$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c35d8c2-415e-467f-baa2-e00d0319e6e3.roa File: 9c35d8c2-415e-467f-baa2-e00d0319e6e3.roa (raw, json) Hash identifier: R3Io3DBSDsFyhd/4OOdEWWjILNllg3wTyS1i+0aWc0I= Subject key identifier: 06:59:E1:3E:3F:99:84:CC:BC:2E:A0:25:A0:58:28:7F:3F:5E:AB:D4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5AD5E063DD5F587FABBFD6E728A1D2D7E776A492 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c35d8c2-415e-467f-baa2-e00d0319e6e3.roa Signing time: Thu 25 Sep 2025 23:12:25 +0000 ROA not before: Thu 25 Sep 2025 23:12:25 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d5:e0:63:dd:5f:58:7f:ab:bf:d6:e7:28:a1:d2:d7:e7:76:a4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:12:25 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=623a4c458f6ff17e057d889fc0113863cfa7da936d6767ed64674c3d7ed1a792, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:86:49:7d:72:32:25:62:12:8b:e8:6c:5b: 6e:81:07:ed:3e:b1:b3:58:58:40:88:18:50:39:92: cf:d9:08:df:41:80:9d:ea:c5:7b:4c:63:5c:e5:b6: 91:d3:ea:e0:50:c6:99:25:3f:63:2f:e1:ab:41:2c: 28:60:34:20:06:24:cf:6b:7d:d4:c1:1a:27:7e:d3: 78:f4:a0:10:cb:ae:b9:c0:88:77:ea:6b:a5:1c:f8: 6f:de:97:6a:43:98:1e:75:fb:c8:59:25:23:d4:83: 34:99:96:e8:d5:bf:e0:5f:b8:2b:5d:94:9a:e8:f7: 9f:c5:0e:98:53:be:70:43:ad:34:0d:51:2b:fc:56: ae:b3:bb:f8:db:d0:55:0c:05:65:5d:bc:a2:d7:23: 09:a9:69:bf:33:49:c9:5a:67:71:b3:48:8a:6b:54: 39:8a:95:ce:44:d9:46:c1:d0:bf:b6:e9:e5:18:a5: 0a:35:07:ae:26:e4:2a:40:29:f4:00:62:99:83:11: 19:7b:d6:37:46:24:43:d5:93:c2:e7:1d:1b:0b:26: 01:aa:53:72:ed:6b:ff:fb:a4:74:67:2a:b9:21:b4: b9:b7:aa:33:ba:90:fb:c0:05:7a:dc:e1:48:dc:1e: 64:71:4d:a1:6c:ff:e3:82:e5:fe:e3:fe:4e:dc:58: 31:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:59:E1:3E:3F:99:84:CC:BC:2E:A0:25:A0:58:28:7F:3F:5E:AB:D4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c35d8c2-415e-467f-baa2-e00d0319e6e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.184.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:6b:13:51:0b:a2:0e:13:b8:7c:0b:28:37:d9:8c:cc:7a:bc: b0:8e:e3:78:e0:17:c3:e7:eb:54:53:e1:d9:32:13:88:3f:61: ed:64:cb:a4:4a:b6:aa:eb:66:4d:48:a6:61:c3:73:fd:a7:a1: 6d:8f:65:0e:94:ea:c7:2e:50:0b:33:d5:87:d9:52:4b:8e:c4: 76:1e:2e:39:93:dc:0b:3f:5f:c5:90:3a:92:fc:ae:ad:8c:d5: 54:4b:1a:0d:cb:2e:42:9f:ef:c7:c4:f7:91:f3:b0:6a:7f:dd: 15:a6:4d:0e:a6:aa:1b:2f:03:bc:4d:68:08:65:38:33:ce:81: 7b:d7:48:23:52:99:c6:8f:e0:31:7e:19:38:50:62:c8:2d:0c: 47:92:a9:0b:80:5a:6f:cd:d6:17:64:a8:24:87:f0:9f:61:80: 4b:f0:37:0b:fe:28:77:00:7a:76:ea:87:7c:f6:e2:76:8d:f2: 61:4f:90:e5:f3:04:f8:e8:c4:00:5b:95:80:19:f5:63:e7:44: 5b:89:79:96:88:c0:35:22:19:b7:db:ee:30:e7:1d:cd:89:0f: 35:7b:e3:31:3b:a4:b0:5a:0d:62:5f:b6:3d:84:ba:50:a9:08: da:f5:55:d2:37:3b:b3:41:d8:a0:a0:eb:25:fd:ce:9a:b9:9f: 89:41:78:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWtXgY91fWH+rv9bnKKHS1+d2pJIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMxMjI1WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjNhNGM0NThmNmZmMTdlMDU3ZDg4OWZjMDExMzg2M2Nm YTdkYTkzNmQ2NzY3ZWQ2NDY3NGMzZDdlZDFhNzkyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxCIZJfXIyJWISi+hsW26BB+0+sbNYWECIGFA5ks/ZCN9B gJ3qxXtMY1zltpHT6uBQxpklP2Mv4atBLChgNCAGJM9rfdTBGid+03j0oBDLrrnA iHfqa6Uc+G/el2pDmB51+8hZJSPUgzSZlujVv+BfuCtdlJro95/FDphTvnBDrTQN USv8Vq6zu/jb0FUMBWVdvKLXIwmpab8zSclaZ3GzSIprVDmKlc5E2UbB0L+26eUY pQo1B64m5CpAKfQAYpmDERl71jdGJEPVk8LnHRsLJgGqU3Lta//7pHRnKrkhtLm3 qjO6kPvABXrc4UjcHmRxTaFs/+OC5f7j/k7cWDFPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBlnhPj+ZhMy8LqAloFgofz9eq9QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzljMzVkOGMyLTQxNWUtNDY3Zi1iYWEyLWUwMGQwMzE5ZTZlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDq7gwDQYJKoZIhvcNAQELBQADggEBADxrE1ELog4TuHwLKDfZjMx6vLCO 43jgF8Pn61RT4dkyE4g/Ye1ky6RKtqrrZk1IpmHDc/2noW2PZQ6U6scuUAsz1YfZ UkuOxHYeLjmT3As/X8WQOpL8rq2M1VRLGg3LLkKf78fE95HzsGp/3RWmTQ6mqhsv A7xNaAhlODPOgXvXSCNSmcaP4DF+GThQYsgtDEeSqQuAWm/N1hdkqCSH8J9hgEvw Nwv+KHcAenbqh3z24naN8mFPkOXzBPjoxABblYAZ9WPnRFuJeZaIwDUiGbfb7jDn Hc2JDzV74zE7pLBaDWJftj2EulCpCNr1VdI3O7NB2KCg6yX9zpq5n4lBeCI= -----END CERTIFICATE-----Generated at Fri Oct 17 23:43:25 2025 by rpki-client