$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b9df3123-a995-4763-9fc2-34f46535cec3.roa File: b9df3123-a995-4763-9fc2-34f46535cec3.roa (raw, json) Hash identifier: n/i0Zef/Oti0192A1r93kz6dl127LQv/m/PYQCCwdN0= Subject key identifier: 0B:7D:BE:B7:1F:5D:E6:CB:89:8D:D5:92:6E:06:54:7B:03:34:66:70 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 75CD8AC2AE7DC03E5CA230768E4B7CDA21B02474 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b9df3123-a995-4763-9fc2-34f46535cec3.roa Signing time: Thu 25 Sep 2025 20:42:39 +0000 ROA not before: Thu 25 Sep 2025 20:42:39 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:cd:8a:c2:ae:7d:c0:3e:5c:a2:30:76:8e:4b:7c:da:21:b0:24:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:42:39 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=a9ca87c4e70b76f48220ff4bf4484651066afad9352b9444dc210f462b78251e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:c8:d4:ce:74:13:c9:36:d1:52:51:1e:58: 4c:15:a6:b1:2b:af:12:d2:7a:bb:49:a6:97:bf:35: 02:59:4b:fb:94:b8:da:70:a2:74:76:e2:31:d4:c6: 16:e3:70:ba:7b:42:c6:d0:c5:10:d6:39:75:70:68: 1d:48:32:74:14:5d:de:be:e1:49:08:97:cb:10:b9: 62:f1:46:24:3a:f5:34:6b:b2:3d:e2:cd:90:8a:96: 06:20:1b:f9:b1:cd:d5:e5:17:86:7e:ed:d7:e0:be: 6c:ca:e3:c3:5c:7b:c9:27:42:9d:d0:44:47:11:ca: 52:9a:ff:4a:39:6f:18:8e:78:0e:e8:99:26:33:96: 6a:36:93:db:0b:90:b6:ed:26:b0:e1:8d:87:7e:cc: ca:f7:ed:73:f5:21:3e:73:66:72:75:67:e2:5a:fd: 22:39:bc:68:3e:e6:a1:f2:36:6f:68:74:74:b7:1e: c1:ed:33:3f:95:d6:70:a2:2a:06:b6:84:dd:bd:c8: 1c:e8:e5:92:5b:30:43:ad:30:3a:a0:b8:87:57:9e: ab:6e:71:76:87:fe:8d:4a:69:b2:58:84:d6:cf:a8: 93:9a:69:8d:30:17:61:c8:6c:81:9b:ca:a7:9b:a9: f2:95:7f:71:43:2e:1c:8c:be:7f:a9:6d:34:80:2c: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7D:BE:B7:1F:5D:E6:CB:89:8D:D5:92:6E:06:54:7B:03:34:66:70 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b9df3123-a995-4763-9fc2-34f46535cec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.45.0/24 Signature Algorithm: sha256WithRSAEncryption a2:2a:80:8c:f8:19:ad:d7:ef:28:18:de:5e:41:82:80:69:5d: 87:2f:69:a2:ae:d4:5c:c9:b1:e2:ed:12:a8:fc:5a:66:66:46: 6d:48:29:8d:9b:6c:ff:5f:ae:8b:37:3f:e7:5d:d8:ae:64:1a: 02:ae:ea:6c:ae:50:c4:7b:ce:a8:5d:ab:c7:05:cb:de:92:10: f1:ef:00:96:d8:37:3b:5b:f9:bb:90:6a:8b:c0:fb:9b:f4:ec: 5d:8f:1d:92:cd:c1:87:5f:07:8c:b0:ef:1b:54:db:90:80:ec: 81:a8:83:64:09:0b:47:b0:e3:dd:4a:e6:e9:36:c7:68:79:35: 02:96:fc:15:a5:09:b6:67:56:d8:88:a7:ab:24:77:2a:5f:54: bf:50:d0:83:3a:7d:1d:34:23:77:0c:71:8c:5f:8e:7d:9f:4f: 8f:a6:af:28:b7:c6:c3:f6:e1:81:57:29:5c:cb:dd:67:98:f3: 3e:51:2c:9b:3f:e2:42:55:45:57:58:fd:87:41:30:6f:12:99: 57:be:9b:2d:9c:ac:85:08:29:75:cb:b8:92:62:3e:91:9b:18: 22:ff:7a:15:36:6a:4b:dc:9b:64:50:f0:ed:68:d8:bc:20:ea: 51:38:ac:87:e2:d5:b1:3a:cf:40:4c:f7:fb:98:45:8c:7a:0c: 2f:c9:73:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdc2Kwq59wD5cojB2jkt82iGwJHQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjA0MjM5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWNhODdjNGU3MGI3NmY0ODIyMGZmNGJmNDQ4NDY1MTA2 NmFmYWQ5MzUyYjk0NDRkYzIxMGY0NjJiNzgyNTFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCySsjUznQTyTbRUlEeWEwVprErrxLSertJppe/NQJZS/uU uNpwonR24jHUxhbjcLp7QsbQxRDWOXVwaB1IMnQUXd6+4UkIl8sQuWLxRiQ69TRr sj3izZCKlgYgG/mxzdXlF4Z+7dfgvmzK48Nce8knQp3QREcRylKa/0o5bxiOeA7o mSYzlmo2k9sLkLbtJrDhjYd+zMr37XP1IT5zZnJ1Z+Ja/SI5vGg+5qHyNm9odHS3 HsHtMz+V1nCiKga2hN29yBzo5ZJbMEOtMDqguIdXnqtucXaH/o1KabJYhNbPqJOa aY0wF2HIbIGbyqebqfKVf3FDLhyMvn+pbTSALGfHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC32+tx9d5suJjdWSbgZUewM0ZnAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I5ZGYzMTIzLWE5OTUtNDc2My05ZmMyLTM0ZjQ2NTM1Y2VjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrS0wDQYJKoZIhvcNAQELBQADggEBAKIqgIz4Ga3X7ygY3l5BgoBpXYcv aaKu1FzJseLtEqj8WmZmRm1IKY2bbP9fros3P+dd2K5kGgKu6myuUMR7zqhdq8cF y96SEPHvAJbYNztb+buQaovA+5v07F2PHZLNwYdfB4yw7xtU25CA7IGog2QJC0ew 491K5uk2x2h5NQKW/BWlCbZnVtiIp6skdypfVL9Q0IM6fR00I3cMcYxfjn2fT4+m ryi3xsP24YFXKVzL3WeY8z5RLJs/4kJVRVdY/YdBMG8SmVe+my2crIUIKXXLuJJi PpGbGCL/ehU2akvcm2RQ8O1o2Lwg6lE4rIfi1bE6z0BM9/uYRYx6DC/Jc2M= -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:59 2025 by rpki-client