$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8a25146-f5b9-4995-bb0a-067affb408ff.roa File: d8a25146-f5b9-4995-bb0a-067affb408ff.roa (raw, json) Hash identifier: C26Sd05rktPeTUVSsBBcxrn0XK8cweKp4PC5PKFCCas= Subject key identifier: C1:14:76:72:0D:00:94:CE:3F:65:1F:FC:BD:47:97:3B:8F:F0:E0:4E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3F4E9616FFD9FE116AAF35D3A2F03035B504C5AE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8a25146-f5b9-4995-bb0a-067affb408ff.roa Signing time: Mon 20 Oct 2025 07:10:13 +0000 ROA not before: Mon 20 Oct 2025 07:10:13 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4e:96:16:ff:d9:fe:11:6a:af:35:d3:a2:f0:30:35:b5:04:c5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 07:10:13 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=466a7a8e2dfe41a79c0728e3b2c67b046a9d2ba8a500bae1a81519c9b9a2ef0b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:b8:90:07:9a:3f:c9:f9:12:f6:78:6e:83: 71:8e:8c:fe:0b:8a:f1:2f:63:68:73:f0:a0:7b:f2: 2f:ea:b6:6c:61:33:bd:b5:07:00:55:23:6a:82:09: fa:56:01:d9:97:7a:29:08:dc:dc:cc:80:bc:c1:65: 1d:65:74:88:b4:df:23:e2:03:46:7b:96:a7:8d:86: da:34:e7:00:0b:91:c2:55:ce:57:6b:30:48:25:7f: f1:6b:a9:f3:56:6f:30:c2:02:4e:d2:e4:b4:1c:16: a7:51:c2:df:87:6f:5e:a1:ee:35:6b:e4:29:70:64: 0c:23:c6:ca:a0:6d:ee:b3:a2:8c:9f:8d:63:8c:93: 97:a0:e8:f0:57:8c:fb:57:f6:94:53:c9:00:76:f8: 81:dc:97:31:2a:90:32:dd:74:c1:a9:27:00:19:5d: ff:32:9c:1c:32:67:88:1b:08:d8:66:0a:96:51:7b: 32:fa:dc:de:4b:62:ab:dd:e7:6e:52:bd:31:70:fd: 08:05:84:b0:dd:9b:5d:cc:1f:3b:31:7e:12:f7:ce: 46:5f:18:10:4d:fc:91:ed:29:0d:f7:21:4b:bd:d9: ce:66:11:da:b6:fd:60:42:9b:ec:e8:ea:f9:5e:0e: 1d:91:77:43:3a:d1:42:b1:77:58:d7:2d:5c:ea:6d: 4e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:14:76:72:0D:00:94:CE:3F:65:1F:FC:BD:47:97:3B:8F:F0:E0:4E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8a25146-f5b9-4995-bb0a-067affb408ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.211.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:d2:da:29:91:d7:e9:78:e7:db:60:7f:bc:85:56:4c:c8:b9: 25:d6:99:ea:ab:5f:b1:39:f2:17:52:28:84:39:52:ba:9f:e8: b4:99:f0:4d:59:0e:49:a6:ed:70:ee:e5:6d:e6:52:4d:12:7d: 42:dc:aa:76:a0:fa:20:0c:d9:30:c1:d8:57:10:0e:d7:2e:68: 95:47:c4:9d:73:43:64:e2:d8:3f:f9:76:5e:93:5d:67:6a:48: 29:10:82:98:b4:cc:31:50:ae:76:66:86:dd:d2:39:4f:2b:10: e8:c3:fa:8a:48:e2:78:7b:d0:31:5d:94:49:1b:4e:63:3d:bb: a5:36:e9:0b:ea:01:8c:2b:52:a9:c1:01:05:46:7c:90:d4:cb: 98:d2:74:30:cd:4e:e9:e4:0d:c0:73:bc:85:8a:4a:bc:cf:08: 62:05:2b:d4:7a:36:ab:18:d3:31:90:3d:cf:5d:5c:91:7f:77: fb:26:f2:71:b7:a5:a5:c4:aa:6d:8f:b9:b4:3d:73:d4:12:11: 45:a7:33:6c:d9:b3:76:82:db:cc:60:08:82:48:45:3b:4f:2f: a2:54:66:60:aa:6b:85:64:97:ef:67:a6:1f:8c:1b:a8:f0:bb: 50:01:aa:ad:d5:80:96:00:b0:77:c4:c2:81:48:6b:a2:93:eb: 32:be:61:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP06WFv/Z/hFqrzXTovAwNbUExa4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMDcxMDEzWhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjZhN2E4ZTJkZmU0MWE3OWMwNzI4ZTNiMmM2N2IwNDZh OWQyYmE4YTUwMGJhZTFhODE1MTljOWI5YTJlZjBiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFq7iQB5o/yfkS9nhug3GOjP4LivEvY2hz8KB78i/qtmxh M721BwBVI2qCCfpWAdmXeikI3NzMgLzBZR1ldIi03yPiA0Z7lqeNhto05wALkcJV zldrMEglf/FrqfNWbzDCAk7S5LQcFqdRwt+Hb16h7jVr5ClwZAwjxsqgbe6zooyf jWOMk5eg6PBXjPtX9pRTyQB2+IHclzEqkDLddMGpJwAZXf8ynBwyZ4gbCNhmCpZR ezL63N5LYqvd525SvTFw/QgFhLDdm13MHzsxfhL3zkZfGBBN/JHtKQ33IUu92c5m Edq2/WBCm+zo6vleDh2Rd0M60UKxd1jXLVzqbU4/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwRR2cg0AlM4/ZR/8vUeXO4/w4E4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q4YTI1MTQ2LWY1YjktNDk5NS1iYjBhLTA2N2FmZmI0MDhmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqtMwDQYJKoZIhvcNAQELBQADggEBAFzS2imR1+l459tgf7yFVkzIuSXW meqrX7E58hdSKIQ5Urqf6LSZ8E1ZDkmm7XDu5W3mUk0SfULcqnag+iAM2TDB2FcQ DtcuaJVHxJ1zQ2Ti2D/5dl6TXWdqSCkQgpi0zDFQrnZmht3SOU8rEOjD+opI4nh7 0DFdlEkbTmM9u6U26QvqAYwrUqnBAQVGfJDUy5jSdDDNTunkDcBzvIWKSrzPCGIF K9R6NqsY0zGQPc9dXJF/d/sm8nG3paXEqm2PubQ9c9QSEUWnM2zZs3aC28xgCIJI RTtPL6JUZmCqa4Vkl+9nph+MG6jwu1ABqq3VgJYAsHfEwoFIa6KT6zK+YcM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:37 2025 by rpki-client