$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3edbd77-ba3a-45fd-8abc-dcd91252f055.roa File: a3edbd77-ba3a-45fd-8abc-dcd91252f055.roa (raw, json) Hash identifier: fLE2yazh+FNddn5MbFeIs3fi9mpDhD2srDClDvNPFxA= Subject key identifier: F0:35:84:77:27:5A:BA:64:58:D8:B6:51:C3:DF:17:D3:61:10:80:DC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6FA5F174436B8EE41D857FC478B3E31CDA5C64D8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3edbd77-ba3a-45fd-8abc-dcd91252f055.roa Signing time: Tue 21 Oct 2025 02:02:30 +0000 ROA not before: Tue 21 Oct 2025 02:02:30 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a5:f1:74:43:6b:8e:e4:1d:85:7f:c4:78:b3:e3:1c:da:5c:64:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 02:02:30 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=239171a8a090acd76a78bbb77e03894b4cddc9085f726804fa9797f850e83e2e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:27:89:64:67:87:8c:eb:be:f0:5d:17:23: d8:c9:e2:f0:b1:cf:97:5f:ab:8c:4b:60:c8:3c:da: 40:a5:3c:02:49:60:af:51:26:92:44:15:3e:de:01: d6:3d:e5:3e:5b:78:18:ab:71:cb:8d:c6:6f:29:9f: 18:24:5d:01:6a:41:65:7a:9a:b3:6b:97:c8:1c:2e: f6:c1:56:4b:36:54:70:f0:91:55:04:e8:99:f1:2b: 81:16:b8:4d:1b:dd:66:5a:67:bd:b3:f1:ee:72:4f: 2f:0a:0c:e6:86:08:50:f0:ad:78:5b:e9:f7:ec:6b: 06:70:51:e8:ab:80:62:a4:4e:61:b7:73:3e:d9:c9: 0c:ed:28:27:0e:f6:ac:77:ce:3b:e4:23:00:07:4b: c7:03:57:2b:d7:35:e3:20:3d:ce:4d:47:66:2f:42: 86:ff:63:5b:1d:e9:ac:37:e9:f7:2e:14:76:73:72: 50:46:26:89:a5:ee:ca:a9:32:1a:29:07:f5:85:98: ef:86:d9:ae:4b:24:5a:7d:1c:a1:f2:ab:25:0f:ce: ae:5f:97:39:a6:30:2d:6f:31:19:81:66:71:ea:97: 30:df:76:52:d8:0c:d9:f8:10:de:1c:12:6a:0f:cd: 11:eb:e7:04:89:5d:83:8f:c9:3f:9d:ad:3c:95:34: 87:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:35:84:77:27:5A:BA:64:58:D8:B6:51:C3:DF:17:D3:61:10:80:DC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3edbd77-ba3a-45fd-8abc-dcd91252f055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.64.0/21 Signature Algorithm: sha256WithRSAEncryption 84:c3:3a:2f:20:ba:0a:4b:bd:30:10:de:29:97:2e:c6:51:5f: a0:ca:cc:6f:03:ba:2d:62:bc:5a:7e:17:89:81:eb:89:5d:8f: ce:d2:ec:d2:ab:51:11:98:de:ec:3b:1e:6d:90:6b:f3:c6:38: 02:b9:66:94:41:40:24:6f:f4:ea:58:3b:b6:f4:cb:2f:76:1e: 2e:81:e1:b2:8c:f6:00:73:68:2b:27:09:61:74:07:87:d1:ed: 3a:99:c5:66:e3:cf:f4:52:83:bd:ec:d4:24:e2:02:dd:c7:45: f2:b3:f0:0c:ff:33:ec:24:0f:71:2c:a4:97:f0:82:87:26:6d: ab:b7:42:10:4c:b6:69:b9:83:97:76:f6:bc:c9:a4:2d:96:da: 73:20:3d:93:d4:82:8c:4d:79:45:df:a3:25:92:db:22:0c:f8: bc:74:86:0f:35:e5:99:a1:b2:ba:ed:87:26:c5:53:17:87:df: 2f:e6:7e:94:be:ac:51:d0:ac:2f:c9:62:f5:01:12:a7:64:2a: 00:0b:da:6c:d8:1a:9b:87:93:9e:e7:ed:8e:70:6e:fc:98:ff: 5c:02:c5:6c:f6:9f:44:31:04:07:7e:0d:e3:1d:f9:99:31:0e: e2:6b:09:80:ff:3f:da:00:c6:f4:98:51:ce:ce:ba:de:87:ff: 72:ea:8a:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb6XxdENrjuQdhX/EeLPjHNpcZNgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDIwMjMwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzkxNzFhOGEwOTBhY2Q3NmE3OGJiYjc3ZTAzODk0YjRj ZGRjOTA4NWY3MjY4MDRmYTk3OTdmODUwZTgzZTJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPoCeJZGeHjOu+8F0XI9jJ4vCxz5dfq4xLYMg82kClPAJJ YK9RJpJEFT7eAdY95T5beBirccuNxm8pnxgkXQFqQWV6mrNrl8gcLvbBVks2VHDw kVUE6JnxK4EWuE0b3WZaZ72z8e5yTy8KDOaGCFDwrXhb6ffsawZwUeirgGKkTmG3 cz7ZyQztKCcO9qx3zjvkIwAHS8cDVyvXNeMgPc5NR2YvQob/Y1sd6aw36fcuFHZz clBGJoml7sqpMhopB/WFmO+G2a5LJFp9HKHyqyUPzq5flzmmMC1vMRmBZnHqlzDf dlLYDNn4EN4cEmoPzRHr5wSJXYOPyT+drTyVNIeNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8DWEdydaumRY2LZRw98X02EQgNwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EzZWRiZDc3LWJhM2EtNDVmZC04YWJjLWRjZDkxMjUyZjA1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDrEAwDQYJKoZIhvcNAQELBQADggEBAITDOi8gugpLvTAQ3imXLsZRX6DK zG8Dui1ivFp+F4mB64ldj87S7NKrURGY3uw7Hm2Qa/PGOAK5ZpRBQCRv9OpYO7b0 yy92Hi6B4bKM9gBzaCsnCWF0B4fR7TqZxWbjz/RSg73s1CTiAt3HRfKz8Az/M+wk D3EspJfwgocmbau3QhBMtmm5g5d29rzJpC2W2nMgPZPUgoxNeUXfoyWS2yIM+Lx0 hg815ZmhsrrthybFUxeH3y/mfpS+rFHQrC/JYvUBEqdkKgAL2mzYGpuHk57n7Y5w bvyY/1wCxWz2n0QxBAd+DeMd+ZkxDuJrCYD/P9oAxvSYUc7Out6H/3Lqil8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:33:25 2025 by rpki-client