$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eab9af75-5080-4222-9f78-066a4d28beaf.roa File: eab9af75-5080-4222-9f78-066a4d28beaf.roa (raw, json) Hash identifier: tqLJNYeLM/Kq/1yxxqJ8pSeP495qDeUnPep4s3Gpe+Y= Subject key identifier: 10:71:C4:DD:65:18:68:CE:A6:DC:58:F7:45:5B:E3:02:CE:D9:69:A2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A4A418369A38371F645A5AC2E5ADD1C88B6D9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eab9af75-5080-4222-9f78-066a4d28beaf.roa Signing time: Thu 25 Sep 2025 22:14:42 +0000 ROA not before: Thu 25 Sep 2025 22:14:42 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4a:41:83:69:a3:83:71:f6:45:a5:ac:2e:5a:dd:1c:88:b6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:14:42 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=61006f89f3023902689b29a30003ea68b49646c40d6207a085295063241151b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:da:0f:7f:ec:81:a6:6b:a9:73:72:cd:14:05: 0c:c3:e0:e3:88:ac:84:38:9c:eb:aa:91:f8:e3:ec: c3:4f:1f:06:53:ee:3b:25:6c:08:a9:dc:16:b0:d2: f2:69:56:f4:f2:4b:38:d5:6a:36:af:8e:83:c8:5e: b9:f9:cc:ef:51:d6:68:63:21:f2:74:2d:01:3c:9f: 4b:14:e5:7b:b4:40:6c:db:b6:58:1f:80:77:a8:bd: ee:74:8c:4d:02:00:e9:5f:08:c7:41:64:26:d1:c2: 2a:34:ab:d3:6c:d9:a1:df:85:ef:6c:27:21:b1:69: 6c:7c:97:59:be:3e:76:9d:f2:d9:57:90:52:d3:f2: 49:b6:8f:a6:4a:c1:3d:51:ab:dd:8e:6e:3b:ad:97: a3:94:f3:f2:87:b9:c8:d8:1f:03:ba:30:5b:c0:44: 82:72:35:02:be:28:96:19:70:dd:89:98:42:22:4a: 19:38:49:62:f1:ac:07:b4:2f:bc:b2:ed:d6:f4:84: 25:07:b6:1f:93:93:48:5d:ec:0b:10:f7:8a:2d:96: 63:54:b3:31:4b:52:22:30:89:16:bc:85:b9:f7:c9: 25:77:41:96:58:83:6a:74:2a:de:06:dc:83:00:5d: a0:57:49:2b:55:67:c5:9d:98:bb:21:61:cc:83:89: 30:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:71:C4:DD:65:18:68:CE:A6:DC:58:F7:45:5B:E3:02:CE:D9:69:A2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eab9af75-5080-4222-9f78-066a4d28beaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.174.0/23 Signature Algorithm: sha256WithRSAEncryption 72:41:7e:f0:54:d2:b2:7e:c0:f4:5a:47:51:95:66:b8:aa:99: 4d:34:bd:06:d2:92:48:fb:83:ea:94:b4:83:79:82:b9:40:41: 84:a3:60:f0:5d:94:a7:3b:6e:0f:95:7f:55:93:37:49:c9:20: 36:1e:8c:56:36:33:2d:70:9b:4b:e9:40:9c:b1:47:76:5f:3e: 62:93:e7:38:11:c7:73:fc:e5:35:fd:6d:28:5d:a1:d5:24:ec: 97:9d:49:25:63:73:f3:ed:77:1a:f0:e0:33:ae:c8:d4:e7:ac: 6d:e3:ed:c3:3c:5d:79:a1:f0:fc:4f:f8:97:58:4b:9f:c9:0d: 5b:41:c5:df:73:d6:5a:41:33:ef:cf:3e:fd:93:a3:4e:aa:4e: 79:78:ca:4c:41:e3:ce:0f:c1:51:90:5d:d8:7d:5e:0c:fe:d9: 7a:19:dd:0b:34:e9:1e:d4:e3:3a:39:0b:16:64:99:08:97:1a: f3:20:e2:89:57:09:0b:38:ee:02:59:a3:95:51:68:44:37:cd: 49:86:1f:f1:1c:1d:06:86:69:a7:03:c0:be:cf:08:11:79:a0: 42:9a:85:36:9b:fa:5a:e9:6e:2f:78:6e:83:86:a3:2e:e3:05: 70:33:92:76:bf:93:12:4f:9b:4a:f0:c3:72:44:d0:5a:fe:21: 41:a4:9e:50 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITSkpBg2mjg3H2RaWsLlrdHIi22TANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjUyMjE0NDJaFw0yNTEwMzAyMzU5NTla MHoxSTBHBgNVBAUTQDYxMDA2Zjg5ZjMwMjM5MDI2ODliMjlhMzAwMDNlYTY4YjQ5 NjQ2YzQwZDYyMDdhMDg1Mjk1MDYzMjQxMTUxYjExLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMPaD3/sgaZrqXNyzRQFDMPg44ishDic66qR+OPsw08fBlPu OyVsCKncFrDS8mlW9PJLONVqNq+Og8heufnM71HWaGMh8nQtATyfSxTle7RAbNu2 WB+Ad6i97nSMTQIA6V8Ix0FkJtHCKjSr02zZod+F72wnIbFpbHyXWb4+dp3y2VeQ UtPySbaPpkrBPVGr3Y5uO62Xo5Tz8oe5yNgfA7owW8BEgnI1Ar4olhlw3YmYQiJK GThJYvGsB7QvvLLt1vSEJQe2H5OTSF3sCxD3ii2WY1SzMUtSIjCJFryFuffJJXdB lliDanQq3gbcgwBdoFdJK1VnxZ2YuyFhzIOJMNUCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQQccTdZRhozqbcWPdFW+MCztlpojAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvZWFiOWFmNzUtNTA4MC00MjIyLTlmNzgtMDY2YTRkMjhiZWFmLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAQOlrjANBgkqhkiG9w0BAQsFAAOCAQEAckF+8FTSsn7A9FpHUZVmuKqZTTS9 BtKSSPuD6pS0g3mCuUBBhKNg8F2UpztuD5V/VZM3SckgNh6MVjYzLXCbS+lAnLFH dl8+YpPnOBHHc/zlNf1tKF2h1STsl51JJWNz8+13GvDgM67I1OesbePtwzxdeaHw /E/4l1hLn8kNW0HF33PWWkEz788+/ZOjTqpOeXjKTEHjzg/BUZBd2H1eDP7Zehnd CzTpHtTjOjkLFmSZCJca8yDiiVcJCzjuAlmjlVFoRDfNSYYf8RwdBoZppwPAvs8I EXmgQpqFNpv6WuluL3hug4ajLuMFcDOSdr+TEk+bSvDDckTQWv4hQaSeUA== -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:27 2025 by rpki-client