$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c058c46-898c-4c06-bc7f-7721dfcbe3f4.roa File: 9c058c46-898c-4c06-bc7f-7721dfcbe3f4.roa (raw, json) Hash identifier: 3puX7QOMyq4YW9LqcOkKbVH0lN2qT9xd709ImZ0H84o= Subject key identifier: EE:CA:DF:4D:D8:3B:CD:6F:EB:90:3A:2F:74:68:03:0A:DB:21:B7:EA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 141869E3713C1BB5E8B31C1D817857310645693F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c058c46-898c-4c06-bc7f-7721dfcbe3f4.roa Signing time: Mon 20 Oct 2025 13:43:39 +0000 ROA not before: Mon 20 Oct 2025 13:43:39 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:18:69:e3:71:3c:1b:b5:e8:b3:1c:1d:81:78:57:31:06:45:69:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 13:43:39 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=8015fc35fdd0ca9d7949f3afd7eeddecc93d3fe62cd363195f7969e4ab7766a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f2:4d:1f:12:e3:2f:26:f3:90:7c:88:a4:c9: d0:a7:84:60:cd:e0:55:63:eb:c2:18:b6:6b:7b:db: fb:41:b9:5b:b7:f4:a3:e2:21:bb:de:d3:2b:44:20: 7a:bf:b5:27:ed:d9:b2:80:0a:d9:f9:2e:01:74:6d: 9b:4c:f2:81:2b:df:25:30:a3:97:a0:01:90:a4:e8: 9f:78:4d:bc:fe:03:84:3f:8c:ac:67:0d:2c:46:bf: b5:24:53:bc:cc:d3:12:18:84:7f:42:10:e9:b5:e2: 76:03:65:fa:04:0e:ef:71:a6:fb:9b:04:1c:37:8f: 3e:0f:93:50:f9:dd:ab:0b:44:c5:05:30:4a:f2:1f: 16:58:b7:f4:b4:d4:7c:69:5c:23:20:fc:ca:b8:d1: 90:d8:2a:7b:af:34:6a:b5:5d:59:4f:a3:41:d5:6b: 7c:39:84:3a:42:fd:09:ad:29:ca:e9:b0:32:b1:69: 7a:e5:c5:de:dd:a0:b7:d1:44:ee:62:88:6e:ad:59: 68:26:ff:40:ae:de:a3:b8:f5:88:bf:c2:8b:78:8b: 92:2a:bb:d2:92:fa:54:f1:f8:d8:ae:90:3e:7f:53: 7c:be:30:bd:4d:6a:46:e2:15:b3:f4:6f:21:7b:a1: 1b:8e:15:28:39:f0:77:c3:45:10:43:01:2e:ff:50: 89:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CA:DF:4D:D8:3B:CD:6F:EB:90:3A:2F:74:68:03:0A:DB:21:B7:EA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c058c46-898c-4c06-bc7f-7721dfcbe3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.222.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:4d:0f:fa:dc:64:14:bf:7d:94:ac:da:89:47:c2:cf:52:7d: 18:99:71:2f:0f:1e:f9:56:28:10:74:81:ba:d8:20:6f:37:b7: 95:8b:eb:49:69:c3:69:d1:54:93:26:e4:9c:4d:3b:f6:ca:a2: f9:4d:c2:1d:84:62:ef:c3:37:6c:8e:56:d1:ec:c8:af:80:07: ac:40:63:8d:93:f3:cc:54:ae:8e:4c:c4:a9:b6:c8:63:41:d9: c8:b7:6a:ca:a5:1c:cb:48:1b:a1:86:17:8e:a5:5f:21:9a:3c: 8a:0d:11:1f:73:8d:7d:6e:f4:d9:dd:35:33:1f:b1:58:6f:df: 1a:26:6a:40:88:6e:25:8a:24:fe:d8:a2:17:e9:04:3f:6a:5d: 94:d9:28:e0:0a:1c:49:fe:18:b2:47:48:01:78:06:6b:52:56: 27:5a:03:65:e3:75:16:f5:42:6d:f2:30:1b:29:a7:c5:24:d3: e0:63:92:90:a3:f4:73:7a:74:e4:55:81:df:1e:af:88:3a:83: 07:81:3b:ac:5f:69:b7:ee:34:75:e9:32:11:11:1b:83:07:01: 3d:ec:e4:26:96:3b:85:70:a3:48:ce:cb:b4:1e:fe:fe:dd:d5: cc:61:c7:29:fd:62:d7:61:53:e4:6d:06:4e:17:34:9a:16:e3: 05:38:fb:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFBhp43E8G7XosxwdgXhXMQZFaT8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMTM0MzM5WhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDE1ZmMzNWZkZDBjYTlkNzk0OWYzYWZkN2VlZGRlY2M5 M2QzZmU2MmNkMzYzMTk1Zjc5NjllNGFiNzc2NmE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCI8k0fEuMvJvOQfIikydCnhGDN4FVj68IYtmt72/tBuVu3 9KPiIbve0ytEIHq/tSft2bKACtn5LgF0bZtM8oEr3yUwo5egAZCk6J94Tbz+A4Q/ jKxnDSxGv7UkU7zM0xIYhH9CEOm14nYDZfoEDu9xpvubBBw3jz4Pk1D53asLRMUF MEryHxZYt/S01HxpXCMg/Mq40ZDYKnuvNGq1XVlPo0HVa3w5hDpC/QmtKcrpsDKx aXrlxd7doLfRRO5iiG6tWWgm/0Cu3qO49Yi/wot4i5Iqu9KS+lTx+NiukD5/U3y+ ML1NakbiFbP0byF7oRuOFSg58HfDRRBDAS7/UIlVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7srfTdg7zW/rkDovdGgDCtsht+owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzljMDU4YzQ2LTg5OGMtNGMwNi1iYzdmLTc3MjFkZmNiZTNmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqN4wDQYJKoZIhvcNAQELBQADggEBAJxND/rcZBS/fZSs2olHws9SfRiZ cS8PHvlWKBB0gbrYIG83t5WL60lpw2nRVJMm5JxNO/bKovlNwh2EYu/DN2yOVtHs yK+AB6xAY42T88xUro5MxKm2yGNB2ci3asqlHMtIG6GGF46lXyGaPIoNER9zjX1u 9NndNTMfsVhv3xomakCIbiWKJP7YohfpBD9qXZTZKOAKHEn+GLJHSAF4BmtSVida A2XjdRb1Qm3yMBspp8Uk0+BjkpCj9HN6dORVgd8er4g6gweBO6xfabfuNHXpMhER G4MHAT3s5CaWO4Vwo0jOy7Qe/v7d1cxhxyn9YtdhU+RtBk4XNJoW4wU4+7M= -----END CERTIFICATE-----Generated at Mon Oct 20 15:45:26 2025 by rpki-client