$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d98c3d5a-de07-4648-aa24-9ca3a9c428ce.roa File: d98c3d5a-de07-4648-aa24-9ca3a9c428ce.roa (raw, json) Hash identifier: KYyW3mxf9lBYd5UYWzeofKLg1ri+STQ34s5dtIgLexQ= Subject key identifier: 66:5C:90:70:DA:B2:69:D5:2D:ED:92:FB:D7:34:28:4D:25:C7:02:39 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6FCCC465C2FC9B510FA906651A1ED60A80BE0812 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d98c3d5a-de07-4648-aa24-9ca3a9c428ce.roa Signing time: Fri 26 Sep 2025 16:07:23 +0000 ROA not before: Fri 26 Sep 2025 16:07:23 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 153.49.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cc:c4:65:c2:fc:9b:51:0f:a9:06:65:1a:1e:d6:0a:80:be:08:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 16:07:23 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=dd6a1cb57d8bfe2aa37c9dc1b215d9b157bb24d1a44c1faf5f36d174c112b7e8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5e:f8:78:3a:a4:88:8c:17:86:ca:ec:5b:7c: 52:5a:c3:ce:52:92:d8:12:5f:a5:32:ee:29:7b:72: 0c:84:7f:e5:5f:36:31:b2:84:3b:ce:5e:43:9e:ad: 10:4d:30:c3:18:cd:a2:3d:d1:df:d2:2e:5e:3a:84: eb:80:ce:61:9c:75:d3:58:1e:2a:72:5d:d6:93:13: eb:73:14:21:2c:50:64:00:2f:b6:40:cf:10:c7:0f: 1e:74:58:df:ee:d8:3f:ff:3a:f6:11:cd:82:44:08: 30:1c:d1:3e:50:e0:ca:47:ff:09:b4:ea:4a:fb:0b: 7d:22:b1:27:ba:bd:0e:ab:cd:41:4e:6a:97:58:4a: bb:96:f8:18:03:1e:f2:ae:89:f5:63:2e:dc:7f:23: f0:95:79:18:c8:2d:84:59:74:bf:9c:35:fd:f9:3a: 51:79:01:b5:28:d4:9d:64:25:a6:a9:72:11:15:40: bb:05:d6:c9:51:0b:52:43:a9:b4:0e:bb:30:53:6f: 0e:d1:be:d4:ff:5c:9f:ed:cd:d8:10:7e:71:f6:05: 68:6e:9e:bf:21:2e:ce:ee:cb:ec:01:cb:a2:d5:9c: 73:a1:d0:d0:73:42:25:61:90:43:5e:f3:65:9d:8c: 70:20:a2:fd:d8:f2:a2:64:67:83:3c:5f:66:1a:ee: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5C:90:70:DA:B2:69:D5:2D:ED:92:FB:D7:34:28:4D:25:C7:02:39 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d98c3d5a-de07-4648-aa24-9ca3a9c428ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.49.0.0/16 Signature Algorithm: sha256WithRSAEncryption 83:c6:b1:00:b1:5c:7e:03:50:2d:f3:c0:8a:a2:ff:88:3f:8c: ac:2f:ea:c9:3b:41:46:d8:eb:d8:de:5f:d8:16:3a:cc:c6:69: e2:8a:87:62:c7:a1:96:13:1f:1b:55:8d:80:1e:82:49:88:c6: b5:13:13:22:26:72:0d:ca:69:3c:d3:85:bb:f0:46:42:03:a6: c8:c6:7e:83:5c:f8:b9:05:92:83:3d:29:70:db:0c:12:24:f5: de:7d:d6:44:cc:de:1d:56:ba:58:a4:88:98:78:92:24:7a:19: 97:60:0a:18:96:cc:ec:2d:80:d6:af:de:6d:40:d9:e2:07:44: af:fe:c0:1e:03:ca:25:ad:34:3d:bb:e0:2e:18:8d:0f:11:d5: a5:ed:d5:7a:cf:0f:2e:53:1f:7a:74:31:f9:4a:eb:7a:e8:df: 39:d2:07:98:80:52:49:3f:ca:00:a9:5d:2d:b0:73:5c:ec:8e: 7d:57:e7:bf:66:f4:f8:0b:2d:d0:50:7c:96:9a:f0:e0:f2:98: 7e:26:9a:7e:de:67:57:0a:3d:fe:44:f8:d0:0c:7f:40:c6:74: f8:bc:da:89:97:cd:cb:18:59:de:e4:82:3f:cc:a6:71:1d:46: ff:4a:92:6f:34:6e:11:ab:19:60:28:34:52:52:cf:b5:9b:eb: f8:0e:50:8d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUb8zEZcL8m1EPqQZlGh7WCoC+CBIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTYwNzIzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDZhMWNiNTdkOGJmZTJhYTM3YzlkYzFiMjE1ZDliMTU3 YmIyNGQxYTQ0YzFmYWY1ZjM2ZDE3NGMxMTJiN2U4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlXvh4OqSIjBeGyuxbfFJaw85SktgSX6Uy7il7cgyEf+Vf NjGyhDvOXkOerRBNMMMYzaI90d/SLl46hOuAzmGcddNYHipyXdaTE+tzFCEsUGQA L7ZAzxDHDx50WN/u2D//OvYRzYJECDAc0T5Q4MpH/wm06kr7C30isSe6vQ6rzUFO apdYSruW+BgDHvKuifVjLtx/I/CVeRjILYRZdL+cNf35OlF5AbUo1J1kJaapchEV QLsF1slRC1JDqbQOuzBTbw7RvtT/XJ/tzdgQfnH2BWhunr8hLs7uy+wBy6LVnHOh 0NBzQiVhkENe82WdjHAgov3Y8qJkZ4M8X2Ya7sPnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZlyQcNqyadUt7ZL71zQoTSXHAjkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q5OGMzZDVhLWRlMDctNDY0OC1hYTI0LTljYTNhOWM0MjhjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCZMTANBgkqhkiG9w0BAQsFAAOCAQEAg8axALFcfgNQLfPAiqL/iD+MrC/q yTtBRtjr2N5f2BY6zMZp4oqHYsehlhMfG1WNgB6CSYjGtRMTIiZyDcppPNOFu/BG QgOmyMZ+g1z4uQWSgz0pcNsMEiT13n3WRMzeHVa6WKSImHiSJHoZl2AKGJbM7C2A 1q/ebUDZ4gdEr/7AHgPKJa00PbvgLhiNDxHVpe3Ves8PLlMfenQx+UrreujfOdIH mIBSST/KAKldLbBzXOyOfVfnv2b0+Ast0FB8lprw4PKYfiaaft5nVwo9/kT40Ax/ QMZ0+LzaiZfNyxhZ3uSCP8ymcR1G/0qSbzRuEasZYCg0UlLPtZvr+A5QjQ== -----END CERTIFICATE-----Generated at Mon Oct 20 05:59:24 2025 by rpki-client