$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84f30d23-d17d-4e24-b362-d52f938711f7.roa File: 84f30d23-d17d-4e24-b362-d52f938711f7.roa (raw, json) Hash identifier: PM3BqYkcTGQQ5XXw8p4QtuXXlDiBlQqirJNo1U5fKaI= Subject key identifier: 5F:B6:69:9B:6E:C4:65:02:E8:43:8B:CA:42:97:0B:6D:C5:2A:9D:ED Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E384440DA6CBBE6C94D8A107B44FF686B39423F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84f30d23-d17d-4e24-b362-d52f938711f7.roa Signing time: Sun 19 Oct 2025 07:02:20 +0000 ROA not before: Sun 19 Oct 2025 07:02:20 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.2.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:38:44:40:da:6c:bb:e6:c9:4d:8a:10:7b:44:ff:68:6b:39:42:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:02:20 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=37122fae719492ad2822172b7a98dad45c0348e89f445b8e4b50947753aa88ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:de:65:c0:20:31:ea:82:53:4a:72:a2:de: f8:15:ad:99:91:8a:ef:89:43:e8:25:04:15:e8:1c: fd:4c:7e:7b:51:45:40:71:a7:16:30:7d:26:54:8b: a4:25:cb:d0:fd:b2:cf:47:11:82:43:67:3b:6c:9c: d1:d1:3a:80:f7:f8:db:d2:f3:58:71:5e:17:bf:c2: 27:99:0f:05:ba:25:05:be:1c:e7:30:ed:2e:d8:9b: 3e:d2:73:56:c6:d5:af:34:e5:ee:df:50:65:5e:39: f1:59:54:12:33:2c:70:62:bf:32:c0:50:0b:0a:39: 4b:c8:5f:8b:09:37:4a:a0:b9:31:df:82:5e:ba:cc: 9c:c1:26:9c:10:cc:00:83:78:23:21:15:45:a4:b2: e7:99:c8:ca:99:28:3a:3d:38:37:fc:4d:10:b2:d4: e8:07:25:e4:41:9b:f6:12:81:23:d0:e7:8e:ef:32: 7d:d2:56:5d:19:98:ea:6e:14:21:9d:b1:74:55:bc: 22:54:12:40:d2:b3:63:7b:cb:8c:40:7e:e4:5c:ed: 04:76:33:77:36:92:0b:e5:7f:8f:3d:d8:37:c1:4f: cc:50:e2:05:6c:3d:82:33:c6:43:14:8a:fc:b5:f9: d2:77:90:be:eb:c2:02:24:7d:e7:f2:53:f0:23:2d: f3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B6:69:9B:6E:C4:65:02:E8:43:8B:CA:42:97:0B:6D:C5:2A:9D:ED X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84f30d23-d17d-4e24-b362-d52f938711f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.8.0/21 Signature Algorithm: sha256WithRSAEncryption 9e:e8:87:84:b3:a9:a1:5d:fa:bd:e7:f1:07:b9:f0:ba:81:2d: c3:e3:4a:bc:5b:8d:38:d3:37:91:f3:3a:00:4f:9f:82:c4:a8: f5:98:33:13:69:c8:63:2c:d6:8e:88:b6:90:b3:e1:7b:d8:3a: fc:68:b2:61:d4:2c:6a:92:be:8b:c6:62:c8:0d:5f:82:51:6a: 6d:52:77:d2:39:a6:2e:6c:4f:44:13:7e:5f:d1:5f:50:4c:40: d3:57:e2:79:29:ed:6d:78:01:ef:3f:25:6d:ef:08:3e:35:9f: 61:79:c9:0b:a5:13:e9:2e:e6:d8:f4:69:05:2b:72:05:5d:6f: c1:62:d7:23:de:92:b5:92:5d:5c:17:25:11:cb:62:88:5d:99: ab:80:31:00:10:d5:d7:eb:4c:e7:72:8a:c0:3f:15:0d:65:3c: 76:67:e7:f4:9a:b9:5f:68:5d:2e:a2:0f:dc:0a:33:db:b1:b3: a5:f6:7d:65:3e:b1:0b:10:36:aa:82:73:80:69:e5:fa:28:e7: c6:da:f6:a9:5b:83:8c:df:fe:44:20:49:1d:52:d7:bc:7e:69: e8:8f:ba:1f:29:02:d6:1b:e0:06:99:2f:53:cb:bc:91:ba:5e: b3:b2:b3:45:a5:de:79:a1:91:4c:17:61:86:07:07:7c:cb:f7: e0:c7:c8:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfjhEQNpsu+bJTYoQe0T/aGs5Qj8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDcwMjIwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNzEyMmZhZTcxOTQ5MmFkMjgyMjE3MmI3YTk4ZGFkNDVj MDM0OGU4OWY0NDViOGU0YjUwOTQ3NzUzYWE4OGNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBDt5lwCAx6oJTSnKi3vgVrZmRiu+JQ+glBBXoHP1MfntR RUBxpxYwfSZUi6Qly9D9ss9HEYJDZztsnNHROoD3+NvS81hxXhe/wieZDwW6JQW+ HOcw7S7Ymz7Sc1bG1a805e7fUGVeOfFZVBIzLHBivzLAUAsKOUvIX4sJN0qguTHf gl66zJzBJpwQzACDeCMhFUWksueZyMqZKDo9ODf8TRCy1OgHJeRBm/YSgSPQ547v Mn3SVl0ZmOpuFCGdsXRVvCJUEkDSs2N7y4xAfuRc7QR2M3c2kgvlf4892DfBT8xQ 4gVsPYIzxkMUivy1+dJ3kL7rwgIkfefyU/AjLfN/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX7Zpm27EZQLoQ4vKQpcLbcUqne0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0ZjMwZDIzLWQxN2QtNGUyNC1iMzYyLWQ1MmY5Mzg3MTFmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDAggwDQYJKoZIhvcNAQELBQADggEBAJ7oh4SzqaFd+r3n8Qe58LqBLcPj SrxbjTjTN5HzOgBPn4LEqPWYMxNpyGMs1o6ItpCz4XvYOvxosmHULGqSvovGYsgN X4JRam1Sd9I5pi5sT0QTfl/RX1BMQNNX4nkp7W14Ae8/JW3vCD41n2F5yQulE+ku 5tj0aQUrcgVdb8Fi1yPekrWSXVwXJRHLYohdmauAMQAQ1dfrTOdyisA/FQ1lPHZn 5/SauV9oXS6iD9wKM9uxs6X2fWU+sQsQNqqCc4Bp5foo58ba9qlbg4zf/kQgSR1S 17x+aeiPuh8pAtYb4AaZL1PLvJG6XrOys0Wl3nmhkUwXYYYHB3zL9+DHyKI= -----END CERTIFICATE-----Generated at Mon Oct 20 03:04:19 2025 by rpki-client