$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/899a3c51-812d-4166-81ed-e7cf75a2886d.roa File: 899a3c51-812d-4166-81ed-e7cf75a2886d.roa (raw, json) Hash identifier: kNKXkiKk8gN/ldWl9oFEqvZwdYqo7jsiFueULCovU3A= Subject key identifier: 62:6A:B8:D9:28:B1:3A:4B:B5:7A:5F:1E:46:DD:DF:56:68:14:61:C9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2877D40D6FE8DAA12570F14EA6FD52DFDF43E62E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/899a3c51-812d-4166-81ed-e7cf75a2886d.roa Signing time: Thu 25 Sep 2025 18:21:56 +0000 ROA not before: Thu 25 Sep 2025 18:21:56 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:77:d4:0d:6f:e8:da:a1:25:70:f1:4e:a6:fd:52:df:df:43:e6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:21:56 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=81894b48c9a14b97f1a5d202fd2877ae185a2f2f58f9a28fb58abdd0a4c27d89, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:7c:34:2c:31:6d:2b:d3:bf:a8:cd:68:84: 4e:cf:6e:a4:10:23:92:b9:19:b4:86:ff:20:10:3b: d0:15:a6:a5:82:57:1d:90:2a:85:a7:97:7a:34:28: b5:dd:0f:2e:82:b9:7f:3c:1d:7b:ed:a4:13:e2:18: 9b:c4:db:8e:a8:f7:99:40:ad:3b:e2:7a:e0:4a:66: 7e:43:06:b9:7b:b8:62:50:ee:0c:c3:c6:23:c9:15: 2a:34:64:6c:cd:de:c8:f8:69:99:66:a3:e7:52:14: b1:83:e5:04:1f:57:b1:fb:fe:41:d3:4f:23:c3:a5: e6:e0:bf:93:0a:4a:e5:a1:e7:2d:fe:1a:9f:f6:69: 9a:c1:ba:3f:d5:99:8a:44:44:2f:ca:ba:84:c4:32: 5e:98:5b:cf:41:72:34:02:be:62:6e:3a:73:c7:9a: c0:87:e4:b6:f5:bc:36:eb:37:5e:0e:80:71:6e:c9: db:ae:a7:1f:5b:b9:bb:5b:bb:6c:17:3b:9b:db:03: c0:62:e7:ce:fa:68:6c:0f:f7:af:cd:dc:14:80:f2: 32:97:b8:99:d7:d9:0b:94:e8:39:4a:d9:3a:96:37: af:2a:74:3f:62:0c:b8:ac:06:54:b0:71:47:3a:41: 2c:92:56:67:44:58:93:94:59:e1:93:d9:f0:53:d3: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6A:B8:D9:28:B1:3A:4B:B5:7A:5F:1E:46:DD:DF:56:68:14:61:C9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/899a3c51-812d-4166-81ed-e7cf75a2886d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.213.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:d2:88:64:74:ae:a7:aa:33:6c:84:e8:0e:78:1d:78:0e:a5: 4f:5f:63:e0:d5:6f:23:bd:70:20:dc:20:9d:80:c4:bb:2b:b8: 2f:37:8e:28:fc:72:e1:a4:c3:50:ae:37:9d:35:b0:58:d2:18: 87:f6:71:22:82:2f:3a:65:70:7f:d5:a2:af:2f:ca:d1:6d:55: bb:46:04:73:35:ad:0e:8a:a9:68:65:89:ec:30:47:ab:0b:48: 59:4e:5d:b5:71:f7:cd:53:6a:42:a1:89:3f:cd:ad:58:f7:8b: 93:20:3d:84:ea:0a:99:ef:91:3c:93:34:2a:85:49:75:3b:fb: 1b:df:05:b3:7a:0f:f3:1d:77:5f:0c:58:83:ba:7c:36:f2:4b: da:a2:94:2a:2c:62:37:1d:85:c5:b2:d0:28:cd:df:87:9a:1e: ad:19:3c:ea:2a:49:e3:bd:b7:7f:f6:cf:03:a7:a6:9b:1d:56: 14:0c:93:7e:70:4c:e6:39:de:44:3c:3c:91:9f:7e:74:fb:5c: 12:78:70:92:aa:cb:d2:49:37:d2:5b:32:ee:12:d0:66:6b:74: 33:86:d6:c9:27:e1:b6:49:49:9d:18:07:46:2e:77:f4:17:88: 10:ee:38:ed:9d:17:ed:88:aa:58:5e:45:1b:e1:48:1d:2c:1e: 37:c5:06:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKHfUDW/o2qElcPFOpv1S399D5i4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgyMTU2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTg5NGI0OGM5YTE0Yjk3ZjFhNWQyMDJmZDI4NzdhZTE4 NWEyZjJmNThmOWEyOGZiNThhYmRkMGE0YzI3ZDg5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtUXw0LDFtK9O/qM1ohE7PbqQQI5K5GbSG/yAQO9AVpqWC Vx2QKoWnl3o0KLXdDy6CuX88HXvtpBPiGJvE246o95lArTvieuBKZn5DBrl7uGJQ 7gzDxiPJFSo0ZGzN3sj4aZlmo+dSFLGD5QQfV7H7/kHTTyPDpebgv5MKSuWh5y3+ Gp/2aZrBuj/VmYpERC/KuoTEMl6YW89BcjQCvmJuOnPHmsCH5Lb1vDbrN14OgHFu yduupx9bubtbu2wXO5vbA8Bi5876aGwP96/N3BSA8jKXuJnX2QuU6DlK2TqWN68q dD9iDLisBlSwcUc6QSySVmdEWJOUWeGT2fBT01iDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYmq42SixOku1el8eRt3fVmgUYckwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg5OWEzYzUxLTgxMmQtNDE2Ni04MWVkLWU3Y2Y3NWEyODg2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpdUwDQYJKoZIhvcNAQELBQADggEBAHrSiGR0rqeqM2yE6A54HXgOpU9f Y+DVbyO9cCDcIJ2AxLsruC83jij8cuGkw1CuN501sFjSGIf2cSKCLzplcH/Voq8v ytFtVbtGBHM1rQ6KqWhliewwR6sLSFlOXbVx981TakKhiT/NrVj3i5MgPYTqCpnv kTyTNCqFSXU7+xvfBbN6D/Mdd18MWIO6fDbyS9qilCosYjcdhcWy0CjN34eaHq0Z POoqSeO9t3/2zwOnppsdVhQMk35wTOY53kQ8PJGffnT7XBJ4cJKqy9JJN9JbMu4S 0GZrdDOG1skn4bZJSZ0YB0Yud/QXiBDuOO2dF+2IqlheRRvhSB0sHjfFBj0= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:34 2025 by rpki-client