$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c012870-51dc-4825-aa6f-b9a46d8f6573.roa File: 7c012870-51dc-4825-aa6f-b9a46d8f6573.roa (raw, json) Hash identifier: P2bpxJ8JdFGVvhp0mR0yR3Cc8Xqu44zDW3xuDULvjz0= Subject key identifier: AA:24:81:B9:27:D1:CE:01:1F:50:60:7A:6B:4B:23:EE:CE:4B:EE:E2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 57C0F0528D78238C69B73C277A48BEB201755D80 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c012870-51dc-4825-aa6f-b9a46d8f6573.roa Signing time: Thu 25 Sep 2025 23:02:18 +0000 ROA not before: Thu 25 Sep 2025 23:02:18 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c0:f0:52:8d:78:23:8c:69:b7:3c:27:7a:48:be:b2:01:75:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:02:18 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c799bec56affe6cee7e689f4db819502a6a505f6e079712a4d30bfab9f1f335d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:aa:60:c5:83:99:8c:6b:b3:29:e1:8b:ab: f1:84:c6:ac:aa:d4:ae:ac:9c:e8:7a:7a:87:8b:11: a4:4e:a8:a3:2c:6d:85:8d:69:d3:a2:fa:77:68:57: d7:e3:8a:bc:5f:85:14:c6:66:29:70:40:ac:cf:d1: da:2f:93:24:64:e7:77:1c:72:df:e3:e7:e6:dc:8d: 45:76:1c:9e:1f:64:86:a0:62:c4:36:39:ea:fa:fe: 1d:03:85:cf:92:2c:a2:6a:e9:a7:b1:6a:0e:56:f8: 36:96:9a:e3:82:c4:c1:38:8e:c4:31:2c:b3:f7:59: f1:44:56:20:7a:21:43:50:f9:05:65:f2:16:1b:6d: 32:dd:19:2f:2c:a9:79:49:73:39:6e:ae:a9:0f:9f: 04:08:af:41:7a:d2:7e:6e:1f:35:18:9d:59:d3:d0: 2c:ff:87:99:51:6a:f1:1f:05:f0:70:18:c1:0c:bc: e2:b9:89:5a:84:b4:7a:e8:2d:31:0f:5e:10:eb:44: 07:86:38:ac:67:05:11:20:24:d3:73:ca:61:65:68: 7a:ba:c0:3b:eb:19:27:3b:e1:6a:38:d3:3d:07:f3: d5:d7:8a:55:2a:e3:61:de:0a:47:2f:e7:f1:0d:c3: d5:07:c8:2d:f5:39:fc:11:f8:37:e1:04:98:15:08: c9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:24:81:B9:27:D1:CE:01:1F:50:60:7A:6B:4B:23:EE:CE:4B:EE:E2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c012870-51dc-4825-aa6f-b9a46d8f6573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.178.0/23 Signature Algorithm: sha256WithRSAEncryption 28:a3:e1:f0:f4:f6:c8:78:ce:91:7f:57:88:f9:46:e7:64:11: cd:c1:88:c4:3c:a7:b1:4e:e5:4b:ce:18:21:e8:03:98:fa:8f: 9f:2a:27:28:60:80:f8:db:c2:79:a8:b6:72:04:5b:73:f8:a8: 17:15:50:23:6f:73:67:7f:59:dd:fb:1b:54:3f:c9:19:cc:ab: f8:60:7d:f7:06:1d:5c:98:10:00:eb:0c:45:6d:0a:6b:91:fd: 98:2a:0c:66:cd:cd:25:6f:7c:94:43:69:86:8b:2d:44:03:de: fa:f6:04:7c:2a:96:00:42:d5:0b:df:9b:fd:19:90:20:83:e3: 54:45:38:08:c8:ad:eb:bd:ef:9e:b2:7b:b2:5d:4c:2b:22:32: 3a:5e:a5:9f:38:95:a9:79:69:70:c4:14:a3:3c:a9:fc:f6:e2: 1d:31:6f:71:a2:d3:d4:06:a8:30:ac:49:17:fd:60:0e:ba:56: 2d:1c:7c:5e:86:2d:6d:06:32:69:55:b5:cb:2f:b9:ec:e9:80: 2f:9a:59:b7:1a:d9:c7:db:cc:6c:f1:5e:31:ed:93:6a:bd:d4: 9a:25:5c:10:2b:69:8d:88:33:b1:e9:b2:af:13:de:9e:60:73: 9c:0f:7e:55:4c:b6:1c:c2:21:1f:bd:b0:b4:db:99:fe:9c:ec: 92:ac:3b:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV8DwUo14I4xptzwneki+sgF1XYAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMwMjE4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzk5YmVjNTZhZmZlNmNlZTdlNjg5ZjRkYjgxOTUwMmE2 YTUwNWY2ZTA3OTcxMmE0ZDMwYmZhYjlmMWYzMzVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOuapgxYOZjGuzKeGLq/GExqyq1K6snOh6eoeLEaROqKMs bYWNadOi+ndoV9fjirxfhRTGZilwQKzP0dovkyRk53ccct/j5+bcjUV2HJ4fZIag YsQ2Oer6/h0Dhc+SLKJq6aexag5W+DaWmuOCxME4jsQxLLP3WfFEViB6IUNQ+QVl 8hYbbTLdGS8sqXlJczlurqkPnwQIr0F60n5uHzUYnVnT0Cz/h5lRavEfBfBwGMEM vOK5iVqEtHroLTEPXhDrRAeGOKxnBREgJNNzymFlaHq6wDvrGSc74Wo40z0H89XX ilUq42HeCkcv5/ENw9UHyC31OfwR+DfhBJgVCMmTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqiSBuSfRzgEfUGB6a0sj7s5L7uIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdjMDEyODcwLTUxZGMtNDgyNS1hYTZmLWI5YTQ2ZDhmNjU3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqrIwDQYJKoZIhvcNAQELBQADggEBACij4fD09sh4zpF/V4j5RudkEc3B iMQ8p7FO5UvOGCHoA5j6j58qJyhggPjbwnmotnIEW3P4qBcVUCNvc2d/Wd37G1Q/ yRnMq/hgffcGHVyYEADrDEVtCmuR/ZgqDGbNzSVvfJRDaYaLLUQD3vr2BHwqlgBC 1Qvfm/0ZkCCD41RFOAjIreu9756ye7JdTCsiMjpepZ84lal5aXDEFKM8qfz24h0x b3Gi09QGqDCsSRf9YA66Vi0cfF6GLW0GMmlVtcsvuezpgC+aWbca2cfbzGzxXjHt k2q91JolXBAraY2IM7Hpsq8T3p5gc5wPflVMthzCIR+9sLTbmf6c7JKsO+M= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:45 2025 by rpki-client