$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa3ff945-ac76-4e29-9a27-c78f9950c241.roa File: aa3ff945-ac76-4e29-9a27-c78f9950c241.roa (raw, json) Hash identifier: vMVLkNVoxz1efNSBbElDeMEnOxTHg1fj6ROjc5EcNzk= Subject key identifier: 7D:B0:E7:42:44:FB:93:98:D8:A1:05:33:7D:9F:A1:03:2A:C0:0C:97 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 10FEF45D3790AFB58307CA23D2DD17BA553547D8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa3ff945-ac76-4e29-9a27-c78f9950c241.roa Signing time: Fri 26 Sep 2025 01:57:02 +0000 ROA not before: Fri 26 Sep 2025 01:57:02 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:fe:f4:5d:37:90:af:b5:83:07:ca:23:d2:dd:17:ba:55:35:47:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:57:02 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=693e91cd488e66c823e7105ebb3f55461013cf21d72ca2bb285d806880e2aef2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:88:35:80:8f:e7:d5:a0:db:af:60:22:18: 26:20:56:66:e1:b4:58:82:08:8b:1a:ad:94:41:6b: 8a:31:45:f6:1b:0a:09:ef:1c:03:19:f0:32:21:23: bd:1c:8a:3f:32:50:b9:c9:f4:f6:22:bb:32:8c:3a: 08:5e:51:4a:95:cd:cc:f7:9c:c9:b1:1d:a6:2b:66: 02:26:29:fe:09:43:00:c3:0d:63:07:df:e1:27:14: 0c:77:c0:65:b9:ae:72:ec:9f:db:fa:85:15:ee:1d: 95:65:7d:f3:4f:40:6c:e4:51:3b:4a:0f:22:d2:1a: 98:ad:8e:82:67:19:eb:c3:03:86:c8:59:13:52:7d: 54:0a:ac:c1:2b:ca:62:18:87:21:5f:b5:29:23:39: 15:3f:89:4f:ca:3b:e1:1e:7a:8b:83:78:d9:21:5f: a1:e9:86:b5:39:72:5e:c3:63:74:82:44:7a:fb:13: c1:78:86:6d:a5:06:01:e1:d5:82:fc:a4:89:97:11: da:9e:f6:fa:7e:f4:1a:c2:b7:ab:59:fd:b8:72:88: 08:e7:16:81:5c:f1:2d:0f:3b:c8:74:00:e6:57:0d: f4:6c:9d:7a:69:0c:41:3b:3e:c0:81:98:ad:02:d2: 49:b7:63:f8:39:61:59:c4:31:86:0a:10:ca:f4:93: 7b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B0:E7:42:44:FB:93:98:D8:A1:05:33:7D:9F:A1:03:2A:C0:0C:97 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa3ff945-ac76-4e29-9a27-c78f9950c241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.96.0/20 Signature Algorithm: sha256WithRSAEncryption b3:bb:71:de:81:93:f6:e1:f9:74:0b:8e:73:56:ee:17:4c:9e: 02:ad:d7:48:65:c4:25:37:de:ad:ca:87:6c:b6:4e:5a:74:ae: ae:c1:e2:99:c7:8c:ea:55:01:16:c6:97:ab:ca:ae:12:ea:e7: ae:96:a9:cc:e5:ca:e0:a4:38:a4:c6:29:1d:bb:6e:32:44:3f: 13:78:2e:1f:90:c8:77:05:da:5a:6e:b6:27:95:36:ae:f0:70: 6c:93:b2:ef:3d:b3:93:1c:1b:f4:75:0b:b2:2d:6f:74:ef:2c: 31:2c:6a:4f:1e:ae:15:d9:48:1a:d4:cb:93:d2:63:4f:aa:86: c7:3d:97:5c:71:c8:f0:10:a7:7b:47:35:12:42:9e:03:e0:3a: 4b:f2:9e:af:a3:52:98:82:d6:1d:c3:b2:d2:b1:27:a5:1b:4a: 2d:6c:20:49:6a:cd:97:f1:43:74:ce:dc:08:06:6e:47:b8:1f: 13:82:f0:90:f2:cb:06:71:ba:29:af:65:71:d7:fc:8d:42:fb: 3e:86:22:f0:78:c9:1d:93:da:4e:10:04:b8:dc:55:de:32:fc: 45:ae:c3:69:32:22:73:d5:92:bb:40:4e:62:66:91:6b:3d:67: 9d:84:95:b7:87:a4:c4:55:c6:37:57:47:78:d0:9f:01:83:d8: eb:42:86:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEP70XTeQr7WDB8oj0t0XulU1R9gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDE1NzAyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTNlOTFjZDQ4OGU2NmM4MjNlNzEwNWViYjNmNTU0NjEw MTNjZjIxZDcyY2EyYmIyODVkODA2ODgwZTJhZWYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL7Ig1gI/n1aDbr2AiGCYgVmbhtFiCCIsarZRBa4oxRfYb CgnvHAMZ8DIhI70cij8yULnJ9PYiuzKMOgheUUqVzcz3nMmxHaYrZgImKf4JQwDD DWMH3+EnFAx3wGW5rnLsn9v6hRXuHZVlffNPQGzkUTtKDyLSGpitjoJnGevDA4bI WRNSfVQKrMErymIYhyFftSkjORU/iU/KO+EeeouDeNkhX6HphrU5cl7DY3SCRHr7 E8F4hm2lBgHh1YL8pImXEdqe9vp+9BrCt6tZ/bhyiAjnFoFc8S0PO8h0AOZXDfRs nXppDEE7PsCBmK0C0km3Y/g5YVnEMYYKEMr0k3svAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfbDnQkT7k5jYoQUzfZ+hAyrADJcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhM2ZmOTQ1LWFjNzYtNGUyOS05YTI3LWM3OGY5OTUwYzI0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDq2AwDQYJKoZIhvcNAQELBQADggEBALO7cd6Bk/bh+XQLjnNW7hdMngKt 10hlxCU33q3Kh2y2Tlp0rq7B4pnHjOpVARbGl6vKrhLq566WqczlyuCkOKTGKR27 bjJEPxN4Lh+QyHcF2lputieVNq7wcGyTsu89s5McG/R1C7Itb3TvLDEsak8erhXZ SBrUy5PSY0+qhsc9l1xxyPAQp3tHNRJCngPgOkvynq+jUpiC1h3DstKxJ6UbSi1s IElqzZfxQ3TO3AgGbke4HxOC8JDyywZxuimvZXHX/I1C+z6GIvB4yR2T2k4QBLjc Vd4y/EWuw2kyInPVkrtATmJmkWs9Z52ElbeHpMRVxjdXR3jQnwGD2OtChtM= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:27 2025 by rpki-client