$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b534c021-90a6-403d-ad88-d313f74e3c7d.roa File: b534c021-90a6-403d-ad88-d313f74e3c7d.roa (raw, json) Hash identifier: VGnes+f+xGHGRmCi9od5T2ccEL4aY7tJkhp6id/tsTY= Subject key identifier: 1B:C2:DA:AB:95:2B:FC:57:AD:47:1C:6B:02:B5:72:4C:DF:A2:5D:05 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 47AF2E2E980D3AD6A76779B86026E9999F2BF7B1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b534c021-90a6-403d-ad88-d313f74e3c7d.roa Signing time: Thu 25 Sep 2025 20:02:10 +0000 ROA not before: Thu 25 Sep 2025 20:02:10 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:af:2e:2e:98:0d:3a:d6:a7:67:79:b8:60:26:e9:99:9f:2b:f7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:02:10 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=20ffd44cbc463fdd975567df791d7d7f4388dddeed36f4516571c06964c66948, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:43:d8:91:70:1b:77:a6:1c:b6:81:4e:d1:31: 0f:7b:6a:73:88:7c:60:c5:4b:55:98:ac:c0:ff:ee: fe:de:1d:fc:37:a7:90:d1:58:92:e3:e7:36:fe:84: 8e:d7:66:cc:17:46:5e:85:a0:7e:ff:1e:2a:d2:0f: e9:05:b1:3c:19:54:44:66:cc:75:4c:ba:45:39:30: f5:af:96:64:cd:71:f8:ec:ce:64:b4:95:7b:9c:b1: f1:38:e5:2d:84:3f:65:a0:8d:c5:c8:72:d5:4c:e2: 19:ec:ea:4e:ca:1c:9c:46:57:a8:d2:4b:d5:89:d1: 79:e0:fe:8d:9b:ea:e8:f4:50:2c:f0:47:af:33:94: 66:f2:9f:17:a2:9e:45:42:c5:3e:2f:a8:cb:47:94: dc:9c:a3:53:67:f1:14:1a:f0:82:a1:d9:77:6e:8c: 15:56:90:b2:95:a4:b4:29:fb:6f:de:30:fa:6f:a4: c8:12:31:c8:56:7d:bb:2a:13:60:77:ae:3c:74:20: 0c:d5:a1:be:fe:bf:7c:6f:ab:dd:79:33:3e:ba:03: da:26:50:7e:85:6c:a0:73:b4:ab:aa:d0:e4:45:18: d6:20:5f:8a:6c:15:8a:51:54:86:a0:c5:bf:35:87: 7e:08:88:c9:83:29:0c:90:6f:0b:d5:62:18:8a:f9: 6d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C2:DA:AB:95:2B:FC:57:AD:47:1C:6B:02:B5:72:4C:DF:A2:5D:05 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b534c021-90a6-403d-ad88-d313f74e3c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.98.0/24 Signature Algorithm: sha256WithRSAEncryption 36:cf:40:d3:59:d0:a8:6d:44:ed:0b:12:dc:cf:bb:97:63:b1: 0c:6a:14:0a:f7:0c:61:25:af:47:50:6f:b4:36:53:f5:6f:63: 6a:bb:7a:0a:a6:43:66:74:69:db:91:dc:e9:45:a2:4a:ca:b7: 7b:b6:39:42:c1:63:60:22:23:55:5e:45:b4:0d:1b:3b:9b:83: 17:42:83:58:53:fb:59:43:39:ab:ed:aa:80:6d:cc:f3:a0:cf: bf:50:17:1f:ae:b9:80:b0:77:e9:28:36:e3:27:c4:f4:bd:73: 9b:b6:3c:79:28:78:5b:01:5f:34:dd:26:1f:b3:06:f3:6d:94: f7:47:19:f8:99:93:58:87:f6:1f:47:b0:3c:02:87:4e:01:35: 87:d1:ae:fb:45:04:f6:a4:f8:47:36:28:61:4e:eb:d2:db:b0: 05:05:70:93:c1:c5:a5:dc:11:da:61:d1:62:80:a7:50:81:1b: c0:a7:61:ae:56:2f:70:99:4f:88:34:cc:7f:7c:76:30:32:ce: ba:24:9f:ae:f7:8f:41:5f:d4:0f:d9:6d:81:1d:fe:3f:9b:00: fe:f7:02:9e:f0:24:27:5c:6f:a1:a1:2f:a6:22:33:35:4f:f0: d3:c5:4c:14:f1:b6:da:c1:07:50:34:c5:50:5b:ea:67:86:d8: 86:54:f3:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR68uLpgNOtanZ3m4YCbpmZ8r97EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjAwMjEwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGZmZDQ0Y2JjNDYzZmRkOTc1NTY3ZGY3OTFkN2Q3ZjQz ODhkZGRlZWQzNmY0NTE2NTcxYzA2OTY0YzY2OTQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHQ9iRcBt3phy2gU7RMQ97anOIfGDFS1WYrMD/7v7eHfw3 p5DRWJLj5zb+hI7XZswXRl6FoH7/HirSD+kFsTwZVERmzHVMukU5MPWvlmTNcfjs zmS0lXucsfE45S2EP2WgjcXIctVM4hns6k7KHJxGV6jSS9WJ0Xng/o2b6uj0UCzw R68zlGbynxeinkVCxT4vqMtHlNyco1Nn8RQa8IKh2XdujBVWkLKVpLQp+2/eMPpv pMgSMchWfbsqE2B3rjx0IAzVob7+v3xvq915Mz66A9omUH6FbKBztKuq0ORFGNYg X4psFYpRVIagxb81h34IiMmDKQyQbwvVYhiK+W0BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUG8Laq5Ur/FetRxxrArVyTN+iXQUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1MzRjMDIxLTkwYTYtNDAzZC1hZDg4LWQzMTNmNzRlM2M3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqmIwDQYJKoZIhvcNAQELBQADggEBADbPQNNZ0KhtRO0LEtzPu5djsQxq FAr3DGElr0dQb7Q2U/VvY2q7egqmQ2Z0aduR3OlFokrKt3u2OULBY2AiI1VeRbQN GzubgxdCg1hT+1lDOavtqoBtzPOgz79QFx+uuYCwd+koNuMnxPS9c5u2PHkoeFsB XzTdJh+zBvNtlPdHGfiZk1iH9h9HsDwCh04BNYfRrvtFBPak+Ec2KGFO69LbsAUF cJPBxaXcEdph0WKAp1CBG8CnYa5WL3CZT4g0zH98djAyzrokn673j0Ff1A/ZbYEd /j+bAP73Ap7wJCdcb6GhL6YiMzVP8NPFTBTxttrBB1A0xVBb6meG2IZU8z0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:27 2025 by rpki-client