$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b21b5bbf-2508-440b-a1e5-e3ed6984de94.roa File: b21b5bbf-2508-440b-a1e5-e3ed6984de94.roa (raw, json) Hash identifier: /Jom/bnS39nIQnwXlMKgbERR9Rz7XozogCl4cg179hg= Subject key identifier: E7:39:BE:80:0A:A8:09:0D:C5:72:CF:D6:55:52:EF:6D:24:27:1E:8D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 67A5075CEC109A0A8D856289D5AC083C42F70D19 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b21b5bbf-2508-440b-a1e5-e3ed6984de94.roa Signing time: Thu 25 Sep 2025 23:12:32 +0000 ROA not before: Thu 25 Sep 2025 23:12:32 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a5:07:5c:ec:10:9a:0a:8d:85:62:89:d5:ac:08:3c:42:f7:0d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:12:32 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=0254a42f855a086d2ec2fb1f55e358d099fc81631f96006a412a3dec42e71f7b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:10:04:77:d3:7c:92:93:5e:1f:73:ca:e9: de:ca:26:00:b4:77:a9:b8:6f:1e:06:74:33:ed:b2: bd:22:1d:82:12:22:27:8f:5f:94:83:30:b2:92:9b: 22:13:c6:18:dd:d4:ca:d8:32:2d:32:6e:0e:9f:96: 77:8d:fa:08:e6:e3:7d:92:7f:ae:26:51:a3:95:33: ce:c4:60:a3:cb:af:ce:ef:85:a3:97:72:8c:44:26: ff:bf:a6:63:e3:17:bb:da:bb:6a:e7:af:70:02:d7: 42:4b:09:f1:d2:c8:36:0e:0b:65:39:51:f2:80:6f: ce:4a:1b:2d:d7:e2:0a:94:5a:b3:88:9e:54:46:35: a3:79:d5:75:34:0e:e9:09:77:2d:30:fa:b5:82:9f: e4:dd:eb:6a:96:6d:72:da:52:67:e1:4b:cd:dd:8b: 65:68:79:ba:7d:07:b6:d0:5b:d8:33:6f:b8:34:e2: 82:53:0e:7b:18:8d:cd:84:9a:2b:da:41:12:3a:e3: a4:bc:6d:b5:c2:35:f9:5f:d6:30:5e:b9:31:8b:42: da:cb:ec:76:cc:8d:a1:20:3f:b3:b6:22:38:95:3f: 49:bf:3b:74:c2:70:d8:38:1e:91:10:36:27:d3:23: f3:2c:34:66:48:0c:e5:b2:79:4d:e1:f5:36:80:dc: 3d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:39:BE:80:0A:A8:09:0D:C5:72:CF:D6:55:52:EF:6D:24:27:1E:8D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b21b5bbf-2508-440b-a1e5-e3ed6984de94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.20.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:8e:a3:19:61:85:6a:68:d9:88:5e:ae:58:10:36:0b:b2:38: d9:76:c3:52:24:c6:1c:3f:a6:d7:45:ad:60:eb:c0:27:b7:47: ef:d4:fa:83:68:a9:25:af:b9:a3:d5:7b:6c:a3:6f:4e:aa:06: c0:81:5e:98:85:00:fc:ce:7b:1a:dc:49:55:10:32:9c:03:09: 70:2c:5a:e5:84:fd:2d:57:e5:8c:d0:82:a7:62:0d:63:da:2a: a6:5b:15:9a:67:cb:c9:47:65:1d:24:8d:08:4b:6a:a3:ff:f2: b9:a6:33:83:e1:43:6a:ea:17:39:ce:9f:3b:38:e0:88:48:57: 58:29:b7:b0:22:63:c6:85:84:19:f9:50:71:25:f9:17:14:11: 79:4f:10:4c:8f:6c:ec:82:95:b0:45:cf:1d:b2:bc:27:e3:f7: 58:1d:f5:3b:c9:01:a3:96:28:0d:aa:45:a9:41:a8:27:05:18: 13:2e:62:a2:28:13:a5:d0:77:69:e5:8b:e9:16:e9:93:8a:70: 4b:40:6b:94:26:e5:c3:61:35:6a:73:a1:5e:34:d5:6f:2f:62: 3b:ef:f4:24:73:68:5b:75:bf:cf:8d:97:03:36:23:ab:23:e0: 5e:45:47:fb:81:7f:67:53:aa:90:ea:af:db:17:e4:21:e6:a0: e7:b3:5d:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ6UHXOwQmgqNhWKJ1awIPEL3DRkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMxMjMyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjU0YTQyZjg1NWEwODZkMmVjMmZiMWY1NWUzNThkMDk5 ZmM4MTYzMWY5NjAwNmE0MTJhM2RlYzQyZTcxZjdiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/EhAEd9N8kpNeH3PK6d7KJgC0d6m4bx4GdDPtsr0iHYIS IiePX5SDMLKSmyITxhjd1MrYMi0ybg6flneN+gjm432Sf64mUaOVM87EYKPLr87v haOXcoxEJv+/pmPjF7vau2rnr3AC10JLCfHSyDYOC2U5UfKAb85KGy3X4gqUWrOI nlRGNaN51XU0DukJdy0w+rWCn+Td62qWbXLaUmfhS83di2Voebp9B7bQW9gzb7g0 4oJTDnsYjc2EmivaQRI646S8bbXCNflf1jBeuTGLQtrL7HbMjaEgP7O2IjiVP0m/ O3TCcNg4HpEQNifTI/MsNGZIDOWyeU3h9TaA3D3dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5zm+gAqoCQ3Fcs/WVVLvbSQnHo0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyMWI1YmJmLTI1MDgtNDQwYi1hMWU1LWUzZWQ2OTg0ZGU5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqxQwDQYJKoZIhvcNAQELBQADggEBADqOoxlhhWpo2YherlgQNguyONl2 w1Ikxhw/ptdFrWDrwCe3R+/U+oNoqSWvuaPVe2yjb06qBsCBXpiFAPzOexrcSVUQ MpwDCXAsWuWE/S1X5YzQgqdiDWPaKqZbFZpny8lHZR0kjQhLaqP/8rmmM4PhQ2rq FznOnzs44IhIV1gpt7AiY8aFhBn5UHEl+RcUEXlPEEyPbOyClbBFzx2yvCfj91gd 9TvJAaOWKA2qRalBqCcFGBMuYqIoE6XQd2nli+kW6ZOKcEtAa5Qm5cNhNWpzoV40 1W8vYjvv9CRzaFt1v8+NlwM2I6sj4F5FR/uBf2dTqpDqr9sX5CHmoOezXZs= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:11 2025 by rpki-client