$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31f7c697-a59b-4339-b949-6087d646dbb1.roa File: 31f7c697-a59b-4339-b949-6087d646dbb1.roa (raw, json) Hash identifier: veH66iNxiSOjb9+qW/UoDqsSW5g0Wrt4CI44uck+wks= Subject key identifier: CB:CE:F9:D8:9D:9C:E1:B1:90:C7:5E:A8:62:90:14:A2:8F:2D:29:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7A96C38CB9EAF82DB3733ACED12CFF999C0010A2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31f7c697-a59b-4339-b949-6087d646dbb1.roa Signing time: Fri 26 Sep 2025 00:42:18 +0000 ROA not before: Fri 26 Sep 2025 00:42:18 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:96:c3:8c:b9:ea:f8:2d:b3:73:3a:ce:d1:2c:ff:99:9c:00:10:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:42:18 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=fea1bcda910f121ded8ae9e2ab692b161d8746070a4e94abd451524d6200f662, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:67:d3:d4:e0:9d:e2:31:16:0d:fe:75:69: 0e:df:c3:16:58:25:80:2a:92:5b:13:fe:e1:53:af: 7d:43:90:5a:aa:31:e6:6e:1a:ab:c3:0d:b4:e7:8a: 98:91:a6:c8:1b:89:65:72:69:70:03:bf:30:71:3a: f1:d7:a5:13:05:9f:b6:11:02:67:17:48:4f:48:0c: 65:c9:b0:c9:d6:19:11:0b:cb:00:be:43:ff:db:bc: 57:fd:29:24:6e:04:25:c5:ee:4f:83:3a:4c:96:32: ad:e0:be:a2:23:c2:20:aa:59:65:f6:16:23:b8:22: cd:36:bf:9e:07:ae:92:e2:d0:ed:0b:a4:74:0a:c0: 14:4a:d5:0e:ce:ad:ee:d9:31:a7:2b:d6:c8:f7:12: 26:39:6f:0d:db:9f:cc:e9:26:8a:05:6d:25:15:36: 81:f9:b5:a2:d1:bc:d1:06:55:59:18:4c:92:b9:e2: 57:61:90:39:ad:f9:b4:93:a3:96:15:00:c9:29:fe: 72:da:57:e7:7e:1e:b9:9b:6e:50:53:74:c7:d0:2c: d1:c1:c6:bd:2d:59:e0:45:74:5d:f0:3c:af:f2:74: 7d:95:b6:77:9e:3e:96:79:4f:fc:b8:5c:6b:35:d2: af:a8:3d:26:2c:b8:04:f8:0c:0b:f7:c7:21:6c:7c: df:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CE:F9:D8:9D:9C:E1:B1:90:C7:5E:A8:62:90:14:A2:8F:2D:29:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31f7c697-a59b-4339-b949-6087d646dbb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.180.0/22 Signature Algorithm: sha256WithRSAEncryption 65:66:eb:42:25:e0:80:0c:b4:25:86:c1:09:43:0a:42:4d:f7: 31:89:48:1f:35:d2:d0:74:85:2f:29:67:be:3b:c1:6a:bd:04: e1:2c:79:fd:97:de:0d:bc:8f:36:76:73:79:9b:0d:83:a6:be: 9f:2d:99:6f:35:5e:87:65:f8:c7:e2:2c:53:5b:ab:cc:76:9b: 5c:79:b6:54:8e:e0:08:e3:d4:bf:b5:22:a3:09:85:01:7b:35: 05:69:84:aa:c0:6e:b2:f9:61:00:c8:05:ad:09:3e:78:56:56: 36:3b:fb:23:fe:17:33:03:a1:e7:83:0a:25:fa:2b:c5:ed:da: f2:b9:43:b0:d9:6b:9d:29:66:e2:e0:4d:4d:78:92:ed:6b:2f: c7:7d:1c:c1:50:2e:cc:1d:97:4a:79:06:48:cb:bb:6b:66:27: d6:a3:8c:f3:d4:1c:98:dc:c5:0a:52:fd:62:a9:dd:09:02:9e: 92:96:39:ad:0a:02:5d:c6:04:73:a0:c0:7d:52:4a:7b:39:64: c9:ca:c2:a0:8d:18:7c:f0:48:1b:41:2d:23:e9:ee:97:25:dd: 38:e9:7c:4e:1b:ab:eb:c3:71:a3:b7:5b:18:df:5d:cb:04:47: d6:64:00:6d:57:f1:e6:20:54:dc:24:f3:c8:84:dd:81:8a:d9: a7:b8:5b:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUepbDjLnq+C2zczrO0Sz/mZwAEKIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDA0MjE4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZWExYmNkYTkxMGYxMjFkZWQ4YWU5ZTJhYjY5MmIxNjFk ODc0NjA3MGE0ZTk0YWJkNDUxNTI0ZDYyMDBmNjYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx0mfT1OCd4jEWDf51aQ7fwxZYJYAqklsT/uFTr31DkFqq MeZuGqvDDbTnipiRpsgbiWVyaXADvzBxOvHXpRMFn7YRAmcXSE9IDGXJsMnWGREL ywC+Q//bvFf9KSRuBCXF7k+DOkyWMq3gvqIjwiCqWWX2FiO4Is02v54HrpLi0O0L pHQKwBRK1Q7Ore7ZMacr1sj3EiY5bw3bn8zpJooFbSUVNoH5taLRvNEGVVkYTJK5 4ldhkDmt+bSTo5YVAMkp/nLaV+d+HrmbblBTdMfQLNHBxr0tWeBFdF3wPK/ydH2V tneePpZ5T/y4XGs10q+oPSYsuAT4DAv3xyFsfN/tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUy8752J2c4bGQx16oYpAUoo8tKcUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMxZjdjNjk3LWE1OWItNDMzOS1iOTQ5LTYwODdkNjQ2ZGJiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDqrQwDQYJKoZIhvcNAQELBQADggEBAGVm60Il4IAMtCWGwQlDCkJN9zGJ SB810tB0hS8pZ747wWq9BOEsef2X3g28jzZ2c3mbDYOmvp8tmW81Xodl+MfiLFNb q8x2m1x5tlSO4Ajj1L+1IqMJhQF7NQVphKrAbrL5YQDIBa0JPnhWVjY7+yP+FzMD oeeDCiX6K8Xt2vK5Q7DZa50pZuLgTU14ku1rL8d9HMFQLswdl0p5BkjLu2tmJ9aj jPPUHJjcxQpS/WKp3QkCnpKWOa0KAl3GBHOgwH1SSns5ZMnKwqCNGHzwSBtBLSPp 7pcl3TjpfE4bq+vDcaO3WxjfXcsER9ZkAG1X8eYgVNwk88iE3YGK2ae4Wzw= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:07 2025 by rpki-client