$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f017de1-92bd-436a-be65-9ec3877bc671.roa File: 8f017de1-92bd-436a-be65-9ec3877bc671.roa (raw, json) Hash identifier: F8jW7IBaLOBx0IB8UwNx4QgLOyWi3EL0kf/tiW2i0Wk= Subject key identifier: E0:DE:E6:29:4B:14:41:1D:A8:22:B3:5C:1C:B2:72:A6:2B:E6:AA:00 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3169BC1EF6CCD4D8D57794D18E40D43B1F518723 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f017de1-92bd-436a-be65-9ec3877bc671.roa Signing time: Thu 25 Sep 2025 19:45:06 +0000 ROA not before: Thu 25 Sep 2025 19:45:06 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:69:bc:1e:f6:cc:d4:d8:d5:77:94:d1:8e:40:d4:3b:1f:51:87:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:45:06 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=2b54755f1ca7225ef30254c899ecfd4aee4455f90b723cb7399f17cd6aeb53ad, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ba:8b:9a:3c:c2:c3:52:fb:4f:98:95:be:89: 1c:f7:5f:e8:af:6b:0f:db:48:30:e3:c0:e5:9f:d7: be:e0:cc:6e:f7:fd:47:f7:05:60:1f:2f:df:84:ee: b1:67:3e:8b:f5:a3:49:1d:37:89:ca:84:b5:bf:93: dc:a9:b2:a0:c6:f1:0d:1c:bb:61:46:14:47:1e:b1: c4:24:d4:fe:fd:1f:be:19:48:d8:38:8a:6f:33:04: a6:fd:c7:41:70:5f:18:41:26:c7:22:3c:97:5c:ea: 66:d4:e2:ee:11:3c:2f:bf:e1:21:6c:94:ac:d1:1d: f7:0d:bd:33:20:68:06:27:fe:8d:62:c4:15:57:ec: a7:1a:4a:0a:fd:b3:4e:15:c8:ff:33:df:f2:36:d1: 93:33:e2:50:e0:b4:f0:ae:3c:ed:1d:a1:c5:96:ed: bf:94:a8:83:7e:47:4c:77:49:25:56:87:07:a8:49: 90:32:22:95:47:17:9a:3c:1b:c0:2c:21:97:81:af: 63:a8:0f:c6:d9:8c:0d:97:cd:a2:c6:74:84:56:3f: 15:fd:a5:35:02:71:d3:cf:59:26:fc:1d:6f:09:2f: fd:3c:74:33:00:22:c2:f4:f8:88:9f:54:47:4e:f5: 26:a1:29:73:40:3d:bc:7e:aa:f7:53:7f:7e:20:ad: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DE:E6:29:4B:14:41:1D:A8:22:B3:5C:1C:B2:72:A6:2B:E6:AA:00 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f017de1-92bd-436a-be65-9ec3877bc671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.97.0/24 Signature Algorithm: sha256WithRSAEncryption 70:13:d4:6d:fd:86:52:ee:e3:86:4c:90:d7:5c:25:79:1d:f6: 34:bc:d7:40:1b:aa:52:bd:b0:5c:39:b9:ed:38:b9:89:cc:6d: 55:9e:63:05:b2:ad:99:f3:3b:9f:c8:87:8e:65:dc:ef:fc:22: d3:d9:96:78:99:be:37:8a:dd:1c:6b:e0:93:17:3b:53:1d:87: 16:2e:5d:4e:f1:8d:d8:3c:06:30:06:81:33:23:4b:33:96:68: 0a:e8:6b:79:3e:a1:4c:1e:7f:1e:1f:64:45:01:5b:5c:27:d7: 0a:09:28:1d:5a:f8:d3:69:22:88:4a:5c:53:73:a8:4c:7a:33: ac:ef:8d:ad:03:d2:24:60:9c:5f:41:21:b2:f4:3e:d2:9f:fb: 95:7f:23:1c:f2:0f:21:1c:b9:7d:50:ce:ce:03:94:af:ab:c4: d6:86:69:88:9a:a9:6f:40:a5:aa:e2:fa:8b:56:24:f1:61:c4: 8f:61:f8:2a:75:c7:9a:7e:1a:3e:c2:0e:7d:cd:64:81:22:ec: 60:74:e8:23:9b:3e:32:e7:6d:91:22:d4:c9:1f:89:1f:33:3e: bb:ff:cb:2a:c7:8b:0e:2c:f3:14:63:ce:27:98:82:df:0e:cd: 97:98:c9:53:37:ff:1f:f2:66:93:99:8e:00:44:6d:30:84:41: 21:96:eb:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMWm8HvbM1NjVd5TRjkDUOx9RhyMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTk0NTA2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjU0NzU1ZjFjYTcyMjVlZjMwMjU0Yzg5OWVjZmQ0YWVl NDQ1NWY5MGI3MjNjYjczOTlmMTdjZDZhZWI1M2FkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCruouaPMLDUvtPmJW+iRz3X+ivaw/bSDDjwOWf177gzG73 /Uf3BWAfL9+E7rFnPov1o0kdN4nKhLW/k9ypsqDG8Q0cu2FGFEcescQk1P79H74Z SNg4im8zBKb9x0FwXxhBJsciPJdc6mbU4u4RPC+/4SFslKzRHfcNvTMgaAYn/o1i xBVX7KcaSgr9s04VyP8z3/I20ZMz4lDgtPCuPO0docWW7b+UqIN+R0x3SSVWhweo SZAyIpVHF5o8G8AsIZeBr2OoD8bZjA2XzaLGdIRWPxX9pTUCcdPPWSb8HW8JL/08 dDMAIsL0+IifVEdO9SahKXNAPbx+qvdTf34grcfjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4N7mKUsUQR2oIrNcHLJypivmqgAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhmMDE3ZGUxLTkyYmQtNDM2YS1iZTY1LTllYzM4NzdiYzY3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqWEwDQYJKoZIhvcNAQELBQADggEBAHAT1G39hlLu44ZMkNdcJXkd9jS8 10AbqlK9sFw5ue04uYnMbVWeYwWyrZnzO5/Ih45l3O/8ItPZlniZvjeK3Rxr4JMX O1MdhxYuXU7xjdg8BjAGgTMjSzOWaAroa3k+oUwefx4fZEUBW1wn1woJKB1a+NNp IohKXFNzqEx6M6zvja0D0iRgnF9BIbL0PtKf+5V/IxzyDyEcuX1Qzs4DlK+rxNaG aYiaqW9Apari+otWJPFhxI9h+Cp1x5p+Gj7CDn3NZIEi7GB06CObPjLnbZEi1Mkf iR8zPrv/yyrHiw4s8xRjzieYgt8OzZeYyVM3/x/yZpOZjgBEbTCEQSGW6+o= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:55 2025 by rpki-client