$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b41bcfb9-e546-4587-be53-f1531fe71679.roa File: b41bcfb9-e546-4587-be53-f1531fe71679.roa (raw, json) Hash identifier: 6GlE0fHkyKELm/bSLaFQtMOpntu4AuKEWtpZJbZrSKc= Subject key identifier: 67:FD:B4:E0:88:70:30:EF:4E:7E:1A:19:76:56:6B:F2:1A:E2:F1:BD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 73589C45093A85B476B330CCF25D4CCD399BD22D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b41bcfb9-e546-4587-be53-f1531fe71679.roa Signing time: Thu 25 Sep 2025 23:39:39 +0000 ROA not before: Thu 25 Sep 2025 23:39:39 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:58:9c:45:09:3a:85:b4:76:b3:30:cc:f2:5d:4c:cd:39:9b:d2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:39:39 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c99b911bd1a5dd016aef3ae58acfebfa7dca232e7689206d64198f995ddc8d91, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2a:0d:c1:29:03:80:ae:40:a6:f8:e8:90:ec: 1b:50:5d:f1:e8:d5:99:fd:17:d9:1e:74:b9:3b:5a: ae:c3:36:12:d1:4a:73:86:5f:0c:1f:bd:0e:be:6b: b6:36:0f:64:11:dc:21:a9:0b:ca:c5:84:ec:8f:29: 6d:23:fb:ee:9b:26:ea:5e:89:af:e6:8a:a9:99:7c: 5f:f5:da:84:8c:c1:8f:f3:96:59:7e:7d:49:7f:54: 46:9a:f3:89:6f:c5:b1:bd:3b:44:80:5c:ae:18:f9: 86:4f:88:68:26:ac:0f:81:d0:23:52:cd:31:9b:07: ab:9f:b0:18:89:d5:03:7d:7d:14:bd:8c:cb:20:1b: 64:e5:8c:1d:a3:54:76:d3:92:17:a5:8f:1a:d5:4c: d8:74:8e:11:d2:13:e3:74:32:78:73:3e:d5:2d:5a: eb:e4:c5:dd:d5:47:5e:9c:24:9d:0a:c1:a3:48:35: 17:04:86:51:ba:a3:a3:88:aa:f1:91:6d:d0:7e:e4: 7c:5d:29:0d:e7:f6:ef:93:23:1d:0b:56:ea:d6:9c: 8a:f2:4f:b9:7a:96:b0:82:1a:22:51:e0:01:85:e7: e3:93:42:50:99:fb:74:56:74:f1:d5:b3:a2:88:c1: 45:0f:ec:74:79:fc:ad:46:6d:2a:0f:d3:fc:ec:36: d1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FD:B4:E0:88:70:30:EF:4E:7E:1A:19:76:56:6B:F2:1A:E2:F1:BD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b41bcfb9-e546-4587-be53-f1531fe71679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.242.0/23 Signature Algorithm: sha256WithRSAEncryption 05:71:fc:d3:04:c3:b8:e5:5e:f3:3c:9e:7f:f9:60:13:f7:36: 6a:13:e0:a2:88:b0:21:77:8a:87:05:cb:f8:7e:61:26:aa:19: 9b:ae:0a:55:b1:42:9d:cf:4a:95:00:86:dd:88:96:9f:e6:e1: 6a:d6:41:bb:92:8b:35:bf:9a:cf:6b:07:7b:5a:1b:8d:4f:92: 48:b4:f5:10:a7:71:c8:12:e8:ce:0a:9c:42:6f:ce:01:c8:05: 77:53:3a:41:c1:41:2d:d7:f4:d5:7f:5e:9a:73:0b:eb:d1:b7: 9e:80:c7:33:f0:81:80:2a:9f:7d:b0:e4:f1:2c:14:8d:61:be: 96:5d:5a:ac:a9:a5:92:5f:2a:54:89:d3:98:5a:0d:7c:ea:c1: bd:eb:86:83:f1:f7:c7:14:84:23:d6:3a:c3:18:d1:a0:b6:58: d4:94:b0:84:02:b2:21:77:13:c9:65:2f:41:1b:35:3e:2d:58: c5:19:2b:22:8d:69:e4:1f:df:68:52:44:7d:10:66:75:ec:b0: 47:15:b6:31:f3:b6:23:63:81:95:22:87:91:61:05:97:f8:3c: 67:cc:8e:7a:ef:6e:0f:e1:88:39:f7:99:a6:4e:a4:15:16:3c: 5d:da:1d:17:0c:b5:36:86:a4:f0:b3:45:fc:09:04:8e:7b:3f: f8:e3:11:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc1icRQk6hbR2szDM8l1MzTmb0i0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMzOTM5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTliOTExYmQxYTVkZDAxNmFlZjNhZTU4YWNmZWJmYTdk Y2EyMzJlNzY4OTIwNmQ2NDE5OGY5OTVkZGM4ZDkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQKg3BKQOArkCm+OiQ7BtQXfHo1Zn9F9kedLk7Wq7DNhLR SnOGXwwfvQ6+a7Y2D2QR3CGpC8rFhOyPKW0j++6bJupeia/miqmZfF/12oSMwY/z lll+fUl/VEaa84lvxbG9O0SAXK4Y+YZPiGgmrA+B0CNSzTGbB6ufsBiJ1QN9fRS9 jMsgG2TljB2jVHbTkheljxrVTNh0jhHSE+N0MnhzPtUtWuvkxd3VR16cJJ0KwaNI NRcEhlG6o6OIqvGRbdB+5HxdKQ3n9u+TIx0LVurWnIryT7l6lrCCGiJR4AGF5+OT QlCZ+3RWdPHVs6KIwUUP7HR5/K1GbSoP0/zsNtFbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ/204IhwMO9OfhoZdlZr8hri8b0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I0MWJjZmI5LWU1NDYtNDU4Ny1iZTUzLWYxNTMxZmU3MTY3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrvIwDQYJKoZIhvcNAQELBQADggEBAAVx/NMEw7jlXvM8nn/5YBP3NmoT 4KKIsCF3iocFy/h+YSaqGZuuClWxQp3PSpUAht2Ilp/m4WrWQbuSizW/ms9rB3ta G41Pkki09RCnccgS6M4KnEJvzgHIBXdTOkHBQS3X9NV/XppzC+vRt56AxzPwgYAq n32w5PEsFI1hvpZdWqyppZJfKlSJ05haDXzqwb3rhoPx98cUhCPWOsMY0aC2WNSU sIQCsiF3E8llL0EbNT4tWMUZKyKNaeQf32hSRH0QZnXssEcVtjHztiNjgZUih5Fh BZf4PGfMjnrvbg/hiDn3maZOpBUWPF3aHRcMtTaGpPCzRfwJBI57P/jjERQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:17 2025 by rpki-client