$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9bfa58d-cfbf-49a0-a757-1d0be03ef66e.roa File: f9bfa58d-cfbf-49a0-a757-1d0be03ef66e.roa (raw, json) Hash identifier: YSE2zGwfUaQRM79JjW4PDtdfBRD6Ua4GcewtbK30zuU= Subject key identifier: 0B:2B:4A:5B:F8:1E:76:0C:A9:85:CD:DA:C4:5E:50:1E:3D:E2:F5:75 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5CD41FDDB1F6F45E08C15A9FA5C6BDD22C7719F2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9bfa58d-cfbf-49a0-a757-1d0be03ef66e.roa Signing time: Tue 21 Oct 2025 05:51:26 +0000 ROA not before: Tue 21 Oct 2025 05:51:26 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d4:1f:dd:b1:f6:f4:5e:08:c1:5a:9f:a5:c6:bd:d2:2c:77:19:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 05:51:26 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=1d7d9c83758e6c8f38fe24ba7f6a99c095c3f5ab6871d289526b0626dbb389cf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:59:c7:7a:eb:e6:96:0f:1f:14:c3:ec:70: 09:6b:62:51:d9:e0:f3:c6:83:bb:be:e8:c7:f2:42: 78:c5:98:44:10:64:31:d3:0f:d2:10:1a:26:62:34: f8:c0:e0:86:d9:01:37:b0:4c:08:fb:43:0e:ad:25: b9:b9:b4:b0:00:43:0a:95:71:7d:10:d5:93:be:fa: dd:d9:fb:d4:ff:da:68:fe:51:1a:ac:8a:de:ed:97: 7d:e5:68:e3:66:3a:f4:f9:69:23:eb:53:99:a5:be: 96:01:0d:fd:70:c1:05:72:43:80:52:56:17:ea:c5: 90:29:5a:52:e0:f9:12:6c:79:90:0a:0a:b6:52:9f: 0b:e2:68:41:7c:31:2e:7c:f2:d4:ab:3f:7b:f0:08: a5:e2:fe:9d:50:dd:84:e1:92:60:92:4a:1c:01:75: 6d:a3:40:aa:e6:f6:2c:d2:ea:b5:68:2a:51:fa:a8: 11:d5:3f:3e:37:e6:85:4f:72:c0:e8:01:7d:4c:2e: 7c:e7:8e:bd:57:48:c6:95:1c:3b:ac:33:80:a6:03: e9:61:3d:3d:40:37:8c:4c:11:90:42:66:c5:d5:be: 51:95:4e:f4:87:8b:01:08:ce:1e:f7:c5:32:25:4b: b2:4a:2b:36:3c:91:71:54:67:3f:0f:98:1b:e5:a2: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2B:4A:5B:F8:1E:76:0C:A9:85:CD:DA:C4:5E:50:1E:3D:E2:F5:75 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9bfa58d-cfbf-49a0-a757-1d0be03ef66e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.156.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:94:83:63:dd:37:91:eb:c9:1b:5e:fd:19:8a:96:4a:1e:e5: fe:30:27:5f:13:ad:70:4e:c7:84:df:34:7c:b8:2f:1f:03:81: 04:54:55:bd:5e:83:a9:2f:7e:c2:3e:2b:cb:be:4b:e2:a8:2c: 72:ef:2a:31:af:08:82:0b:91:a7:b9:ef:f0:cb:2c:44:7a:86: 32:fc:13:fa:66:e7:f5:2b:af:fb:c6:2b:0f:cc:71:98:a3:06: 6a:b1:74:e6:d4:43:de:fc:64:47:ea:ac:1d:dc:dd:1d:5a:68: 15:a3:43:7d:12:ee:23:26:55:f3:1f:66:8c:a9:7c:a0:8e:71: a3:5c:53:40:61:fd:68:bd:40:ea:fc:dc:2d:b0:14:77:9e:17: 87:aa:db:c6:35:61:23:39:a1:46:bf:85:ec:58:5d:6e:5d:51: de:30:24:a0:54:bc:56:81:08:6f:d2:e8:86:9e:19:e7:b4:2c: c9:cc:84:fd:37:03:32:7d:09:f1:d6:9b:82:ee:e0:53:cd:a3: 08:0d:93:ba:09:52:f5:bc:47:14:f5:00:8e:e5:21:6b:e1:e8: a8:00:4e:6c:a8:f1:74:b9:01:74:1f:70:5e:2d:14:22:57:b8: 5f:ae:c3:0c:57:0f:cb:fb:9c:41:d1:fc:fc:8e:45:d0:ca:02: af:d5:b9:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXNQf3bH29F4IwVqfpca90ix3GfIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDU1MTI2WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDdkOWM4Mzc1OGU2YzhmMzhmZTI0YmE3ZjZhOTljMDk1 YzNmNWFiNjg3MWQyODk1MjZiMDYyNmRiYjM4OWNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPllnHeuvmlg8fFMPscAlrYlHZ4PPGg7u+6MfyQnjFmEQQ ZDHTD9IQGiZiNPjA4IbZATewTAj7Qw6tJbm5tLAAQwqVcX0Q1ZO++t3Z+9T/2mj+ URqsit7tl33laONmOvT5aSPrU5mlvpYBDf1wwQVyQ4BSVhfqxZApWlLg+RJseZAK CrZSnwviaEF8MS588tSrP3vwCKXi/p1Q3YThkmCSShwBdW2jQKrm9izS6rVoKlH6 qBHVPz435oVPcsDoAX1MLnznjr1XSMaVHDusM4CmA+lhPT1AN4xMEZBCZsXVvlGV TvSHiwEIzh73xTIlS7JKKzY8kXFUZz8PmBvlol81AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCytKW/gedgyphc3axF5QHj3i9XUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y5YmZhNThkLWNmYmYtNDlhMC1hNzU3LTFkMGJlMDNlZjY2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDrZwwDQYJKoZIhvcNAQELBQADggEBAI2Ug2PdN5HryRte/RmKlkoe5f4w J18TrXBOx4TfNHy4Lx8DgQRUVb1eg6kvfsI+K8u+S+KoLHLvKjGvCIILkae57/DL LER6hjL8E/pm5/Urr/vGKw/McZijBmqxdObUQ978ZEfqrB3c3R1aaBWjQ30S7iMm VfMfZoypfKCOcaNcU0Bh/Wi9QOr83C2wFHeeF4eq28Y1YSM5oUa/hexYXW5dUd4w JKBUvFaBCG/S6IaeGee0LMnMhP03AzJ9CfHWm4Lu4FPNowgNk7oJUvW8RxT1AI7l IWvh6KgATmyo8XS5AXQfcF4tFCJXuF+uwwxXD8v7nEHR/PyORdDKAq/VuSQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:50 2025 by rpki-client