$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2356511b-b077-4972-bd5d-a78ca4736823.roa File: 2356511b-b077-4972-bd5d-a78ca4736823.roa (raw, json) Hash identifier: tKw1AmmjiztcNaDxu1+m4LICiY/N181yEvveM0tVC6Y= Subject key identifier: 82:3A:00:9F:1A:3E:1D:85:1A:19:93:2C:33:55:41:3B:A2:60:32:E5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 706579A63EE111FBEA4101521ABB55A2793D92C2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2356511b-b077-4972-bd5d-a78ca4736823.roa Signing time: Tue 28 Oct 2025 17:24:04 +0000 ROA not before: Tue 28 Oct 2025 17:24:04 +0000 ROA not after: Tue 02 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:65:79:a6:3e:e1:11:fb:ea:41:01:52:1a:bb:55:a2:79:3d:92:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 28 17:24:04 2025 GMT Not After : Dec 2 23:59:59 2025 GMT Subject: serialNumber=53c6ed24369485c58581191766aba7889c398674c21cea4225803be59af265e6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:d1:12:81:fe:96:32:3f:2e:06:19:e2:a6: 95:61:b2:cb:f0:15:1b:0b:2c:09:ea:eb:bd:3f:f5: fa:9d:cb:b1:6f:27:a0:83:ce:b1:8b:b2:39:e0:07: 22:cd:d2:8c:4b:e6:9a:bb:25:68:bd:0d:5d:97:58: 1e:0a:f8:a7:cd:e2:c8:31:b0:9f:96:39:db:d7:29: 94:d9:33:f9:4a:73:61:e9:f2:f2:55:ca:0e:fc:72: 18:0a:5e:88:8c:e1:07:75:66:80:6d:7f:48:94:d0: a9:ac:0c:57:71:aa:11:04:73:e1:99:24:9f:87:da: 95:d4:dc:d6:cb:3e:1d:7c:6b:87:9c:83:e5:4b:f3: a8:da:e6:c5:d0:1d:7f:ed:6c:8d:79:58:07:52:4a: 68:d9:a2:b6:89:8a:6a:19:15:cb:3c:78:cc:02:90: b5:8b:97:f9:3f:5d:dd:4a:0f:63:86:a4:53:86:f9: c9:c7:d2:99:eb:3c:7a:f4:a4:38:19:04:50:90:8b: f4:d4:81:77:82:a0:43:fd:c6:41:70:86:b9:df:0c: 81:7f:3e:9c:ce:88:88:f0:be:25:bc:d1:ec:35:b5: 5a:f3:4c:89:fe:86:78:21:db:c7:ae:9a:37:9c:42: 21:99:4a:1e:dc:aa:42:3e:fe:a1:15:dd:be:8a:ca: 06:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3A:00:9F:1A:3E:1D:85:1A:19:93:2C:33:55:41:3B:A2:60:32:E5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2356511b-b077-4972-bd5d-a78ca4736823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.0.0/20 Signature Algorithm: sha256WithRSAEncryption b4:e4:59:17:94:38:86:b7:0d:95:48:52:56:a1:16:d4:12:da: 80:a1:bc:56:12:a1:c7:4e:34:fb:96:c2:3e:6a:29:2f:2f:7b: 24:0d:e1:1d:d6:79:03:c3:43:bc:b7:ca:c3:df:81:2e:37:d1: 29:8f:bc:02:b1:ed:50:c2:4b:58:c1:2f:d9:e3:5a:27:5b:08: dc:17:74:f2:4a:ea:21:63:de:24:66:c8:1c:d4:c8:d8:50:d0: 7c:b3:9e:f9:39:2d:36:7c:8f:a0:94:74:9f:8f:a3:13:6b:f6: b8:bc:6a:a2:5f:51:de:a3:ad:77:22:18:e1:72:86:16:97:bb: c2:57:9b:81:17:dd:b9:a0:b6:ee:4c:4c:fc:34:60:1c:3b:4a: 23:0d:7f:0d:35:5d:c2:85:30:5a:d5:26:61:9b:be:13:16:37: be:9b:35:4f:98:ff:c1:a7:e1:94:f6:55:a8:52:13:87:38:96: eb:4e:93:b2:ac:77:5d:cb:41:6e:10:44:85:50:bb:e1:d3:d1: 9a:87:46:0c:39:5f:1e:93:82:29:33:68:5a:dd:ec:c2:57:df: 9d:49:38:6b:27:58:ef:10:e8:f4:ad:d3:c5:a3:d7:46:83:2f: b2:db:2b:2b:b0:56:17:bc:80:a6:73:3c:7d:82:ca:af:1c:1d: de:ed:89:3a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcGV5pj7hEfvqQQFSGrtVonk9ksIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDI4MTcyNDA0WhcNMjUxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1M2M2ZWQyNDM2OTQ4NWM1ODU4MTE5MTc2NmFiYTc4ODlj Mzk4Njc0YzIxY2VhNDIyNTgwM2JlNTlhZjI2NWU2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuy9ESgf6WMj8uBhnippVhssvwFRsLLAnq670/9fqdy7Fv J6CDzrGLsjngByLN0oxL5pq7JWi9DV2XWB4K+KfN4sgxsJ+WOdvXKZTZM/lKc2Hp 8vJVyg78chgKXoiM4Qd1ZoBtf0iU0KmsDFdxqhEEc+GZJJ+H2pXU3NbLPh18a4ec g+VL86ja5sXQHX/tbI15WAdSSmjZoraJimoZFcs8eMwCkLWLl/k/Xd1KD2OGpFOG +cnH0pnrPHr0pDgZBFCQi/TUgXeCoEP9xkFwhrnfDIF/PpzOiIjwviW80ew1tVrz TIn+hngh28eumjecQiGZSh7cqkI+/qEV3b6KygarAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgjoAnxo+HYUaGZMsM1VBO6JgMuUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIzNTY1MTFiLWIwNzctNDk3Mi1iZDVkLWE3OGNhNDczNjgyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDqgAwDQYJKoZIhvcNAQELBQADggEBALTkWReUOIa3DZVIUlahFtQS2oCh vFYSocdONPuWwj5qKS8veyQN4R3WeQPDQ7y3ysPfgS430SmPvAKx7VDCS1jBL9nj WidbCNwXdPJK6iFj3iRmyBzUyNhQ0Hyznvk5LTZ8j6CUdJ+PoxNr9ri8aqJfUd6j rXciGOFyhhaXu8JXm4EX3bmgtu5MTPw0YBw7SiMNfw01XcKFMFrVJmGbvhMWN76b NU+Y/8Gn4ZT2VahSE4c4lutOk7Ksd13LQW4QRIVQu+HT0ZqHRgw5Xx6TgikzaFrd 7MJX351JOGsnWO8Q6PSt08Wj10aDL7LbKyuwVhe8gKZzPH2Cyq8cHd7tiTo= -----END CERTIFICATE-----Generated at Wed Nov 5 01:46:21 2025 by rpki-client