$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bcab9c10-19e9-4970-97a5-78d929529faf.roa File: bcab9c10-19e9-4970-97a5-78d929529faf.roa (raw, json) Hash identifier: fHMeTOfCoYK10SrBvtAONC3pujV23PYTmunA2bFuwAk= Subject key identifier: FF:00:CB:2A:1A:9B:15:33:7C:3D:15:4D:09:F8:D8:C3:6C:58:85:14 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6F9908BC66D9800C5DCA57FB9633AC87100EF9F9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bcab9c10-19e9-4970-97a5-78d929529faf.roa Signing time: Thu 25 Sep 2025 22:56:54 +0000 ROA not before: Thu 25 Sep 2025 22:56:54 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:99:08:bc:66:d9:80:0c:5d:ca:57:fb:96:33:ac:87:10:0e:f9:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:56:54 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=85a076e54c6d6ab1db1610eccf92f4ed9aa4369aabb0e476e87a7d8977d29269, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:98:d7:03:17:f9:1c:0f:6f:d9:5a:5b:02:1b: f5:16:46:6b:82:fa:d6:3f:29:26:7d:d3:3b:58:8e: 97:b2:83:ff:a9:68:81:f6:59:7a:96:8d:37:02:0d: e5:06:1a:2c:bd:66:29:c0:78:f3:8d:b0:3d:c6:10: f5:78:e6:75:23:ec:ca:8a:9f:51:c9:46:ff:0d:20: d2:3f:07:2f:56:98:a7:82:d4:49:aa:84:ff:4c:8b: ce:82:31:68:78:d6:74:be:10:af:e2:0a:43:7f:04: 26:60:9f:8c:c3:e2:18:2d:d8:cc:bc:f5:ad:1a:be: 2f:fc:94:95:b0:5e:f9:33:6c:16:3f:24:39:22:1f: 27:58:35:40:8e:e0:a1:71:58:af:4f:b9:16:0b:e7: 4f:4c:51:7a:f2:2e:92:a2:ec:30:e5:ed:d4:33:a1: 54:7f:37:23:75:65:31:c0:c3:78:4c:3c:52:33:5a: 02:17:f0:c5:c2:f1:59:c3:8d:f7:8e:70:c4:19:46: 2b:bb:61:bc:73:f9:79:71:ee:71:71:e1:9f:1d:52: 61:d9:9e:c3:cc:69:ad:09:7d:a9:b7:91:a4:14:21: 9c:e1:9d:96:5e:70:ab:ba:33:31:b2:1c:e5:30:61: cc:0a:d3:0f:55:5d:12:93:d2:dc:b0:06:4e:ce:56: 96:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:00:CB:2A:1A:9B:15:33:7C:3D:15:4D:09:F8:D8:C3:6C:58:85:14 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bcab9c10-19e9-4970-97a5-78d929529faf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.40.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:2a:52:a9:eb:50:a5:16:a5:c1:1e:60:a6:b2:ff:c3:e1:fe: a0:95:f1:7a:71:0e:00:7a:1d:bb:29:0e:c6:50:a7:4f:2b:d6: df:19:e5:7c:15:c3:e1:85:7a:d5:df:41:da:f6:70:5d:25:0f: 52:5c:df:46:be:39:7a:36:e3:38:59:0f:e7:92:4e:6a:02:49: 64:f0:b9:63:69:c4:40:06:2f:92:0b:9e:fa:6c:7d:b8:3f:84: 99:2c:8d:ef:cd:e8:f3:26:4f:01:bd:97:d0:db:c5:27:7c:89: f7:89:ba:6f:e4:74:8f:65:99:6c:0e:cd:da:4d:ec:69:9e:89: 02:fc:dc:3b:86:ea:d9:68:f4:16:41:85:2c:72:8e:db:c8:7d: 7b:47:6d:74:e7:0d:86:a7:25:a7:ab:f6:6f:46:75:46:a4:cd: da:5f:bf:4c:ca:c4:e5:c7:fd:3d:3e:6e:62:ef:7c:c2:aa:fa: 22:3d:f3:f7:43:86:90:5c:6d:d4:6c:5c:82:a1:a0:50:5b:dc: 1e:e9:3f:99:a2:5e:6e:a3:fa:e3:75:41:ca:8d:a7:73:ab:48: 31:7f:57:2b:3a:d4:ac:80:63:ac:71:71:19:44:46:f6:6a:da: dd:e8:17:97:71:71:b3:c0:6e:ec:37:ec:5e:01:e3:1f:c9:84: 22:4d:13:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb5kIvGbZgAxdylf7ljOshxAO+fkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjI1NjU0WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWEwNzZlNTRjNmQ2YWIxZGIxNjEwZWNjZjkyZjRlZDlh YTQzNjlhYWJiMGU0NzZlODdhN2Q4OTc3ZDI5MjY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVmNcDF/kcD2/ZWlsCG/UWRmuC+tY/KSZ90ztYjpeyg/+p aIH2WXqWjTcCDeUGGiy9ZinAePONsD3GEPV45nUj7MqKn1HJRv8NINI/By9WmKeC 1EmqhP9Mi86CMWh41nS+EK/iCkN/BCZgn4zD4hgt2My89a0avi/8lJWwXvkzbBY/ JDkiHydYNUCO4KFxWK9PuRYL509MUXryLpKi7DDl7dQzoVR/NyN1ZTHAw3hMPFIz WgIX8MXC8VnDjfeOcMQZRiu7Ybxz+Xlx7nFx4Z8dUmHZnsPMaa0Jfam3kaQUIZzh nZZecKu6MzGyHOUwYcwK0w9VXRKT0tywBk7OVpajAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/wDLKhqbFTN8PRVNCfjYw2xYhRQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JjYWI5YzEwLTE5ZTktNDk3MC05N2E1LTc4ZDkyOTUyOWZhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqSgwDQYJKoZIhvcNAQELBQADggEBAFwqUqnrUKUWpcEeYKay/8Ph/qCV 8XpxDgB6HbspDsZQp08r1t8Z5XwVw+GFetXfQdr2cF0lD1Jc30a+OXo24zhZD+eS TmoCSWTwuWNpxEAGL5ILnvpsfbg/hJksje/N6PMmTwG9l9DbxSd8ifeJum/kdI9l mWwOzdpN7GmeiQL83DuG6tlo9BZBhSxyjtvIfXtHbXTnDYanJaer9m9GdUakzdpf v0zKxOXH/T0+bmLvfMKq+iI98/dDhpBcbdRsXIKhoFBb3B7pP5miXm6j+uN1QcqN p3OrSDF/Vys61KyAY6xxcRlERvZq2t3oF5dxcbPAbuw37F4B4x/JhCJNE3U= -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:38 2025 by rpki-client