$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa File: e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa (raw, json) Hash identifier: +E6LcwaBLLPY7p2vE290XcnbrhZXS3UEd4+1HM3Bfr8= Subject key identifier: DB:06:2D:0E:94:C8:41:FA:E7:EF:BA:13:E4:AE:1B:3D:00:19:88:A0 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 023099ACFAFB28E827B16E61A3E06CA9A0C40FA3 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa Signing time: Sat 18 Oct 2025 00:00:24 +0000 ROA not before: Sat 18 Oct 2025 00:00:24 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.169.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:30:99:ac:fa:fb:28:e8:27:b1:6e:61:a3:e0:6c:a9:a0:c4:0f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Oct 18 00:00:24 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=867d2b89aa582334a80e6cb6d0398580d0990bdc8fc9c28560e5294266a0f3d4, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:51:50:c5:68:1e:bd:b9:10:3f:af:9f:d2:27: 90:26:9c:c5:5e:3e:ce:46:47:e3:00:92:1b:42:57: ec:d4:a0:d5:91:2b:df:e5:b6:3d:1e:88:91:2a:18: ec:e4:b3:db:3d:7d:f9:cc:ea:21:9a:de:18:d2:8e: 5e:53:29:22:e2:63:72:27:4c:36:6e:ac:6b:ee:86: 95:d1:66:6f:27:22:5c:7c:9e:25:9c:4a:b4:25:4d: 84:9b:63:a1:a6:6f:bb:c0:ab:43:0a:e1:cd:ff:b2: b4:da:41:78:de:c2:46:af:29:e9:c4:e5:7a:bd:7e: d4:9f:e5:1c:09:49:3b:ce:52:bf:d2:2f:90:8a:48: 65:e0:8b:54:9c:64:88:d9:07:fd:3a:bc:72:ae:ef: 23:47:b4:19:e9:62:d9:98:44:f1:4d:0f:7a:32:45: 21:3c:b6:79:b8:2a:39:10:21:36:41:d0:18:e6:d7: f3:34:af:ab:4a:8c:6c:c7:17:ca:03:71:ad:7c:29: ef:c3:0c:5d:ef:80:f9:a3:f0:a4:e9:4e:b8:0a:dc: 62:01:c6:dc:b6:58:80:69:ff:fe:79:85:cb:cd:52: bf:f1:dd:75:3f:6e:29:b6:70:15:d1:c4:a2:1b:0d: e7:31:d9:ed:2d:37:da:4f:24:f5:c9:d6:25:25:00: 0c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:06:2D:0E:94:C8:41:FA:E7:EF:BA:13:E4:AE:1B:3D:00:19:88:A0 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.169.176.0/21 Signature Algorithm: sha256WithRSAEncryption 1f:b9:5e:d2:7b:f4:35:0a:87:e8:1b:49:1d:ab:8a:2c:44:f3: 08:48:c2:b3:32:c8:b8:8e:be:1c:e9:ed:a9:a0:13:94:52:79: 5c:85:c8:fa:91:70:6c:60:21:6e:db:73:65:d5:b2:2e:19:fc: 6c:66:1c:c6:23:ff:43:77:8a:aa:db:88:47:c1:b1:9e:64:9d: b2:d8:d3:38:7c:60:69:63:ce:93:fd:90:ca:c4:b1:13:57:f3: 27:21:22:c6:e5:50:1b:f7:69:ea:68:67:6b:17:35:96:23:9d: 20:d4:81:c4:18:49:a4:30:66:a4:82:c5:cd:f8:fe:c9:40:a6: 46:f1:d4:13:09:89:73:05:14:c7:6b:6f:8f:bf:73:0c:bd:fe: f1:0e:cb:12:61:c8:a4:20:20:92:56:d3:54:97:2f:18:63:1e: 2b:3d:ea:31:06:05:e1:92:bf:ad:e0:2e:a7:b3:cb:b5:42:c6: 68:ab:9e:0c:87:c8:08:a7:b7:bf:12:89:b1:f6:a5:99:90:02: bc:03:c0:46:e2:41:4b:37:df:0a:8a:d4:4f:2f:50:d8:45:e8: d8:61:78:93:f0:28:fe:b5:2f:3b:6c:f6:7a:7a:8b:88:75:85: 11:a7:98:a4:3b:6a:a6:b3:49:16:d1:3f:ce:47:99:f0:13:80: 06:e0:49:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAjCZrPr7KOgnsW5ho+BsqaDED6MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUxMDE4MDAwMDI0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjdkMmI4OWFhNTgyMzM0YTgwZTZjYjZkMDM5ODU4MGQw OTkwYmRjOGZjOWMyODU2MGU1Mjk0MjY2YTBmM2Q0MS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfUVDFaB69uRA/r5/SJ5AmnMVePs5GR+MAkhtCV+zUoNWR K9/ltj0eiJEqGOzks9s9ffnM6iGa3hjSjl5TKSLiY3InTDZurGvuhpXRZm8nIlx8 niWcSrQlTYSbY6Gmb7vAq0MK4c3/srTaQXjewkavKenE5Xq9ftSf5RwJSTvOUr/S L5CKSGXgi1ScZIjZB/06vHKu7yNHtBnpYtmYRPFND3oyRSE8tnm4KjkQITZB0Bjm 1/M0r6tKjGzHF8oDca18Ke/DDF3vgPmj8KTpTrgK3GIBxty2WIBp//55hcvNUr/x 3XU/bim2cBXRxKIbDecx2e0tN9pPJPXJ1iUlAAxPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2wYtDpTIQfrn77oT5K4bPQAZiKAwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2UzYzg0NmIxLWZiMDAtNGNiNy04MjNkLTNhNThiZWRkNjY1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO4qbAwDQYJKoZIhvcNAQELBQADggEBAB+5XtJ79DUKh+gbSR2riixE8whI wrMyyLiOvhzp7amgE5RSeVyFyPqRcGxgIW7bc2XVsi4Z/GxmHMYj/0N3iqrbiEfB sZ5knbLY0zh8YGljzpP9kMrEsRNX8ychIsblUBv3aepoZ2sXNZYjnSDUgcQYSaQw ZqSCxc34/slApkbx1BMJiXMFFMdrb4+/cwy9/vEOyxJhyKQgIJJW01SXLxhjHis9 6jEGBeGSv63gLqezy7VCxmirngyHyAint78SibH2pZmQArwDwEbiQUs33wqK1E8v UNhF6NhheJPwKP61Lzts9np6i4h1hRGnmKQ7aqazSRbRP85HmfATgAbgSaA= -----END CERTIFICATE-----Generated at Mon Oct 20 18:00:43 2025 by rpki-client