$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/596b8440-9252-4dc3-ab1b-3e1e0b60ec49.roa File: 596b8440-9252-4dc3-ab1b-3e1e0b60ec49.roa (raw, json) Hash identifier: 5rjqaogfMNQ70Z0vSvP2sXZZsnFZJdvkGKcFM35/CvM= Subject key identifier: E6:26:71:5B:C1:C6:3E:1B:06:0B:BF:28:C4:56:5A:93:33:45:3B:0D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 43773CD9C5482FD9B2C5B24113D72596B13AA46C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/596b8440-9252-4dc3-ab1b-3e1e0b60ec49.roa Signing time: Thu 25 Sep 2025 23:39:33 +0000 ROA not before: Thu 25 Sep 2025 23:39:33 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:77:3c:d9:c5:48:2f:d9:b2:c5:b2:41:13:d7:25:96:b1:3a:a4:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:39:33 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=0f2d15c642bb0d7866f5d669c621f02a2068e133903669c3bf7d4a42944854d8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:f9:01:c6:86:cc:39:07:10:00:0b:24:0a: 5d:7e:37:c6:03:06:ba:36:c5:53:f4:1e:b4:5d:29: 7c:5c:cb:d6:57:f0:fe:11:ec:05:e4:21:a8:96:ec: 58:44:5b:12:bf:02:8a:4c:a1:b0:4d:b5:79:92:f3: 8d:20:b2:38:e9:e9:fe:17:7c:b8:41:5f:01:a9:a3: 14:32:75:21:84:98:0e:78:91:1b:2f:92:c6:87:e7: 5f:23:ae:2b:2f:be:fe:d6:6c:bc:7f:da:61:2c:60: 63:ad:e3:2b:da:a2:fa:98:90:ef:a1:45:1b:ee:27: fb:5f:7a:2d:c0:70:c1:cc:c2:47:80:19:44:27:6b: 19:da:7c:d4:73:db:71:48:e5:39:96:92:2d:4a:c5: d4:74:66:b4:e6:26:49:d0:ba:6a:bf:7e:29:9e:b3: 3d:ce:92:dc:53:d6:3c:55:6f:21:64:f0:cc:d0:ff: 1f:d4:c6:6a:0c:82:ec:9f:20:b2:60:58:aa:55:ae: e9:d0:d7:84:65:f7:57:43:a7:24:40:b4:3e:10:7d: fb:bb:c6:ed:1b:eb:b5:7a:fa:b7:ca:b8:91:a7:65: fa:6c:41:94:11:13:99:63:72:eb:9b:fb:c2:7e:52: 11:19:9d:9e:2a:c4:ef:5e:db:c7:6a:55:33:e4:19: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:26:71:5B:C1:C6:3E:1B:06:0B:BF:28:C4:56:5A:93:33:45:3B:0D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/596b8440-9252-4dc3-ab1b-3e1e0b60ec49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.234.0/23 Signature Algorithm: sha256WithRSAEncryption 19:80:4b:2d:6c:26:bf:c5:52:12:3a:06:5b:b1:d5:56:4a:9d: d8:9b:2e:1a:14:3b:fd:94:fe:1b:e1:6c:d7:67:63:e4:40:4b: 73:95:06:00:a1:50:bf:ee:2f:ea:25:92:36:cd:77:f8:1c:50: bd:4c:4c:2c:e4:2a:8f:6b:ae:b2:0d:d9:cf:b8:5e:2d:52:9a: d8:ea:4b:4e:3e:c7:a9:ef:c9:d7:96:c4:90:b5:df:e1:eb:3e: 3e:37:17:36:08:1d:dc:0d:50:77:d9:5a:2e:2b:19:4f:c1:54: be:e2:21:d7:a9:35:08:61:92:71:e2:9e:08:7b:ec:24:55:32: 52:07:47:4c:cc:ef:56:80:a1:85:3f:9f:9e:2e:02:4b:6d:e0: 85:5d:aa:f5:8c:2f:fc:b8:d7:27:51:85:44:02:af:39:7a:b7: dd:fe:5e:b1:fa:7c:20:f7:ca:44:00:39:9e:fb:e8:41:ca:d2: 71:30:f2:b3:82:20:65:01:aa:8a:fe:75:81:6c:24:bd:26:89: 6a:35:36:ea:41:fa:b9:82:17:68:b1:f5:52:bb:55:0e:79:71: 3f:00:31:02:8e:1b:a1:76:fa:98:de:85:1a:c1:d5:5a:35:b1: 4f:5c:05:b9:fc:a4:1d:e8:2a:8e:cf:92:0b:0a:df:9b:19:9d: f7:2c:78:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ3c82cVIL9myxbJBE9cllrE6pGwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMzOTMzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjJkMTVjNjQyYmIwZDc4NjZmNWQ2NjljNjIxZjAyYTIw NjhlMTMzOTAzNjY5YzNiZjdkNGE0Mjk0NDg1NGQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKA/kBxobMOQcQAAskCl1+N8YDBro2xVP0HrRdKXxcy9ZX 8P4R7AXkIaiW7FhEWxK/AopMobBNtXmS840gsjjp6f4XfLhBXwGpoxQydSGEmA54 kRsvksaH518jrisvvv7WbLx/2mEsYGOt4yvaovqYkO+hRRvuJ/tfei3AcMHMwkeA GUQnaxnafNRz23FI5TmWki1KxdR0ZrTmJknQumq/fimesz3OktxT1jxVbyFk8MzQ /x/UxmoMguyfILJgWKpVrunQ14Rl91dDpyRAtD4Qffu7xu0b67V6+rfKuJGnZfps QZQRE5ljcuub+8J+UhEZnZ4qxO9e28dqVTPkGe8vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5iZxW8HGPhsGC78oxFZakzNFOw0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU5NmI4NDQwLTkyNTItNGRjMy1hYjFiLTNlMWUwYjYwZWM0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDruowDQYJKoZIhvcNAQELBQADggEBABmASy1sJr/FUhI6Blux1VZKndib LhoUO/2U/hvhbNdnY+RAS3OVBgChUL/uL+olkjbNd/gcUL1MTCzkKo9rrrIN2c+4 Xi1SmtjqS04+x6nvydeWxJC13+HrPj43FzYIHdwNUHfZWi4rGU/BVL7iIdepNQhh knHingh77CRVMlIHR0zM71aAoYU/n54uAktt4IVdqvWML/y41ydRhUQCrzl6t93+ XrH6fCD3ykQAOZ776EHK0nEw8rOCIGUBqor+dYFsJL0miWo1NupB+rmCF2ix9VK7 VQ55cT8AMQKOG6F2+pjehRrB1Vo1sU9cBbn8pB3oKo7PkgsK35sZnfcseB4= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:23 2025 by rpki-client