$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/585f0030-ed57-4226-a2fe-fcc865a44d58.roa File: 585f0030-ed57-4226-a2fe-fcc865a44d58.roa (raw, json) Hash identifier: y9mG8OcLsusDdMKegmL1nJfzyAgLFjjsnHj86PNNOhg= Subject key identifier: 7D:1B:B5:25:B2:54:D2:2A:71:CD:99:2A:D9:AA:8A:64:79:E9:3B:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 10EE08B8C252F0347A11C8C7FBEAFDA6D0826EEC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/585f0030-ed57-4226-a2fe-fcc865a44d58.roa Signing time: Fri 26 Sep 2025 00:51:31 +0000 ROA not before: Fri 26 Sep 2025 00:51:31 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ee:08:b8:c2:52:f0:34:7a:11:c8:c7:fb:ea:fd:a6:d0:82:6e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:51:31 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=e7fcdc6d63aafecd247a58b37326123c80230182b2d9b66358a1f12220c13c6b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fb:96:a1:38:a4:0a:50:15:2f:9b:1a:cd:e6: a0:d4:dd:ab:a3:46:0a:1f:a3:46:ab:60:f6:4b:97: f9:c9:d6:59:36:97:5e:76:3e:10:2b:43:49:eb:dd: a1:eb:64:6e:03:de:e2:2b:46:54:2d:e6:0e:ad:67: c5:48:29:c5:64:ad:2d:9e:2c:e0:48:b8:6d:e0:5c: 77:11:15:0a:c9:1d:13:9d:e9:96:7a:06:33:5e:c0: 50:7c:c9:18:33:57:0b:1a:cd:92:70:3d:5e:ea:43: 39:a6:8a:29:6f:57:f8:25:75:d6:97:d1:7d:42:8f: d6:48:ad:de:9b:dc:1f:52:74:f1:5f:77:09:ab:f8: f8:77:f2:ed:46:07:a4:6d:95:75:74:fe:ba:87:c4: bb:00:cb:fb:f2:cd:f1:f5:60:71:2c:18:ad:74:87: 82:5f:cc:b3:2a:5a:aa:c7:11:25:b0:e3:58:cf:0f: ac:f2:9a:37:e9:2d:89:07:61:53:f9:27:0f:ea:fb: 9a:2c:13:47:8e:75:66:f8:da:1c:b2:a8:a4:b0:b2: 18:0d:94:ea:35:d5:fb:0c:1d:6b:b8:f9:bc:fd:7e: d2:be:83:eb:f0:a6:96:74:c8:f9:a9:31:71:24:fe: 28:62:fb:ed:5a:cb:35:e3:27:f8:35:ae:42:4a:fe: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1B:B5:25:B2:54:D2:2A:71:CD:99:2A:D9:AA:8A:64:79:E9:3B:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/585f0030-ed57-4226-a2fe-fcc865a44d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.40.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:24:25:b2:22:02:36:1b:7d:27:66:47:1b:b8:f8:a9:b8:05: 1d:a8:52:b4:14:fc:63:fb:78:51:24:0b:cc:70:18:b2:98:98: 9e:55:ee:ff:21:43:13:d7:e4:d1:7a:f0:76:03:06:05:2d:76: 7b:c4:72:8b:f2:2f:a9:de:63:1b:8a:5f:68:b0:48:ee:ba:b1: 54:df:e8:b4:e8:fc:aa:f1:10:17:7c:1f:c7:2c:71:31:2e:14: 55:03:2e:13:4b:69:c7:d9:2c:7d:90:e3:91:d0:84:c1:ef:3f: 31:46:a4:ee:a7:79:9d:a7:e1:95:c6:71:4f:fc:17:d2:64:2f: 4f:08:90:54:19:53:d0:a4:6a:51:01:53:cf:e3:c3:d5:73:5d: 10:93:a1:ed:63:be:8b:e2:63:6e:a8:5d:d6:55:1e:66:4f:4e: 60:3f:9d:04:ea:8b:ed:47:63:7b:e0:9c:1b:d8:a9:ac:20:67: 8e:5d:84:b0:6a:45:84:c2:21:9c:05:dd:e3:1a:4b:5b:2c:d3: 67:18:ce:18:3e:4a:e7:48:3c:df:84:fa:5d:4e:83:bb:f4:27: 89:91:22:5f:78:a0:6e:58:d2:37:8d:2c:ec:7f:ce:73:f8:1d: 43:8c:6a:9a:80:7d:40:94:32:ba:3d:5a:81:3d:b1:cb:fc:a4: 45:29:60:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEO4IuMJS8DR6EcjH++r9ptCCbuwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDA1MTMxWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlN2ZjZGM2ZDYzYWFmZWNkMjQ3YTU4YjM3MzI2MTIzYzgw MjMwMTgyYjJkOWI2NjM1OGExZjEyMjIwYzEzYzZiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd+5ahOKQKUBUvmxrN5qDU3aujRgofo0arYPZLl/nJ1lk2 l152PhArQ0nr3aHrZG4D3uIrRlQt5g6tZ8VIKcVkrS2eLOBIuG3gXHcRFQrJHROd 6ZZ6BjNewFB8yRgzVwsazZJwPV7qQzmmiilvV/glddaX0X1Cj9ZIrd6b3B9SdPFf dwmr+Ph38u1GB6RtlXV0/rqHxLsAy/vyzfH1YHEsGK10h4JfzLMqWqrHESWw41jP D6zymjfpLYkHYVP5Jw/q+5osE0eOdWb42hyyqKSwshgNlOo11fsMHWu4+bz9ftK+ g+vwppZ0yPmpMXEk/ihi++1ayzXjJ/g1rkJK/m25AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfRu1JbJU0ipxzZkq2aqKZHnpO4kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU4NWYwMDMwLWVkNTctNDIyNi1hMmZlLWZjYzg2NWE0NGQ1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDrCgwDQYJKoZIhvcNAQELBQADggEBAHwkJbIiAjYbfSdmRxu4+Km4BR2o UrQU/GP7eFEkC8xwGLKYmJ5V7v8hQxPX5NF68HYDBgUtdnvEcovyL6neYxuKX2iw SO66sVTf6LTo/KrxEBd8H8cscTEuFFUDLhNLacfZLH2Q45HQhMHvPzFGpO6neZ2n 4ZXGcU/8F9JkL08IkFQZU9CkalEBU8/jw9VzXRCToe1jvoviY26oXdZVHmZPTmA/ nQTqi+1HY3vgnBvYqawgZ45dhLBqRYTCIZwF3eMaS1ss02cYzhg+SudIPN+E+l1O g7v0J4mRIl94oG5Y0jeNLOx/znP4HUOMapqAfUCUMro9WoE9scv8pEUpYL8= -----END CERTIFICATE-----Generated at Fri Oct 17 21:59:29 2025 by rpki-client