$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8403fb9f-da30-46c5-bb25-de593a46bb43.roa File: 8403fb9f-da30-46c5-bb25-de593a46bb43.roa (raw, json) Hash identifier: VoEOHWftTCHUdCJU2O7BSecEcBEJsVJW4j+NPdXO5Wo= Subject key identifier: E8:D6:F1:E7:8C:6F:48:3D:99:EC:74:B4:91:E5:8C:BC:8B:E7:9E:5B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44F0D1761E4AB2F177CCE914809A56E7296179 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8403fb9f-da30-46c5-bb25-de593a46bb43.roa Signing time: Tue 28 Oct 2025 17:30:44 +0000 ROA not before: Tue 28 Oct 2025 17:30:44 +0000 ROA not after: Tue 02 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f0:d1:76:1e:4a:b2:f1:77:cc:e9:14:80:9a:56:e7:29:61:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 28 17:30:44 2025 GMT Not After : Dec 2 23:59:59 2025 GMT Subject: serialNumber=3bb406679ba155be76ce83dd1ffe599acf4d35180eb4f78f05484f345b6442dd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:7d:01:a7:3a:7b:aa:5b:13:ff:b2:c2:47: 10:51:0d:a5:bf:38:49:a4:e2:a8:67:0a:8e:25:3e: 86:13:fd:85:3c:63:c6:1f:31:92:19:b2:3c:dd:8d: 06:db:8a:da:2e:17:b0:bd:95:25:ba:f0:65:40:08: bd:06:32:7e:08:b3:a8:45:72:45:45:0a:9b:4a:8c: 2c:11:a2:9b:be:52:6c:85:73:ca:eb:73:f7:26:e4: 55:6b:44:b3:59:d6:e1:b7:da:54:d2:89:b2:5e:65: 5e:d1:35:66:67:c0:56:49:aa:61:30:d8:31:25:83: 9b:51:ce:3b:da:68:97:af:22:79:14:23:d1:29:e0: 1b:a3:74:8d:c6:fd:65:24:43:7c:a4:7c:05:0e:1c: 1e:4f:e6:1b:8f:8f:66:7f:d3:a0:8c:e3:68:ed:31: 1e:ab:ef:86:f6:fa:12:9c:6a:f1:bd:67:18:c1:61: e9:1d:25:ee:8d:3d:0b:cd:ec:ba:fb:cb:13:82:af: 9d:a9:48:06:02:ee:29:16:11:d6:0c:1c:dc:d2:4f: 1e:9d:d7:1a:17:3a:43:89:7f:d9:7f:62:7b:65:18: 1b:00:ee:48:4c:57:87:8c:71:98:7d:56:70:20:1c: cb:41:cc:a0:d2:55:9e:99:f6:d8:3c:6d:0a:7c:fd: ba:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D6:F1:E7:8C:6F:48:3D:99:EC:74:B4:91:E5:8C:BC:8B:E7:9E:5B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8403fb9f-da30-46c5-bb25-de593a46bb43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.234.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:5c:62:a8:85:c0:34:26:96:7e:0f:c7:3d:00:d1:1c:fb:8f: 2d:64:69:66:99:81:b5:35:8e:b7:6d:58:10:c6:8e:2b:0e:34: 95:61:a3:04:be:a4:e7:aa:18:5d:de:da:c8:7b:f2:e1:16:c1: 9e:d2:6e:3f:98:6a:56:39:b6:96:a2:83:f6:c9:3b:5d:50:b5: 27:0f:0e:e7:22:6a:94:4d:b9:a9:46:0e:a8:ee:d8:3c:4f:e1: 1c:0d:02:0a:03:9a:94:47:21:5a:bb:31:23:57:bd:fd:0f:4b: 83:84:9c:83:d2:0f:ef:e9:9d:1e:00:b5:99:d2:60:2c:23:eb: 45:47:14:aa:6a:d7:b6:0b:9b:0f:53:d9:4d:90:3c:7f:eb:d3: 39:28:73:b2:db:e9:a2:c8:0d:70:45:ff:78:37:45:26:36:26: 46:e1:7c:ea:38:87:15:8c:ef:4d:25:e0:f1:91:01:1a:ce:1e: 64:1f:7e:ac:df:31:c9:4c:63:ea:59:e1:39:4f:27:c7:0d:ca: 99:40:aa:62:7a:b3:be:ea:80:32:d7:91:6e:d1:3f:7d:9c:67: 17:68:54:bd:1b:b9:e7:6d:f0:90:eb:17:b1:34:97:8d:fa:6d: 51:f9:a3:fe:a6:9c:87:05:be:74:d3:a3:e0:64:8a:a6:6b:fb: 69:3d:d5:39 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITRPDRdh5KsvF3zOkUgJpW5ylheTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEwMjgxNzMwNDRaFw0yNTEyMDIyMzU5NTla MHoxSTBHBgNVBAUTQDNiYjQwNjY3OWJhMTU1YmU3NmNlODNkZDFmZmU1OTlhY2Y0 ZDM1MTgwZWI0Zjc4ZjA1NDg0ZjM0NWI2NDQyZGQxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMcCfQGnOnuqWxP/ssJHEFENpb84SaTiqGcKjiU+hhP9hTxj xh8xkhmyPN2NBtuK2i4XsL2VJbrwZUAIvQYyfgizqEVyRUUKm0qMLBGim75SbIVz yutz9ybkVWtEs1nW4bfaVNKJsl5lXtE1ZmfAVkmqYTDYMSWDm1HOO9pol68ieRQj 0SngG6N0jcb9ZSRDfKR8BQ4cHk/mG4+PZn/ToIzjaO0xHqvvhvb6Epxq8b1nGMFh 6R0l7o09C83suvvLE4KvnalIBgLuKRYR1gwc3NJPHp3XGhc6Q4l/2X9ie2UYGwDu SExXh4xxmH1WcCAcy0HMoNJVnpn22DxtCnz9um8CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTo1vHnjG9IPZnsdLSR5Yy8i+eeWzAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvODQwM2ZiOWYtZGEzMC00NmM1LWJiMjUtZGU1OTNhNDZiYjQzLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAQOt6jANBgkqhkiG9w0BAQsFAAOCAQEAT1xiqIXANCaWfg/HPQDRHPuPLWRp ZpmBtTWOt21YEMaOKw40lWGjBL6k56oYXd7ayHvy4RbBntJuP5hqVjm2lqKD9sk7 XVC1Jw8O5yJqlE25qUYOqO7YPE/hHA0CCgOalEchWrsxI1e9/Q9Lg4Scg9IP7+md HgC1mdJgLCPrRUcUqmrXtgubD1PZTZA8f+vTOShzstvposgNcEX/eDdFJjYmRuF8 6jiHFYzvTSXg8ZEBGs4eZB9+rN8xyUxj6lnhOU8nxw3KmUCqYnqzvuqAMteRbtE/ fZxnF2hUvRu5523wkOsXsTSXjfptUfmj/qachwW+dNOj4GSKpmv7aT3VOQ== -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:24 2025 by rpki-client