$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/efcc7464-72b2-4654-81f8-59df63a49dd9.roa File: efcc7464-72b2-4654-81f8-59df63a49dd9.roa (raw, json) Hash identifier: MnxwPOxp/tmH9LUuSi1Ukmxw317bVw125Vdi/5F13Jk= Subject key identifier: 0D:89:70:49:A6:07:E2:B2:4F:F9:13:71:FA:E1:08:09:B1:6A:55:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5CC253B85D550C8BEC5755AF0C752701F0C09D73 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/efcc7464-72b2-4654-81f8-59df63a49dd9.roa Signing time: Fri 26 Sep 2025 02:17:24 +0000 ROA not before: Fri 26 Sep 2025 02:17:24 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c2:53:b8:5d:55:0c:8b:ec:57:55:af:0c:75:27:01:f0:c0:9d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:17:24 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=4c8b007ae4f3f088406265b0078ab59551b8d6910cd284b4c29eafde10ea9ddd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:6e:b8:75:61:58:da:bf:8d:fa:52:0b:bc: 8a:f3:5c:9e:06:37:ae:3c:7a:21:17:26:28:9a:61: ed:2e:d5:63:1e:c8:04:e0:6c:e5:e8:06:c0:6c:e8: 95:48:ff:9b:48:b8:43:e7:c2:46:7e:f9:85:e3:b3: 15:b1:2d:15:ee:11:90:c4:a4:1b:99:c7:6d:e4:49: ad:e2:e2:9f:2a:74:18:35:d6:47:df:48:71:cb:00: af:d3:00:ae:56:e4:6a:3c:c6:68:a6:d8:28:66:22: c9:a3:78:bc:25:41:d4:a8:8d:d3:67:91:9e:ec:00: 0f:6d:d5:9b:82:d7:67:be:1d:50:3b:d0:39:f5:d2: a1:f6:7f:7f:6a:7c:bb:b8:97:bd:d1:de:b1:7f:c2: 16:c1:90:77:02:dc:4a:5b:e4:65:f3:71:8a:9c:ef: 80:c0:68:65:44:a8:d4:24:df:3b:b0:50:02:8c:cc: 2c:ca:e8:4d:41:bf:e4:93:78:fc:df:d1:fd:65:8c: c3:38:07:97:cd:5b:45:2e:3f:25:3c:71:c8:eb:e5: da:c4:9e:5c:74:c9:da:3f:9f:4f:8f:79:36:9f:f6: 2f:e3:d1:e8:26:0a:ad:bf:8c:55:66:cc:2f:b6:f3: 8d:35:f5:84:7b:8a:01:96:ef:ed:0d:5b:4a:18:ac: 3c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:70:49:A6:07:E2:B2:4F:F9:13:71:FA:E1:08:09:B1:6A:55:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/efcc7464-72b2-4654-81f8-59df63a49dd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.128.0/17 Signature Algorithm: sha256WithRSAEncryption 74:20:50:79:80:77:b6:ee:32:50:43:92:ca:0d:52:de:1c:ce: 75:85:90:c1:4e:8b:27:99:24:4f:83:60:00:6f:a8:15:88:53: 77:ee:8a:ce:ef:6d:98:8c:26:fe:40:ed:77:88:06:28:cb:6f: 6f:ca:a8:3f:6c:19:28:7d:cd:ae:58:be:ee:9d:cb:7a:83:1a: 19:c4:c2:7b:9f:db:e8:8c:31:d7:98:7b:6f:96:b9:4b:1b:e8: 03:f0:6f:65:98:81:50:f0:51:db:00:92:18:77:06:72:0a:c0: 42:80:85:05:9b:5f:20:a3:44:e1:50:14:f2:ae:17:13:22:42: 1f:04:80:f5:b6:11:a1:00:c6:4a:47:93:42:00:f4:b1:c6:be: 78:67:68:06:9f:a9:85:1e:bc:cf:c8:31:7a:2a:0e:05:7a:ee: 54:32:71:34:94:43:9a:79:c8:b6:a7:75:0c:13:9c:bb:6a:80: 4b:14:89:53:f5:4c:25:af:37:9f:ad:c8:51:9e:06:47:78:2d: 71:29:04:52:84:72:4a:4d:29:93:57:48:bd:ab:67:4a:80:7f: 68:e3:4d:22:10:f6:52:86:bb:e7:0a:b8:fb:90:85:89:09:5c: d3:fa:71:d1:7e:c9:f2:ad:d1:02:77:6f:01:8f:6c:48:b1:5a: 94:7d:77:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXMJTuF1VDIvsV1WvDHUnAfDAnXMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIxNzI0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzhiMDA3YWU0ZjNmMDg4NDA2MjY1YjAwNzhhYjU5NTUx YjhkNjkxMGNkMjg0YjRjMjllYWZkZTEwZWE5ZGRkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9N264dWFY2r+N+lILvIrzXJ4GN648eiEXJiiaYe0u1WMe yATgbOXoBsBs6JVI/5tIuEPnwkZ++YXjsxWxLRXuEZDEpBuZx23kSa3i4p8qdBg1 1kffSHHLAK/TAK5W5Go8xmim2ChmIsmjeLwlQdSojdNnkZ7sAA9t1ZuC12e+HVA7 0Dn10qH2f39qfLu4l73R3rF/whbBkHcC3Epb5GXzcYqc74DAaGVEqNQk3zuwUAKM zCzK6E1Bv+STePzf0f1ljMM4B5fNW0UuPyU8ccjr5drEnlx0ydo/n0+PeTaf9i/j 0egmCq2/jFVmzC+284019YR7igGW7+0NW0oYrDx9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDYlwSaYH4rJP+RNx+uEICbFqVYUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmY2M3NDY0LTcyYjItNDY1NC04MWY4LTU5ZGY2M2E0OWRkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcDqIAwDQYJKoZIhvcNAQELBQADggEBAHQgUHmAd7buMlBDksoNUt4cznWF kMFOiyeZJE+DYABvqBWIU3fuis7vbZiMJv5A7XeIBijLb2/KqD9sGSh9za5Yvu6d y3qDGhnEwnuf2+iMMdeYe2+WuUsb6APwb2WYgVDwUdsAkhh3BnIKwEKAhQWbXyCj ROFQFPKuFxMiQh8EgPW2EaEAxkpHk0IA9LHGvnhnaAafqYUevM/IMXoqDgV67lQy cTSUQ5p5yLandQwTnLtqgEsUiVP1TCWvN5+tyFGeBkd4LXEpBFKEckpNKZNXSL2r Z0qAf2jjTSIQ9lKGu+cKuPuQhYkJXNP6cdF+yfKt0QJ3bwGPbEixWpR9d9k= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:44 2025 by rpki-client