$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d986b23-2c05-4137-9aec-3954b24bd48a.roa File: 7d986b23-2c05-4137-9aec-3954b24bd48a.roa (raw, json) Hash identifier: yWC9HcChDogRTyWLRtJppCuUjKTVps71I2nxpU1kseQ= Subject key identifier: 27:21:30:6E:B2:4A:7E:59:29:9A:CD:24:95:4E:24:DD:B8:96:18:1D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7A2E0AA6CC1996085501A0E9E3E5F299CDD527F6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d986b23-2c05-4137-9aec-3954b24bd48a.roa Signing time: Tue 28 Oct 2025 17:28:27 +0000 ROA not before: Tue 28 Oct 2025 17:28:27 +0000 ROA not after: Tue 02 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2e:0a:a6:cc:19:96:08:55:01:a0:e9:e3:e5:f2:99:cd:d5:27:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 28 17:28:27 2025 GMT Not After : Dec 2 23:59:59 2025 GMT Subject: serialNumber=08f1f97164b97b6205559a348f0318ef71e7fa145862fc89042dfe3e36b05e6c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:74:0f:df:32:02:c2:19:79:8e:98:a9:6c:dd: c0:e2:59:c4:09:ba:23:f3:35:00:55:c9:86:7d:87: 98:3f:8c:81:3f:0d:6c:d9:70:b8:10:5c:03:db:2b: 0c:c9:b2:d0:7f:46:aa:3a:88:2f:80:01:b1:9f:16: 4c:ab:e3:18:32:46:d3:b0:29:3d:e4:36:5a:0e:3c: 2d:6d:b7:d3:6f:aa:20:00:c9:d9:21:92:2b:d6:d6: f8:02:af:12:4c:99:f2:bd:3f:0c:ae:b6:32:1a:71: 38:6b:a5:ae:68:a3:68:b1:d3:75:f2:f8:52:d0:2d: da:79:35:28:32:c3:f7:b6:2a:9b:72:35:f9:ee:56: 80:a3:da:1d:dc:65:f4:b5:d0:a4:74:d2:12:1b:84: 87:7d:81:7f:9f:e8:f8:59:0e:b4:ba:10:17:71:c7: e6:6f:0f:62:98:32:a1:e3:c8:5f:c9:e4:bf:da:01: 48:c9:e8:62:e3:d2:9b:f5:eb:6f:c3:06:d0:e2:52: a2:c1:ed:a0:2c:12:51:24:1e:5e:3a:56:ab:44:c1: d2:0b:ad:64:fb:92:38:ee:7f:98:2a:b2:07:9f:2e: 63:8d:59:34:f8:34:02:13:4f:5b:9a:d7:91:f7:d8: 8a:7b:a4:a2:53:4d:6d:23:dc:7a:a2:3f:22:db:67: 5d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:21:30:6E:B2:4A:7E:59:29:9A:CD:24:95:4E:24:DD:B8:96:18:1D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d986b23-2c05-4137-9aec-3954b24bd48a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.180.0/22 Signature Algorithm: sha256WithRSAEncryption 75:65:4c:8f:b3:29:d5:d0:02:c0:ec:45:f8:42:35:88:2f:d4: 46:bb:8f:a8:a8:b6:6c:db:7b:f1:81:9c:dc:aa:41:a0:a6:fe: 93:e8:3a:d9:32:ad:83:80:f2:1d:dd:b7:79:61:24:55:9e:87: 83:ac:8d:eb:35:fd:b8:10:3e:4e:c0:1e:27:2a:d0:b4:cf:80: f2:24:14:8e:4c:00:e5:06:9f:c3:71:2b:90:e0:b5:0f:8b:6c: 8d:43:1c:fb:07:0f:f9:90:84:16:90:25:4c:0d:be:26:d5:74: ca:2f:f2:17:e3:ff:7a:6b:15:d2:4f:5b:76:ee:3d:fe:e0:17: f4:72:49:aa:a6:dd:7a:db:84:ce:4a:2a:cc:1e:2a:e4:a3:5d: d5:d9:9a:be:fa:2f:dc:a6:51:a3:d4:8d:35:a6:e9:61:bd:76: 00:ef:46:8b:c6:71:98:bf:14:4c:22:53:db:44:47:f4:49:c7: aa:5a:24:7b:36:9d:c6:35:25:28:13:73:44:45:e3:66:a9:17: 8b:22:bb:88:7d:f2:c1:c1:26:46:af:ef:ba:17:30:1b:c6:d7: 7f:f0:de:a9:8b:04:25:52:05:cc:26:ca:bf:f5:8b:c0:d0:28: d8:ea:8a:9e:b6:09:19:b8:ca:c2:73:78:e4:02:5c:ed:4b:b5: 46:92:74:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUei4KpswZlghVAaDp4+Xymc3VJ/YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDI4MTcyODI3WhcNMjUxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGYxZjk3MTY0Yjk3YjYyMDU1NTlhMzQ4ZjAzMThlZjcx ZTdmYTE0NTg2MmZjODkwNDJkZmUzZTM2YjA1ZTZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfdA/fMgLCGXmOmKls3cDiWcQJuiPzNQBVyYZ9h5g/jIE/ DWzZcLgQXAPbKwzJstB/Rqo6iC+AAbGfFkyr4xgyRtOwKT3kNloOPC1tt9NvqiAA ydkhkivW1vgCrxJMmfK9PwyutjIacThrpa5oo2ix03Xy+FLQLdp5NSgyw/e2Kpty NfnuVoCj2h3cZfS10KR00hIbhId9gX+f6PhZDrS6EBdxx+ZvD2KYMqHjyF/J5L/a AUjJ6GLj0pv162/DBtDiUqLB7aAsElEkHl46VqtEwdILrWT7kjjuf5gqsgefLmON WTT4NAITT1ua15H32Ip7pKJTTW0j3HqiPyLbZ12bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJyEwbrJKflkpms0klU4k3biWGB0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdkOTg2YjIzLTJjMDUtNDEzNy05YWVjLTM5NTRiMjRiZDQ4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDqrQwDQYJKoZIhvcNAQELBQADggEBAHVlTI+zKdXQAsDsRfhCNYgv1Ea7 j6iotmzbe/GBnNyqQaCm/pPoOtkyrYOA8h3dt3lhJFWeh4Osjes1/bgQPk7AHicq 0LTPgPIkFI5MAOUGn8NxK5DgtQ+LbI1DHPsHD/mQhBaQJUwNvibVdMov8hfj/3pr FdJPW3buPf7gF/RySaqm3XrbhM5KKsweKuSjXdXZmr76L9ymUaPUjTWm6WG9dgDv RovGcZi/FEwiU9tER/RJx6paJHs2ncY1JSgTc0RF42apF4siu4h98sHBJkav77oX MBvG13/w3qmLBCVSBcwmyr/1i8DQKNjqip62CRm4ysJzeOQCXO1LtUaSdAc= -----END CERTIFICATE-----Generated at Wed Nov 5 01:46:27 2025 by rpki-client