$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7fd7149-3e88-49cb-bbdf-31c09dc248d7.roa File: a7fd7149-3e88-49cb-bbdf-31c09dc248d7.roa (raw, json) Hash identifier: PqNKU5wVxZYlunHfQBOtiBcThAyzU5bJ29+Rgz9Z4xU= Subject key identifier: 4E:B5:9C:DE:DD:0F:54:DE:29:B9:25:AC:32:13:09:07:B5:5D:2A:4E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3AA890633F027708EF567CC50C0FD943F9CFB74B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7fd7149-3e88-49cb-bbdf-31c09dc248d7.roa Signing time: Thu 25 Sep 2025 23:09:42 +0000 ROA not before: Thu 25 Sep 2025 23:09:42 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a8:90:63:3f:02:77:08:ef:56:7c:c5:0c:0f:d9:43:f9:cf:b7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:09:42 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=b47b950cdbd627ed1703b76ea9ce862f4efccb3e7d3ad4807be723ca0af772f3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:fd:06:0b:fb:ba:35:94:4c:3e:18:b9:e4: 80:e8:8f:68:f8:e5:1d:b1:6f:80:de:79:28:52:0a: 65:d6:30:4b:66:ae:c8:5f:0d:31:62:03:7c:f8:3c: 81:aa:4a:57:f3:54:6e:e7:75:a3:e1:43:74:e6:75: f1:b9:e3:2c:d6:36:86:f3:ff:10:ce:72:38:4c:02: f5:75:75:24:02:a1:fc:51:51:ec:35:6e:00:8b:b4: 16:0e:60:d9:2a:79:bc:72:9e:25:01:26:f5:8c:47: 79:55:40:14:86:91:0e:5f:ca:06:02:fb:d0:65:22: 68:d6:37:c7:a4:9f:17:fd:5a:c8:4d:d4:f6:1e:4d: fe:ca:9f:85:df:c0:a6:1d:4f:cd:bd:1a:95:ad:e6: 44:35:f4:a7:a5:9b:49:2a:5a:17:85:ab:6e:b7:f5: a9:34:f4:56:43:30:3f:57:2e:8f:65:2b:2a:4b:a4: ee:d0:aa:f8:50:69:71:d9:a1:44:ea:4f:76:25:45: 33:58:d0:20:d2:ab:1d:52:65:89:7b:43:b7:98:f0: 6b:2f:00:b0:6b:3e:e2:c5:39:f1:91:0d:bb:59:82: 90:2a:b5:b8:1d:18:0f:5c:b9:7f:04:64:52:87:08: 00:af:81:1b:09:f8:40:39:6a:ab:84:9c:60:27:b1: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B5:9C:DE:DD:0F:54:DE:29:B9:25:AC:32:13:09:07:B5:5D:2A:4E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7fd7149-3e88-49cb-bbdf-31c09dc248d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.112.0/23 Signature Algorithm: sha256WithRSAEncryption 56:8a:2f:d5:e3:16:92:c2:13:82:96:a6:4b:48:21:52:18:ef: 01:49:a4:61:c7:a3:9c:7b:68:88:40:d6:49:08:d2:52:67:0f: 2f:97:46:20:96:53:1d:75:72:91:72:03:1e:fe:37:ec:44:f1: 8c:f5:4d:0c:47:3f:9f:5d:d7:4d:92:63:6f:c8:9f:6e:a0:66: 32:c8:ec:19:40:11:15:35:6d:23:72:d2:f1:4c:33:ae:cc:ed: 8b:15:95:44:5e:4f:5c:bd:12:90:c6:51:60:55:9c:9d:a1:0c: 1b:39:c3:b2:79:d6:ef:36:3d:d2:eb:c8:b9:e7:4c:0d:42:6e: 27:e4:35:5a:bc:5c:d2:de:6e:0c:55:14:36:b3:50:82:57:36: 45:2f:57:60:ee:7b:b0:a6:9d:77:4d:7b:8e:02:e2:6f:43:86: 74:5e:35:e6:cf:89:49:c5:ba:51:94:9d:cc:2a:c4:f2:34:44: 26:f7:ff:90:53:72:83:ea:73:b1:ba:11:9e:7b:db:6e:89:41: 29:ad:1e:71:ef:e0:76:56:35:db:c1:08:ae:43:12:df:50:84: d8:c9:9a:e1:c2:db:e8:0e:17:c4:3e:a4:a5:9c:ce:b2:27:38: 22:f4:26:d1:37:de:11:73:bc:a9:6a:c7:df:52:ed:10:e2:70: d9:81:ed:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOqiQYz8CdwjvVnzFDA/ZQ/nPt0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMwOTQyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDdiOTUwY2RiZDYyN2VkMTcwM2I3NmVhOWNlODYyZjRl ZmNjYjNlN2QzYWQ0ODA3YmU3MjNjYTBhZjc3MmYzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFUP0GC/u6NZRMPhi55IDoj2j45R2xb4DeeShSCmXWMEtm rshfDTFiA3z4PIGqSlfzVG7ndaPhQ3TmdfG54yzWNobz/xDOcjhMAvV1dSQCofxR Uew1bgCLtBYOYNkqebxyniUBJvWMR3lVQBSGkQ5fygYC+9BlImjWN8eknxf9WshN 1PYeTf7Kn4XfwKYdT829GpWt5kQ19Kelm0kqWheFq2639ak09FZDMD9XLo9lKypL pO7QqvhQaXHZoUTqT3YlRTNY0CDSqx1SZYl7Q7eY8GsvALBrPuLFOfGRDbtZgpAq tbgdGA9cuX8EZFKHCACvgRsJ+EA5aquEnGAnsXobAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTrWc3t0PVN4puSWsMhMJB7VdKk4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3ZmQ3MTQ5LTNlODgtNDljYi1iYmRmLTMxYzA5ZGMyNDhkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDq3AwDQYJKoZIhvcNAQELBQADggEBAFaKL9XjFpLCE4KWpktIIVIY7wFJ pGHHo5x7aIhA1kkI0lJnDy+XRiCWUx11cpFyAx7+N+xE8Yz1TQxHP59d102SY2/I n26gZjLI7BlAERU1bSNy0vFMM67M7YsVlUReT1y9EpDGUWBVnJ2hDBs5w7J51u82 PdLryLnnTA1CbifkNVq8XNLebgxVFDazUIJXNkUvV2Due7CmnXdNe44C4m9DhnRe NebPiUnFulGUncwqxPI0RCb3/5BTcoPqc7G6EZ57226JQSmtHnHv4HZWNdvBCK5D Et9QhNjJmuHC2+gOF8Q+pKWczrInOCL0JtE33hFzvKlqx99S7RDicNmB7TU= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:38 2025 by rpki-client