$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b17e4278-3ede-4c8a-9b8a-ea41d717c70a.roa File: b17e4278-3ede-4c8a-9b8a-ea41d717c70a.roa (raw, json) Hash identifier: JFYKMCBEog+P9zNhgTIk1CnSIOUv5JhSuVO2Ad0gVO4= Subject key identifier: EB:1A:7A:BB:DC:7B:F5:78:BB:BD:41:2A:2E:2F:82:F6:94:10:56:A1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 765267C0F5321A2581A2B75A7060FB7C7EBD770F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b17e4278-3ede-4c8a-9b8a-ea41d717c70a.roa Signing time: Mon 20 Oct 2025 07:42:30 +0000 ROA not before: Mon 20 Oct 2025 07:42:30 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:52:67:c0:f5:32:1a:25:81:a2:b7:5a:70:60:fb:7c:7e:bd:77:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 07:42:30 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=b49151e2864628fae516fde412e3414c064c46466246c0a5f6f0d70ed527462f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:d9:94:e7:56:a9:e3:8d:1d:26:9e:56:86: 74:d1:2c:cd:c8:37:a2:3b:f5:fe:c7:fb:8a:24:be: 66:c7:b5:d6:f6:c8:fd:c1:d7:fe:9b:cc:6b:4b:e5: d1:35:df:27:61:34:eb:1c:63:2b:d2:6b:1e:77:65: 48:e1:6e:3c:36:dd:c8:d3:e2:cd:aa:5f:ff:69:47: 8d:98:60:1d:ed:e3:ef:b1:b2:9e:ad:b6:df:8d:ea: 67:6c:d3:e1:1d:f4:c0:3a:48:13:ca:74:6f:fa:08: e4:9b:cd:0d:e6:f9:d8:d3:73:e8:76:fd:34:d8:be: ad:cc:e0:c1:20:a1:21:b9:e9:d1:c7:30:db:10:39: 97:13:e1:de:16:d8:be:eb:40:74:6e:42:02:48:1b: 1a:7c:cc:91:f5:5f:0c:c6:5c:dc:f7:1b:66:b2:05: 53:c8:15:cb:58:e2:1c:96:c4:00:cd:a9:67:85:fe: e7:34:a7:02:48:7c:7d:79:a7:f2:7d:26:0c:31:fd: 60:0d:14:4e:b8:31:55:d4:58:21:74:6c:fa:f5:79: f8:03:2d:b8:98:67:22:7a:a2:e2:bd:65:2f:9e:49: fa:9c:29:91:c8:b8:47:f0:a8:36:88:61:47:7b:d7: b9:fa:eb:65:82:0c:e9:8c:06:87:12:88:75:50:e4: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1A:7A:BB:DC:7B:F5:78:BB:BD:41:2A:2E:2F:82:F6:94:10:56:A1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b17e4278-3ede-4c8a-9b8a-ea41d717c70a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.98.0/24 Signature Algorithm: sha256WithRSAEncryption 48:43:f4:07:33:a5:5e:23:40:a6:0d:3e:31:af:f1:d8:a8:a5: 15:60:07:7d:af:c8:9c:77:6c:1c:0f:b5:68:d1:d7:d1:ce:36: af:05:02:91:c8:80:0a:20:bb:e8:45:30:bc:4a:f5:bb:43:a3: c8:48:88:80:01:1c:8a:23:c8:2d:3b:a7:cb:f5:b7:aa:2b:3d: dd:df:26:7d:75:85:da:eb:85:bb:92:3c:81:a0:67:86:e3:ff: c0:cd:9b:a1:f1:d9:b3:ae:ac:e9:57:ed:41:8a:36:bf:bf:e4: bc:32:17:08:e8:e2:ed:58:bb:1a:38:3c:89:28:11:92:bd:cb: 38:a3:3c:ff:e5:11:93:bb:95:d5:8a:27:dc:b2:e9:8f:d4:76: 97:ea:9a:96:7a:cf:32:be:4c:cb:e9:5a:8d:93:eb:c0:25:35: 19:d3:aa:4c:79:f9:4f:a5:d4:ae:52:c6:30:04:69:37:49:7b: d6:1a:16:03:eb:53:83:2e:90:e9:6e:a2:a9:5c:a7:da:86:18: 56:98:11:6e:a1:ac:c8:2e:61:5c:62:0e:d6:a9:d5:2d:52:4d: 9a:57:92:7d:4e:ad:c0:80:76:9d:4a:5d:89:ba:22:36:39:89: 5a:29:9b:64:b3:49:64:7a:46:74:23:b4:2d:ac:b3:3c:b4:a3: 2f:0e:3d:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdlJnwPUyGiWBordacGD7fH69dw8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMDc0MjMwWhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDkxNTFlMjg2NDYyOGZhZTUxNmZkZTQxMmUzNDE0YzA2 NGM0NjQ2NjI0NmMwYTVmNmYwZDcwZWQ1Mjc0NjJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChStmU51ap440dJp5WhnTRLM3IN6I79f7H+4okvmbHtdb2 yP3B1/6bzGtL5dE13ydhNOscYyvSax53ZUjhbjw23cjT4s2qX/9pR42YYB3t4++x sp6ttt+N6mds0+Ed9MA6SBPKdG/6COSbzQ3m+djTc+h2/TTYvq3M4MEgoSG56dHH MNsQOZcT4d4W2L7rQHRuQgJIGxp8zJH1XwzGXNz3G2ayBVPIFctY4hyWxADNqWeF /uc0pwJIfH15p/J9Jgwx/WANFE64MVXUWCF0bPr1efgDLbiYZyJ6ouK9ZS+eSfqc KZHIuEfwqDaIYUd717n662WCDOmMBocSiHVQ5FkJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6xp6u9x79Xi7vUEqLi+C9pQQVqEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IxN2U0Mjc4LTNlZGUtNGM4YS05YjhhLWVhNDFkNzE3YzcwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrmIwDQYJKoZIhvcNAQELBQADggEBAEhD9AczpV4jQKYNPjGv8diopRVg B32vyJx3bBwPtWjR19HONq8FApHIgAogu+hFMLxK9btDo8hIiIABHIojyC07p8v1 t6orPd3fJn11hdrrhbuSPIGgZ4bj/8DNm6Hx2bOurOlX7UGKNr+/5LwyFwjo4u1Y uxo4PIkoEZK9yzijPP/lEZO7ldWKJ9yy6Y/UdpfqmpZ6zzK+TMvpWo2T68AlNRnT qkx5+U+l1K5SxjAEaTdJe9YaFgPrU4MukOluoqlcp9qGGFaYEW6hrMguYVxiDtap 1S1STZpXkn1OrcCAdp1KXYm6IjY5iVopm2SzSWR6RnQjtC2sszy0oy8OPWs= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:32 2025 by rpki-client