$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6cc97ff-1a62-4c62-a86f-484dba576c80.roa File: e6cc97ff-1a62-4c62-a86f-484dba576c80.roa (raw, json) Hash identifier: YLXta0DBiaDSJX+mTUtGnETbUOWdeRQJzpoV6Xv39uc= Subject key identifier: 31:05:4D:7D:F1:3B:24:07:70:23:53:8C:22:BD:2A:55:78:78:3B:6E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40A3986ECF9F83566021103B208C0ADCDB316CDA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6cc97ff-1a62-4c62-a86f-484dba576c80.roa Signing time: Fri 26 Sep 2025 01:01:55 +0000 ROA not before: Fri 26 Sep 2025 01:01:55 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a3:98:6e:cf:9f:83:56:60:21:10:3b:20:8c:0a:dc:db:31:6c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:01:55 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=82c9de1d5973ea53105bb8d204a64caa963309740abf6a3103cf9094ebb81ef7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f0:28:a3:85:74:c6:d5:e2:ba:ae:71:24:df: c3:60:ad:56:82:bb:fe:c0:18:c9:05:57:d7:8c:48: 63:4b:25:e6:7f:5d:eb:10:63:aa:b3:93:16:cd:3d: 4a:8a:dd:0b:c6:bb:ab:c1:fa:5e:35:4f:c9:cb:6a: 9a:94:5f:a9:48:6c:eb:d4:83:b4:ee:1d:b8:af:fc: 45:f1:9a:11:d6:89:0a:49:c4:0d:33:d1:2c:9f:fa: 03:4d:26:68:23:fe:bb:2c:d5:85:de:cb:f2:33:b9: aa:41:f3:80:8f:e1:10:65:4c:05:b7:27:44:35:a2: 5b:1c:7d:04:9e:ea:23:84:1a:dd:45:d5:63:49:e3: 49:b8:9b:70:2e:d9:02:41:6f:af:df:12:48:c5:41: 60:e5:b8:1d:ed:e2:20:73:5d:2c:89:42:fc:c0:36: a5:9c:e1:b9:c1:ea:d9:fb:3c:74:a7:c4:44:3b:3f: 16:06:1a:aa:63:82:66:fb:14:cf:25:c5:04:a4:5f: d1:73:20:26:a1:fe:db:0e:f7:3b:27:7b:f2:24:95: 5f:15:60:44:f5:f2:45:9a:bc:5f:b8:89:26:6f:2f: bf:17:59:65:0a:f7:97:d0:dc:bb:da:17:13:43:39: bc:3c:2b:d9:10:6c:e2:ff:5b:3a:33:96:c6:c5:c0: d6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:05:4D:7D:F1:3B:24:07:70:23:53:8C:22:BD:2A:55:78:78:3B:6E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6cc97ff-1a62-4c62-a86f-484dba576c80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.152.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:b8:8e:66:90:fa:5a:84:9e:61:57:41:ca:04:55:7a:81:26: 07:bc:3c:9c:52:98:44:de:ff:a7:ab:bb:09:cd:1d:f6:60:fe: 91:44:df:e5:56:54:b6:4c:01:63:fb:74:fe:15:e8:5a:f0:3f: 88:3b:a9:b7:cc:e0:cb:2c:43:75:55:ef:2c:97:a8:20:d8:13: 30:b2:8b:1e:13:a7:0f:8e:84:20:2b:30:85:92:43:35:06:1e: 1f:f8:88:df:d4:11:d6:45:8f:cc:47:18:17:79:03:c7:0b:5c: 52:24:5f:28:9e:49:23:d3:45:38:c9:50:65:71:b7:2e:94:64: 1b:ee:39:b0:1f:e4:53:24:9e:0c:45:c7:b7:cf:4b:87:dc:42: 58:c3:3e:21:5c:eb:f5:65:31:1a:bb:75:b3:ed:98:47:0f:14: d7:10:6e:5b:43:6a:33:66:2d:60:82:37:31:fc:f4:5d:de:20: 7b:19:90:3c:ae:e5:90:6a:08:87:68:32:12:3b:8f:95:3a:dd: 30:01:f4:cf:f5:dd:b8:c5:6b:6f:f4:c6:99:5f:8b:35:b9:bc: 2c:b4:0d:6e:48:5a:1d:f8:c1:1b:6e:b3:91:57:38:93:ed:38: b3:2a:3d:66:23:52:2e:39:80:7c:63:4e:98:04:39:ab:f7:c9: eb:99:5c:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQKOYbs+fg1ZgIRA7IIwK3NsxbNowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEwMTU1WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MmM5ZGUxZDU5NzNlYTUzMTA1YmI4ZDIwNGE2NGNhYTk2 MzMwOTc0MGFiZjZhMzEwM2NmOTA5NGViYjgxZWY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF8CijhXTG1eK6rnEk38NgrVaCu/7AGMkFV9eMSGNLJeZ/ XesQY6qzkxbNPUqK3QvGu6vB+l41T8nLapqUX6lIbOvUg7TuHbiv/EXxmhHWiQpJ xA0z0Syf+gNNJmgj/rss1YXey/IzuapB84CP4RBlTAW3J0Q1olscfQSe6iOEGt1F 1WNJ40m4m3Au2QJBb6/fEkjFQWDluB3t4iBzXSyJQvzANqWc4bnB6tn7PHSnxEQ7 PxYGGqpjgmb7FM8lxQSkX9FzICah/tsO9zsne/IklV8VYET18kWavF+4iSZvL78X WWUK95fQ3LvaFxNDObw8K9kQbOL/WzozlsbFwNY/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMQVNffE7JAdwI1OMIr0qVXh4O24wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U2Y2M5N2ZmLTFhNjItNGM2Mi1hODZmLTQ4NGRiYTU3NmM4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDr5gwDQYJKoZIhvcNAQELBQADggEBAH+4jmaQ+lqEnmFXQcoEVXqBJge8 PJxSmETe/6eruwnNHfZg/pFE3+VWVLZMAWP7dP4V6FrwP4g7qbfM4MssQ3VV7yyX qCDYEzCyix4Tpw+OhCArMIWSQzUGHh/4iN/UEdZFj8xHGBd5A8cLXFIkXyieSSPT RTjJUGVxty6UZBvuObAf5FMkngxFx7fPS4fcQljDPiFc6/VlMRq7dbPtmEcPFNcQ bltDajNmLWCCNzH89F3eIHsZkDyu5ZBqCIdoMhI7j5U63TAB9M/13bjFa2/0xplf izW5vCy0DW5IWh34wRtus5FXOJPtOLMqPWYjUi45gHxjTpgEOav3yeuZXIc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:56:10 2025 by rpki-client