$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8658addc-dd73-4cb4-857b-43f8aad1a14c.roa File: 8658addc-dd73-4cb4-857b-43f8aad1a14c.roa (raw, json) Hash identifier: XnzRgtcbc0lOr9Hem4YrbrIYWGNL0nXHf6D0OHOha4o= Subject key identifier: F5:24:1C:00:2B:20:87:53:7E:25:35:5E:B4:4C:E8:7D:65:1E:B1:17 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1F8AC24B05FB5367A3FEB91ECCB97EC33597934C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8658addc-dd73-4cb4-857b-43f8aad1a14c.roa Signing time: Fri 26 Sep 2025 01:32:00 +0000 ROA not before: Fri 26 Sep 2025 01:32:00 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8a:c2:4b:05:fb:53:67:a3:fe:b9:1e:cc:b9:7e:c3:35:97:93:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:32:00 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=61d4dbb7a383b035088dd270f70ef6655e826a6f86708912a7ebf68585a32deb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:32:41:07:94:65:2d:66:d6:03:dc:15:79: ca:8b:db:47:70:48:57:29:7e:d3:45:0f:6a:8a:b6: ab:56:97:12:a4:82:4b:9f:87:fc:66:03:e6:86:4d: 45:1d:95:f0:86:2e:d6:5a:11:23:b2:7b:7d:b5:f3: 6b:9a:6e:37:56:15:ee:7c:58:0b:2b:d6:e1:69:1f: 9d:c8:0d:4d:47:0f:3d:df:b9:fd:9a:94:a1:a3:2b: fb:f3:c3:16:60:05:b4:c4:df:bb:77:95:f5:55:fd: cb:2e:d7:4b:e8:14:77:3b:a1:b2:c3:4d:32:a6:74: 29:39:04:96:27:9d:d7:0c:5e:58:c6:5c:e4:27:36: 39:4c:b9:f0:63:ac:78:36:f2:a9:85:f2:be:2b:17: 34:e8:d6:21:3a:65:38:5f:d7:22:bd:22:b0:7a:18: 4c:84:1b:de:1b:66:24:6e:f3:ef:33:1b:e4:40:7d: 72:59:b4:f8:ed:d9:e3:bd:34:e1:6e:42:9f:16:7d: 0a:43:e7:50:27:c2:92:9a:e3:e4:85:2a:af:31:51: 54:f4:7a:d2:48:26:0c:7e:98:ff:47:d2:a8:4b:3a: f0:06:6f:f3:c8:82:0a:cb:6c:33:26:4e:15:ff:43: 95:e0:23:08:1f:31:34:0a:8d:3d:39:b8:16:38:10: 68:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:24:1C:00:2B:20:87:53:7E:25:35:5E:B4:4C:E8:7D:65:1E:B1:17 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8658addc-dd73-4cb4-857b-43f8aad1a14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.72.0/21 Signature Algorithm: sha256WithRSAEncryption 56:20:19:b8:3f:08:d9:17:9f:a6:34:4b:0a:98:c4:e7:86:df: f8:49:85:64:c3:4c:ec:0a:5a:43:40:e0:e7:2c:b6:33:fc:07: b9:2a:aa:43:f9:86:38:c1:a2:85:19:02:82:1e:ef:f4:59:2b: 91:a2:5a:dc:00:8f:ef:69:f4:e1:40:27:78:38:0f:53:1c:f0: d8:e7:62:87:fc:ca:cc:8d:73:a9:00:d4:9d:e1:9b:94:06:90: d9:d7:43:39:d9:05:ab:18:b1:ea:4a:8c:14:f8:a7:fa:b0:d3: 2c:70:82:e8:fd:8d:20:53:22:bc:1c:77:de:a4:2f:e6:2e:8b: fc:5f:7a:83:8d:cf:05:57:ac:d0:aa:ee:b8:77:d5:c9:2c:03: 5e:d0:19:ed:5f:59:6f:3e:2a:57:fc:83:99:0a:c0:15:86:e7: d6:aa:f1:7e:37:89:73:9f:2e:a8:14:8b:99:53:7c:d4:ff:21: 11:c5:55:f9:71:26:a6:6b:f0:01:12:b0:90:1a:8a:fd:ff:bd: a3:bb:3c:7c:57:a9:fb:73:ef:c2:fe:3e:bf:8a:04:b9:e1:26: 2a:be:ce:33:e6:08:d9:b3:72:ab:e1:be:75:4c:11:5f:e9:de: e7:84:5f:03:cc:e0:8e:25:12:64:42:c1:c8:91:1c:72:e0:a6: d2:13:ec:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH4rCSwX7U2ej/rkezLl+wzWXk0wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEzMjAwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MWQ0ZGJiN2EzODNiMDM1MDg4ZGQyNzBmNzBlZjY2NTVl ODI2YTZmODY3MDg5MTJhN2ViZjY4NTg1YTMyZGViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaFjJBB5RlLWbWA9wVecqL20dwSFcpftNFD2qKtqtWlxKk gkufh/xmA+aGTUUdlfCGLtZaESOye32182uabjdWFe58WAsr1uFpH53IDU1HDz3f uf2alKGjK/vzwxZgBbTE37t3lfVV/csu10voFHc7obLDTTKmdCk5BJYnndcMXljG XOQnNjlMufBjrHg28qmF8r4rFzTo1iE6ZThf1yK9IrB6GEyEG94bZiRu8+8zG+RA fXJZtPjt2eO9NOFuQp8WfQpD51AnwpKa4+SFKq8xUVT0etJIJgx+mP9H0qhLOvAG b/PIggrLbDMmThX/Q5XgIwgfMTQKjT05uBY4EGhdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9SQcACsgh1N+JTVetEzofWUesRcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2NThhZGRjLWRkNzMtNGNiNC04NTdiLTQzZjhhYWQxYTE0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDqkgwDQYJKoZIhvcNAQELBQADggEBAFYgGbg/CNkXn6Y0SwqYxOeG3/hJ hWTDTOwKWkNA4OcstjP8B7kqqkP5hjjBooUZAoIe7/RZK5GiWtwAj+9p9OFAJ3g4 D1Mc8NjnYof8ysyNc6kA1J3hm5QGkNnXQznZBasYsepKjBT4p/qw0yxwguj9jSBT Irwcd96kL+Yui/xfeoONzwVXrNCq7rh31cksA17QGe1fWW8+Klf8g5kKwBWG59aq 8X43iXOfLqgUi5lTfNT/IRHFVflxJqZr8AESsJAaiv3/vaO7PHxXqftz78L+Pr+K BLnhJiq+zjPmCNmzcqvhvnVMEV/p3ueEXwPM4I4lEmRCwciRHHLgptIT7NU= -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:25 2025 by rpki-client