$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de370d5e-befb-48af-ae8b-a76403e8d1c8.roa File: de370d5e-befb-48af-ae8b-a76403e8d1c8.roa (raw, json) Hash identifier: KyBb6a3vPUh5nYQ+wHIW2ie0kJLwjGHlyvTtensMwpA= Subject key identifier: 2F:23:4B:3D:F9:8B:E1:39:8E:61:8D:1D:32:0C:D4:A4:37:58:D9:8B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0B51CE4C56B30191BA7944921AC5825F25CFA057 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de370d5e-befb-48af-ae8b-a76403e8d1c8.roa Signing time: Thu 25 Sep 2025 20:15:03 +0000 ROA not before: Thu 25 Sep 2025 20:15:03 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:51:ce:4c:56:b3:01:91:ba:79:44:92:1a:c5:82:5f:25:cf:a0:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:15:03 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=f5a1d0d2db85e7ac4bd2823bbea4922e949b12670c43ea4939b4ff470bf1c536, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ba:2a:09:c2:25:51:62:c7:4f:ad:b0:a3:38: 5b:95:f5:87:55:89:bf:63:77:23:7a:73:58:92:4e: a3:08:36:37:1d:db:39:94:1b:ae:a5:51:fe:b9:a3: 59:14:63:9e:16:d1:ea:d4:c4:3e:00:c2:c2:26:5c: 55:8c:49:84:c1:91:07:91:69:28:4d:be:e8:7f:8f: 21:0f:dd:83:6a:f7:b8:49:b3:51:53:b0:cb:3c:49: f1:27:1e:a1:23:a5:b0:36:2d:ff:80:8f:5b:2d:3c: d9:c9:60:31:14:74:24:31:6e:71:21:20:7e:fa:b2: 70:9b:cc:a7:21:bb:8b:3f:9d:fb:e7:43:e9:62:38: 2b:3d:36:f7:14:fd:af:df:04:82:80:e3:7e:33:49: fb:3d:30:ba:b7:59:8a:89:e0:7a:5e:6a:b1:97:5e: 11:76:0a:9f:32:36:f2:ee:cc:83:5e:1b:c4:4c:75: ee:c8:3c:bb:3a:08:ec:e9:ef:61:e2:2d:6e:bc:2c: 42:06:60:a4:bd:8f:b6:b4:27:b1:0d:89:c7:7a:22: 78:2f:60:fb:1d:7f:9b:40:d5:39:89:83:44:ad:da: 33:ec:39:6f:e2:f9:60:75:ab:ac:64:24:34:1e:d1: 48:2c:6f:3a:e0:dc:2e:50:e8:fc:f5:02:b6:4f:16: cd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:23:4B:3D:F9:8B:E1:39:8E:61:8D:1D:32:0C:D4:A4:37:58:D9:8B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de370d5e-befb-48af-ae8b-a76403e8d1c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.28.0/24 Signature Algorithm: sha256WithRSAEncryption 99:e1:74:59:1b:8c:f0:1f:8f:bc:4c:93:12:5e:3f:54:70:53: a2:b7:9a:06:c0:e0:76:c4:f4:79:93:52:80:21:8b:25:fb:84: c9:00:37:fe:c6:67:cb:6e:a4:5c:36:db:18:e1:3f:a4:e1:2b: 33:b4:a7:c9:f5:af:b7:7e:2f:8b:39:72:35:3d:05:c4:b4:41: 36:05:3b:32:27:f0:53:81:ee:ce:60:8e:5b:08:54:5b:ac:72: 57:0f:1c:57:e7:3c:4f:32:2d:f6:ad:56:97:1c:44:82:ec:32: 03:ae:c7:6a:d3:eb:d6:6f:bc:20:40:e9:3e:d6:82:39:24:9d: c5:26:07:66:f4:ec:30:a3:43:ed:ab:d3:03:37:94:72:8e:43: 5d:38:6e:f1:cb:dd:eb:cd:68:7f:1f:8a:b4:8e:97:fd:16:6f: 59:4c:17:5d:86:e5:b5:a1:df:f0:78:92:28:cd:f0:4e:56:e6: 42:c2:c4:39:8b:45:4f:ad:6e:83:e3:b0:bb:b9:a0:a0:0d:8a: 83:d3:24:1a:7c:c0:74:ae:bf:49:e4:f6:d3:23:c1:6b:62:d8: ed:01:07:ac:6f:0d:d3:33:1b:9d:61:56:37:0d:f6:66:5d:25: 9a:5f:d9:ca:27:6d:ae:e6:c0:eb:27:5f:85:c1:f5:94:cf:20: 8f:be:61:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC1HOTFazAZG6eUSSGsWCXyXPoFcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjAxNTAzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNWExZDBkMmRiODVlN2FjNGJkMjgyM2JiZWE0OTIyZTk0 OWIxMjY3MGM0M2VhNDkzOWI0ZmY0NzBiZjFjNTM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVuioJwiVRYsdPrbCjOFuV9YdVib9jdyN6c1iSTqMINjcd 2zmUG66lUf65o1kUY54W0erUxD4AwsImXFWMSYTBkQeRaShNvuh/jyEP3YNq97hJ s1FTsMs8SfEnHqEjpbA2Lf+Aj1stPNnJYDEUdCQxbnEhIH76snCbzKchu4s/nfvn Q+liOCs9NvcU/a/fBIKA434zSfs9MLq3WYqJ4HpearGXXhF2Cp8yNvLuzINeG8RM de7IPLs6COzp72HiLW68LEIGYKS9j7a0J7ENicd6IngvYPsdf5tA1TmJg0St2jPs OW/i+WB1q6xkJDQe0Ugsbzrg3C5Q6Pz1ArZPFs0pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULyNLPfmL4TmOYY0dMgzUpDdY2YswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RlMzcwZDVlLWJlZmItNDhhZi1hZThiLWE3NjQwM2U4ZDFjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqxwwDQYJKoZIhvcNAQELBQADggEBAJnhdFkbjPAfj7xMkxJeP1RwU6K3 mgbA4HbE9HmTUoAhiyX7hMkAN/7GZ8tupFw22xjhP6ThKzO0p8n1r7d+L4s5cjU9 BcS0QTYFOzIn8FOB7s5gjlsIVFusclcPHFfnPE8yLfatVpccRILsMgOux2rT69Zv vCBA6T7WgjkkncUmB2b07DCjQ+2r0wM3lHKOQ104bvHL3evNaH8firSOl/0Wb1lM F12G5bWh3/B4kijN8E5W5kLCxDmLRU+tboPjsLu5oKANioPTJBp8wHSuv0nk9tMj wWti2O0BB6xvDdMzG51hVjcN9mZdJZpf2conba7mwOsnX4XB9ZTPII++YRk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:42:07 2025 by rpki-client