$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19c17955-36b7-46fe-800d-5334f51eb8cd.roa File: 19c17955-36b7-46fe-800d-5334f51eb8cd.roa (raw, json) Hash identifier: 97b5iH/mSSH4qPKGSyunvAf/LlzjL7oG8P+zhXPhLnw= Subject key identifier: 09:A3:4C:62:B9:C2:DB:4D:DC:A9:74:8F:50:40:08:FB:08:78:26:9B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 47F0E2AE7B57E443F4B657680A1150511AD185A8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19c17955-36b7-46fe-800d-5334f51eb8cd.roa Signing time: Tue 21 Oct 2025 05:50:08 +0000 ROA not before: Tue 21 Oct 2025 05:50:08 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f0:e2:ae:7b:57:e4:43:f4:b6:57:68:0a:11:50:51:1a:d1:85:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 05:50:08 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=45334f76ed38362ff6140c9c9205509e1588767aa78b055da95ddde4e539e2b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:03:18:cc:4b:e7:0c:c0:76:f5:4d:9e:c5: f4:fe:03:15:02:ff:d3:ac:f8:8f:50:a1:be:b8:87: 23:cd:30:51:fe:cf:89:13:04:cc:80:85:9b:67:ef: 0f:30:42:c3:fe:29:b3:aa:18:6a:13:05:b8:ea:af: 0a:b7:7f:f9:96:7a:e1:cf:e8:de:7b:9a:f6:f7:5d: 8e:8b:8f:f6:52:f7:c4:3d:f1:e0:68:44:8c:e5:11: 5d:de:fd:25:a4:af:48:7a:ac:77:26:0a:2a:79:0d: 8a:42:b7:5b:82:e9:88:fa:c7:f9:26:39:60:fa:69: 5d:3d:6b:6e:35:57:4f:34:73:a3:9b:0f:f0:f2:02: ce:fb:dd:99:6a:99:81:83:9c:43:b7:b2:e1:d7:49: 26:7e:74:89:5c:22:c2:8b:62:70:ae:0b:a6:55:b1: 10:47:af:1c:6a:50:39:18:d7:00:6c:ca:7e:87:ea: 20:72:73:b5:80:c0:f0:7c:30:d2:cc:61:2d:1f:b3: 0b:e7:35:72:28:13:d9:c2:23:41:0a:0a:33:25:9a: f8:df:0b:df:b4:b0:b4:2f:fc:ec:f0:19:e6:8c:d5: b0:c4:cc:80:5b:ab:f8:80:f7:e2:40:24:94:fc:54: 54:5e:91:fd:1f:33:a8:ac:8d:a6:91:5c:19:ab:ae: 6e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A3:4C:62:B9:C2:DB:4D:DC:A9:74:8F:50:40:08:FB:08:78:26:9B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19c17955-36b7-46fe-800d-5334f51eb8cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.240.0/20 Signature Algorithm: sha256WithRSAEncryption 5e:9e:62:01:1c:a6:98:25:20:0f:56:17:ab:e4:3d:ff:0d:f3: a8:73:44:d3:74:01:8a:60:b7:a7:de:ab:d5:15:c2:fa:39:03: ad:df:68:a1:67:34:03:52:fb:5f:da:d6:85:75:41:77:ee:76: 75:c9:c7:e3:ec:41:b5:b3:0c:d9:1b:cf:20:4d:2a:6f:b0:a0: e4:d7:61:f9:bf:ac:58:c5:57:fe:a2:41:2e:29:63:4f:da:d3: f8:b2:87:65:e3:85:4a:ee:96:36:d1:ac:bf:10:63:a1:67:f6: cb:03:85:4a:c0:85:88:c9:9e:ed:3e:5d:24:73:c2:e1:a3:ed: f2:8e:17:a0:19:e0:1d:ed:f7:cc:3c:ea:38:2e:7e:5c:9b:47: f9:cc:ed:e9:0d:5d:26:8c:7b:ff:ee:52:9d:dd:0f:41:3e:d6: ae:9e:1e:9e:4a:9a:96:16:29:4e:b2:90:1a:2c:ec:3d:c6:fc: 4a:6e:be:98:2e:e4:54:32:29:d7:39:8a:5e:c3:20:58:0e:09: 92:66:4c:14:d5:a3:94:57:8f:f5:99:37:69:2d:43:d0:7a:d2: 94:8c:3e:1d:09:e2:ef:cd:50:a1:ba:74:64:c5:fe:2f:40:ae: 00:67:72:a1:8e:95:41:63:12:81:9e:e2:a8:59:f7:89:57:ee: 70:37:bc:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR/DirntX5EP0tldoChFQURrRhagwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDU1MDA4WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NTMzNGY3NmVkMzgzNjJmZjYxNDBjOWM5MjA1NTA5ZTE1 ODg3NjdhYTc4YjA1NWRhOTVkZGRlNGU1MzllMmIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNPgMYzEvnDMB29U2exfT+AxUC/9Os+I9Qob64hyPNMFH+ z4kTBMyAhZtn7w8wQsP+KbOqGGoTBbjqrwq3f/mWeuHP6N57mvb3XY6Lj/ZS98Q9 8eBoRIzlEV3e/SWkr0h6rHcmCip5DYpCt1uC6Yj6x/kmOWD6aV09a241V080c6Ob D/DyAs773ZlqmYGDnEO3suHXSSZ+dIlcIsKLYnCuC6ZVsRBHrxxqUDkY1wBsyn6H 6iByc7WAwPB8MNLMYS0fswvnNXIoE9nCI0EKCjMlmvjfC9+0sLQv/OzwGeaM1bDE zIBbq/iA9+JAJJT8VFRekf0fM6isjaaRXBmrrm4bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCaNMYrnC203cqXSPUEAI+wh4JpswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE5YzE3OTU1LTM2YjctNDZmZS04MDBkLTUzMzRmNTFlYjhjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDq/AwDQYJKoZIhvcNAQELBQADggEBAF6eYgEcppglIA9WF6vkPf8N86hz RNN0AYpgt6feq9UVwvo5A63faKFnNANS+1/a1oV1QXfudnXJx+PsQbWzDNkbzyBN Km+woOTXYfm/rFjFV/6iQS4pY0/a0/iyh2XjhUruljbRrL8QY6Fn9ssDhUrAhYjJ nu0+XSRzwuGj7fKOF6AZ4B3t98w86jguflybR/nM7ekNXSaMe//uUp3dD0E+1q6e Hp5KmpYWKU6ykBos7D3G/Epuvpgu5FQyKdc5il7DIFgOCZJmTBTVo5RXj/WZN2kt Q9B60pSMPh0J4u/NUKG6dGTF/i9ArgBncqGOlUFjEoGe4qhZ94lX7nA3vBU= -----END CERTIFICATE-----Generated at Wed Nov 5 01:46:28 2025 by rpki-client