$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebdb92bb-8286-47ba-8f3f-1a7ef8ac14de.roa File: ebdb92bb-8286-47ba-8f3f-1a7ef8ac14de.roa (raw, json) Hash identifier: XfG3C0/aLABzdztl60IXnkgcQf7eBd16jz+vlm1tpnE= Subject key identifier: C0:79:5B:81:5E:5B:96:D1:76:C9:40:CB:D0:B3:86:AC:A3:96:89:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0CA71543AA98449B34D29B58249764FA4006F83B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebdb92bb-8286-47ba-8f3f-1a7ef8ac14de.roa Signing time: Thu 25 Sep 2025 20:42:35 +0000 ROA not before: Thu 25 Sep 2025 20:42:35 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a7:15:43:aa:98:44:9b:34:d2:9b:58:24:97:64:fa:40:06:f8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:42:35 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=2750cb7d98fe3c4a5d3196a075d1979ba4c757d2f8a44ec498bbe3d355d4323e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:2c:e1:72:06:47:76:eb:30:b6:72:64:88:b0: 6b:78:15:f3:f4:b4:9e:c7:d5:ee:7b:dc:61:3f:3e: 25:41:99:ed:51:ae:16:e1:c5:c8:48:aa:f9:cb:ab: 3a:ae:26:aa:76:82:67:d9:12:c9:1e:ab:23:24:ed: e7:e0:20:a1:d5:a4:00:f7:2a:26:79:7c:b1:b0:90: bd:08:52:13:dd:17:44:8a:e0:dd:54:49:72:88:6d: 15:29:18:8b:8a:e5:10:5a:c2:51:d8:2e:8c:d5:78: 6d:f3:5d:e3:59:7b:3b:7a:04:e8:ce:b3:60:2c:ae: c5:f3:98:f2:c0:1e:61:9b:76:33:f0:d8:70:91:0b: aa:46:97:1c:01:e3:89:de:d8:e9:1e:c7:62:b9:b4: 85:31:f9:38:a5:c1:ab:27:8f:20:b2:7e:6c:e2:c6: 4a:29:a5:7b:d5:ed:4f:72:02:3e:d5:d0:b2:1b:0d: db:2f:64:6f:6a:1a:f3:49:d0:18:9f:32:9d:97:10: 74:10:0c:c0:62:48:db:32:c6:25:ec:b2:77:88:67: f6:bf:00:f3:92:20:b2:39:2f:1b:10:97:1f:d2:95: 04:5e:e2:07:22:61:dc:9c:30:0e:2b:fc:d3:dd:b7: 58:f2:b7:37:d1:e8:7b:6f:b9:27:5e:81:65:a4:a7: e3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:79:5B:81:5E:5B:96:D1:76:C9:40:CB:D0:B3:86:AC:A3:96:89:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebdb92bb-8286-47ba-8f3f-1a7ef8ac14de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.40.0/24 Signature Algorithm: sha256WithRSAEncryption b4:6a:ad:d2:5f:5e:e7:9d:38:52:d3:58:10:cb:29:85:41:3c: 9e:c5:44:2f:26:2d:2e:a6:d1:33:c4:af:fa:05:96:31:c5:76: 90:2d:8b:8b:c5:50:67:b1:a0:ee:43:b4:b4:43:17:ef:af:8f: 44:17:89:7b:1d:52:7f:00:47:a8:3b:b9:23:9a:8e:6c:0d:2b: a0:f4:ec:02:74:76:9d:0b:ff:32:1b:1b:b6:38:9d:35:0e:ff: f0:25:0f:2e:33:7d:f3:06:fd:fa:1a:6e:8b:b0:a9:23:68:95: 7d:84:cd:d9:d8:fd:0f:7e:a1:bc:18:77:1e:a8:15:a3:77:63: 6a:ce:48:b1:b4:97:6c:03:ed:3b:f3:f0:2e:e3:14:e5:51:03: d5:d0:2c:2b:a1:cc:6e:ed:d7:4c:35:34:72:eb:20:e4:f7:d8: 7b:94:40:24:ab:51:64:3c:2c:45:c7:0a:de:fa:68:ab:a3:01: 02:1c:5f:ed:de:88:b8:32:12:1d:9d:c0:79:bf:65:9c:db:8f: 7f:c3:db:c3:49:c0:22:75:c1:b9:ba:7e:e1:8e:5a:a0:ab:b6: 3c:0a:02:e3:1a:3f:11:d8:f3:08:2f:ad:2f:7a:02:63:28:08: 71:cd:11:6a:f7:fd:66:3c:41:87:5e:af:fa:ab:ce:a9:4f:18: 91:41:69:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDKcVQ6qYRJs00ptYJJdk+kAG+DswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjA0MjM1WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzUwY2I3ZDk4ZmUzYzRhNWQzMTk2YTA3NWQxOTc5YmE0 Yzc1N2QyZjhhNDRlYzQ5OGJiZTNkMzU1ZDQzMjNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1LOFyBkd26zC2cmSIsGt4FfP0tJ7H1e573GE/PiVBme1R rhbhxchIqvnLqzquJqp2gmfZEskeqyMk7efgIKHVpAD3KiZ5fLGwkL0IUhPdF0SK 4N1USXKIbRUpGIuK5RBawlHYLozVeG3zXeNZezt6BOjOs2AsrsXzmPLAHmGbdjPw 2HCRC6pGlxwB44ne2Okex2K5tIUx+TilwasnjyCyfmzixkoppXvV7U9yAj7V0LIb DdsvZG9qGvNJ0BifMp2XEHQQDMBiSNsyxiXssneIZ/a/APOSILI5LxsQlx/SlQRe 4gciYdycMA4r/NPdt1jytzfR6HtvuSdegWWkp+NbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwHlbgV5bltF2yUDL0LOGrKOWidAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ViZGI5MmJiLTgyODYtNDdiYS04ZjNmLTFhN2VmOGFjMTRkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrSgwDQYJKoZIhvcNAQELBQADggEBALRqrdJfXuedOFLTWBDLKYVBPJ7F RC8mLS6m0TPEr/oFljHFdpAti4vFUGexoO5DtLRDF++vj0QXiXsdUn8AR6g7uSOa jmwNK6D07AJ0dp0L/zIbG7Y4nTUO//AlDy4zffMG/foabouwqSNolX2EzdnY/Q9+ obwYdx6oFaN3Y2rOSLG0l2wD7Tvz8C7jFOVRA9XQLCuhzG7t10w1NHLrIOT32HuU QCSrUWQ8LEXHCt76aKujAQIcX+3eiLgyEh2dwHm/ZZzbj3/D28NJwCJ1wbm6fuGO WqCrtjwKAuMaPxHY8wgvrS96AmMoCHHNEWr3/WY8QYder/qrzqlPGJFBaZ4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:10:58 2025 by rpki-client