$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/123c2a18-b858-42c0-b70a-c108eb293b7a.roa File: 123c2a18-b858-42c0-b70a-c108eb293b7a.roa (raw, json) Hash identifier: tIJex1Bx+wnUcfreBW7+RBmJSFmyv85fmmF5BRdV/M0= Subject key identifier: 65:1E:93:D4:76:1F:7F:51:41:F0:DF:46:24:94:17:0B:89:DC:50:A7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 64E0C26AAD33596F007AD899BE862EE33F3FFDF8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/123c2a18-b858-42c0-b70a-c108eb293b7a.roa Signing time: Thu 25 Sep 2025 23:17:31 +0000 ROA not before: Thu 25 Sep 2025 23:17:31 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e0:c2:6a:ad:33:59:6f:00:7a:d8:99:be:86:2e:e3:3f:3f:fd:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:17:31 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=0d248088f0ffdf923f8147ce561b20dbe3bf90ba518c5ae91e7759879b5c404f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a4:c3:9d:89:d6:0b:4e:5a:9e:0b:da:99:a1: cd:77:91:08:94:2b:78:d5:ce:8c:a1:f5:dd:ea:57: 36:b5:e2:4e:f5:bb:0c:b1:c5:17:f4:f7:a4:1a:5a: 76:ef:24:31:d2:c8:87:f9:74:b7:72:54:eb:6f:80: 02:f0:12:0a:3e:1c:7e:d6:56:45:9e:32:09:e3:91: 46:ae:28:a3:e5:78:40:72:21:51:4d:1c:c7:2a:2f: 32:94:7a:31:de:52:b2:77:8b:8d:b0:5b:9b:e9:f9: ba:77:6d:48:52:5a:c5:e8:8d:fd:1e:35:c0:d2:db: b8:69:97:a2:82:b6:35:5d:f4:bf:9a:a0:97:28:e3: 0e:13:ae:65:d5:3f:b4:af:5e:9f:12:8e:14:51:bf: 73:d5:b7:35:51:33:78:08:0a:57:f8:0a:03:f6:35: cf:ff:43:cf:22:08:a3:57:44:5e:c1:88:7c:5c:bf: 97:07:11:68:a2:24:db:7d:81:5a:1e:d7:a6:bb:08: e3:93:37:32:a5:fa:ee:4a:1f:53:70:e1:a9:10:5a: 7a:c6:db:1e:44:78:3f:f9:65:4d:9c:6f:af:ad:cf: 18:88:31:6d:0d:06:62:fd:66:dd:13:62:41:2f:c5: 73:76:eb:09:22:e2:86:24:a3:c0:fd:fe:71:12:e3: 8d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1E:93:D4:76:1F:7F:51:41:F0:DF:46:24:94:17:0B:89:DC:50:A7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/123c2a18-b858-42c0-b70a-c108eb293b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.60.0/23 Signature Algorithm: sha256WithRSAEncryption b2:a8:a1:25:fc:16:02:f6:17:68:cc:78:c7:91:3c:7f:d1:86: 1b:84:ad:ab:8a:99:8f:a9:1d:6c:76:1a:6b:ea:7a:f6:a0:bd: d5:50:28:1f:46:30:e7:4f:1b:b7:b7:d6:96:1f:c1:dc:21:3a: 00:a0:ff:58:94:0e:95:1a:6a:24:d2:27:2c:1d:ef:dc:16:a2: c2:7d:c4:92:5d:13:38:d6:52:b9:3b:06:3f:a8:1a:29:be:96: 06:67:1c:f8:75:f0:3b:a4:9e:d6:b9:16:8f:ff:c2:ca:2b:e7: 08:1d:87:a2:d5:12:b6:ef:17:d7:1a:59:a6:ff:a9:68:4d:aa: 8a:fb:5c:d6:a1:71:b4:de:b4:ea:9c:72:16:e5:2e:e9:99:e8: ac:bf:3b:87:f1:39:14:4f:42:39:71:f9:11:1d:70:dd:3c:89: 86:86:6c:da:27:92:c9:7b:3d:76:c9:38:60:f0:ca:7d:fa:36: d9:b6:e6:0e:43:20:5d:7d:3a:50:c8:bb:f2:da:41:e9:20:e9: 02:cf:c3:d1:81:31:80:7a:a1:f0:62:9a:51:05:ad:f4:15:d8: 79:6a:71:9a:d0:9d:37:da:a7:43:87:64:36:3c:43:45:a9:06: b2:0c:7a:6b:09:d2:6a:c4:2c:d4:be:83:68:b5:6b:33:39:1c: 8b:de:1c:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZODCaq0zWW8AetiZvoYu4z8//fgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMxNzMxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDI0ODA4OGYwZmZkZjkyM2Y4MTQ3Y2U1NjFiMjBkYmUz YmY5MGJhNTE4YzVhZTkxZTc3NTk4NzliNWM0MDRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMpMOdidYLTlqeC9qZoc13kQiUK3jVzoyh9d3qVza14k71 uwyxxRf096QaWnbvJDHSyIf5dLdyVOtvgALwEgo+HH7WVkWeMgnjkUauKKPleEBy IVFNHMcqLzKUejHeUrJ3i42wW5vp+bp3bUhSWsXojf0eNcDS27hpl6KCtjVd9L+a oJco4w4TrmXVP7SvXp8SjhRRv3PVtzVRM3gIClf4CgP2Nc//Q88iCKNXRF7BiHxc v5cHEWiiJNt9gVoe16a7COOTNzKl+u5KH1Nw4akQWnrG2x5EeD/5ZU2cb6+tzxiI MW0NBmL9Zt0TYkEvxXN26wki4oYko8D9/nES442pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZR6T1HYff1FB8N9GJJQXC4ncUKcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEyM2MyYTE4LWI4NTgtNDJjMC1iNzBhLWMxMDhlYjI5M2I3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqzwwDQYJKoZIhvcNAQELBQADggEBALKooSX8FgL2F2jMeMeRPH/RhhuE rauKmY+pHWx2GmvqevagvdVQKB9GMOdPG7e31pYfwdwhOgCg/1iUDpUaaiTSJywd 79wWosJ9xJJdEzjWUrk7Bj+oGim+lgZnHPh18Duknta5Fo//wsor5wgdh6LVErbv F9caWab/qWhNqor7XNahcbTetOqcchblLumZ6Ky/O4fxORRPQjlx+REdcN08iYaG bNonksl7PXbJOGDwyn36Ntm25g5DIF19OlDIu/LaQekg6QLPw9GBMYB6ofBimlEF rfQV2HlqcZrQnTfap0OHZDY8Q0WpBrIMemsJ0mrELNS+g2i1azM5HIveHLY= -----END CERTIFICATE-----Generated at Fri Oct 17 22:14:54 2025 by rpki-client