$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f59bcf46-1971-4e6d-a3f0-e1c17a2e43ac.roa File: f59bcf46-1971-4e6d-a3f0-e1c17a2e43ac.roa (raw, json) Hash identifier: c19l21V12XWAtSpMihkNucS2SkN3NVXYeppstDOawzw= Subject key identifier: 1F:56:7C:3C:84:E2:47:B3:AB:6E:2F:02:C4:1F:E5:72:8E:98:6C:00 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0F3B5A22291E9FFC7E79DBF3F85E85B1C9EEC159 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f59bcf46-1971-4e6d-a3f0-e1c17a2e43ac.roa Signing time: Fri 26 Sep 2025 01:36:32 +0000 ROA not before: Fri 26 Sep 2025 01:36:32 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3b:5a:22:29:1e:9f:fc:7e:79:db:f3:f8:5e:85:b1:c9:ee:c1:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:36:32 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=3563bd4d03d6c811ce1d112b252f9af7e6b906bf48a8ccedd6dbdb9c80b6bad2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:5d:9c:09:16:cf:f4:cb:14:01:1b:2f:cc:12: 03:29:25:27:7a:65:79:cd:7c:d4:25:af:9c:b5:59: 4b:fd:07:e4:d1:ea:56:59:3d:87:c1:5f:a7:1d:2b: db:ac:5c:2c:f9:f2:e6:99:24:9d:33:c1:59:de:91: c8:89:0d:a5:dd:65:4a:d8:43:bf:da:22:c6:3b:6d: ca:82:25:da:68:1c:2c:08:38:58:b6:e6:17:20:38: 87:b3:2a:c3:b1:69:95:b1:86:0e:11:0c:0b:aa:96: 2d:cf:df:10:41:b8:1e:e6:5d:2e:d5:d7:5c:6b:04: 4c:13:41:58:3e:a0:f3:46:2f:58:06:56:07:b1:06: 7d:9d:98:96:a4:97:28:b2:eb:69:de:8b:18:3f:30: 92:d5:af:94:2e:3f:0f:15:8b:d4:44:b2:59:93:08: 5f:7c:fc:2d:23:04:42:16:d4:da:ed:3d:49:64:21: 71:2b:78:48:ac:f4:00:bc:81:28:a3:b6:af:d3:5d: 9d:7b:69:d8:be:83:f1:98:bd:0f:e0:19:e8:24:78: 5b:f9:63:cf:5e:35:24:24:2b:06:96:ae:01:1b:78: 0a:e4:3e:ee:f6:10:d5:eb:88:e1:5b:07:c3:b8:d1: c9:21:9c:d9:7c:ac:52:45:cc:36:80:26:e3:e6:5d: 06:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:56:7C:3C:84:E2:47:B3:AB:6E:2F:02:C4:1F:E5:72:8E:98:6C:00 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f59bcf46-1971-4e6d-a3f0-e1c17a2e43ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.40.0/21 Signature Algorithm: sha256WithRSAEncryption 17:91:15:1a:61:60:8d:b0:e0:42:4e:74:0c:01:bb:04:63:f3: d3:af:a2:e2:d5:56:5e:65:6f:23:bd:7b:d3:36:d7:87:5e:d7: 0e:9b:6d:de:5c:ea:99:99:62:59:37:77:e3:b2:16:c7:2b:bc: a0:68:5e:07:bb:43:e2:f5:dc:83:1a:8b:89:a8:fd:7e:70:12: 63:66:3f:1e:93:67:1d:ac:25:4c:3c:38:22:39:ec:6f:b8:36: cc:20:35:db:f5:87:b2:91:91:62:e4:51:7c:0b:94:53:49:93: d5:dc:d9:37:cc:ca:d3:dc:af:c2:11:d3:18:a1:d1:7a:92:58: 82:70:65:21:32:c8:f9:82:03:61:6e:60:14:cd:4c:43:33:55: 1a:9c:09:46:6a:55:f3:3b:46:06:ed:d0:2e:c8:a9:70:40:c1: 99:ca:b8:c4:17:fa:d2:8a:0d:91:11:fc:c0:49:01:fa:7c:ff: c7:aa:23:50:a4:ac:07:6b:ef:29:29:84:f4:b2:58:11:c1:d6: 35:f2:66:8e:19:0c:32:86:53:fc:dc:f0:2d:1e:ea:28:f5:81: 0d:0c:49:a1:fd:4b:6a:6d:c1:48:5b:bb:30:da:b1:ac:d5:89: bc:89:16:08:cf:6f:c9:95:82:76:fc:59:5b:6b:e4:46:8f:5a: 53:e5:84:68 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDztaIiken/x+edvz+F6FscnuwVkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEzNjMyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTYzYmQ0ZDAzZDZjODExY2UxZDExMmIyNTJmOWFmN2U2 YjkwNmJmNDhhOGNjZWRkNmRiZGI5YzgwYjZiYWQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD+XZwJFs/0yxQBGy/MEgMpJSd6ZXnNfNQlr5y1WUv9B+TR 6lZZPYfBX6cdK9usXCz58uaZJJ0zwVnekciJDaXdZUrYQ7/aIsY7bcqCJdpoHCwI OFi25hcgOIezKsOxaZWxhg4RDAuqli3P3xBBuB7mXS7V11xrBEwTQVg+oPNGL1gG VgexBn2dmJaklyiy62neixg/MJLVr5QuPw8Vi9REslmTCF98/C0jBEIW1NrtPUlk IXEreEis9AC8gSijtq/TXZ17adi+g/GYvQ/gGegkeFv5Y89eNSQkKwaWrgEbeArk Pu72ENXriOFbB8O40ckhnNl8rFJFzDaAJuPmXQaFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH1Z8PITiR7Orbi8CxB/lco6YbAAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y1OWJjZjQ2LTE5NzEtNGU2ZC1hM2YwLWUxYzE3YTJlNDNhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDrCgwDQYJKoZIhvcNAQELBQADggEBABeRFRphYI2w4EJOdAwBuwRj89Ov ouLVVl5lbyO9e9M214de1w6bbd5c6pmZYlk3d+OyFscrvKBoXge7Q+L13IMai4mo /X5wEmNmPx6TZx2sJUw8OCI57G+4NswgNdv1h7KRkWLkUXwLlFNJk9Xc2TfMytPc r8IR0xih0XqSWIJwZSEyyPmCA2FuYBTNTEMzVRqcCUZqVfM7Rgbt0C7IqXBAwZnK uMQX+tKKDZER/MBJAfp8/8eqI1CkrAdr7ykphPSyWBHB1jXyZo4ZDDKGU/zc8C0e 6ij1gQ0MSaH9S2ptwUhbuzDasazVibyJFgjPb8mVgnb8WVtr5EaPWlPlhGg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:58:57 2025 by rpki-client