$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd847362-89ac-408c-af42-f96bd1e5a7dc.roa File: cd847362-89ac-408c-af42-f96bd1e5a7dc.roa (raw, json) Hash identifier: 4Z6KNubr1qf9P/zB1LdNv4GFRA2GjYe4cq0Wu3JNasY= Subject key identifier: F7:69:5A:26:DE:0D:2F:98:93:1E:34:5C:AC:3A:09:CF:A7:AD:95:E9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 252B134C9CF8C87199C180BF4B599DD51F2961DD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd847362-89ac-408c-af42-f96bd1e5a7dc.roa Signing time: Thu 25 Sep 2025 23:09:37 +0000 ROA not before: Thu 25 Sep 2025 23:09:37 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2b:13:4c:9c:f8:c8:71:99:c1:80:bf:4b:59:9d:d5:1f:29:61:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:09:37 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=359ee5b9fc5a56aaf20312655646c501417430f04cba18af9787c91ae2e07780, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:41:f9:bc:47:d2:f3:19:e7:37:4e:0b:01: 3f:21:9d:85:13:a4:2a:62:2e:7f:f3:7d:c9:8a:8c: 96:a2:25:f7:bf:b8:95:da:05:38:5e:17:4c:78:15: d0:85:80:94:8c:2d:3e:4c:78:a5:9b:d2:a3:5e:ae: d5:7d:df:33:c0:ba:7e:0f:ce:7a:bd:be:79:74:1a: 80:71:35:d1:5b:20:73:bf:1e:65:9b:5b:fa:59:8e: e0:fc:bb:9b:11:a5:1c:f7:3a:94:ee:d8:fa:04:90: b9:ca:2c:ad:e7:da:70:c3:1e:2a:dd:ee:c0:da:b7: 6f:bc:92:fa:d3:24:90:27:41:55:c5:77:dd:aa:c3: 34:9d:2b:36:77:7e:ef:fd:bd:5f:4d:f8:19:fe:12: d8:98:65:09:e9:f3:23:16:62:91:8d:c8:ac:78:d7: be:3f:fa:53:7a:c6:1a:29:c1:65:44:4c:0f:66:6b: 96:32:68:9b:16:aa:c7:31:8d:1c:65:5a:3d:4c:ea: e0:dd:bb:e6:d7:34:d4:fc:ac:57:48:5c:bd:0c:e1: 09:66:43:31:86:01:8b:52:ea:c4:8b:3e:ed:d6:0c: 89:ee:72:92:e7:fa:16:f2:d9:38:e7:d7:68:56:5c: f3:25:21:fd:69:81:a4:f0:bd:4e:a9:bb:5c:4a:f2: 6d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:69:5A:26:DE:0D:2F:98:93:1E:34:5C:AC:3A:09:CF:A7:AD:95:E9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd847362-89ac-408c-af42-f96bd1e5a7dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.102.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:56:5d:76:1d:b6:ef:b8:aa:d5:98:33:62:27:66:23:06:4e: a3:6b:e8:0e:56:91:58:e9:d2:03:fa:e1:8f:45:f1:6a:a1:45: 68:c3:18:aa:79:0c:54:42:2c:8b:7a:cd:55:53:90:bc:f9:b5: 7b:6c:84:30:32:45:65:9a:f8:83:9b:6d:c4:f4:24:e1:15:6a: 62:48:50:dd:c5:8e:24:dc:46:b2:fe:2e:02:e0:ac:b4:48:89: f8:e2:2e:98:b8:c7:71:77:66:35:9b:fe:e6:63:58:28:2f:58: d9:36:12:5b:88:20:a4:50:e2:9b:5e:37:53:f2:de:8c:0a:de: 87:7c:6f:54:94:6d:57:93:5b:8e:b2:5e:b9:c4:d9:38:7d:4a: 08:04:6b:73:3f:04:7d:ea:33:cc:3d:54:9a:5c:74:0e:51:ee: cf:9e:9e:cb:be:59:1c:85:72:e3:08:70:89:5c:b5:4e:9d:c8: 7a:53:15:cb:f2:47:bb:10:6e:12:c4:c5:51:d6:ff:39:72:3b: 59:2c:22:a2:99:67:26:22:de:19:5c:64:22:f6:08:34:79:ba: 68:6b:ba:61:a9:9e:1b:7a:10:57:3a:91:ff:57:04:a3:33:af: 15:fd:ba:d0:11:6e:47:55:de:fc:cd:d1:e4:06:ea:95:a3:ad: bd:64:f8:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJSsTTJz4yHGZwYC/S1md1R8pYd0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMwOTM3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTllZTViOWZjNWE1NmFhZjIwMzEyNjU1NjQ2YzUwMTQx NzQzMGYwNGNiYTE4YWY5Nzg3YzkxYWUyZTA3NzgwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuy0H5vEfS8xnnN04LAT8hnYUTpCpiLn/zfcmKjJaiJfe/ uJXaBTheF0x4FdCFgJSMLT5MeKWb0qNertV93zPAun4Pznq9vnl0GoBxNdFbIHO/ HmWbW/pZjuD8u5sRpRz3OpTu2PoEkLnKLK3n2nDDHird7sDat2+8kvrTJJAnQVXF d92qwzSdKzZ3fu/9vV9N+Bn+EtiYZQnp8yMWYpGNyKx4174/+lN6xhopwWVETA9m a5YyaJsWqscxjRxlWj1M6uDdu+bXNNT8rFdIXL0M4QlmQzGGAYtS6sSLPu3WDInu cpLn+hby2Tjn12hWXPMlIf1pgaTwvU6pu1xK8m1HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU92laJt4NL5iTHjRcrDoJz6etlekwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkODQ3MzYyLTg5YWMtNDA4Yy1hZjQyLWY5NmJkMWU1YTdkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDq2YwDQYJKoZIhvcNAQELBQADggEBAJ9WXXYdtu+4qtWYM2InZiMGTqNr 6A5WkVjp0gP64Y9F8WqhRWjDGKp5DFRCLIt6zVVTkLz5tXtshDAyRWWa+IObbcT0 JOEVamJIUN3FjiTcRrL+LgLgrLRIifjiLpi4x3F3ZjWb/uZjWCgvWNk2EluIIKRQ 4pteN1Py3owK3od8b1SUbVeTW46yXrnE2Th9SggEa3M/BH3qM8w9VJpcdA5R7s+e nsu+WRyFcuMIcIlctU6dyHpTFcvyR7sQbhLExVHW/zlyO1ksIqKZZyYi3hlcZCL2 CDR5umhrumGpnht6EFc6kf9XBKMzrxX9utARbkdV3vzN0eQG6pWjrb1k+DA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:30:09 2025 by rpki-client