$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/86e9fb5a-0135-466a-bee0-7c0d25416ac8.roa File: 86e9fb5a-0135-466a-bee0-7c0d25416ac8.roa (raw, json) Hash identifier: jIVCdZeUSV7EThTq8bmNdvjs4Btxv8Kj/Kva2Een33w= Subject key identifier: 96:CA:F3:89:E5:11:F5:45:F4:79:EF:08:5C:6F:13:78:3A:4F:20:77 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 03C2AE627F702075C9CFEB64D1DE877765A9F65E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/86e9fb5a-0135-466a-bee0-7c0d25416ac8.roa Signing time: Fri 26 Sep 2025 01:36:47 +0000 ROA not before: Fri 26 Sep 2025 01:36:47 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c2:ae:62:7f:70:20:75:c9:cf:eb:64:d1:de:87:77:65:a9:f6:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:36:47 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=4cc9fb3f3691d3057e6a3470003677e8fe398317e7b678584dd873bb6514c5d2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:10:82:e6:28:5b:e0:94:b4:64:02:8d:a7:5c: 18:f1:10:fc:bf:20:65:99:9b:85:c3:e3:a9:47:ca: 20:5b:d8:3b:24:61:80:8a:d4:a0:83:d8:d1:23:03: ad:16:d9:ac:af:58:ae:21:0c:2a:f4:cd:d9:50:42: 86:a0:a2:c0:c4:f2:de:20:82:97:e3:31:a1:53:19: 72:35:6f:d0:df:3c:08:6d:ca:41:d8:33:d2:73:a4: 4d:20:bc:54:19:96:17:7e:c9:6e:f7:2a:c8:c9:aa: 91:90:91:31:5d:30:de:d5:c2:28:6b:bf:6f:13:e3: 1c:d5:1f:62:21:c5:c8:3f:09:1c:b7:38:59:d7:8b: e9:07:97:e8:4a:a8:97:db:2a:ff:01:81:c5:9c:48: 58:b0:a2:b6:37:bc:6e:f8:3b:94:6a:03:86:57:8c: e0:93:c4:fb:77:07:2a:92:e8:6a:d1:76:f4:5c:2d: a3:67:b3:16:56:38:26:63:27:5b:d1:d6:ac:c4:dc: 25:ba:5b:58:86:c6:9b:30:0b:c7:6a:c8:6b:a3:3f: 2f:0c:31:50:7c:5e:35:26:1b:e7:8a:8a:e8:72:13: 12:7d:e5:8d:db:7e:77:57:67:4f:23:1f:85:55:02: 19:8c:7f:07:a9:45:bd:ee:a1:79:7a:91:15:07:66: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CA:F3:89:E5:11:F5:45:F4:79:EF:08:5C:6F:13:78:3A:4F:20:77 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/86e9fb5a-0135-466a-bee0-7c0d25416ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.144.0/21 Signature Algorithm: sha256WithRSAEncryption 40:ca:63:98:e0:df:28:b5:13:1a:19:aa:78:a7:25:16:76:ac: ba:bb:a1:3a:b6:3d:0f:e4:ac:f1:58:65:db:be:7d:b0:b0:74: b7:b7:2c:fa:a2:a9:30:ef:50:74:3e:dd:63:2f:8a:8a:f6:a1: a9:51:fb:bf:eb:6f:1b:47:b6:ab:84:67:b4:64:1e:06:a6:8e: d9:80:a5:76:88:7c:5d:9c:ee:d4:a6:18:ef:d0:d4:4c:4c:c7: 14:51:77:d4:53:6a:50:5e:62:bf:92:a6:46:2c:ec:f2:eb:5d: ba:29:94:95:f7:69:59:68:f2:cc:f4:df:51:6c:89:5b:8c:e3: d9:f3:5d:94:bd:db:0c:9e:a9:eb:f5:1d:59:85:88:3d:dc:2d: 59:f6:35:ec:78:4e:c2:a3:c3:ef:62:27:91:a6:0f:23:fe:8c: 45:ec:7f:f1:74:a8:55:b7:98:80:a6:fb:1f:92:f2:43:38:93: ad:3a:16:69:3b:77:21:61:94:16:23:64:b3:0b:ba:d2:03:c8: 84:4e:1c:4f:ed:b9:d5:8c:90:47:a6:3a:5f:30:58:77:eb:97: 9f:dc:ab:de:04:5f:a4:07:e7:69:4a:e2:04:f1:bd:30:fe:22: 2f:aa:a4:0e:57:4c:43:34:c8:5b:aa:70:9b:78:19:7b:14:7a: 84:48:bb:d0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA8KuYn9wIHXJz+tk0d6Hd2Wp9l4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEzNjQ3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2M5ZmIzZjM2OTFkMzA1N2U2YTM0NzAwMDM2NzdlOGZl Mzk4MzE3ZTdiNjc4NTg0ZGQ4NzNiYjY1MTRjNWQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXEILmKFvglLRkAo2nXBjxEPy/IGWZm4XD46lHyiBb2Dsk YYCK1KCD2NEjA60W2ayvWK4hDCr0zdlQQoagosDE8t4ggpfjMaFTGXI1b9DfPAht ykHYM9JzpE0gvFQZlhd+yW73KsjJqpGQkTFdMN7Vwihrv28T4xzVH2Ihxcg/CRy3 OFnXi+kHl+hKqJfbKv8BgcWcSFiworY3vG74O5RqA4ZXjOCTxPt3ByqS6GrRdvRc LaNnsxZWOCZjJ1vR1qzE3CW6W1iGxpswC8dqyGujPy8MMVB8XjUmG+eKiuhyExJ9 5Y3bfndXZ08jH4VVAhmMfwepRb3uoXl6kRUHZudbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlsrzieUR9UX0ee8IXG8TeDpPIHcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2ZTlmYjVhLTAxMzUtNDY2YS1iZWUwLTdjMGQyNTQxNmFjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDrZAwDQYJKoZIhvcNAQELBQADggEBAEDKY5jg3yi1ExoZqninJRZ2rLq7 oTq2PQ/krPFYZdu+fbCwdLe3LPqiqTDvUHQ+3WMvior2oalR+7/rbxtHtquEZ7Rk HgamjtmApXaIfF2c7tSmGO/Q1ExMxxRRd9RTalBeYr+SpkYs7PLrXboplJX3aVlo 8sz031FsiVuM49nzXZS92wyeqev1HVmFiD3cLVn2Nex4TsKjw+9iJ5GmDyP+jEXs f/F0qFW3mICm+x+S8kM4k606Fmk7dyFhlBYjZLMLutIDyIROHE/tudWMkEemOl8w WHfrl5/cq94EX6QH52lK4gTxvTD+Ii+qpA5XTEM0yFuqcJt4GXsUeoRIu9A= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:30 2025 by rpki-client