$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d1d273f-ec6a-4007-aae4-0c7d4f2bfe0b.roa File: 0d1d273f-ec6a-4007-aae4-0c7d4f2bfe0b.roa (raw, json) Hash identifier: 23MvOlY0kj53ApZyXgU35M41dV6HTX4Vlocnz5uuwCg= Subject key identifier: BF:B8:33:EF:1F:C9:2C:B8:B1:DD:0F:B7:F5:B0:BE:65:4F:68:A4:55 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D4282C291B8543FEE4B66888B7AF2DF36A3DAEF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d1d273f-ec6a-4007-aae4-0c7d4f2bfe0b.roa Signing time: Tue 21 Oct 2025 06:11:19 +0000 ROA not before: Tue 21 Oct 2025 06:11:19 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:42:82:c2:91:b8:54:3f:ee:4b:66:88:8b:7a:f2:df:36:a3:da:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 06:11:19 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=2e1ee09b31e0a39ab71b0fd9f3ce4781666233a8c8d305cbaafd0be16c2473bf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:21:a3:22:0c:27:1e:d4:a8:e9:b5:8a:a6:55: 2f:aa:1f:7b:5d:3c:39:be:72:c6:db:6b:cf:16:61: 2f:a3:7e:71:52:87:89:3e:52:56:85:2f:4c:97:8e: 3c:11:e1:b9:84:01:d2:df:c1:35:ab:75:c5:54:41: ee:c7:fb:1d:49:2d:7e:e3:26:e8:0b:ae:da:bc:b9: df:6a:0f:a8:fe:97:d9:26:5e:a9:40:33:55:04:38: 49:35:b5:cc:04:a5:7e:2c:34:f6:3a:de:64:1a:d5: 0b:86:cb:46:40:06:89:08:9f:08:c4:a1:54:03:71: b7:11:33:2b:11:78:e4:07:e9:c7:fe:b7:69:38:9f: b7:58:1d:c5:de:20:99:da:65:e7:dd:30:fc:53:21: a3:ba:fb:41:e6:1c:0f:dc:4c:db:02:72:41:0a:3c: 5a:b0:a8:91:7e:6e:e7:50:f3:71:4b:b0:11:20:61: a4:51:69:a6:5b:a3:95:bd:92:64:cb:ea:dc:f6:26: a8:a1:77:e7:83:52:b7:3f:d4:38:96:3c:2c:d4:86: 10:b9:93:b8:ac:8d:63:10:9d:1e:a7:a3:15:0c:54: 34:c6:e9:92:e5:42:61:07:37:44:8a:1e:3f:c6:c6: 68:ce:88:2e:e7:f9:f0:5f:e1:6d:04:76:c4:07:6a: 07:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B8:33:EF:1F:C9:2C:B8:B1:DD:0F:B7:F5:B0:BE:65:4F:68:A4:55 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d1d273f-ec6a-4007-aae4-0c7d4f2bfe0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.204.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:40:ff:1b:6f:87:5a:8c:04:10:72:3d:f9:c3:ed:2d:d1:f0: 00:62:48:f2:0a:0f:94:7c:d8:15:1f:fe:31:76:4e:69:d6:46: 8a:45:0e:f2:02:87:af:bd:4f:04:9d:60:b0:6f:af:87:dd:78: d6:db:5b:b8:bd:e6:1a:b9:49:22:1d:55:0f:30:b1:1c:77:52: d3:56:af:a5:ca:7f:d9:a3:0e:bf:a0:f1:e6:a2:1c:f4:fa:b7: 99:db:00:1b:0c:f1:72:77:05:21:52:97:96:60:81:0c:4c:fd: 86:1a:2e:f6:c6:97:a1:a9:f8:fe:dc:9b:92:e3:44:db:55:37: d4:42:cf:67:2f:20:d5:4c:1b:c3:18:42:83:66:43:c4:48:10: 86:d2:6b:4a:cb:13:17:f1:8d:b3:ac:ba:e8:d7:2d:e2:dc:17: 09:0b:d0:55:6d:e4:34:18:f6:7f:62:e4:61:c6:f2:77:58:5d: 20:e9:82:e7:d8:48:a4:6b:60:96:c5:a0:01:73:25:50:21:e2: f0:61:32:ed:3c:e2:c6:61:81:a7:5d:37:b0:4d:b6:ad:cc:6f: b2:13:30:f7:16:45:c4:02:46:58:4a:1b:dc:dc:b5:7a:c6:4a: 36:ea:df:01:32:ee:7d:9a:61:f4:21:f3:d9:8c:27:15:e5:80: 66:bf:62:18 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDUKCwpG4VD/uS2aIi3ry3zaj2u8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDYxMTE5WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTFlZTA5YjMxZTBhMzlhYjcxYjBmZDlmM2NlNDc4MTY2 NjIzM2E4YzhkMzA1Y2JhYWZkMGJlMTZjMjQ3M2JmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlIaMiDCce1KjptYqmVS+qH3tdPDm+csbba88WYS+jfnFS h4k+UlaFL0yXjjwR4bmEAdLfwTWrdcVUQe7H+x1JLX7jJugLrtq8ud9qD6j+l9km XqlAM1UEOEk1tcwEpX4sNPY63mQa1QuGy0ZABokInwjEoVQDcbcRMysReOQH6cf+ t2k4n7dYHcXeIJnaZefdMPxTIaO6+0HmHA/cTNsCckEKPFqwqJF+budQ83FLsBEg YaRRaaZbo5W9kmTL6tz2Jqihd+eDUrc/1DiWPCzUhhC5k7isjWMQnR6noxUMVDTG 6ZLlQmEHN0SKHj/GxmjOiC7n+fBf4W0EdsQHageDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv7gz7x/JLLix3Q+39bC+ZU9opFUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBkMWQyNzNmLWVjNmEtNDAwNy1hYWU0LTBjN2Q0ZjJiZmUwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDqswwDQYJKoZIhvcNAQELBQADggEBAI5A/xtvh1qMBBByPfnD7S3R8ABi SPIKD5R82BUf/jF2TmnWRopFDvICh6+9TwSdYLBvr4fdeNbbW7i95hq5SSIdVQ8w sRx3UtNWr6XKf9mjDr+g8eaiHPT6t5nbABsM8XJ3BSFSl5ZggQxM/YYaLvbGl6Gp +P7cm5LjRNtVN9RCz2cvINVMG8MYQoNmQ8RIEIbSa0rLExfxjbOsuujXLeLcFwkL 0FVt5DQY9n9i5GHG8ndYXSDpgufYSKRrYJbFoAFzJVAh4vBhMu084sZhgaddN7BN tq3Mb7ITMPcWRcQCRlhKG9zctXrGSjbq3wEy7n2aYfQh89mMJxXlgGa/Yhg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:55 2025 by rpki-client