$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a285c1ea-e580-4a3a-9712-bbbfbe44932e.roa File: a285c1ea-e580-4a3a-9712-bbbfbe44932e.roa (raw, json) Hash identifier: Lk5ndJp+MxEPiasWYDZ8UZHNqF2xcKFAsjDTlsIEXtg= Subject key identifier: 69:A4:5B:FD:EE:07:91:FA:B0:CD:F7:DF:44:48:8D:50:47:E8:44:67 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 54F2BD14C0CEA513582AC7A853E4578A09681096 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a285c1ea-e580-4a3a-9712-bbbfbe44932e.roa Signing time: Mon 20 Oct 2025 08:51:31 +0000 ROA not before: Mon 20 Oct 2025 08:51:31 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f2:bd:14:c0:ce:a5:13:58:2a:c7:a8:53:e4:57:8a:09:68:10:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 08:51:31 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=f306c5bbe21eb621326b758bd2fbd18d641cf94b49e5b240f3d6722b81fa61d1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a4:f5:da:5e:41:14:72:a0:08:e2:e1:d6:8c: a1:23:d2:03:d7:0a:59:4f:a3:3e:2a:57:da:96:06: 4f:36:b8:6b:4f:04:e9:70:a5:11:3d:b4:a7:64:52: 14:21:8e:21:65:87:f1:b0:c1:0b:72:6c:df:41:6b: 15:00:de:92:97:5e:ef:8a:2e:64:66:f3:15:ec:f3: 06:62:f3:eb:ea:5f:ce:1f:19:f5:39:3a:4f:84:eb: 49:e8:4e:6b:c3:91:73:ec:d3:e8:83:c4:12:f6:63: f8:78:52:4d:26:b6:4c:be:95:b7:ec:74:66:fa:a0: 9f:ef:82:5f:f8:bd:54:b6:b9:f8:7e:f8:34:2b:06: d8:39:87:cc:1f:95:e9:1d:1f:c7:9e:7d:8a:21:a0: 1c:d0:38:71:6c:21:06:e3:61:5d:24:88:9d:16:77: bf:68:f5:20:4c:10:ac:35:79:a5:6d:3a:82:c4:ee: c8:4c:77:86:25:78:6e:d6:01:22:0c:5e:6a:38:b8: a5:c1:d1:6e:cb:a7:0b:ae:22:00:8a:98:09:49:1e: d3:70:ca:60:7d:15:ca:81:6e:ee:fa:44:ca:34:d4: ee:20:f0:ed:f5:5b:89:4d:ec:31:a1:ed:f0:b9:10: 81:77:13:64:8f:bf:fa:13:a0:9b:90:9f:f0:58:e6: ad:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A4:5B:FD:EE:07:91:FA:B0:CD:F7:DF:44:48:8D:50:47:E8:44:67 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a285c1ea-e580-4a3a-9712-bbbfbe44932e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.88.0/24 Signature Algorithm: sha256WithRSAEncryption 89:76:1e:4f:e3:28:c0:0a:b6:31:52:af:63:00:31:e9:f3:1b: da:f4:fa:74:c6:e0:84:69:4b:fb:36:17:59:4b:74:a7:b4:58: d9:85:e4:97:f0:93:00:ba:a1:f2:c6:74:a6:25:c4:3e:99:fa: 5c:a3:fb:6d:3e:24:57:c1:42:89:a4:69:3a:94:4f:45:d1:3e: 7d:4f:89:12:61:42:96:6d:8b:4e:f5:ef:02:38:ee:44:32:4f: a2:33:29:d6:51:5f:d6:21:61:2f:ac:e8:8c:f0:7f:40:d9:bf: 18:e3:a5:9c:a9:5f:69:34:70:0f:36:8e:43:24:e8:9d:53:b1: b1:23:0d:18:f2:de:3e:a0:55:5a:91:31:e0:b0:7a:32:a3:e2: af:dd:90:f2:04:fc:da:31:b4:2a:85:73:f2:d0:c1:c0:e7:f2: f1:4f:12:49:20:a4:64:8f:ba:00:9b:3a:27:c9:6e:cf:97:fc: 46:1a:81:17:42:2d:72:92:08:b3:a0:dd:aa:33:0a:0e:26:4b: 23:2c:94:13:d8:ae:1f:98:99:f0:39:96:2e:94:98:01:f6:5f: ed:2d:8a:81:97:8f:66:8e:34:4f:ac:d0:9b:ef:fe:e5:c6:67: e6:2d:d6:40:09:f6:d4:e9:95:53:9f:30:79:39:90:06:6b:ee: 57:e8:c9:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVPK9FMDOpRNYKseoU+RXigloEJYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMDg1MTMxWhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzA2YzViYmUyMWViNjIxMzI2Yjc1OGJkMmZiZDE4ZDY0 MWNmOTRiNDllNWIyNDBmM2Q2NzIyYjgxZmE2MWQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgpPXaXkEUcqAI4uHWjKEj0gPXCllPoz4qV9qWBk82uGtP BOlwpRE9tKdkUhQhjiFlh/GwwQtybN9BaxUA3pKXXu+KLmRm8xXs8wZi8+vqX84f GfU5Ok+E60noTmvDkXPs0+iDxBL2Y/h4Uk0mtky+lbfsdGb6oJ/vgl/4vVS2ufh+ +DQrBtg5h8wflekdH8eefYohoBzQOHFsIQbjYV0kiJ0Wd79o9SBMEKw1eaVtOoLE 7shMd4YleG7WASIMXmo4uKXB0W7LpwuuIgCKmAlJHtNwymB9FcqBbu76RMo01O4g 8O31W4lN7DGh7fC5EIF3E2SPv/oToJuQn/BY5q1XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaaRb/e4HkfqwzfffREiNUEfoRGcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyODVjMWVhLWU1ODAtNGEzYS05NzEyLWJiYmZiZTQ0OTMyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqVgwDQYJKoZIhvcNAQELBQADggEBAIl2Hk/jKMAKtjFSr2MAMenzG9r0 +nTG4IRpS/s2F1lLdKe0WNmF5JfwkwC6ofLGdKYlxD6Z+lyj+20+JFfBQomkaTqU T0XRPn1PiRJhQpZti0717wI47kQyT6IzKdZRX9YhYS+s6Izwf0DZvxjjpZypX2k0 cA82jkMk6J1TsbEjDRjy3j6gVVqRMeCwejKj4q/dkPIE/NoxtCqFc/LQwcDn8vFP EkkgpGSPugCbOifJbs+X/EYagRdCLXKSCLOg3aozCg4mSyMslBPYrh+YmfA5li6U mAH2X+0tioGXj2aONE+s0Jvv/uXGZ+Yt1kAJ9tTplVOfMHk5kAZr7lfoyTc= -----END CERTIFICATE-----Generated at Mon Oct 20 11:08:56 2025 by rpki-client