$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f017de1-92bd-436a-be65-9ec3877bc671.roa File: 8f017de1-92bd-436a-be65-9ec3877bc671.roa (raw, json) Hash identifier: UXSio3vgTqmg9segDEPcMldlFPto4wum7VFbTty0aG8= Subject key identifier: 50:B3:AD:97:E7:72:74:DE:30:82:5B:1D:FD:BB:4B:81:03:51:8F:E6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3646FEA6A11113E8D1708EC3179B1E4FDD56558E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f017de1-92bd-436a-be65-9ec3877bc671.roa Signing time: Mon 20 Oct 2025 08:11:16 +0000 ROA not before: Mon 20 Oct 2025 08:11:16 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:46:fe:a6:a1:11:13:e8:d1:70:8e:c3:17:9b:1e:4f:dd:56:55:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 08:11:16 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=d1124a511655aa4ef433a7d80b1af1a99d33eb4ef58f3904e6bcda00915b08f8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:40:a8:22:da:61:7a:d7:d1:a7:cf:20:68: 4c:f5:ae:28:f3:60:1c:7f:ee:78:bf:98:72:2a:58: 61:82:74:d6:29:64:74:a3:9a:0d:84:1f:11:26:10: 86:b2:15:39:5a:24:b8:9f:cc:4f:b7:51:a4:ae:14: 18:50:90:ba:27:1c:aa:21:53:61:be:f0:76:fa:8b: 31:46:fb:93:d5:7e:56:c8:3b:68:fa:eb:be:3e:41: cd:58:b3:d9:8b:8a:ce:c8:f9:1e:62:42:08:dd:f8: c1:4f:f5:34:dd:b0:6c:39:47:dd:e8:e4:56:80:62: 1e:74:1d:4c:13:b0:8c:61:44:04:16:98:eb:f8:ed: db:4a:af:7c:79:ee:9e:5b:53:b0:a2:f5:3b:93:5d: bd:f2:cd:e2:33:fc:ea:25:eb:1a:b1:bd:e0:e1:8b: 14:b7:0e:80:4c:7d:64:5a:85:ef:5c:3f:27:54:82: 16:d4:34:30:67:68:74:fe:f9:50:9f:ab:7c:8a:e6: 1a:16:6b:1e:3e:ea:a4:40:d4:8e:ed:81:2c:17:d9: f7:b9:af:29:35:ee:fe:08:cb:fc:2a:ea:13:f2:10: 03:36:8c:49:58:59:a9:a0:74:e8:36:52:cb:17:96: 1d:a7:0e:b4:27:56:4d:9c:ad:2c:05:54:e0:5e:c4: 62:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B3:AD:97:E7:72:74:DE:30:82:5B:1D:FD:BB:4B:81:03:51:8F:E6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f017de1-92bd-436a-be65-9ec3877bc671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.97.0/24 Signature Algorithm: sha256WithRSAEncryption 35:4b:36:59:57:d1:ea:40:97:fb:18:07:c0:62:0f:b8:74:dc: ab:2f:0e:dd:60:0f:1e:f4:d5:af:94:56:0f:ce:ca:aa:41:28: 97:d3:4d:ac:1e:08:00:3a:79:52:b2:66:ba:05:e1:2c:dd:66: 3c:24:56:19:f4:33:30:e3:6f:9b:32:20:6d:c0:87:18:fb:83: fd:83:ef:2f:53:2c:be:ce:9c:95:12:a3:0d:f7:16:14:3e:77: 64:a1:c6:ad:c0:8b:5b:ec:d1:5c:e3:17:9a:35:2b:4d:0e:65: c5:d6:d1:e4:90:70:da:a4:77:2e:1f:ad:33:54:a0:ae:07:8b: 47:0c:0a:1a:6c:78:a9:32:02:a8:70:17:5d:d3:44:37:db:85: 80:a6:18:b5:ea:8d:d7:db:7b:26:bf:24:75:b6:99:dc:36:61: c2:91:db:d3:e3:33:5e:54:bf:8e:a0:a2:8e:c8:20:0b:ff:b3: ab:12:ce:6b:3c:fe:df:66:a6:04:f1:bd:fb:28:fd:ef:0b:a5: d2:49:0e:1e:86:7c:5e:f2:c5:0f:58:6b:85:68:ea:3b:e2:c8: a1:23:25:42:7a:23:62:32:9b:02:96:f1:b3:0e:94:99:58:6c: 0c:fd:e8:4e:38:81:e0:17:ef:75:54:52:f1:9b:79:07:b3:95: 1a:1f:e0:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNkb+pqERE+jRcI7DF5seT91WVY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMDgxMTE2WhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTEyNGE1MTE2NTVhYTRlZjQzM2E3ZDgwYjFhZjFhOTlk MzNlYjRlZjU4ZjM5MDRlNmJjZGEwMDkxNWIwOGY4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/UkCoItphetfRp88gaEz1rijzYBx/7ni/mHIqWGGCdNYp ZHSjmg2EHxEmEIayFTlaJLifzE+3UaSuFBhQkLonHKohU2G+8Hb6izFG+5PVflbI O2j6674+Qc1Ys9mLis7I+R5iQgjd+MFP9TTdsGw5R93o5FaAYh50HUwTsIxhRAQW mOv47dtKr3x57p5bU7Ci9TuTXb3yzeIz/Ool6xqxveDhixS3DoBMfWRahe9cPydU ghbUNDBnaHT++VCfq3yK5hoWax4+6qRA1I7tgSwX2fe5ryk17v4Iy/wq6hPyEAM2 jElYWamgdOg2UssXlh2nDrQnVk2crSwFVOBexGKzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUULOtl+dydN4wglsd/btLgQNRj+YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhmMDE3ZGUxLTkyYmQtNDM2YS1iZTY1LTllYzM4NzdiYzY3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqWEwDQYJKoZIhvcNAQELBQADggEBADVLNllX0epAl/sYB8BiD7h03Ksv Dt1gDx701a+UVg/OyqpBKJfTTaweCAA6eVKyZroF4SzdZjwkVhn0MzDjb5syIG3A hxj7g/2D7y9TLL7OnJUSow33FhQ+d2Shxq3Ai1vs0VzjF5o1K00OZcXW0eSQcNqk dy4frTNUoK4Hi0cMChpseKkyAqhwF13TRDfbhYCmGLXqjdfbeya/JHW2mdw2YcKR 29PjM15Uv46goo7IIAv/s6sSzms8/t9mpgTxvfso/e8LpdJJDh6GfF7yxQ9Ya4Vo 6jviyKEjJUJ6I2IymwKW8bMOlJlYbAz96E44geAX73VUUvGbeQezlRof4Is= -----END CERTIFICATE-----Generated at Mon Oct 20 11:56:04 2025 by rpki-client