$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6e4dd17-e25c-4f16-b2b8-e27a9283bf0c.roa File: d6e4dd17-e25c-4f16-b2b8-e27a9283bf0c.roa (raw, json) Hash identifier: ElcqIszWXUvTEo7ZPhroPZwM4quanfdXC5FoxSe32rk= Subject key identifier: 41:ED:5E:9E:06:58:9F:65:B8:8A:4E:18:05:F6:E7:36:DA:D7:9A:69 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 10A542FCE4AB54CD9339A9020833A543651A29C1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6e4dd17-e25c-4f16-b2b8-e27a9283bf0c.roa Signing time: Mon 20 Oct 2025 10:22:28 +0000 ROA not before: Mon 20 Oct 2025 10:22:28 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a5:42:fc:e4:ab:54:cd:93:39:a9:02:08:33:a5:43:65:1a:29:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 10:22:28 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=3cd21c1ecfe2958c8dd660a3da75ed0dd4b97a2895fc1baf3a5b59d11136bd1e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:af:51:a5:e2:44:2c:c1:23:86:6d:fb:09: 86:9e:7a:ae:a3:7f:ac:b8:be:a5:c5:e0:ee:5b:2b: bb:94:f7:fa:83:95:1a:2e:54:54:04:72:ab:d5:84: 30:2c:d5:99:57:11:b3:d7:73:1e:bb:db:95:53:15: c2:d0:f2:5c:07:2f:c9:35:b1:71:52:07:b4:0c:ff: 99:69:7f:32:ef:20:02:af:c6:d2:f0:94:d9:61:14: 4b:e4:7c:7c:0b:f1:77:66:36:6d:12:52:4b:21:04: 15:26:f2:2e:c5:8b:50:86:2a:fc:68:92:16:70:b5: a4:2d:10:a0:80:db:dd:6a:b2:e3:3a:2a:cd:06:c1: 56:81:eb:42:c6:28:c7:25:1b:49:c4:db:9a:3a:bf: 99:f7:f4:b4:e6:33:14:d4:eb:04:95:a7:20:99:31: b4:b1:71:59:94:fd:83:cf:e7:98:27:0f:6f:70:87: 20:d9:96:cd:ff:bc:e8:41:26:5f:a7:6b:7f:b6:9a: 3a:7b:20:75:44:be:e3:6b:59:1e:2a:78:5a:3a:4c: 72:25:91:47:51:a3:fc:7f:bd:0b:4b:a9:a0:b1:f7: e4:46:c7:96:fa:89:03:de:12:b3:81:3d:3f:18:cf: bb:4f:56:64:62:6e:28:f2:b7:ff:a6:ce:79:e8:10: 82:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:ED:5E:9E:06:58:9F:65:B8:8A:4E:18:05:F6:E7:36:DA:D7:9A:69 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6e4dd17-e25c-4f16-b2b8-e27a9283bf0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.20.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:37:be:a8:27:31:60:61:92:e2:f8:6c:2a:e3:ba:b4:df:8d: f5:fa:51:80:56:74:ce:3e:31:e4:8b:dd:35:8b:b2:5f:04:0e: e7:59:ef:9e:a3:38:27:5e:7f:1a:1f:c1:52:68:e7:5d:ae:74: 3d:ab:10:71:7f:17:86:1f:3c:23:d1:cf:da:b2:21:3a:c6:fa: 1d:c0:be:3c:91:16:e1:e7:c2:e1:c2:fd:1a:e0:1a:c7:4b:be: 91:32:f5:6d:ed:30:b0:16:86:81:13:41:d9:b3:9e:b2:72:7b: 34:71:4b:ab:f4:94:ca:61:b7:9f:9f:41:2e:a1:85:42:2d:bb: df:de:33:45:ba:46:f2:16:b0:1e:72:57:57:b7:93:38:43:c1: 5c:6c:dc:13:c9:f2:b7:06:da:f6:3f:3a:11:49:30:96:9c:58: ef:fc:8e:e6:f4:df:d0:f7:f6:bb:a8:8d:a3:39:54:8d:c5:97: 91:38:9e:90:4b:71:ce:2f:8c:3e:dd:ed:60:57:d7:d8:be:24: 89:45:c6:53:ec:f7:68:23:d3:dc:82:b2:c5:6f:ce:88:51:7f: 51:c8:a9:98:93:50:fb:71:2c:36:a0:f1:6a:fc:a1:21:23:c8: f5:90:c2:29:d7:8e:db:85:b9:ef:73:26:29:85:22:8a:1b:7a: c6:ce:7a:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEKVC/OSrVM2TOakCCDOlQ2UaKcEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMTAyMjI4WhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzY2QyMWMxZWNmZTI5NThjOGRkNjYwYTNkYTc1ZWQwZGQ0 Yjk3YTI4OTVmYzFiYWYzYTViNTlkMTExMzZiZDFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC14q9RpeJELMEjhm37CYaeeq6jf6y4vqXF4O5bK7uU9/qD lRouVFQEcqvVhDAs1ZlXEbPXcx6725VTFcLQ8lwHL8k1sXFSB7QM/5lpfzLvIAKv xtLwlNlhFEvkfHwL8XdmNm0SUkshBBUm8i7Fi1CGKvxokhZwtaQtEKCA291qsuM6 Ks0GwVaB60LGKMclG0nE25o6v5n39LTmMxTU6wSVpyCZMbSxcVmU/YPP55gnD29w hyDZls3/vOhBJl+na3+2mjp7IHVEvuNrWR4qeFo6THIlkUdRo/x/vQtLqaCx9+RG x5b6iQPeErOBPT8Yz7tPVmRibijyt/+mznnoEIIhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQe1engZYn2W4ik4YBfbnNtrXmmkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q2ZTRkZDE3LWUyNWMtNGYxNi1iMmI4LWUyN2E5MjgzYmYwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqBQwDQYJKoZIhvcNAQELBQADggEBAGs3vqgnMWBhkuL4bCrjurTfjfX6 UYBWdM4+MeSL3TWLsl8EDudZ756jOCdefxofwVJo512udD2rEHF/F4YfPCPRz9qy ITrG+h3AvjyRFuHnwuHC/RrgGsdLvpEy9W3tMLAWhoETQdmznrJyezRxS6v0lMph t5+fQS6hhUItu9/eM0W6RvIWsB5yV1e3kzhDwVxs3BPJ8rcG2vY/OhFJMJacWO/8 jub039D39ruojaM5VI3Fl5E4npBLcc4vjD7d7WBX19i+JIlFxlPs92gj09yCssVv zohRf1HIqZiTUPtxLDag8Wr8oSEjyPWQwinXjtuFue9zJimFIoobesbOen4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:21:28 2025 by rpki-client