$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4188f7d0-5475-47f2-8ebf-96d048cc483a.roa File: 4188f7d0-5475-47f2-8ebf-96d048cc483a.roa (raw, json) Hash identifier: YM6KseVpl+fdXLtWmcJBZevrfxTY0Juv78fO7yFHvhk= Subject key identifier: 42:F8:85:6A:A6:E2:DE:D0:DD:A7:D2:20:68:43:71:47:A9:89:67:29 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 058762B964E8BA7F66295824668AD1E3E1B514DC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4188f7d0-5475-47f2-8ebf-96d048cc483a.roa Signing time: Fri 26 Sep 2025 02:09:31 +0000 ROA not before: Fri 26 Sep 2025 02:09:31 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:87:62:b9:64:e8:ba:7f:66:29:58:24:66:8a:d1:e3:e1:b5:14:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:09:31 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=7a833288fbed43e00fb678279c6e8f8206429d920eb867d1ae029f1acf4376c3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:33:22:fe:c7:73:89:81:fb:7d:de:58:bd: 20:85:6b:a5:ab:5f:16:8c:f0:97:83:0d:99:6f:78: 3f:55:33:97:27:ac:e8:ec:a5:4a:bd:22:b9:0f:8f: 02:d9:77:ad:a6:f5:87:b4:25:4d:03:7b:bc:31:b4: 88:7f:07:c5:8d:2c:41:16:24:49:d2:69:13:81:89: 18:4f:6a:ca:c3:de:b3:91:4d:c2:f0:d0:3a:a1:7c: 29:b2:1b:b6:1b:32:f1:b1:33:ee:aa:6e:0a:7e:65: e8:0a:68:6a:6a:4f:61:a7:3b:64:2a:3a:52:03:1e: ec:e4:f5:24:f8:f3:1f:67:43:18:4c:16:46:75:6b: 7a:8f:60:16:dd:18:ee:19:43:eb:f7:f2:43:43:e1: 3f:8e:f5:2c:a5:00:e0:d9:89:04:6f:f7:c4:c7:c4: 14:24:f1:07:17:63:46:e3:89:91:0e:02:8e:2d:28: fb:9c:69:69:32:97:b2:5c:d0:5e:02:d0:cd:94:0b: ee:ef:98:2b:da:cc:62:da:c6:58:3d:68:73:92:53: 90:26:f2:b7:fc:83:31:fd:76:7a:e1:0d:a6:a1:5d: 7f:6e:a3:42:92:15:88:24:01:a9:4d:f2:6a:04:5b: ff:52:2a:b6:72:09:fb:9e:69:28:85:a7:91:47:84: 7c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F8:85:6A:A6:E2:DE:D0:DD:A7:D2:20:68:43:71:47:A9:89:67:29 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4188f7d0-5475-47f2-8ebf-96d048cc483a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.0.0/19 Signature Algorithm: sha256WithRSAEncryption 1d:25:e2:99:a0:69:3b:a5:aa:88:29:21:0d:e5:a9:f9:73:d3: c3:60:0b:57:8f:b7:29:d5:44:15:94:e9:3c:d2:6c:25:81:ca: c3:c9:d9:8e:44:59:6a:db:c4:c1:f6:74:cc:b2:be:8b:53:3b: 16:9c:aa:ce:5d:3c:0c:d5:35:dc:2c:15:56:94:15:fe:e4:c1: ee:3c:8d:2d:4c:07:11:da:13:a9:23:a3:2b:85:b0:9f:f8:e7: a2:32:39:0d:b7:33:b4:97:28:95:ea:c7:54:26:3d:da:b8:01: fe:de:7d:fe:00:c2:8c:fa:99:fc:81:49:ba:80:75:c2:cf:16: ab:70:80:34:63:16:be:8d:5b:e6:87:ff:9e:58:e8:f5:43:ae: 8d:3c:29:bd:be:67:18:7f:03:ce:1e:68:9f:91:d5:c5:97:ec: 84:44:45:1d:63:71:32:1c:91:8c:44:cd:b3:cb:d2:6a:c7:9f: 4e:39:90:be:3f:da:cb:02:05:b7:9a:7c:aa:a1:d1:ff:cc:46: 14:83:10:f5:1a:6e:78:cc:5a:f9:b6:ff:77:4e:19:ca:1e:86: ed:f3:74:9e:47:f0:75:17:59:b2:c0:b7:c0:d8:e9:d5:d6:5f: 7e:5c:dc:48:01:d4:67:56:45:bd:6c:02:fd:29:46:59:ea:ac: 41:04:2b:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBYdiuWToun9mKVgkZorR4+G1FNwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIwOTMxWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTgzMzI4OGZiZWQ0M2UwMGZiNjc4Mjc5YzZlOGY4MjA2 NDI5ZDkyMGViODY3ZDFhZTAyOWYxYWNmNDM3NmMzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqjjMi/sdziYH7fd5YvSCFa6WrXxaM8JeDDZlveD9VM5cn rOjspUq9IrkPjwLZd62m9Ye0JU0De7wxtIh/B8WNLEEWJEnSaROBiRhPasrD3rOR TcLw0DqhfCmyG7YbMvGxM+6qbgp+ZegKaGpqT2GnO2QqOlIDHuzk9ST48x9nQxhM FkZ1a3qPYBbdGO4ZQ+v38kND4T+O9SylAODZiQRv98THxBQk8QcXY0bjiZEOAo4t KPucaWkyl7Jc0F4C0M2UC+7vmCvazGLaxlg9aHOSU5Am8rf8gzH9dnrhDaahXX9u o0KSFYgkAalN8moEW/9SKrZyCfueaSiFp5FHhHypAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQviFaqbi3tDdp9IgaENxR6mJZykwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQxODhmN2QwLTU0NzUtNDdmMi04ZWJmLTk2ZDA0OGNjNDgzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUDqwAwDQYJKoZIhvcNAQELBQADggEBAB0l4pmgaTulqogpIQ3lqflz08Ng C1ePtynVRBWU6TzSbCWBysPJ2Y5EWWrbxMH2dMyyvotTOxacqs5dPAzVNdwsFVaU Ff7kwe48jS1MBxHaE6kjoyuFsJ/456IyOQ23M7SXKJXqx1QmPdq4Af7eff4Awoz6 mfyBSbqAdcLPFqtwgDRjFr6NW+aH/55Y6PVDro08Kb2+Zxh/A84eaJ+R1cWX7IRE RR1jcTIckYxEzbPL0mrHn045kL4/2ssCBbeafKqh0f/MRhSDEPUabnjMWvm2/3dO Gcoehu3zdJ5H8HUXWbLAt8DY6dXWX35c3EgB1GdWRb1sAv0pRlnqrEEEKwQ= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:31 2025 by rpki-client