$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98a5496d-8b04-485e-98ce-73d20d78424f.roa File: 98a5496d-8b04-485e-98ce-73d20d78424f.roa (raw, json) Hash identifier: IainUDwUPwoa3wgS6okUm2i2s57DpO7RLilNwwn9sxA= Subject key identifier: CF:98:D1:FB:06:55:BB:4E:DA:6A:36:CB:25:30:C4:D3:96:16:D7:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7B725576871BEF9D52FE39011699E0C39656BF62 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98a5496d-8b04-485e-98ce-73d20d78424f.roa Signing time: Thu 25 Sep 2025 19:39:51 +0000 ROA not before: Thu 25 Sep 2025 19:39:51 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:72:55:76:87:1b:ef:9d:52:fe:39:01:16:99:e0:c3:96:56:bf:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:39:51 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=b396d764bb568d88a4201a2d6921ec74d1a5be36c405e8e302912046d9dc9ca8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:53:f2:bc:e7:b1:b9:80:48:99:eb:b8:a6:0b: 2e:95:28:84:5b:31:95:16:e3:bf:a2:76:32:5f:86: e2:79:82:a2:2a:5c:06:2e:55:14:1d:a5:a9:19:a6: e8:67:cc:00:bd:4a:38:b2:66:5e:98:d6:75:8d:42: 22:2c:b6:a6:72:0a:fc:ad:75:cf:54:f5:10:2b:8c: 8f:6b:28:39:07:dc:c9:ee:72:82:39:0e:5f:ff:44: 56:52:5b:16:03:04:49:09:66:ab:00:0c:a0:e7:0e: 27:6f:9e:39:28:28:4b:9d:ef:4f:b0:94:cb:00:06: 3e:98:9d:5d:5b:9e:d4:df:5e:4b:3c:94:e8:8c:26: 78:d9:c9:4d:2b:9e:93:3e:dd:25:3d:3e:58:4e:b1: 2e:1f:c8:07:3b:dc:d7:a3:ec:87:ca:e2:40:cb:36: bf:2c:b9:c4:a5:ba:cb:3d:a8:b8:9e:51:e8:89:e9: bc:7b:d3:76:43:f2:8f:d3:15:e5:3c:d2:c0:c1:17: ac:9c:ba:11:7c:97:9f:79:d0:df:13:53:30:73:42: 05:58:87:bd:2a:2f:01:be:07:bb:f2:90:5b:07:f8: 27:9f:b5:4b:bb:58:1c:e5:22:eb:96:f7:a9:1b:02: 67:65:68:a8:45:54:20:2a:99:39:ab:8f:8c:70:b0: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:98:D1:FB:06:55:BB:4E:DA:6A:36:CB:25:30:C4:D3:96:16:D7:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98a5496d-8b04-485e-98ce-73d20d78424f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.33.0/24 Signature Algorithm: sha256WithRSAEncryption 70:eb:87:c3:dd:3f:07:4d:7e:e8:94:a9:dd:81:14:db:a6:04: 90:1c:c2:df:0c:36:03:7c:8c:7d:eb:fd:ce:fc:37:c5:d7:0d: f4:f1:97:90:9c:5c:56:cc:c0:15:7d:ca:fb:f3:f2:dd:1b:29: 29:f7:e4:09:2c:21:1b:bd:9e:5d:85:60:05:57:85:2b:96:e7: 94:ef:10:05:3d:c0:b3:fc:5c:f6:0f:82:70:6a:01:9e:27:8e: c2:8b:49:ab:bb:2a:84:30:31:e0:45:6d:27:d8:c8:ad:b1:c0: 56:53:d4:73:6b:2d:84:e3:7a:f9:52:dd:04:00:79:63:03:d8: 87:df:2f:23:b9:74:84:1b:9b:09:07:83:c9:8a:b9:93:1a:4b: ee:82:28:08:04:77:10:c6:a5:a8:ac:12:ac:eb:77:83:94:c3: 94:60:d8:e0:f4:0f:30:15:2b:ec:a0:6b:06:ec:64:1d:6e:fe: bf:6e:ac:19:09:0f:0d:63:55:d4:07:16:4c:22:3a:0e:d4:1e: f2:42:eb:1a:9c:55:4f:72:9f:cd:85:86:32:16:e3:01:fc:bb: 3a:72:da:8a:71:9b:ac:f6:e8:3e:16:85:50:86:54:17:90:4c: 5f:62:f1:55:91:c5:e5:3e:b1:9e:bf:7f:eb:13:62:0a:af:9c: a4:fd:7a:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe3JVdocb751S/jkBFpngw5ZWv2IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkzOTUxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzk2ZDc2NGJiNTY4ZDg4YTQyMDFhMmQ2OTIxZWM3NGQx YTViZTM2YzQwNWU4ZTMwMjkxMjA0NmQ5ZGM5Y2E4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbU/K857G5gEiZ67imCy6VKIRbMZUW47+idjJfhuJ5gqIq XAYuVRQdpakZpuhnzAC9SjiyZl6Y1nWNQiIstqZyCvytdc9U9RArjI9rKDkH3Mnu coI5Dl//RFZSWxYDBEkJZqsADKDnDidvnjkoKEud70+wlMsABj6YnV1bntTfXks8 lOiMJnjZyU0rnpM+3SU9PlhOsS4fyAc73Nej7IfK4kDLNr8sucSluss9qLieUeiJ 6bx703ZD8o/TFeU80sDBF6ycuhF8l5950N8TUzBzQgVYh70qLwG+B7vykFsH+Cef tUu7WBzlIuuW96kbAmdlaKhFVCAqmTmrj4xwsOuhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUz5jR+wZVu07aajbLJTDE05YW10kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk4YTU0OTZkLThiMDQtNDg1ZS05OGNlLTczZDIwZDc4NDI0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqSEwDQYJKoZIhvcNAQELBQADggEBAHDrh8PdPwdNfuiUqd2BFNumBJAc wt8MNgN8jH3r/c78N8XXDfTxl5CcXFbMwBV9yvvz8t0bKSn35AksIRu9nl2FYAVX hSuW55TvEAU9wLP8XPYPgnBqAZ4njsKLSau7KoQwMeBFbSfYyK2xwFZT1HNrLYTj evlS3QQAeWMD2IffLyO5dIQbmwkHg8mKuZMaS+6CKAgEdxDGpaisEqzrd4OUw5Rg 2OD0DzAVK+ygawbsZB1u/r9urBkJDw1jVdQHFkwiOg7UHvJC6xqcVU9yn82FhjIW 4wH8uzpy2opxm6z26D4WhVCGVBeQTF9i8VWRxeU+sZ6/f+sTYgqvnKT9evE= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:15 2025 by rpki-client