$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/355e7c31-c3de-4075-baf4-7a395956242e.roa File: 355e7c31-c3de-4075-baf4-7a395956242e.roa (raw, json) Hash identifier: vuMVYIbGZnBmqhAjsbGuGm1JerXt/Vgsil4L07YBFP8= Subject key identifier: 7D:83:E2:15:B6:75:F5:E5:BF:2F:4A:60:5D:75:6A:E3:89:00:72:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20DB826E81960734EBE5BEA02BD3FB5660C638A9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/355e7c31-c3de-4075-baf4-7a395956242e.roa Signing time: Thu 25 Sep 2025 20:39:55 +0000 ROA not before: Thu 25 Sep 2025 20:39:55 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:db:82:6e:81:96:07:34:eb:e5:be:a0:2b:d3:fb:56:60:c6:38:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:39:55 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=67a7b083e2f3715f51302b53f85be48a6f03613e7b2739690b37c411f3524a1a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7c:d3:21:41:39:c0:fe:ec:4f:19:91:71:3e: 26:72:e7:01:4a:fc:ca:08:84:de:7a:e9:23:a7:fb: f1:29:85:4c:31:c9:a0:42:44:a6:64:3f:47:f2:61: 65:03:d0:a6:aa:c0:ca:b5:a6:4c:aa:76:83:8d:17: ca:0e:ff:d5:4f:4a:14:ad:dc:8e:46:ec:7f:4a:fc: c5:73:70:9d:a8:09:da:fa:8d:0b:33:63:5c:70:91: 71:9e:cf:29:58:88:9b:7c:09:01:0c:00:23:4c:3f: 6d:bd:d2:e9:b0:1d:a3:46:4b:b4:b4:60:0a:85:c3: e8:0b:e5:b8:e8:6f:95:25:a4:e9:5f:3f:f5:0b:9a: a1:9d:7e:f9:06:f0:75:b5:ab:6e:d9:8e:86:3f:7a: 9e:81:cf:2f:31:fb:0f:0d:96:74:fc:cb:28:2a:9d: 7f:ca:3f:7b:91:09:a4:9e:4f:15:6f:54:6e:dd:61: ba:c4:af:e1:2c:6d:b4:43:ca:63:8b:f0:8e:db:66: 29:59:50:6e:b2:b5:e4:24:81:8a:21:db:70:3c:92: d7:cb:23:fa:58:f5:7c:4b:a4:34:aa:69:62:12:dc: 9a:d7:23:3a:88:5b:de:aa:f3:81:5c:20:fe:e0:84: 1e:3c:52:74:47:87:8f:4a:92:d4:94:aa:3a:4f:25: 93:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:83:E2:15:B6:75:F5:E5:BF:2F:4A:60:5D:75:6A:E3:89:00:72:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/355e7c31-c3de-4075-baf4-7a395956242e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.235.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:63:99:a2:4b:cd:8d:a9:0a:c8:6e:6b:d2:e0:27:ae:4d:97: dc:b4:09:4c:0b:17:08:3b:b7:e0:a6:87:d8:7e:83:fa:2e:8d: 4e:47:c8:47:00:e4:aa:9e:e7:0f:8a:e1:f4:c8:f0:46:4c:23: a5:4d:0a:59:b3:62:ce:1b:06:ef:aa:7e:e2:7f:34:09:0f:7d: 7f:dc:22:cd:2e:95:a4:d4:1d:3a:55:bd:46:6f:d2:03:ac:ad: 3a:89:d0:e7:a1:0e:b1:0c:ca:03:03:9b:26:c6:0d:00:64:e2: 07:be:ec:4d:00:1c:33:70:29:7d:7a:c2:01:7c:d6:96:9c:09: 6a:6e:af:10:ac:8e:e0:58:87:69:46:97:a5:ca:b1:63:0e:c4: 51:e5:d5:55:be:7b:76:c3:11:e0:52:1d:41:c1:20:cf:5b:5d: 79:51:e2:69:1e:37:13:0e:89:45:a3:24:65:40:3e:34:96:21: 69:00:39:96:ed:87:58:9b:63:05:cd:bb:00:0d:0b:98:06:17: f8:6a:db:87:4e:ec:56:d3:5d:3e:7d:a8:81:4f:b0:f1:30:0b: b9:58:3f:f0:08:95:56:f7:cd:50:a3:1c:4f:54:8d:ee:26:7b: 5e:c1:01:a2:4f:ca:19:0e:b4:f7:f4:c6:11:5b:08:03:87:08: a3:73:0f:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUINuCboGWBzTr5b6gK9P7VmDGOKkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjAzOTU1WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2N2E3YjA4M2UyZjM3MTVmNTEzMDJiNTNmODViZTQ4YTZm MDM2MTNlN2IyNzM5NjkwYjM3YzQxMWYzNTI0YTFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhfNMhQTnA/uxPGZFxPiZy5wFK/MoIhN566SOn+/EphUwx yaBCRKZkP0fyYWUD0KaqwMq1pkyqdoONF8oO/9VPShSt3I5G7H9K/MVzcJ2oCdr6 jQszY1xwkXGezylYiJt8CQEMACNMP2290umwHaNGS7S0YAqFw+gL5bjob5UlpOlf P/ULmqGdfvkG8HW1q27ZjoY/ep6Bzy8x+w8NlnT8yygqnX/KP3uRCaSeTxVvVG7d YbrEr+EsbbRDymOL8I7bZilZUG6yteQkgYoh23A8ktfLI/pY9XxLpDSqaWIS3JrX IzqIW96q84FcIP7ghB48UnRHh49KktSUqjpPJZPRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfYPiFbZ19eW/L0pgXXVq44kActAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1NWU3YzMxLWMzZGUtNDA3NS1iYWY0LTdhMzk1OTU2MjQyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADreswDQYJKoZIhvcNAQELBQADggEBAI9jmaJLzY2pCshua9LgJ65Nl9y0 CUwLFwg7t+Cmh9h+g/oujU5HyEcA5Kqe5w+K4fTI8EZMI6VNClmzYs4bBu+qfuJ/ NAkPfX/cIs0ulaTUHTpVvUZv0gOsrTqJ0OehDrEMygMDmybGDQBk4ge+7E0AHDNw KX16wgF81pacCWpurxCsjuBYh2lGl6XKsWMOxFHl1VW+e3bDEeBSHUHBIM9bXXlR 4mkeNxMOiUWjJGVAPjSWIWkAOZbth1ibYwXNuwANC5gGF/hq24dO7FbTXT59qIFP sPEwC7lYP/AIlVb3zVCjHE9Uje4me17BAaJPyhkOtPf0xhFbCAOHCKNzDyQ= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:21 2025 by rpki-client