58f2cb-905c-46be-8f64-09a02140e738.roa File: 3a58f2cb-905c-46be-8f64-09a02140e738.roa (raw, json) Hash identifier: aStLaZ200DPcQ63S5lGiR00YDApcvXVZa2oKxyXMHn4= Subject key identifier: 4C:9F:B2:6E:EB:95:BE:A5:0B:A4:C7:F2:62:AA:97:63:80:0D:9A:32 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 27FF7071A60B27D3FCA5B1820409D483F9115BA5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a58f2cb-905c-46be-8f64-09a02140e738.roa Signing time: Mon 22 Sep 2025 23:38:31 +0000 ROA not before: Mon 22 Sep 2025 23:38:31 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ff:70:71:a6:0b:27:d3:fc:a5:b1:82:04:09:d4:83:f9:11:5b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:38:31 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=428bcc02d07409c0cf8e45719450272e299eb5871813a9cdfd1b78fb0b37cec6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:98:1f:8d:3a:61:6c:b9:06:e4:4c:fe:17: 91:7c:f9:65:70:4f:aa:9d:3d:e1:99:57:7b:7d:98: 0f:6f:5b:b1:24:b6:dd:f8:f1:d3:f7:a5:91:bf:96: 5e:e1:1a:ed:aa:b0:7c:73:4e:86:5d:78:33:0c:11: 6e:e6:5d:24:c6:a3:ae:de:bd:0a:5c:e1:8c:89:41: d1:47:04:05:2c:7d:34:01:aa:0e:6f:fd:3f:73:44: 65:6d:1f:64:7d:df:0f:56:a6:d6:7c:72:38:e6:13: b0:87:61:64:87:c6:26:a2:9a:9c:e5:c4:4e:b3:03: 88:9d:19:55:9b:0b:6d:d0:3c:5f:36:3e:1f:82:c2: 55:31:0a:b1:5b:9a:bb:86:26:18:35:c8:7a:de:0a: c8:cd:9d:eb:54:5b:11:ee:fd:6c:a6:eb:7d:35:49: 7a:2b:30:8a:2d:d4:48:d5:3c:20:a6:cf:e2:d0:43: c7:e6:b5:25:95:ec:f5:fb:9f:07:74:d7:e6:f9:d7: a9:e5:3f:d4:01:29:04:32:d1:c4:73:c3:8b:5d:95: 22:e9:90:ff:9f:a6:a7:3a:fa:5f:f5:c2:f4:66:91: 23:bd:9b:1f:10:78:ca:28:07:6f:2d:04:ee:aa:d1: 66:66:9c:71:e7:e3:7a:51:2c:af:73:72:79:4c:fb: fe:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9F:B2:6E:EB:95:BE:A5:0B:A4:C7:F2:62:AA:97:63:80:0D:9A:32 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a58f2cb-905c-46be-8f64-09a02140e738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.43.0/24 Signature Algorithm: sha256WithRSAEncryption 09:e9:b9:48:38:37:c6:81:fe:5f:0d:70:7d:c7:cc:e8:29:80: ee:cc:82:7c:cf:af:5d:b3:95:f0:c3:29:b3:00:29:ca:50:3d: b5:71:e2:ad:20:95:88:7a:ae:91:18:82:18:00:bc:c2:29:5c: c7:3f:f3:f6:ba:38:b4:d0:07:d3:55:b6:c7:68:0c:19:ec:83: 65:b2:01:cb:f0:5b:71:25:da:a1:25:af:fd:bd:33:54:a4:42: 1f:83:d8:bb:5a:8d:c2:34:69:a7:f5:e4:53:b0:de:76:95:95: eb:3d:5c:37:20:fa:04:04:ec:68:ba:72:30:47:62:87:06:77: 31:ae:b5:2e:d2:2a:a7:6d:18:64:92:3e:56:37:21:58:3e:72: 26:10:2d:fa:eb:f1:42:ca:07:8a:71:3d:9c:6b:5c:61:1d:82: 7a:34:5b:80:c3:20:6b:a8:a0:16:ab:63:7b:b1:66:fa:30:80: 7d:9c:57:f0:29:10:8c:52:a2:d6:36:ff:f2:d6:fa:7e:20:c4: b0:88:e7:d3:ac:f1:5b:73:7d:73:52:d0:62:f6:f5:02:48:23: 8a:59:29:92:a8:85:d6:7c:0e:fb:34:7c:38:b2:0c:84:8b:5e: c3:e9:b0:77:bb:85:c7:39:bd:d7:26:56:fd:cd:78:31:3e:0e: b0:79:1a:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ/9wcaYLJ9P8pbGCBAnUg/kRW6UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjMzODMxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjhiY2MwMmQwNzQwOWMwY2Y4ZTQ1NzE5NDUwMjcyZTI5 OWViNTg3MTgxM2E5Y2RmZDFiNzhmYjBiMzdjZWM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxM5gfjTphbLkG5Ez+F5F8+WVwT6qdPeGZV3t9mA9vW7Ek tt348dP3pZG/ll7hGu2qsHxzToZdeDMMEW7mXSTGo67evQpc4YyJQdFHBAUsfTQB qg5v/T9zRGVtH2R93w9WptZ8cjjmE7CHYWSHxiaimpzlxE6zA4idGVWbC23QPF82 Ph+CwlUxCrFbmruGJhg1yHreCsjNnetUWxHu/Wym6301SXorMIot1EjVPCCmz+LQ Q8fmtSWV7PX7nwd01+b516nlP9QBKQQy0cRzw4tdlSLpkP+fpqc6+l/1wvRmkSO9 mx8QeMooB28tBO6q0WZmnHHn43pRLK9zcnlM+/6xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTJ+ybuuVvqULpMfyYqqXY4ANmjIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNhNThmMmNiLTkwNWMtNDZiZS04ZjY0LTA5YTAyMTQwZTczOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0LiswDQYJKoZIhvcNAQELBQADggEBAAnpuUg4N8aB/l8NcH3HzOgpgO7M gnzPr12zlfDDKbMAKcpQPbVx4q0glYh6rpEYghgAvMIpXMc/8/a6OLTQB9NVtsdo DBnsg2WyAcvwW3El2qElr/29M1SkQh+D2LtajcI0aaf15FOw3naVles9XDcg+gQE 7Gi6cjBHYocGdzGutS7SKqdtGGSSPlY3IVg+ciYQLfrr8ULKB4pxPZxrXGEdgno0 W4DDIGuooBarY3uxZvowgH2cV/ApEIxSotY2//LW+n4gxLCI59Os8VtzfXNS0GL2 9QJII4pZKZKohdZ8Dvs0fDiyDISLXsPpsHe7hcc5vdcmVv3NeDE+DrB5Ggw= -----END CERTIFICATE-----Generated at Fri Oct 17 22:14:45 2025 by rpki-client