$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84abe45d-1ed4-4d0f-8805-10388d0f215d.roa File: 84abe45d-1ed4-4d0f-8805-10388d0f215d.roa (raw, json) Hash identifier: 6A1hV55rni1WXdm33oEiIWTRy9xWHD7Y1S+LU8ETzWc= Subject key identifier: 1D:E3:E4:76:30:E3:80:A0:8B:D1:7B:2C:75:FF:12:2B:B8:6E:22:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 28D7F3DE241020E53AC0572D82EC314E8DA2B295 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84abe45d-1ed4-4d0f-8805-10388d0f215d.roa Signing time: Mon 20 Oct 2025 16:53:35 +0000 ROA not before: Mon 20 Oct 2025 16:53:35 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d7:f3:de:24:10:20:e5:3a:c0:57:2d:82:ec:31:4e:8d:a2:b2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 16:53:35 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=5e76352cea709a402b49e08f96d55675890d4ee23757037f194ecccbb41f5eaf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:21:2a:01:20:73:51:c9:31:39:56:e9:8e: 54:b9:1e:f4:3c:09:8d:53:ea:30:bf:4e:09:af:51: df:a9:55:a5:88:27:d5:8e:7d:ff:12:45:98:7c:33: 50:62:84:df:0b:44:12:79:4c:3d:ef:8e:a7:de:75: 17:0e:24:88:7c:8f:db:22:28:d2:9a:89:d0:02:b1: 32:a9:0f:68:23:18:72:0b:17:27:d0:72:62:86:ef: 11:3c:63:1e:28:68:a2:78:fe:a1:cd:20:18:3b:af: 65:1d:3c:17:21:76:4b:44:f0:05:a2:51:be:cc:b3: 6a:74:fb:02:67:7c:91:d0:10:bb:c4:92:50:b4:47: b2:f6:c4:bc:a2:bb:5e:a6:68:9c:6e:d3:b7:3c:c5: 92:dd:e6:ee:4c:ee:0a:33:80:c3:86:db:02:97:09: 26:57:1b:de:37:c7:ec:97:65:50:e2:d2:be:31:f7: db:ce:08:fe:ec:3c:af:36:20:26:e1:20:f3:4d:22: 2c:e7:f1:6e:26:ff:65:30:3f:ef:4a:29:3e:8d:14: 0f:a0:41:d0:b3:b1:ed:a3:f2:97:e5:55:d9:53:eb: e0:8a:87:15:f6:3e:b8:4c:e8:1c:54:30:db:bc:6c: 23:06:f7:0f:05:db:d2:6b:6e:68:38:f5:62:9b:b4: 9f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E3:E4:76:30:E3:80:A0:8B:D1:7B:2C:75:FF:12:2B:B8:6E:22:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84abe45d-1ed4-4d0f-8805-10388d0f215d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.194.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:3d:e2:e9:0c:94:9b:f2:af:8f:e6:88:4b:95:6a:16:08:90: 98:53:76:08:2c:cb:6a:bf:5a:7d:34:e9:54:3c:68:bf:bc:5b: 4a:05:c3:04:39:14:0d:a6:e0:0d:e3:be:f1:d6:a8:9a:2e:96: 46:aa:d3:fc:dd:2a:1e:c1:dd:45:8f:98:fb:28:df:91:11:0a: a9:6e:52:52:b7:41:04:8a:f1:67:c4:3c:93:a6:1b:7a:bf:39: d6:cf:93:b2:a6:47:16:9d:ba:07:fb:2d:30:68:dd:14:08:42: ac:6a:62:3d:9d:94:8f:e3:3a:69:ba:5c:dd:b1:4c:01:87:41: cd:97:85:ec:6a:ce:3b:68:bd:d8:2f:a0:76:9a:d4:c2:72:00: fe:fc:71:66:23:86:5d:0a:85:ac:09:37:88:bd:4b:2e:96:e4: 84:bb:fc:87:36:43:54:3b:59:e5:c9:5a:25:58:6b:58:31:4d: 67:f8:96:db:0c:7e:df:96:d4:17:5a:94:ee:9b:95:5c:9a:ab: d0:aa:b1:b7:17:08:af:34:10:a0:50:6b:ae:9a:5c:44:8a:08: 2d:13:1f:78:35:54:5a:ea:2d:c6:ac:d0:30:4c:1a:b3:a0:12: ca:d2:dc:04:47:dd:99:ae:9d:b0:2c:5e:dc:0a:78:47:0c:e3: 03:62:03:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKNfz3iQQIOU6wFctguwxTo2ispUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMTY1MzM1WhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTc2MzUyY2VhNzA5YTQwMmI0OWUwOGY5NmQ1NTY3NTg5 MGQ0ZWUyMzc1NzAzN2YxOTRlY2NjYmI0MWY1ZWFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8RCEqASBzUckxOVbpjlS5HvQ8CY1T6jC/TgmvUd+pVaWI J9WOff8SRZh8M1BihN8LRBJ5TD3vjqfedRcOJIh8j9siKNKaidACsTKpD2gjGHIL FyfQcmKG7xE8Yx4oaKJ4/qHNIBg7r2UdPBchdktE8AWiUb7Ms2p0+wJnfJHQELvE klC0R7L2xLyiu16maJxu07c8xZLd5u5M7gozgMOG2wKXCSZXG943x+yXZVDi0r4x 99vOCP7sPK82ICbhIPNNIizn8W4m/2UwP+9KKT6NFA+gQdCzse2j8pflVdlT6+CK hxX2PrhM6BxUMNu8bCMG9w8F29Jrbmg49WKbtJ/1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHePkdjDjgKCL0Xssdf8SK7huIoUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0YWJlNDVkLTFlZDQtNGQwZi04ODA1LTEwMzg4ZDBmMjE1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqsIwDQYJKoZIhvcNAQELBQADggEBACs94ukMlJvyr4/miEuVahYIkJhT dggsy2q/Wn006VQ8aL+8W0oFwwQ5FA2m4A3jvvHWqJoulkaq0/zdKh7B3UWPmPso 35ERCqluUlK3QQSK8WfEPJOmG3q/OdbPk7KmRxadugf7LTBo3RQIQqxqYj2dlI/j Omm6XN2xTAGHQc2XhexqzjtovdgvoHaa1MJyAP78cWYjhl0KhawJN4i9Sy6W5IS7 /Ic2Q1Q7WeXJWiVYa1gxTWf4ltsMft+W1BdalO6blVyaq9CqsbcXCK80EKBQa66a XESKCC0TH3g1VFrqLcas0DBMGrOgEsrS3ARH3ZmunbAsXtwKeEcM4wNiA8s= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:59 2025 by rpki-client