$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cdeb69a-5a03-44f0-97d3-c9d51aa2b50b.roa File: 3cdeb69a-5a03-44f0-97d3-c9d51aa2b50b.roa (raw, json) Hash identifier: nnMWC+4yZYc0xgkkwFWFVLVRvJwqwqt614tIqFED/7M= Subject key identifier: 68:66:02:EC:A5:C7:CB:1A:9C:A8:87:8F:25:C0:D7:68:6A:A7:97:86 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D73D131B25B0AF5E661A925F9C010E43DC0ADE1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cdeb69a-5a03-44f0-97d3-c9d51aa2b50b.roa Signing time: Thu 25 Sep 2025 22:47:03 +0000 ROA not before: Thu 25 Sep 2025 22:47:03 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:73:d1:31:b2:5b:0a:f5:e6:61:a9:25:f9:c0:10:e4:3d:c0:ad:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:47:03 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=4ace3078d86b48a1610ac66b6242acb8d2171100e274a5bd6c899c5c8542f1be, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:cf:51:56:6f:76:20:2b:15:e2:d7:61:66: af:b5:b9:db:0d:a5:96:71:a7:25:09:aa:30:89:9b: 6b:9b:dd:3d:ec:fd:33:26:4f:06:c8:99:f8:6d:a1: 18:ec:45:7e:1c:85:22:ac:2b:cc:b9:0a:ee:a1:44: 37:18:76:5d:1a:2c:e2:23:a1:31:65:98:1c:ce:91: 65:f7:9d:ee:d7:42:7f:b5:54:5a:be:64:f4:4b:31: c6:c0:9d:1a:6f:4a:f4:57:04:3f:ad:08:5a:ba:94: 05:aa:27:0b:9b:cb:4c:c6:8e:08:6a:f7:0d:49:01: c6:ae:2c:50:ea:5c:d3:ba:2f:8a:00:49:24:54:58: 94:b7:43:52:c6:e3:ba:f8:9c:5f:b9:41:c2:50:72: f2:f0:06:f9:35:43:9f:fc:a3:3f:0d:41:99:d6:d9: c9:d7:b5:ad:bb:ae:02:0c:d2:d0:90:8e:26:24:a4: d6:b8:9b:63:a7:01:6f:df:9e:3b:2b:e3:49:dc:2d: 21:88:6d:cb:e3:37:c8:1d:d5:50:a9:36:11:b7:e2: 98:a0:67:08:51:d5:75:05:78:f2:81:8a:d6:8a:92: 57:ac:5a:1f:31:4a:c2:e4:d4:9c:4a:97:75:26:2b: 13:ac:de:d4:c5:15:12:92:a0:03:4b:4f:3c:04:3d: 49:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:66:02:EC:A5:C7:CB:1A:9C:A8:87:8F:25:C0:D7:68:6A:A7:97:86 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cdeb69a-5a03-44f0-97d3-c9d51aa2b50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.58.0/23 Signature Algorithm: sha256WithRSAEncryption b0:9d:cc:71:ee:d1:20:90:e2:24:54:92:5e:08:8f:ec:5b:8a: db:44:08:27:2c:af:ef:04:90:be:b1:a4:35:c0:f0:e8:ad:4b: ab:f1:f9:9d:18:fe:bc:32:91:fd:99:c7:50:57:0b:4b:95:2d: 59:7c:c6:a0:48:83:45:4a:78:b1:a5:f1:a5:06:c5:0e:fa:98: 35:ea:ad:f2:c7:96:b0:8c:7c:aa:41:6c:5d:30:af:5d:18:0e: e3:b2:4d:f0:bc:18:bf:a2:1a:40:cb:ff:c3:05:f2:67:20:c7: d1:84:d2:88:c0:cc:80:51:c1:d4:60:77:62:00:2c:ef:43:4c: 0a:a4:3c:ea:00:21:92:12:23:dd:7c:f3:d9:53:b8:cd:7f:50: a8:de:b2:5f:3d:40:26:13:c8:a6:52:97:8f:8c:81:a5:72:17: a0:f9:e8:77:da:48:c3:3c:20:43:2b:14:ee:cb:fb:7e:e6:52: 68:ef:dd:58:b2:ec:4b:1f:02:94:24:b6:1f:af:a4:9f:ac:14: d5:76:25:2c:9e:f6:80:92:f5:c3:b9:dc:2b:71:58:39:66:bc: 84:e2:c8:9e:1a:9b:ba:05:a2:a4:b6:ea:ca:4f:20:28:8b:a6: b4:f3:fe:2a:d9:32:9f:21:2f:fb:aa:bc:29:fe:7b:75:35:41: 2d:d8:d0:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTXPRMbJbCvXmYakl+cAQ5D3AreEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjI0NzAzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWNlMzA3OGQ4NmI0OGExNjEwYWM2NmI2MjQyYWNiOGQy MTcxMTAwZTI3NGE1YmQ2Yzg5OWM1Yzg1NDJmMWJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCczs9RVm92ICsV4tdhZq+1udsNpZZxpyUJqjCJm2ub3T3s /TMmTwbImfhtoRjsRX4chSKsK8y5Cu6hRDcYdl0aLOIjoTFlmBzOkWX3ne7XQn+1 VFq+ZPRLMcbAnRpvSvRXBD+tCFq6lAWqJwuby0zGjghq9w1JAcauLFDqXNO6L4oA SSRUWJS3Q1LG47r4nF+5QcJQcvLwBvk1Q5/8oz8NQZnW2cnXta27rgIM0tCQjiYk pNa4m2OnAW/fnjsr40ncLSGIbcvjN8gd1VCpNhG34pigZwhR1XUFePKBitaKkles Wh8xSsLk1JxKl3UmKxOs3tTFFRKSoANLTzwEPUnRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaGYC7KXHyxqcqIePJcDXaGqnl4YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNjZGViNjlhLTVhMDMtNDRmMC05N2QzLWM5ZDUxYWEyYjUwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqDowDQYJKoZIhvcNAQELBQADggEBALCdzHHu0SCQ4iRUkl4Ij+xbittE CCcsr+8EkL6xpDXA8OitS6vx+Z0Y/rwykf2Zx1BXC0uVLVl8xqBIg0VKeLGl8aUG xQ76mDXqrfLHlrCMfKpBbF0wr10YDuOyTfC8GL+iGkDL/8MF8mcgx9GE0ojAzIBR wdRgd2IALO9DTAqkPOoAIZISI91889lTuM1/UKjesl89QCYTyKZSl4+MgaVyF6D5 6HfaSMM8IEMrFO7L+37mUmjv3Viy7EsfApQkth+vpJ+sFNV2JSye9oCS9cO53Ctx WDlmvITiyJ4am7oFoqS26spPICiLprTz/irZMp8hL/uqvCn+e3U1QS3Y0Ag= -----END CERTIFICATE-----Generated at Fri Oct 17 23:58:16 2025 by rpki-client