$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85a48443-6a02-4884-bfe9-fa633944f7d8.roa File: 85a48443-6a02-4884-bfe9-fa633944f7d8.roa (raw, json) Hash identifier: pIvUJhczc2i9wi+I3V3VdGiF/kXDUtEIWHTQGqRQgOg= Subject key identifier: 52:F2:48:DB:81:E1:B7:34:23:DE:78:AB:48:62:D6:95:EF:32:29:AF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 363380134B54ECE0DCC22BFFF7059D671ADC645C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85a48443-6a02-4884-bfe9-fa633944f7d8.roa Signing time: Thu 25 Sep 2025 23:14:59 +0000 ROA not before: Thu 25 Sep 2025 23:14:59 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:33:80:13:4b:54:ec:e0:dc:c2:2b:ff:f7:05:9d:67:1a:dc:64:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:14:59 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=ddbadc76b4a23d5d36328eea4c49b62cddd22e89ce5f7d3dba8775b0fbeabe52, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:78:d6:a8:26:94:70:91:14:55:e1:36:42: 71:c2:f0:ed:f6:f4:1f:57:f1:5c:af:5a:23:8b:9d: ec:2e:0a:42:d9:f7:c3:d1:0f:3e:f0:ae:ee:38:8e: d7:5e:5b:4f:43:80:ff:4b:77:f4:94:92:fd:39:13: 24:72:1e:3b:b7:3e:b7:cf:cb:f9:ab:1c:6c:ef:31: c7:c1:e6:b8:4e:11:02:f2:20:22:b6:4e:35:4f:cb: 93:37:2f:6f:e9:d0:a0:34:e5:89:61:25:47:2d:ba: 7e:8c:89:73:3e:86:81:be:a1:7b:b7:d6:0e:2a:b0: 73:ec:13:58:8b:90:58:d4:c7:26:48:d3:0a:ac:05: 79:6b:4f:a5:b3:07:c7:fe:f3:af:fd:84:d5:71:c1: 38:9e:11:d2:2b:9a:3e:f4:14:d2:ff:6a:44:88:f7: 02:8b:a5:02:e2:a7:27:a3:ef:1d:2e:f0:8e:a0:ca: ef:1c:90:76:a0:a7:ee:ea:9b:38:b0:4c:1d:49:12: 9d:2d:58:e1:0a:bd:1a:1c:6c:8b:b8:89:3a:87:b2: 69:53:c9:97:0b:7b:82:9c:04:1d:a9:f6:b8:93:8a: 86:fe:37:d8:5a:20:a2:68:b0:3f:cd:f9:8d:e4:d7: 9f:af:c0:c4:77:ed:3e:7e:aa:cc:00:ee:12:3c:ed: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F2:48:DB:81:E1:B7:34:23:DE:78:AB:48:62:D6:95:EF:32:29:AF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85a48443-6a02-4884-bfe9-fa633944f7d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.230.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:a0:dd:cd:40:46:d0:f8:47:62:4a:4d:cc:a3:b3:89:56:4e: 70:1e:70:ba:16:1f:22:fc:89:75:0e:5f:24:c4:0d:16:45:58: 4b:b5:95:c6:43:f6:c1:ff:87:a0:44:b2:d6:95:0d:9d:28:f8: ab:7d:19:e5:24:58:4f:46:b3:dc:81:88:ed:f9:87:79:9c:1c: 51:65:b2:e9:e1:7b:c7:b1:28:76:66:0a:55:2a:b8:70:d9:16: 65:38:77:6e:0f:a6:ca:fd:09:30:03:b9:d5:74:99:04:c1:cc: ac:1a:10:0a:b2:39:39:c2:4f:a9:79:54:ad:57:e5:aa:74:6a: f0:2c:9e:9a:42:e6:dc:3c:f4:22:a0:e8:1c:ff:1a:c6:b4:c4: dc:04:ac:12:34:b5:9d:c1:5d:e7:c5:a1:9b:c7:d2:a9:01:1c: b2:b1:77:d2:f2:ab:45:cb:d5:c3:29:22:70:42:31:3f:19:59: d9:b5:aa:1f:71:30:bb:cf:eb:3b:68:87:16:02:cc:1a:a1:39: 46:08:3f:47:f0:1b:58:65:ae:cf:d0:60:1e:ea:30:d0:01:51: 6d:23:b7:2e:a1:79:c1:1c:85:87:85:57:f9:4a:9b:6d:1d:4e: 0e:24:91:0d:90:46:c0:26:55:07:51:aa:f9:0f:87:4f:60:fc: 80:1f:8e:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNjOAE0tU7ODcwiv/9wWdZxrcZFwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMxNDU5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGJhZGM3NmI0YTIzZDVkMzYzMjhlZWE0YzQ5YjYyY2Rk ZDIyZTg5Y2U1ZjdkM2RiYTg3NzViMGZiZWFiZTUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOFHjWqCaUcJEUVeE2QnHC8O329B9X8VyvWiOLnewuCkLZ 98PRDz7wru44jtdeW09DgP9Ld/SUkv05EyRyHju3PrfPy/mrHGzvMcfB5rhOEQLy ICK2TjVPy5M3L2/p0KA05YlhJUctun6MiXM+hoG+oXu31g4qsHPsE1iLkFjUxyZI 0wqsBXlrT6WzB8f+86/9hNVxwTieEdIrmj70FNL/akSI9wKLpQLipyej7x0u8I6g yu8ckHagp+7qmziwTB1JEp0tWOEKvRocbIu4iTqHsmlTyZcLe4KcBB2p9riTiob+ N9haIKJosD/N+Y3k15+vwMR37T5+qswA7hI87ccxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUvJI24HhtzQj3nirSGLWle8yKa8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg1YTQ4NDQzLTZhMDItNDg4NC1iZmU5LWZhNjMzOTQ0ZjdkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDq+YwDQYJKoZIhvcNAQELBQADggEBAE2g3c1ARtD4R2JKTcyjs4lWTnAe cLoWHyL8iXUOXyTEDRZFWEu1lcZD9sH/h6BEstaVDZ0o+Kt9GeUkWE9Gs9yBiO35 h3mcHFFlsunhe8exKHZmClUquHDZFmU4d24Ppsr9CTADudV0mQTBzKwaEAqyOTnC T6l5VK1X5ap0avAsnppC5tw89CKg6Bz/Gsa0xNwErBI0tZ3BXefFoZvH0qkBHLKx d9Lyq0XL1cMpInBCMT8ZWdm1qh9xMLvP6ztohxYCzBqhOUYIP0fwG1hlrs/QYB7q MNABUW0jty6hecEchYeFV/lKm20dTg4kkQ2QRsAmVQdRqvkPh09g/IAfjjk= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:15 2025 by rpki-client