$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/010c729f-f22a-495f-b97e-961fa243b1ba.roa File: 010c729f-f22a-495f-b97e-961fa243b1ba.roa (raw, json) Hash identifier: UJtECF8geki8ysEpqOrp8bzWtp8iUrEjisMH4l8UJnQ= Subject key identifier: D9:7F:05:EB:D0:24:61:5D:04:55:86:04:F2:62:5F:F5:17:1A:F7:2F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5CF2B3CF5AA2CD3D1B3BFEAA576ED3FC8BA1ECFC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/010c729f-f22a-495f-b97e-961fa243b1ba.roa Signing time: Tue 21 Oct 2025 01:11:21 +0000 ROA not before: Tue 21 Oct 2025 01:11:21 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f2:b3:cf:5a:a2:cd:3d:1b:3b:fe:aa:57:6e:d3:fc:8b:a1:ec:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 01:11:21 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=de617097168c27e01883fa24d74e1a12f714fe964584d6c4684b7dee2288f4ae, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:b3:82:ab:04:8e:82:02:c7:61:1a:1a:09: c5:0f:7e:77:15:3a:f6:16:96:c6:35:b6:e5:9a:95: f7:de:cb:6f:88:95:a1:25:96:7b:93:71:f4:d4:8e: 5e:03:43:c2:8d:a9:56:13:c3:82:bc:70:78:af:4a: 44:df:61:63:1b:2d:8b:cf:d2:47:48:7a:89:76:d2: 39:5e:ba:67:99:46:7c:a7:47:89:ad:92:ee:a4:46: c7:ec:85:f0:17:65:ac:ab:31:cd:61:f7:28:4b:be: 0d:8f:78:cd:f1:36:da:4e:d0:51:30:4b:f1:ef:68: 92:ca:d4:0d:7a:9d:d4:3b:b4:ce:7e:86:94:60:e7: 80:c5:37:10:dc:06:3e:93:06:c9:06:ca:79:56:10: ba:d3:dd:04:7f:50:2c:3a:ea:89:92:cb:19:08:e1: b9:1d:2d:14:ed:c3:1b:a5:b1:91:c0:8f:20:2d:9b: 23:cf:68:1b:c9:e2:41:00:35:45:81:d2:7d:11:69: 9f:54:1d:83:6f:4c:ec:f8:92:b8:87:39:3a:db:4c: c3:c4:f4:fe:c5:f1:48:24:1d:e2:5d:7a:45:bd:ca: e6:15:93:03:b8:4a:30:4c:a7:fc:3b:b3:ae:39:e4: 1a:c2:77:77:34:96:7b:74:8b:16:9c:93:25:90:94: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7F:05:EB:D0:24:61:5D:04:55:86:04:F2:62:5F:F5:17:1A:F7:2F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/010c729f-f22a-495f-b97e-961fa243b1ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.16.0/20 Signature Algorithm: sha256WithRSAEncryption ab:65:7c:60:d2:0d:ea:4f:8a:7d:ba:81:3e:3c:2a:36:8f:ce: 60:73:3a:6f:92:e6:9f:53:9c:58:92:4e:b8:77:bd:c7:c0:36: 3f:41:be:e7:24:ba:7b:89:c9:6c:5c:c6:d4:45:c5:20:e3:1c: 8e:44:77:1e:d4:1d:20:1c:ee:11:24:91:1c:9f:37:1b:fd:05: 0e:8a:9c:b2:e0:ae:cc:98:20:80:47:6a:dc:ec:34:ba:bd:50: 67:aa:e5:75:2c:34:f8:18:3b:24:48:5a:c0:5a:21:d4:5c:f7: fa:82:f8:34:ff:9d:32:2e:6c:63:f4:87:2f:c7:17:51:84:91: 0d:3a:77:2f:24:90:3e:22:5a:58:a5:d3:99:ec:66:b7:c9:8b: 4b:06:22:ca:49:24:4b:93:d7:43:c6:98:bc:44:f8:c7:f5:8b: dc:84:1e:7a:82:0b:ec:d0:fc:e3:34:f0:e2:f3:6b:d1:9e:b7: 66:2c:c8:46:3a:8a:b1:16:61:43:5d:9c:02:60:c3:eb:db:b2: 53:44:69:d6:36:0d:8b:ea:33:9a:49:79:f7:84:5e:23:67:d8: 36:4f:ce:51:5c:eb:31:d5:f9:a9:38:5e:dc:43:6e:fb:e6:09: 13:82:0a:a3:f0:84:8f:d6:88:85:2f:fa:e6:4f:f2:90:b6:c6: d6:fd:f8:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXPKzz1qizT0bO/6qV27T/Iuh7PwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDExMTIxWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTYxNzA5NzE2OGMyN2UwMTg4M2ZhMjRkNzRlMWExMmY3 MTRmZTk2NDU4NGQ2YzQ2ODRiN2RlZTIyODhmNGFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0M7OCqwSOggLHYRoaCcUPfncVOvYWlsY1tuWalffey2+I laEllnuTcfTUjl4DQ8KNqVYTw4K8cHivSkTfYWMbLYvP0kdIeol20jleumeZRnyn R4mtku6kRsfshfAXZayrMc1h9yhLvg2PeM3xNtpO0FEwS/HvaJLK1A16ndQ7tM5+ hpRg54DFNxDcBj6TBskGynlWELrT3QR/UCw66omSyxkI4bkdLRTtwxulsZHAjyAt myPPaBvJ4kEANUWB0n0RaZ9UHYNvTOz4kriHOTrbTMPE9P7F8UgkHeJdekW9yuYV kwO4SjBMp/w7s6455BrCd3c0lnt0ixackyWQlPxpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2X8F69AkYV0EVYYE8mJf9Rca9y8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAxMGM3MjlmLWYyMmEtNDk1Zi1iOTdlLTk2MWZhMjQzYjFiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDqhAwDQYJKoZIhvcNAQELBQADggEBAKtlfGDSDepPin26gT48KjaPzmBz Om+S5p9TnFiSTrh3vcfANj9BvuckunuJyWxcxtRFxSDjHI5Edx7UHSAc7hEkkRyf Nxv9BQ6KnLLgrsyYIIBHatzsNLq9UGeq5XUsNPgYOyRIWsBaIdRc9/qC+DT/nTIu bGP0hy/HF1GEkQ06dy8kkD4iWlil05nsZrfJi0sGIspJJEuT10PGmLxE+Mf1i9yE HnqCC+zQ/OM08OLza9Get2YsyEY6irEWYUNdnAJgw+vbslNEadY2DYvqM5pJefeE XiNn2DZPzlFc6zHV+ak4XtxDbvvmCROCCqPwhI/WiIUv+uZP8pC2xtb9+N8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:56 2025 by rpki-client