$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/979bf882-6a21-4822-aee3-11ed300b2ca8.roa File: 979bf882-6a21-4822-aee3-11ed300b2ca8.roa (raw, json) Hash identifier: VqljbiKU5F6kcluh6emixJCJdbN/tR9ZJ54vjSb0wTg= Subject key identifier: 2A:98:92:A9:01:42:F7:FC:16:60:5D:6A:49:5F:73:6F:BE:1C:91:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 11195C7B9DAEE9E261E0952D9325595B4B842315 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/979bf882-6a21-4822-aee3-11ed300b2ca8.roa Signing time: Fri 26 Sep 2025 00:45:07 +0000 ROA not before: Fri 26 Sep 2025 00:45:07 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:19:5c:7b:9d:ae:e9:e2:61:e0:95:2d:93:25:59:5b:4b:84:23:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:45:07 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=8dbf5d87bf3aa95a7ddf7348d07b44eb83965ceab9aedec4f23e7b9e8a7a2ba6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:14:7e:08:16:54:e1:48:48:53:fa:38:a5: af:62:33:b3:7d:a7:0a:6b:a5:4f:1f:89:e3:91:2f: ab:fd:c4:18:9c:2d:44:4a:a9:3c:0a:df:ba:18:54: ab:8d:17:94:45:c2:d5:d1:da:f9:29:7d:82:12:e0: 00:61:4f:e0:96:8a:76:ed:37:c6:eb:f7:5e:32:b9: bc:13:f9:4e:a1:a8:a2:ef:f6:d0:6a:df:21:1a:54: fe:58:3d:da:87:d0:31:c9:89:2e:6b:fa:9d:2f:5b: d1:ea:18:94:93:b2:1e:c7:52:38:0f:1a:3e:78:df: f7:22:c4:a0:aa:ec:b2:42:b7:d4:0b:bd:f3:0f:17: f4:8c:70:28:d7:7f:54:24:ea:f7:b3:5a:cc:3a:b3: 45:90:59:c3:2a:a9:65:81:a7:53:08:6a:0b:2f:b2: 18:f3:65:e6:13:d3:82:16:15:f1:49:67:08:d9:6e: 9f:15:e1:6a:25:05:f1:0c:87:2e:03:d9:78:9e:55: 2d:8e:ef:b8:ac:63:c9:91:f9:16:f8:4a:b4:05:b5: 19:9e:65:e6:1e:e0:03:20:90:81:e5:06:ad:0c:2f: f8:50:4e:5c:52:12:7d:9a:42:ca:5f:2e:38:47:81: 91:89:ba:f2:85:4b:30:78:37:b2:1d:16:ab:2b:50: 2d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:98:92:A9:01:42:F7:FC:16:60:5D:6A:49:5F:73:6F:BE:1C:91:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/979bf882-6a21-4822-aee3-11ed300b2ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.100.0/22 Signature Algorithm: sha256WithRSAEncryption 42:d9:43:e7:42:20:18:fe:42:05:33:65:22:64:01:6b:30:0d: f9:17:fd:6b:2d:46:aa:7d:f3:36:eb:93:9a:69:bf:57:f1:3f: 0d:62:95:0b:93:d6:01:b3:a5:d2:dc:26:90:d0:41:ee:12:cf: 4d:d5:43:cd:07:c4:92:7b:cb:37:51:c5:9a:ea:4f:17:1c:20: bf:22:cd:33:ef:5a:df:f9:8a:49:4d:9f:7e:76:05:4a:da:75: 7a:d9:22:ef:fa:e9:05:7c:1c:6a:7c:da:11:77:af:e1:b5:c3: 68:ab:9a:d7:b9:5d:67:3b:09:c1:44:4f:3d:95:04:83:98:3c: 9a:a5:18:7a:ac:c1:a8:2a:74:f1:b8:15:6e:b8:9f:56:7e:2d: 8c:98:68:cf:91:25:53:0d:3a:da:6c:f8:72:f6:91:8b:a2:ea: b9:c4:34:37:0f:85:db:e1:d8:1f:30:7c:9d:aa:38:64:38:63: 59:ec:21:51:ff:0e:05:f7:2f:74:0d:16:ed:f4:1b:bb:73:d1: e3:a7:39:14:50:b2:a8:be:ca:41:33:d0:04:9e:cc:50:6a:a0: e0:b1:d3:fd:1c:04:37:45:fa:b5:1d:d9:97:61:f5:c0:e9:4e: 0e:31:b8:85:d3:44:64:8b:65:4f:e9:fd:10:0d:50:1c:16:56: 7d:c2:04:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUERlce52u6eJh4JUtkyVZW0uEIxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDA0NTA3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGJmNWQ4N2JmM2FhOTVhN2RkZjczNDhkMDdiNDRlYjgz OTY1Y2VhYjlhZWRlYzRmMjNlN2I5ZThhN2EyYmE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+bRR+CBZU4UhIU/o4pa9iM7N9pwprpU8fieORL6v9xBic LURKqTwK37oYVKuNF5RFwtXR2vkpfYIS4ABhT+CWinbtN8br914yubwT+U6hqKLv 9tBq3yEaVP5YPdqH0DHJiS5r+p0vW9HqGJSTsh7HUjgPGj543/cixKCq7LJCt9QL vfMPF/SMcCjXf1Qk6vezWsw6s0WQWcMqqWWBp1MIagsvshjzZeYT04IWFfFJZwjZ bp8V4WolBfEMhy4D2XieVS2O77isY8mR+Rb4SrQFtRmeZeYe4AMgkIHlBq0ML/hQ TlxSEn2aQspfLjhHgZGJuvKFSzB4N7IdFqsrUC3LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKpiSqQFC9/wWYF1qSV9zb74ckcAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk3OWJmODgyLTZhMjEtNDgyMi1hZWUzLTExZWQzMDBiMmNhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDq2QwDQYJKoZIhvcNAQELBQADggEBAELZQ+dCIBj+QgUzZSJkAWswDfkX /WstRqp98zbrk5ppv1fxPw1ilQuT1gGzpdLcJpDQQe4Sz03VQ80HxJJ7yzdRxZrq TxccIL8izTPvWt/5iklNn352BUradXrZIu/66QV8HGp82hF3r+G1w2irmte5XWc7 CcFETz2VBIOYPJqlGHqswagqdPG4FW64n1Z+LYyYaM+RJVMNOtps+HL2kYui6rnE NDcPhdvh2B8wfJ2qOGQ4Y1nsIVH/DgX3L3QNFu30G7tz0eOnORRQsqi+ykEz0ASe zFBqoOCx0/0cBDdF+rUd2Zdh9cDpTg4xuIXTRGSLZU/p/RANUBwWVn3CBNY= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:09 2025 by rpki-client