$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0f55159-0398-4eea-82db-57f14c119487.roa File: e0f55159-0398-4eea-82db-57f14c119487.roa (raw, json) Hash identifier: oDg8asLuuCAn1NMCPlBZLpuAHGFtmr9KakMvSwkt84U= Subject key identifier: 60:B4:6A:82:15:ED:FB:73:D2:9F:BA:EF:66:61:5C:78:84:E8:F1:CF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24C1DD070E31B7699EA349F55C2305359F611482 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0f55159-0398-4eea-82db-57f14c119487.roa Signing time: Thu 25 Sep 2025 20:42:22 +0000 ROA not before: Thu 25 Sep 2025 20:42:22 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c1:dd:07:0e:31:b7:69:9e:a3:49:f5:5c:23:05:35:9f:61:14:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:42:22 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c7ff179af9c8177e8c0a484a7720442e156e01b90d9c4bdb8bc12ae4794de7d1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:4e:63:7d:c7:e5:74:34:5e:df:2c:71:8b: 65:0b:6e:4d:a4:f5:ef:82:bc:ea:7e:b1:51:04:d2: ea:b5:c3:dd:f8:43:12:34:79:f0:ab:ff:33:b7:43: 9f:7a:5b:30:6b:50:4a:05:90:1b:d8:30:85:31:47: 92:c0:60:9f:ef:a5:43:12:64:b5:6b:42:a0:7e:94: de:99:df:bd:c9:b7:8d:78:85:85:03:6d:91:50:0c: 60:05:83:74:36:25:f5:7c:fa:2b:54:26:b9:ee:94: 74:e0:ef:ba:10:85:f8:50:d9:47:d2:82:f9:66:a3: 78:72:79:c9:62:c2:0e:94:6b:68:4e:e2:53:ca:82: 00:49:55:bd:7d:4c:08:50:98:4e:2f:9c:99:c9:c1: ac:e0:3e:18:90:03:3c:94:96:79:be:3e:11:4a:a6: 89:48:3b:8c:f9:7e:ba:f2:4a:a3:65:b9:45:7f:74: e7:ba:5c:b7:34:c0:d6:dd:fa:b1:fe:36:8c:44:29: 30:2c:28:9b:a4:da:de:92:90:a7:75:c3:c8:10:7f: 4c:70:e0:a0:53:03:fc:5b:3a:c6:7a:df:56:44:44: 24:1f:b8:e9:93:e7:fc:20:c8:b0:37:83:d1:35:b4: 31:89:28:53:58:0b:84:32:e1:9d:07:46:a7:60:8e: e1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B4:6A:82:15:ED:FB:73:D2:9F:BA:EF:66:61:5C:78:84:E8:F1:CF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0f55159-0398-4eea-82db-57f14c119487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.29.0/24 Signature Algorithm: sha256WithRSAEncryption 06:75:9a:2d:b9:9d:55:f6:12:b1:29:e2:33:6b:ce:1c:62:b6: ec:da:07:f0:0a:3a:f3:c3:ab:bc:c7:ec:dd:d7:0b:5e:e1:e2: fe:2f:ee:28:9e:64:f4:f9:5f:f7:60:7e:f2:b2:09:e1:58:a2: 82:59:39:80:9b:c8:41:09:18:c1:cc:54:99:8f:3f:85:2e:71: 5f:47:91:00:1d:26:38:49:76:ac:16:47:7e:35:77:03:0c:42: a8:f9:54:3b:44:f7:27:ad:88:df:06:85:2f:b4:23:00:34:a8: e6:e3:e4:6c:c8:8c:dc:66:cf:01:3d:17:53:fa:ca:86:f1:f6: f7:cd:3d:8f:dc:f8:93:b2:79:97:a0:69:04:0c:6b:d6:92:4e: 8e:75:30:cf:d9:85:14:7b:ef:c6:4b:75:03:67:bf:f6:c6:d3: 48:4b:d0:8b:f6:57:04:69:60:d6:55:1b:27:4b:ac:ef:ca:8d: 36:87:50:e9:a2:80:50:9c:74:95:29:9e:bd:02:fc:3f:27:f4: e9:e3:67:db:fe:ea:9a:bf:bd:bb:b2:79:d5:a0:3d:53:c9:a3: a1:01:cf:cc:e9:93:09:a3:b7:f7:9f:2c:aa:dc:5b:f4:83:03: 9b:03:3b:72:b6:88:a3:08:7f:13:e3:22:55:c8:3a:cb:33:9e: 97:5e:b3:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJMHdBw4xt2meo0n1XCMFNZ9hFIIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjA0MjIyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2ZmMTc5YWY5YzgxNzdlOGMwYTQ4NGE3NzIwNDQyZTE1 NmUwMWI5MGQ5YzRiZGI4YmMxMmFlNDc5NGRlN2QxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7Lk5jfcfldDRe3yxxi2ULbk2k9e+CvOp+sVEE0uq1w934 QxI0efCr/zO3Q596WzBrUEoFkBvYMIUxR5LAYJ/vpUMSZLVrQqB+lN6Z373Jt414 hYUDbZFQDGAFg3Q2JfV8+itUJrnulHTg77oQhfhQ2UfSgvlmo3hyecliwg6Ua2hO 4lPKggBJVb19TAhQmE4vnJnJwazgPhiQAzyUlnm+PhFKpolIO4z5frrySqNluUV/ dOe6XLc0wNbd+rH+NoxEKTAsKJuk2t6SkKd1w8gQf0xw4KBTA/xbOsZ631ZERCQf uOmT5/wgyLA3g9E1tDGJKFNYC4Qy4Z0HRqdgjuFJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYLRqghXt+3PSn7rvZmFceITo8c8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UwZjU1MTU5LTAzOTgtNGVlYS04MmRiLTU3ZjE0YzExOTQ4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrR0wDQYJKoZIhvcNAQELBQADggEBAAZ1mi25nVX2ErEp4jNrzhxituza B/AKOvPDq7zH7N3XC17h4v4v7iieZPT5X/dgfvKyCeFYooJZOYCbyEEJGMHMVJmP P4UucV9HkQAdJjhJdqwWR341dwMMQqj5VDtE9yetiN8GhS+0IwA0qObj5GzIjNxm zwE9F1P6yobx9vfNPY/c+JOyeZegaQQMa9aSTo51MM/ZhRR778ZLdQNnv/bG00hL 0Iv2VwRpYNZVGydLrO/KjTaHUOmigFCcdJUpnr0C/D8n9OnjZ9v+6pq/vbuyedWg PVPJo6EBz8zpkwmjt/efLKrcW/SDA5sDO3K2iKMIfxPjIlXIOssznpdesxc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:55 2025 by rpki-client