$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7821dd83-1365-4aea-a47d-71d56565c1c8.roa File: 7821dd83-1365-4aea-a47d-71d56565c1c8.roa (raw, json) Hash identifier: N97gqiuaWNPM0XlBL0yNuuyQd0FPupQhRi50TjyEvwU= Subject key identifier: 25:C8:45:7A:C7:F6:20:EE:82:EF:B5:C8:09:A5:8D:37:93:58:E9:88 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 733BB741AE3C236185859FB26BA8925C72DAD5EC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7821dd83-1365-4aea-a47d-71d56565c1c8.roa Signing time: Thu 25 Sep 2025 21:09:50 +0000 ROA not before: Thu 25 Sep 2025 21:09:50 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3b:b7:41:ae:3c:23:61:85:85:9f:b2:6b:a8:92:5c:72:da:d5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 21:09:50 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=53a739fad44324d67d899fc50604abc82a264b86b71c2f4293614195b9a8f90b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:3e:ca:78:7c:0b:e9:43:44:04:df:de:6e: 33:e1:72:07:7f:b6:65:d2:5a:9d:4b:ef:14:8b:91: 79:03:71:b3:ba:ec:e4:67:19:5e:46:86:aa:c9:e5: db:1c:e6:63:2c:50:6e:cb:2e:75:46:b5:c8:5a:46: 15:b6:12:fd:62:e3:73:fc:32:ef:de:84:75:87:f4: 9a:19:31:15:5f:5d:03:fe:3b:ff:35:0c:b7:f9:0a: ad:0a:46:f9:a5:c2:2a:d0:04:0a:70:8f:c2:d8:20: 4c:5f:cb:7f:05:66:3d:7b:68:03:af:2f:76:b6:e0: 1d:0b:da:48:a3:4f:f7:17:a2:88:31:3f:78:10:90: 70:d8:72:12:03:60:40:c9:c4:8f:de:6f:74:26:69: 9e:65:69:b3:d2:cd:f0:30:b4:2f:79:f3:2c:29:9b: 9b:87:26:b1:e1:90:73:18:7f:bc:cc:75:57:08:ee: 48:d0:8b:f4:df:b3:68:d6:7b:f1:da:fe:30:8a:da: 7f:09:3b:d1:a7:58:c9:bd:56:04:f3:72:5e:01:dd: ec:ed:f4:d7:d0:ad:fb:ed:c3:f8:c9:c0:94:15:02: b9:64:79:86:8e:62:8b:72:27:f0:12:59:77:db:36: da:3c:9b:50:18:ef:11:bf:1e:9a:22:ee:78:eb:76: 3c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C8:45:7A:C7:F6:20:EE:82:EF:B5:C8:09:A5:8D:37:93:58:E9:88 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7821dd83-1365-4aea-a47d-71d56565c1c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.171.0/24 Signature Algorithm: sha256WithRSAEncryption 59:5e:cb:4a:be:a0:d1:c1:ef:b8:cb:82:f4:33:f5:c4:88:6a: d3:bf:fc:e2:c8:97:56:15:b6:59:20:cf:3d:20:0d:aa:d4:1e: e4:3c:e8:c8:04:5b:9a:86:88:2d:39:a0:9f:f2:f7:a7:14:ca: 06:36:d0:f2:7d:cd:0b:3a:1a:0f:5a:b9:61:88:dd:9b:48:76: a4:44:25:ec:94:7e:dc:fa:33:b3:9f:0a:49:71:2e:32:f3:09: 5d:21:21:10:f6:8f:9d:2d:19:ab:38:f4:3a:12:43:82:16:c4: 0c:93:21:9b:5b:7b:99:9f:17:d5:41:46:3e:78:ca:b8:f4:de: d0:4c:82:88:9b:25:1b:fb:13:b1:55:a2:5e:d5:b4:51:2e:60: 28:af:0e:a3:83:f6:1e:65:a3:b7:58:58:f4:f7:45:86:88:df: 06:f8:b5:7d:57:d0:ec:58:b8:91:f5:f5:4f:89:f5:c8:03:00: 4c:7f:fd:44:d6:1d:ed:1d:9b:9b:cd:cc:9a:47:53:0a:62:0c: 90:88:9b:2b:51:97:a1:72:b8:72:7f:60:27:cb:e4:f3:36:b4: 9f:05:18:14:1d:37:3f:cd:6b:62:a1:8b:66:3d:57:e4:cc:68: fe:99:b0:23:5e:7d:7a:36:e1:ff:15:a4:38:1a:13:c1:65:3a: b8:c3:26:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUczu3Qa48I2GFhZ+ya6iSXHLa1ewwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjEwOTUwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1M2E3MzlmYWQ0NDMyNGQ2N2Q4OTlmYzUwNjA0YWJjODJh MjY0Yjg2YjcxYzJmNDI5MzYxNDE5NWI5YThmOTBiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTjT7KeHwL6UNEBN/ebjPhcgd/tmXSWp1L7xSLkXkDcbO6 7ORnGV5GhqrJ5dsc5mMsUG7LLnVGtchaRhW2Ev1i43P8Mu/ehHWH9JoZMRVfXQP+ O/81DLf5Cq0KRvmlwirQBApwj8LYIExfy38FZj17aAOvL3a24B0L2kijT/cXoogx P3gQkHDYchIDYEDJxI/eb3QmaZ5labPSzfAwtC958ywpm5uHJrHhkHMYf7zMdVcI 7kjQi/Tfs2jWe/Ha/jCK2n8JO9GnWMm9VgTzcl4B3ezt9NfQrfvtw/jJwJQVArlk eYaOYotyJ/ASWXfbNto8m1AY7xG/Hpoi7njrdjxtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJchFesf2IO6C77XICaWNN5NY6YgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc4MjFkZDgzLTEzNjUtNGFlYS1hNDdkLTcxZDU2NTY1YzFjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADr6swDQYJKoZIhvcNAQELBQADggEBAFley0q+oNHB77jLgvQz9cSIatO/ /OLIl1YVtlkgzz0gDarUHuQ86MgEW5qGiC05oJ/y96cUygY20PJ9zQs6Gg9auWGI 3ZtIdqREJeyUftz6M7OfCklxLjLzCV0hIRD2j50tGas49DoSQ4IWxAyTIZtbe5mf F9VBRj54yrj03tBMgoibJRv7E7FVol7VtFEuYCivDqOD9h5lo7dYWPT3RYaI3wb4 tX1X0OxYuJH19U+J9cgDAEx//UTWHe0dm5vNzJpHUwpiDJCImytRl6FyuHJ/YCfL 5PM2tJ8FGBQdNz/Na2Khi2Y9V+TMaP6ZsCNefXo24f8VpDgaE8FlOrjDJlI= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:28 2025 by rpki-client