$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8cb76dd-7474-448d-acc5-021ee85b1171.roa File: e8cb76dd-7474-448d-acc5-021ee85b1171.roa (raw, json) Hash identifier: Gij3wOLqZfiImisibiN5zPPp0e0iCINXHwysU9CwBkM= Subject key identifier: 7B:1F:7D:41:2D:88:40:5F:0A:35:29:31:06:F5:E3:24:2C:57:E5:61 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 431EEBC15A0498EDE6C93A2CFFBCBE6726F81BE9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8cb76dd-7474-448d-acc5-021ee85b1171.roa Signing time: Fri 26 Sep 2025 00:53:50 +0000 ROA not before: Fri 26 Sep 2025 00:53:50 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1e:eb:c1:5a:04:98:ed:e6:c9:3a:2c:ff:bc:be:67:26:f8:1b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:53:50 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=b992b8d430486ac16794add6b0310de25b9468fd9589ce20b4ad0cdea7576db1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:09:be:c1:40:c4:77:4e:4c:b9:69:18:bd: a0:74:d9:ce:67:68:3b:60:ad:8a:0e:21:5a:40:c9: 9e:f9:35:42:9e:40:46:3e:05:53:92:4f:99:8e:96: 35:28:0f:50:fb:b9:39:18:1f:e5:77:94:7c:29:07: fe:28:1f:ca:86:92:b8:5e:ab:bd:9c:00:e6:8a:dd: ba:32:e9:10:8e:d8:7a:64:41:93:dd:d4:d2:97:6a: bc:1e:6d:9b:b8:e1:2f:be:29:6e:e6:76:2c:b0:a3: 30:93:05:75:ad:a1:8c:1f:50:b9:39:cc:69:a3:e9: e7:fa:95:70:c7:3a:e2:12:7d:3c:23:63:6f:ed:8d: 2b:56:b8:a6:60:cd:e1:d6:b4:6a:ee:f5:a4:73:80: 19:e8:c5:31:71:29:94:d7:eb:a9:d7:0e:98:a8:b2: be:50:81:8e:60:6e:36:ad:ab:f3:48:0e:0b:6c:51: e4:5d:a0:01:1f:48:bb:f8:14:d7:57:eb:a7:04:f9: ea:04:3e:a8:51:6e:12:a6:24:1d:66:e0:be:fe:50: 71:42:f5:11:c8:5f:8f:3c:1c:5e:aa:00:43:5b:04: 13:ac:09:9a:5b:5f:0b:fa:42:ad:7e:ae:51:47:d7: 37:42:70:59:78:f8:16:ad:40:52:a1:dc:1f:dc:ef: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1F:7D:41:2D:88:40:5F:0A:35:29:31:06:F5:E3:24:2C:57:E5:61 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8cb76dd-7474-448d-acc5-021ee85b1171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.228.0/22 Signature Algorithm: sha256WithRSAEncryption 17:7c:b5:30:5b:9a:f4:67:e0:2c:4a:ce:33:65:08:e1:02:3b: fb:4a:b0:bd:88:2f:5d:a2:c3:17:72:6f:a1:aa:12:37:65:30: 57:35:64:36:2a:6f:a9:68:cf:0b:7e:2c:62:d0:51:ab:bf:da: a6:f0:ea:0e:d5:9c:ee:53:7c:d0:9e:f8:fc:cf:9a:4f:22:8a: 1d:b1:f1:62:31:08:b8:87:9e:83:d5:13:a1:60:cc:36:03:61: ea:f7:a0:2e:49:5d:71:3a:46:f1:b5:6c:70:fb:83:88:d7:32: f6:88:d1:e3:5a:8d:53:c5:9b:41:48:5b:41:90:af:3c:6c:89: 66:63:9a:20:ab:ac:73:69:86:56:f4:09:55:be:ec:4f:df:ba: bc:32:23:08:ad:41:ec:13:b3:e2:b5:e9:24:3b:d6:f4:9c:f9: 67:9b:e1:a2:6f:d1:09:29:f6:be:4f:bd:e3:ad:fe:f0:3b:f2: 85:7e:6c:72:c6:c1:01:ed:98:2e:dc:46:22:f7:68:b7:73:36: 9e:a6:e8:be:0a:ca:08:fa:93:8b:58:dd:1a:b3:2b:1d:bf:2d: e8:86:ac:e6:1a:25:c7:0a:ac:62:05:0e:f4:65:fb:82:a4:e5: 5f:93:5d:7d:d8:77:5a:0f:e8:50:29:ea:a7:39:16:88:77:13: 25:c4:04:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQx7rwVoEmO3myTos/7y+Zyb4G+kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDA1MzUwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTkyYjhkNDMwNDg2YWMxNjc5NGFkZDZiMDMxMGRlMjVi OTQ2OGZkOTU4OWNlMjBiNGFkMGNkZWE3NTc2ZGIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChmwm+wUDEd05MuWkYvaB02c5naDtgrYoOIVpAyZ75NUKe QEY+BVOST5mOljUoD1D7uTkYH+V3lHwpB/4oH8qGkrheq72cAOaK3boy6RCO2Hpk QZPd1NKXarwebZu44S++KW7mdiywozCTBXWtoYwfULk5zGmj6ef6lXDHOuISfTwj Y2/tjStWuKZgzeHWtGru9aRzgBnoxTFxKZTX66nXDpiosr5QgY5gbjatq/NIDgts UeRdoAEfSLv4FNdX66cE+eoEPqhRbhKmJB1m4L7+UHFC9RHIX488HF6qAENbBBOs CZpbXwv6Qq1+rlFH1zdCcFl4+BatQFKh3B/c73RdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUex99QS2IQF8KNSkxBvXjJCxX5WEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U4Y2I3NmRkLTc0NzQtNDQ4ZC1hY2M1LTAyMWVlODViMTE3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDreQwDQYJKoZIhvcNAQELBQADggEBABd8tTBbmvRn4CxKzjNlCOECO/tK sL2IL12iwxdyb6GqEjdlMFc1ZDYqb6lozwt+LGLQUau/2qbw6g7VnO5TfNCe+PzP mk8iih2x8WIxCLiHnoPVE6FgzDYDYer3oC5JXXE6RvG1bHD7g4jXMvaI0eNajVPF m0FIW0GQrzxsiWZjmiCrrHNphlb0CVW+7E/furwyIwitQewTs+K16SQ71vSc+Web 4aJv0Qkp9r5PveOt/vA78oV+bHLGwQHtmC7cRiL3aLdzNp6m6L4Kygj6k4tY3Rqz Kx2/LeiGrOYaJccKrGIFDvRl+4Kk5V+TXX3Yd1oP6FAp6qc5Foh3EyXEBNk= -----END CERTIFICATE-----Generated at Mon Oct 20 11:56:04 2025 by rpki-client