$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b351ed7-0629-4e56-a65e-28a4948d5871.roa File: 7b351ed7-0629-4e56-a65e-28a4948d5871.roa (raw, json) Hash identifier: PVP6e2JadDOzTU0qmV12zFgPGtGLAFbc+030AuovEVw= Subject key identifier: EF:40:01:6B:93:3B:9C:57:F9:45:D8:D2:35:07:3E:A9:29:93:87:DA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 51174DB3FB9069F1E9F42E59AC8EAD5A5B641EF2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b351ed7-0629-4e56-a65e-28a4948d5871.roa Signing time: Thu 25 Sep 2025 20:12:41 +0000 ROA not before: Thu 25 Sep 2025 20:12:41 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:17:4d:b3:fb:90:69:f1:e9:f4:2e:59:ac:8e:ad:5a:5b:64:1e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:12:41 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=8fac75905d68a1b008b113cd7663cd4b3714b876602b73ecd488730104f2ff55, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2f:01:db:a4:0c:fe:2c:e7:6b:65:46:6b:ee: 2a:66:f9:3d:bc:d6:12:74:82:85:8d:aa:64:32:f3: 3b:c7:e2:fb:4b:cc:63:58:a9:ac:de:b6:85:8a:62: 88:8a:b8:4c:85:6e:44:ec:77:89:54:75:c3:13:22: 31:48:81:81:27:47:8e:dc:c7:60:8e:25:58:d4:86: 59:26:74:27:c3:1d:89:9c:7c:94:a4:08:ce:31:90: a9:d3:a4:50:03:33:d3:d7:13:89:83:14:72:b7:80: e7:89:24:62:3f:a1:91:48:21:bf:2c:60:14:20:e8: ea:c4:06:da:2a:9c:49:86:61:9a:a7:66:f5:d6:15: ba:6d:1c:57:98:ec:36:0c:03:6e:95:55:45:9b:bb: 07:3a:27:18:e5:e5:c4:c5:5f:1c:a4:7b:f1:e5:0f: c9:96:0d:53:11:16:b6:69:45:6c:ac:54:e1:0b:0e: 29:58:35:7b:c7:0a:42:e3:31:e0:09:15:19:39:5c: cf:f9:4b:b0:d8:6b:57:fb:00:38:52:0e:b7:ab:89: b6:9e:7e:3a:2c:ce:68:f3:9d:b1:93:57:86:39:8d: 63:cc:b8:fe:39:73:66:db:33:17:93:91:ca:ef:5b: f9:a5:05:0c:aa:9c:cb:71:e2:ed:7e:df:54:5a:e9: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:40:01:6B:93:3B:9C:57:F9:45:D8:D2:35:07:3E:A9:29:93:87:DA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b351ed7-0629-4e56-a65e-28a4948d5871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.23.0/24 Signature Algorithm: sha256WithRSAEncryption 52:f0:40:3d:92:bd:9f:e5:28:95:78:c8:3e:e5:87:09:d6:28: 58:da:2c:ef:f7:a1:20:e1:bb:56:d9:fd:4f:cd:a9:e7:19:58: 9c:3c:ec:6e:81:21:a4:8a:6c:2d:95:a8:1f:02:4a:56:56:bb: c0:1c:70:d3:02:a3:88:13:e7:de:a2:29:db:fe:ce:fc:91:90: 72:22:6f:20:b9:32:7f:63:7a:50:9c:02:38:6f:73:cb:40:08: 54:ae:d4:2f:f1:3f:a0:47:ba:ed:73:73:c3:6a:f2:29:7b:76: a5:a9:aa:79:30:7e:59:6a:71:6d:59:b0:7b:32:a4:a1:2e:07: a7:09:d5:b3:31:3b:24:18:79:b4:4b:70:97:61:7d:fb:20:25: 45:9b:a9:64:2e:3d:a5:1d:36:0b:d8:02:14:fc:d3:f5:a1:f4: b4:58:71:15:a6:ab:1b:24:da:7e:fd:66:b7:41:a8:4d:57:4b: 99:7e:6b:27:fa:ba:77:62:aa:c5:2e:91:f8:e2:12:39:9e:f3: d4:a8:02:61:71:36:f8:4c:f6:32:05:2d:34:57:60:30:6b:f7: 70:f2:1d:83:2b:dc:36:1f:a5:39:57:4d:49:18:f1:0d:9d:02: fa:12:08:10:21:b0:0c:3b:15:59:ce:cc:a7:58:41:c7:37:3b: b7:fc:65:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUURdNs/uQafHp9C5ZrI6tWltkHvIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjAxMjQxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZmFjNzU5MDVkNjhhMWIwMDhiMTEzY2Q3NjYzY2Q0YjM3 MTRiODc2NjAyYjczZWNkNDg4NzMwMTA0ZjJmZjU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNLwHbpAz+LOdrZUZr7ipm+T281hJ0goWNqmQy8zvH4vtL zGNYqazetoWKYoiKuEyFbkTsd4lUdcMTIjFIgYEnR47cx2COJVjUhlkmdCfDHYmc fJSkCM4xkKnTpFADM9PXE4mDFHK3gOeJJGI/oZFIIb8sYBQg6OrEBtoqnEmGYZqn ZvXWFbptHFeY7DYMA26VVUWbuwc6Jxjl5cTFXxyke/HlD8mWDVMRFrZpRWysVOEL DilYNXvHCkLjMeAJFRk5XM/5S7DYa1f7ADhSDreribaefjoszmjznbGTV4Y5jWPM uP45c2bbMxeTkcrvW/mlBQyqnMtx4u1+31Ra6WiHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU70ABa5M7nFf5RdjSNQc+qSmTh9owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdiMzUxZWQ3LTA2MjktNGU1Ni1hNjVlLTI4YTQ5NDhkNTg3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqxcwDQYJKoZIhvcNAQELBQADggEBAFLwQD2SvZ/lKJV4yD7lhwnWKFja LO/3oSDhu1bZ/U/NqecZWJw87G6BIaSKbC2VqB8CSlZWu8AccNMCo4gT596iKdv+ zvyRkHIibyC5Mn9jelCcAjhvc8tACFSu1C/xP6BHuu1zc8Nq8il7dqWpqnkwfllq cW1ZsHsypKEuB6cJ1bMxOyQYebRLcJdhffsgJUWbqWQuPaUdNgvYAhT80/Wh9LRY cRWmqxsk2n79ZrdBqE1XS5l+ayf6undiqsUukfjiEjme89SoAmFxNvhM9jIFLTRX YDBr93DyHYMr3DYfpTlXTUkY8Q2dAvoSCBAhsAw7FVnOzKdYQcc3O7f8Ze8= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:20 2025 by rpki-client