$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49021a40-8520-43c5-9bf7-3920869cb5c3.roa File: 49021a40-8520-43c5-9bf7-3920869cb5c3.roa (raw, json) Hash identifier: tUYmeuvllQkARt+oRjjSxcbhn5QQP/ulu6qYAOWnnDA= Subject key identifier: A6:1F:BB:44:63:40:52:DD:AB:5A:A6:41:78:07:B3:BB:27:BF:61:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 27BD684B0953BDEB35C677D544E100D9183068AF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49021a40-8520-43c5-9bf7-3920869cb5c3.roa Signing time: Thu 25 Sep 2025 19:24:24 +0000 ROA not before: Thu 25 Sep 2025 19:24:24 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:bd:68:4b:09:53:bd:eb:35:c6:77:d5:44:e1:00:d9:18:30:68:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:24:24 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=dae3d87083d9fbb93690a4001290147658c7f86aca9795eff852693235155165, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2b:4b:06:61:62:6e:f9:73:0d:48:b0:f2:29: e7:4d:07:ed:3f:a7:64:41:1e:25:c8:80:d0:08:f0: 24:b8:eb:51:1d:80:cd:f3:1b:91:be:39:ca:ed:f9: 22:e1:69:d9:b8:e5:2f:9d:fd:61:29:01:08:3e:52: 14:8f:da:a2:61:94:f7:19:6f:84:3f:72:5c:8d:62: 01:e8:26:b7:d0:30:76:6c:a3:a1:30:63:3f:4e:9d: d5:c8:1c:39:c7:53:69:73:fe:1a:73:8f:3d:c8:47: 01:b9:93:81:e5:c1:2b:1c:22:02:95:5f:68:e4:65: 35:a3:0d:ab:f1:40:74:9e:01:d3:d0:23:6a:00:66: 7c:d1:2c:e7:d1:c5:c5:46:82:23:fb:64:9e:a5:28: 42:90:b2:fd:44:03:5a:2f:a7:c0:0f:97:80:3a:5c: a7:29:fb:cb:ad:1a:b8:57:5d:2d:35:49:14:02:52: 74:14:dd:d0:73:c6:a3:e1:67:c4:ab:b2:4f:f5:f9: 6d:70:05:16:e5:e7:ee:d5:bc:48:0b:ad:3b:00:d4: cb:b5:f1:9d:4e:75:53:14:8c:3a:f1:ae:da:72:12: 15:21:f8:a3:e0:86:c1:b2:04:ab:92:4b:a9:96:d3: 67:89:5c:be:7b:ed:ff:16:3c:d9:3d:73:31:0d:d7: 56:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1F:BB:44:63:40:52:DD:AB:5A:A6:41:78:07:B3:BB:27:BF:61:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49021a40-8520-43c5-9bf7-3920869cb5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.59.0/24 Signature Algorithm: sha256WithRSAEncryption b2:34:a7:5a:6e:4c:8b:4a:00:c1:3e:fd:ea:f9:da:6b:8a:fa: cc:11:5d:a8:49:5a:0f:25:fc:e1:0b:c9:9f:4c:bd:c4:9c:2e: a5:e0:23:14:6e:78:19:ef:d5:ac:a5:9c:a8:51:06:f0:a8:24: 49:c8:55:1c:a5:db:77:de:a5:0f:19:c2:36:6a:07:4b:a8:d4: a4:a6:1d:74:b8:f6:b5:a3:a2:a7:80:1e:d0:1f:a0:44:77:4a: 2f:8b:54:02:b7:03:82:54:c6:48:57:bc:4e:0e:41:03:e9:3b: 68:d7:04:da:97:bb:f8:a7:8c:fe:89:07:dd:2b:05:0d:ec:b9: 4d:d1:75:b7:04:7d:e6:a9:17:4a:8b:7a:80:9f:49:1f:e8:5e: 66:f3:a5:b7:ed:39:54:b1:05:7c:fc:66:52:ba:dd:eb:9a:f9: e8:49:24:19:24:86:72:70:fd:e2:a0:73:64:5d:3d:c1:67:5c: 0c:c2:3e:a4:d9:5b:a6:a5:d4:1a:ac:ed:e2:25:ba:d9:1b:6b: 54:28:27:2e:35:39:62:0f:2d:c2:c0:49:f8:b5:cb:81:fc:b5: 9f:50:e5:75:e6:c0:1c:3a:24:ab:f0:d7:ec:e1:28:b6:8b:52: 47:f9:61:87:27:f5:b4:b4:10:45:3d:c6:da:28:e8:0c:f2:5a: 12:02:52:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ71oSwlTves1xnfVROEA2RgwaK8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkyNDI0WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWUzZDg3MDgzZDlmYmI5MzY5MGE0MDAxMjkwMTQ3NjU4 YzdmODZhY2E5Nzk1ZWZmODUyNjkzMjM1MTU1MTY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQK0sGYWJu+XMNSLDyKedNB+0/p2RBHiXIgNAI8CS461Ed gM3zG5G+Ocrt+SLhadm45S+d/WEpAQg+UhSP2qJhlPcZb4Q/clyNYgHoJrfQMHZs o6EwYz9OndXIHDnHU2lz/hpzjz3IRwG5k4HlwSscIgKVX2jkZTWjDavxQHSeAdPQ I2oAZnzRLOfRxcVGgiP7ZJ6lKEKQsv1EA1ovp8APl4A6XKcp+8utGrhXXS01SRQC UnQU3dBzxqPhZ8Srsk/1+W1wBRbl5+7VvEgLrTsA1Mu18Z1OdVMUjDrxrtpyEhUh +KPghsGyBKuSS6mW02eJXL577f8WPNk9czEN11YXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUph+7RGNAUt2rWqZBeAezuye/YWYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ5MDIxYTQwLTg1MjAtNDNjNS05YmY3LTM5MjA4NjljYjVjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqDswDQYJKoZIhvcNAQELBQADggEBALI0p1puTItKAME+/er52muK+swR XahJWg8l/OELyZ9MvcScLqXgIxRueBnv1aylnKhRBvCoJEnIVRyl23fepQ8ZwjZq B0uo1KSmHXS49rWjoqeAHtAfoER3Si+LVAK3A4JUxkhXvE4OQQPpO2jXBNqXu/in jP6JB90rBQ3suU3RdbcEfeapF0qLeoCfSR/oXmbzpbftOVSxBXz8ZlK63eua+ehJ JBkkhnJw/eKgc2RdPcFnXAzCPqTZW6al1Bqs7eIlutkba1QoJy41OWIPLcLASfi1 y4H8tZ9Q5XXmwBw6JKvw1+zhKLaLUkf5YYcn9bS0EEU9xtoo6AzyWhICUsQ= -----END CERTIFICATE-----Generated at Sat Oct 18 00:16:17 2025 by rpki-client