$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d44c6298-d54d-492c-90db-04e8c7984cd9.roa File: d44c6298-d54d-492c-90db-04e8c7984cd9.roa (raw, json) Hash identifier: GQvwEpxvKsUbcfIXJmgQEW/xRN/BuqpgVZ4sNq6QiYs= Subject key identifier: 06:12:BF:A8:68:63:C2:96:4A:07:AD:DF:84:BC:2B:7D:08:1D:1E:BB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 174BE61851BA87AEF1F7A7AA922BB39C7D93BFBE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d44c6298-d54d-492c-90db-04e8c7984cd9.roa Signing time: Thu 25 Sep 2025 19:36:57 +0000 ROA not before: Thu 25 Sep 2025 19:36:57 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4b:e6:18:51:ba:87:ae:f1:f7:a7:aa:92:2b:b3:9c:7d:93:bf:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:36:57 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=121d91b31bc62373360fa08115d3daccbb675b24fcf105be5f77a603d6555a10, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ec:ed:f2:a6:6d:34:33:a7:86:e4:fc:6b:ec: 5b:9c:84:e2:05:04:cf:71:85:2c:84:83:ac:66:be: 25:d3:d6:d4:2a:16:76:f9:22:08:44:96:ba:d9:6e: 39:d2:c2:20:a1:83:0d:90:9e:b4:3a:2a:c4:dc:29: 11:eb:cf:28:11:ac:90:e6:32:37:14:b2:60:81:38: b4:1c:1d:e0:35:fe:2d:80:be:1e:cf:de:d8:6c:89: be:2a:42:43:e3:f9:dd:52:0a:a7:3c:03:bf:ab:96: 4d:f7:c2:7a:d6:98:bd:35:ec:6c:99:59:10:9a:7d: 5e:b1:c3:95:c0:b4:b8:1e:ed:30:38:73:77:fa:6d: 86:02:2c:c3:e5:0e:75:ed:85:a3:b9:4f:c1:b6:8d: 0e:ea:50:a2:41:0d:7e:0c:54:74:f9:ad:ad:a6:8b: de:33:2a:dc:ed:e3:bb:63:68:59:93:83:49:e3:65: db:cc:fd:08:da:43:c7:b3:e7:ee:1b:94:1d:07:71: 0f:46:3d:fa:86:64:ad:e2:9c:80:3b:8b:01:70:38: 01:2c:19:a8:fb:74:a5:31:b0:cd:29:22:5f:7c:c2: 4a:6d:80:8f:99:6d:09:89:bb:77:d2:1b:a7:1e:98: bc:68:7c:b1:ad:c8:d3:b2:20:a5:21:82:da:ee:7b: 3b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:12:BF:A8:68:63:C2:96:4A:07:AD:DF:84:BC:2B:7D:08:1D:1E:BB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d44c6298-d54d-492c-90db-04e8c7984cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.217.0/24 Signature Algorithm: sha256WithRSAEncryption 34:ad:3f:f7:cd:cf:9f:7b:6e:6b:07:b6:6d:cb:14:b8:8f:49: 87:8e:48:67:88:b8:ca:1d:3c:83:e8:b2:54:aa:c1:76:ec:77: 38:36:0f:43:30:ba:31:95:f4:9d:f4:8c:ef:26:87:d3:ef:a7: e3:d8:87:75:37:0a:76:06:9e:10:32:b3:4b:3e:8a:8b:ab:b2: 4f:8c:ec:37:3c:ee:c2:ad:2b:fe:c9:ff:9b:96:28:f7:9c:f2: 13:08:a7:20:e6:83:7e:dd:a5:15:99:39:80:01:2b:70:10:7d: c5:51:7f:60:a9:57:b7:71:82:0f:7c:f7:2f:c2:83:fa:bf:89: 26:36:b2:cf:6c:24:d1:b1:46:0d:f5:8d:ba:7d:e7:82:9b:f2: ae:18:29:c8:e9:99:31:82:d7:19:e1:07:cc:7e:ac:75:7f:33: a3:5b:33:73:3e:87:df:02:cb:2a:6f:e5:cc:ca:70:73:4a:1b: bd:a4:85:dd:18:5d:10:1d:91:06:1e:a1:b5:a4:7b:ba:f1:b9: 99:cc:c2:03:57:db:2b:c7:3d:29:02:6f:cc:3c:6d:00:48:93: 35:59:ed:34:39:1c:f4:4d:0a:24:ec:d8:45:d3:88:ab:07:fb: f8:6c:7d:1b:70:ea:03:45:04:b8:16:b5:ea:a8:6d:58:e4:33: b4:ec:51:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF0vmGFG6h67x96eqkiuznH2Tv74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkzNjU3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjFkOTFiMzFiYzYyMzczMzYwZmEwODExNWQzZGFjY2Ji Njc1YjI0ZmNmMTA1YmU1Zjc3YTYwM2Q2NTU1YTEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY7O3ypm00M6eG5Pxr7FuchOIFBM9xhSyEg6xmviXT1tQq Fnb5IghElrrZbjnSwiChgw2QnrQ6KsTcKRHrzygRrJDmMjcUsmCBOLQcHeA1/i2A vh7P3thsib4qQkPj+d1SCqc8A7+rlk33wnrWmL017GyZWRCafV6xw5XAtLge7TA4 c3f6bYYCLMPlDnXthaO5T8G2jQ7qUKJBDX4MVHT5ra2mi94zKtzt47tjaFmTg0nj ZdvM/QjaQ8ez5+4blB0HcQ9GPfqGZK3inIA7iwFwOAEsGaj7dKUxsM0pIl98wkpt gI+ZbQmJu3fSG6cemLxofLGtyNOyIKUhgtrueztdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBhK/qGhjwpZKB63fhLwrfQgdHrswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q0NGM2Mjk4LWQ1NGQtNDkyYy05MGRiLTA0ZThjNzk4NGNkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqdkwDQYJKoZIhvcNAQELBQADggEBADStP/fNz597bmsHtm3LFLiPSYeO SGeIuModPIPoslSqwXbsdzg2D0MwujGV9J30jO8mh9Pvp+PYh3U3CnYGnhAys0s+ ioursk+M7Dc87sKtK/7J/5uWKPec8hMIpyDmg37dpRWZOYABK3AQfcVRf2CpV7dx gg989y/Cg/q/iSY2ss9sJNGxRg31jbp954Kb8q4YKcjpmTGC1xnhB8x+rHV/M6Nb M3M+h98Cyypv5czKcHNKG72khd0YXRAdkQYeobWke7rxuZnMwgNX2yvHPSkCb8w8 bQBIkzVZ7TQ5HPRNCiTs2EXTiKsH+/hsfRtw6gNFBLgWteqobVjkM7TsUdI= -----END CERTIFICATE-----Generated at Mon Oct 20 17:30:03 2025 by rpki-client