$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef5e23d1-23af-42eb-b88f-187c5be6db87.roa File: ef5e23d1-23af-42eb-b88f-187c5be6db87.roa (raw, json) Hash identifier: N3TvxaRPI+Du2kW5L8w4Wr0NxqAREuWhj0P9qPSe4MY= Subject key identifier: 2C:41:AA:8E:86:11:0D:01:91:AA:F6:65:EE:46:1A:E5:82:13:54:16 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7D0A85904FE5D0C2499142AD2F64A82D22A2D477 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef5e23d1-23af-42eb-b88f-187c5be6db87.roa Signing time: Mon 20 Oct 2025 13:02:31 +0000 ROA not before: Mon 20 Oct 2025 13:02:31 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0a:85:90:4f:e5:d0:c2:49:91:42:ad:2f:64:a8:2d:22:a2:d4:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 13:02:31 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=e9d1069baa779868c9fee4d87a5594e27cbc43d097fdba3b38210c2ce711f164, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0e:fa:08:26:89:43:8f:f5:77:04:70:b1:b0: 00:1c:f5:4e:98:b5:77:7a:4a:55:92:8f:d8:54:99: ad:44:59:df:6e:cb:7b:b0:5f:1c:1f:80:db:5d:97: 85:fc:6d:b3:ee:32:4d:74:5c:3f:62:15:bb:63:b6: 00:8f:17:58:95:85:74:c6:da:b0:60:70:dd:b3:c4: 15:4f:cc:a9:d6:8f:38:c3:f1:54:3d:86:ff:44:ac: 60:7b:bd:b3:a1:85:ce:6e:8d:8a:78:3a:a7:5e:8f: 3f:83:b7:8b:4c:01:ad:14:33:63:78:ca:ec:5c:8f: 98:e7:e2:df:75:ad:c3:e2:e7:3e:0a:c1:b7:ef:4a: d2:d4:0b:ae:7c:4c:8e:82:82:52:d4:57:36:fe:e0: 79:de:a9:3e:17:6c:34:0e:da:09:e2:29:8c:20:0a: 11:2a:e0:20:5a:a0:80:ed:11:f5:b7:c8:10:c9:13: 40:74:7a:ea:1c:75:4b:bc:bd:99:6e:ba:dd:cf:d2: 65:e9:97:97:76:a7:9c:39:04:ac:4c:9b:b1:1e:a2: 24:73:8c:a9:e8:f0:b5:76:50:f5:36:a5:9d:f5:a8: 93:bc:10:6e:ce:93:48:b2:9b:91:de:41:a4:ed:1e: 9b:5f:b0:7a:47:17:37:88:7f:f1:55:54:55:2f:79: e6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:41:AA:8E:86:11:0D:01:91:AA:F6:65:EE:46:1A:E5:82:13:54:16 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef5e23d1-23af-42eb-b88f-187c5be6db87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.198.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:51:c9:6c:d2:0d:46:51:9c:d1:7f:50:af:ec:91:a6:96:7d: 11:36:f2:8e:0a:3f:fc:a8:63:17:39:79:84:02:2d:52:29:01: 16:6c:0f:fa:03:f8:8d:47:dd:e8:30:7b:98:d6:95:60:94:77: f3:30:b2:7f:39:93:e8:83:eb:ff:14:5a:e5:f1:c4:e4:63:d0: 04:c6:bb:6e:b7:3e:28:28:74:0c:c2:e5:e9:27:b4:c6:af:d1: 53:4b:f2:0b:1f:a3:f0:67:46:c1:f3:a1:05:a0:16:bb:28:b3: 7b:15:78:7e:bd:52:37:33:7b:68:73:65:ff:fe:db:17:2c:9e: ce:76:01:a1:62:f5:b7:20:08:29:8f:79:b4:96:30:56:01:93: 16:f2:e7:66:5b:63:c9:15:04:ab:0a:b9:68:99:8f:66:04:9a: 58:fd:2f:23:a6:44:ed:ba:a9:1e:fa:7a:cc:3a:48:e5:8a:18: 35:1f:28:a4:f7:99:8e:ff:d8:79:ad:9f:4e:6d:1e:bc:5c:86: 0b:44:40:93:ff:15:c5:76:d4:d2:17:03:ab:4c:00:8c:f6:d9: 15:0c:d9:d7:94:f9:1b:9b:22:1b:63:eb:bf:4b:cf:62:d7:dc: a7:c8:3d:80:52:f0:13:16:26:d5:3b:4a:13:36:44:51:88:10: 12:7f:60:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfQqFkE/l0MJJkUKtL2SoLSKi1HcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMTMwMjMxWhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOWQxMDY5YmFhNzc5ODY4YzlmZWU0ZDg3YTU1OTRlMjdj YmM0M2QwOTdmZGJhM2IzODIxMGMyY2U3MTFmMTY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0DvoIJolDj/V3BHCxsAAc9U6YtXd6SlWSj9hUma1EWd9u y3uwXxwfgNtdl4X8bbPuMk10XD9iFbtjtgCPF1iVhXTG2rBgcN2zxBVPzKnWjzjD 8VQ9hv9ErGB7vbOhhc5ujYp4Oqdejz+Dt4tMAa0UM2N4yuxcj5jn4t91rcPi5z4K wbfvStLUC658TI6CglLUVzb+4HneqT4XbDQO2gniKYwgChEq4CBaoIDtEfW3yBDJ E0B0euocdUu8vZluut3P0mXpl5d2p5w5BKxMm7EeoiRzjKno8LV2UPU2pZ31qJO8 EG7Ok0iym5HeQaTtHptfsHpHFzeIf/FVVFUveebJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULEGqjoYRDQGRqvZl7kYa5YITVBYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmNWUyM2QxLTIzYWYtNDJlYi1iODhmLTE4N2M1YmU2ZGI4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqsYwDQYJKoZIhvcNAQELBQADggEBAItRyWzSDUZRnNF/UK/skaaWfRE2 8o4KP/yoYxc5eYQCLVIpARZsD/oD+I1H3egwe5jWlWCUd/Mwsn85k+iD6/8UWuXx xORj0ATGu263PigodAzC5ekntMav0VNL8gsfo/BnRsHzoQWgFrsos3sVeH69Ujcz e2hzZf/+2xcsns52AaFi9bcgCCmPebSWMFYBkxby52ZbY8kVBKsKuWiZj2YEmlj9 LyOmRO26qR76esw6SOWKGDUfKKT3mY7/2Hmtn05tHrxchgtEQJP/FcV21NIXA6tM AIz22RUM2deU+RubIhtj679Lz2LX3KfIPYBS8BMWJtU7ShM2RFGIEBJ/YAU= -----END CERTIFICATE-----Generated at Wed Nov 5 01:53:32 2025 by rpki-client