$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98bece78-f463-4bd9-ae3f-599bd043800b.roa File: 98bece78-f463-4bd9-ae3f-599bd043800b.roa (raw, json) Hash identifier: 4916rVjYOeAEEK7OIkq2CYSmPtAtb21hAj6BsYhtL4U= Subject key identifier: 98:43:C5:77:EE:B1:88:F5:7B:A9:72:34:EB:0A:D5:98:2C:63:FD:EC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 457E657E5F758AE3BDC3E4B90CC0E3F5AD7E816D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98bece78-f463-4bd9-ae3f-599bd043800b.roa Signing time: Thu 25 Sep 2025 18:11:46 +0000 ROA not before: Thu 25 Sep 2025 18:11:46 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7e:65:7e:5f:75:8a:e3:bd:c3:e4:b9:0c:c0:e3:f5:ad:7e:81:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:11:46 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=69c55ebef1b4efbddcef0c8ca10bdabce6b6885ce2dcb83cfd407f369d5df8ac, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3e:cd:18:9f:e7:d8:63:b6:83:ad:e8:06:d2: e3:9e:c0:75:d5:2f:dd:c6:70:5f:66:ef:e0:64:0c: 4d:11:c2:4c:c2:56:9a:50:88:3d:a7:5e:7a:1b:fb: 96:f5:0c:42:fc:5f:af:aa:1a:0c:9c:c5:18:38:7b: 23:4f:32:34:f7:e9:b5:f9:4e:8d:9d:c2:1a:6e:db: b4:c6:32:af:a8:06:53:cb:72:14:31:64:b3:16:c6: 35:1b:59:d0:91:b8:5c:46:a7:61:0d:2f:4e:58:5b: 75:e7:21:30:ab:14:93:cd:23:ee:eb:71:2d:54:9a: d4:dd:9d:a0:63:30:08:a9:3d:ca:8e:ed:7e:93:1f: 74:04:0a:bd:ed:ba:a3:e0:83:6f:f5:79:e3:92:29: 3d:c0:2f:9e:4c:eb:9c:a9:6a:d6:71:30:9e:e8:37: 19:f7:bd:b9:5a:a3:62:41:0a:76:7b:27:50:b1:76: 51:47:46:b7:de:bb:f5:1b:1b:28:75:1e:65:70:4a: f8:91:d3:70:6f:b1:62:e9:40:4d:d4:9f:b5:18:9a: 64:6f:2e:a0:74:65:6b:c8:2d:18:da:28:ca:17:a2: 0a:54:31:e4:3a:eb:45:aa:d8:a5:e2:87:c1:19:71: 52:f6:36:8b:5f:c9:df:71:a8:be:9d:5d:f0:9d:e2: 60:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:43:C5:77:EE:B1:88:F5:7B:A9:72:34:EB:0A:D5:98:2C:63:FD:EC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98bece78-f463-4bd9-ae3f-599bd043800b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.1.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:9c:e5:82:6e:d7:db:b6:79:f0:3f:65:96:1b:14:cc:a3:e8: a2:c5:16:ce:03:2b:39:37:ed:4b:0a:1e:fc:f0:0b:fc:e6:6e: 64:9e:c3:cc:5a:d1:5c:af:1e:ea:ec:f4:4a:3e:4e:38:4e:3e: 81:5c:f0:b3:12:08:85:5a:51:2e:16:5f:b7:74:ba:c6:5e:8e: 8e:bd:d5:c1:c4:7a:0f:3f:81:47:12:75:f0:54:2f:1f:cc:28: 98:ac:38:c6:27:10:78:9d:ea:7a:44:1d:6b:94:85:81:69:bd: 13:72:c2:b3:44:90:5e:82:79:f9:91:c1:b2:f4:be:5b:53:e8: 8c:91:87:0c:87:dd:65:32:13:7f:ad:f3:2e:76:84:63:38:cc: 36:40:9c:82:04:54:9c:57:19:bc:92:f7:6c:f9:0b:b4:e1:bd: bf:33:b4:1e:0f:83:14:1e:a6:63:89:38:02:77:e9:3c:43:94: 4f:c0:2a:49:f6:78:f8:6b:b3:76:ea:b0:86:83:4e:85:d3:50: bb:ef:e7:ac:4d:e3:fe:d9:d5:a8:5d:52:9c:59:c6:b8:70:d8: 15:42:ca:bf:18:45:4f:da:ff:43:e3:21:bf:e7:e0:57:94:44: 76:de:ec:87:00:fa:4f:65:3c:d7:f3:4c:9a:6c:cc:fb:46:a8: aa:f5:8a:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURX5lfl91iuO9w+S5DMDj9a1+gW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgxMTQ2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWM1NWViZWYxYjRlZmJkZGNlZjBjOGNhMTBiZGFiY2U2 YjY4ODVjZTJkY2I4M2NmZDQwN2YzNjlkNWRmOGFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxPs0Yn+fYY7aDregG0uOewHXVL93GcF9m7+BkDE0RwkzC VppQiD2nXnob+5b1DEL8X6+qGgycxRg4eyNPMjT36bX5To2dwhpu27TGMq+oBlPL chQxZLMWxjUbWdCRuFxGp2ENL05YW3XnITCrFJPNI+7rcS1UmtTdnaBjMAipPcqO 7X6TH3QECr3tuqPgg2/1eeOSKT3AL55M65ypatZxMJ7oNxn3vblao2JBCnZ7J1Cx dlFHRrfeu/UbGyh1HmVwSviR03BvsWLpQE3Un7UYmmRvLqB0ZWvILRjaKMoXogpU MeQ660Wq2KXih8EZcVL2Notfyd9xqL6dXfCd4mCjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmEPFd+6xiPV7qXI06wrVmCxj/ewwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk4YmVjZTc4LWY0NjMtNGJkOS1hZTNmLTU5OWJkMDQzODAwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpQEwDQYJKoZIhvcNAQELBQADggEBAJ2c5YJu19u2efA/ZZYbFMyj6KLF Fs4DKzk37UsKHvzwC/zmbmSew8xa0VyvHurs9Eo+TjhOPoFc8LMSCIVaUS4WX7d0 usZejo691cHEeg8/gUcSdfBULx/MKJisOMYnEHid6npEHWuUhYFpvRNywrNEkF6C efmRwbL0vltT6IyRhwyH3WUyE3+t8y52hGM4zDZAnIIEVJxXGbyS92z5C7Thvb8z tB4PgxQepmOJOAJ36TxDlE/AKkn2ePhrs3bqsIaDToXTULvv56xN4/7Z1ahdUpxZ xrhw2BVCyr8YRU/a/0PjIb/n4FeURHbe7IcA+k9lPNfzTJpszPtGqKr1igo= -----END CERTIFICATE-----Generated at Fri Oct 17 23:47:44 2025 by rpki-client