$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8b81ec36-3f97-45b1-a6be-a5822b182454.roa File: 8b81ec36-3f97-45b1-a6be-a5822b182454.roa (raw, json) Hash identifier: HgQ1Z8Y7owH7olg8MF1rVwTBKe7ybeRGmY32EyHZEFU= Subject key identifier: EE:FE:BC:55:1C:A8:01:EC:DC:87:61:44:EF:BB:28:9F:5F:6A:78:7F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 65316C4E0E76F5C3F6551F4CF46E63D1DA9C8558 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8b81ec36-3f97-45b1-a6be-a5822b182454.roa Signing time: Fri 26 Sep 2025 01:02:06 +0000 ROA not before: Fri 26 Sep 2025 01:02:06 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:31:6c:4e:0e:76:f5:c3:f6:55:1f:4c:f4:6e:63:d1:da:9c:85:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:02:06 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=64e73a6b5d7b2c9bc9bdcf36659485dee69d4b4396ea5933308c0beb6593138c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:82:59:14:95:aa:1a:79:27:60:9a:e7:ce: f9:41:2d:ca:43:c9:ae:86:34:8d:5d:27:07:d1:65: 38:03:83:d7:0b:32:a9:4c:73:03:6e:27:36:cd:0f: 02:97:1a:6e:3d:14:eb:be:e8:a3:8d:c0:46:2d:85: fa:00:8e:54:79:16:0b:6b:11:e5:93:0c:ee:7b:0d: 05:93:b2:d0:93:58:a3:bd:89:20:51:a9:9c:8d:9e: 30:ab:1d:45:95:70:bc:88:ff:e2:41:09:52:4d:91: 76:9b:0f:3c:62:ee:13:7b:8f:42:3d:e7:ac:33:10: e9:f2:0b:0c:a2:0e:dd:38:55:53:fc:b7:3b:85:bb: 21:64:d0:d0:59:8f:13:d1:a0:a9:5f:34:fd:5e:5d: 1f:6e:9f:12:3e:79:8f:d1:fd:3e:7b:9f:72:57:b3: d7:9a:bf:a4:c0:fb:fe:0b:29:44:65:4c:a3:7a:01: 74:d6:37:15:72:d4:fe:94:d6:c9:1a:04:a2:5e:55: e2:d2:f6:e6:0e:38:1f:2a:a5:c8:73:1c:36:db:e4: f5:f9:d1:92:dc:64:b4:15:c1:57:ac:77:bb:fd:e4: 59:7b:d1:f9:8e:7f:4d:30:8a:66:ff:6a:88:e4:a9: e1:7f:5a:ad:d1:3a:f9:b9:51:5f:b7:2b:6c:67:5c: 2f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FE:BC:55:1C:A8:01:EC:DC:87:61:44:EF:BB:28:9F:5F:6A:78:7F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8b81ec36-3f97-45b1-a6be-a5822b182454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.188.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:cd:79:ed:ba:b5:67:23:95:21:52:f6:e2:50:78:68:7b:58: cb:3c:a2:0f:89:91:17:01:52:3c:0c:b8:aa:4b:8f:8d:5d:60: c9:cd:b4:31:44:7c:95:0c:4d:e1:63:3a:3f:94:8b:fe:d8:8e: c7:45:85:10:dc:6f:75:99:60:99:47:79:f1:19:2f:e5:19:98: 6f:e0:6e:9f:45:86:27:64:97:13:92:2e:6f:c7:1c:7f:6d:6f: d7:f4:9b:2c:70:d8:35:61:74:01:75:8b:47:9d:72:6e:a7:24: 27:ec:f1:1b:52:94:9d:40:71:ad:92:ac:f6:f3:db:f2:aa:e4: 85:a3:9e:af:87:7b:a5:65:e4:3f:27:71:bb:4e:68:f4:41:96: 52:c5:66:d2:79:05:69:02:4e:b3:27:5f:b7:f2:c0:15:e4:d3: 5e:8e:ac:ea:ad:07:3b:d7:ca:c8:0a:c5:e2:e9:3c:14:bf:48: da:b2:45:88:fb:f2:59:e5:62:5b:c0:94:ad:5e:19:c4:df:b1: 30:8a:f3:61:e9:68:c9:00:85:ad:49:ee:48:2b:7e:c8:0d:c1: 36:f0:47:f2:e9:c1:d7:ee:4a:6d:4f:89:85:1c:59:a5:eb:41: 08:a8:3d:4e:b8:1d:14:34:ad:92:94:cf:0e:06:9d:03:82:cf: 89:11:95:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZTFsTg529cP2VR9M9G5j0dqchVgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEwMjA2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NGU3M2E2YjVkN2IyYzliYzliZGNmMzY2NTk0ODVkZWU2 OWQ0YjQzOTZlYTU5MzMzMDhjMGJlYjY1OTMxMzhjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2AYJZFJWqGnknYJrnzvlBLcpDya6GNI1dJwfRZTgDg9cL MqlMcwNuJzbNDwKXGm49FOu+6KONwEYthfoAjlR5FgtrEeWTDO57DQWTstCTWKO9 iSBRqZyNnjCrHUWVcLyI/+JBCVJNkXabDzxi7hN7j0I956wzEOnyCwyiDt04VVP8 tzuFuyFk0NBZjxPRoKlfNP1eXR9unxI+eY/R/T57n3JXs9eav6TA+/4LKURlTKN6 AXTWNxVy1P6U1skaBKJeVeLS9uYOOB8qpchzHDbb5PX50ZLcZLQVwVesd7v95Fl7 0fmOf00wimb/aojkqeF/Wq3ROvm5UV+3K2xnXC+PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7v68VRyoAezch2FE77son19qeH8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhiODFlYzM2LTNmOTctNDViMS1hNmJlLWE1ODIyYjE4MjQ1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDr7wwDQYJKoZIhvcNAQELBQADggEBAEzNee26tWcjlSFS9uJQeGh7WMs8 og+JkRcBUjwMuKpLj41dYMnNtDFEfJUMTeFjOj+Ui/7YjsdFhRDcb3WZYJlHefEZ L+UZmG/gbp9FhidklxOSLm/HHH9tb9f0myxw2DVhdAF1i0edcm6nJCfs8RtSlJ1A ca2SrPbz2/Kq5IWjnq+He6Vl5D8ncbtOaPRBllLFZtJ5BWkCTrMnX7fywBXk016O rOqtBzvXysgKxeLpPBS/SNqyRYj78lnlYlvAlK1eGcTfsTCK82HpaMkAha1J7kgr fsgNwTbwR/LpwdfuSm1PiYUcWaXrQQioPU64HRQ0rZKUzw4GnQOCz4kRleM= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:27 2025 by rpki-client