$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89e39670-9df1-4d01-a115-9bcca74fde24.roa File: 89e39670-9df1-4d01-a115-9bcca74fde24.roa (raw, json) Hash identifier: Y/uAw3PTL5DmB6j8xvFtm9QU6yHX5zdXTmJ2k0chw48= Subject key identifier: 33:4D:5C:8B:A3:2E:42:8A:E2:DA:44:26:04:F5:F4:8C:B7:37:61:D9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 68EC012D1E774D2B0D7C07A672A5048F909C8A20 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89e39670-9df1-4d01-a115-9bcca74fde24.roa Signing time: Thu 25 Sep 2025 22:32:15 +0000 ROA not before: Thu 25 Sep 2025 22:32:15 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ec:01:2d:1e:77:4d:2b:0d:7c:07:a6:72:a5:04:8f:90:9c:8a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:32:15 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=fe6730725726a4787e308eff782683764eaf4db818b42adfaf823d92fbf384cd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:80:e7:d4:71:f1:70:ad:d7:12:d6:e9:d7: 26:0a:a0:db:c9:d7:87:ac:57:ec:f2:4c:5e:0c:60: 70:79:bf:a8:39:dc:9e:ba:70:29:10:fc:fd:a6:cf: 46:8e:e3:b4:d2:9b:89:be:d6:ef:53:d4:dc:9a:15: 0c:ec:5b:d5:bc:35:07:ce:8a:43:32:db:cf:27:1d: e9:87:72:d5:43:3d:f8:09:86:8b:82:06:32:cb:50: fc:c9:79:ef:ed:0f:a9:bb:3e:66:cf:77:72:5f:85: 53:13:4a:19:b2:69:7d:24:cf:ef:55:27:54:f6:65: cf:0d:70:43:4f:85:47:24:71:1a:29:79:8e:8d:26: 56:97:a6:54:22:07:80:2f:6f:f7:f0:1b:3a:bf:37: 4c:8e:58:a4:d7:3d:fe:cd:16:8c:9f:62:80:0f:18: 3b:bc:c1:8e:73:d2:4b:2a:6d:47:5a:83:73:ce:86: 57:d9:a9:01:14:73:f8:65:95:39:82:6d:bc:7d:c9: 33:2e:74:db:37:ac:09:a8:52:fb:17:70:6b:48:5e: a1:8d:6f:7a:fe:c9:5c:ee:61:43:44:b0:1d:1f:09: 7a:3c:90:e7:22:b4:d0:91:c1:4a:ca:d4:53:4e:2c: 41:97:aa:a8:56:c2:ae:ff:ed:7a:cb:a9:ff:46:0e: 14:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4D:5C:8B:A3:2E:42:8A:E2:DA:44:26:04:F5:F4:8C:B7:37:61:D9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89e39670-9df1-4d01-a115-9bcca74fde24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.172.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:60:eb:48:a7:97:a6:89:b2:37:a0:d0:5d:3a:83:34:6f:48: 3f:73:be:da:4a:2d:e9:f1:32:8d:6a:72:3c:bb:ad:4e:22:2e: 1e:88:3d:33:6a:cb:5e:30:9d:38:fe:22:10:a3:2f:1a:d9:43: 8d:ad:a9:3a:a6:f1:4b:0e:71:1b:d4:3d:f3:69:3e:cf:ac:56: 57:47:e1:07:f3:2b:5e:5e:71:7e:fc:a0:8a:9e:6e:44:2f:df: b5:76:0e:7b:9c:36:81:0d:ce:07:0a:4e:8c:c9:0d:df:59:98: b6:73:44:15:4f:9e:ed:49:69:0a:c0:06:e2:6e:10:02:d7:89: ec:74:51:5c:db:07:7d:ca:51:09:91:24:20:fc:27:d3:b1:26: df:43:29:76:8e:64:c4:6e:f2:6a:e3:da:b9:12:bd:e8:32:6d: 31:36:48:ea:31:3e:08:05:30:d8:1e:5e:25:8b:3d:ab:82:5e: b5:38:6d:45:33:53:6a:27:55:8c:e4:5f:35:2c:1b:cf:95:1a: 01:64:10:c1:f3:5c:b4:56:90:f9:52:25:0e:33:82:82:22:f0: e9:62:5d:c7:8f:2b:43:55:fe:c8:03:25:54:38:52:a8:4f:12: 91:54:e4:13:2d:00:2a:24:c7:31:03:e0:9f:0c:95:a8:7b:5d: 5c:27:30:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaOwBLR53TSsNfAemcqUEj5CciiAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIzMjE1WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTY3MzA3MjU3MjZhNDc4N2UzMDhlZmY3ODI2ODM3NjRl YWY0ZGI4MThiNDJhZGZhZjgyM2Q5MmZiZjM4NGNkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRvIDn1HHxcK3XEtbp1yYKoNvJ14esV+zyTF4MYHB5v6g5 3J66cCkQ/P2mz0aO47TSm4m+1u9T1NyaFQzsW9W8NQfOikMy288nHemHctVDPfgJ houCBjLLUPzJee/tD6m7PmbPd3JfhVMTShmyaX0kz+9VJ1T2Zc8NcENPhUckcRop eY6NJlaXplQiB4Avb/fwGzq/N0yOWKTXPf7NFoyfYoAPGDu8wY5z0ksqbUdag3PO hlfZqQEUc/hllTmCbbx9yTMudNs3rAmoUvsXcGtIXqGNb3r+yVzuYUNEsB0fCXo8 kOcitNCRwUrK1FNOLEGXqqhWwq7/7XrLqf9GDhQdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM01ci6MuQori2kQmBPX0jLc3YdkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg5ZTM5NjcwLTlkZjEtNGQwMS1hMTE1LTliY2NhNzRmZGUyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDp6wwDQYJKoZIhvcNAQELBQADggEBAItg60inl6aJsjeg0F06gzRvSD9z vtpKLenxMo1qcjy7rU4iLh6IPTNqy14wnTj+IhCjLxrZQ42tqTqm8UsOcRvUPfNp Ps+sVldH4QfzK15ecX78oIqebkQv37V2DnucNoENzgcKTozJDd9ZmLZzRBVPnu1J aQrABuJuEALXiex0UVzbB33KUQmRJCD8J9OxJt9DKXaOZMRu8mrj2rkSvegybTE2 SOoxPggFMNgeXiWLPauCXrU4bUUzU2onVYzkXzUsG8+VGgFkEMHzXLRWkPlSJQ4z goIi8OliXcePK0NV/sgDJVQ4UqhPEpFU5BMtACokxzED4J8Mlah7XVwnMN0= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:28 2025 by rpki-client