$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2fd36ca-0519-4ebc-9ce9-631030f00e7a.roa File: e2fd36ca-0519-4ebc-9ce9-631030f00e7a.roa (raw, json) Hash identifier: 1NhDmzjMNWYTa1dd6wlnZCnGL3z0WYKnqrCrkIQFmuE= Subject key identifier: DC:38:A8:19:84:D4:37:7D:BE:42:0D:63:B6:C8:85:EB:54:EC:8A:83 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 64FB8574F6EA029C8A9F999831534088A6F88A7D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2fd36ca-0519-4ebc-9ce9-631030f00e7a.roa Signing time: Thu 25 Sep 2025 17:54:08 +0000 ROA not before: Thu 25 Sep 2025 17:54:08 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:fb:85:74:f6:ea:02:9c:8a:9f:99:98:31:53:40:88:a6:f8:8a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:54:08 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=6b0984df82dc8325437d23255a6a754e060f9ac17817840c49620ea84cc39c32, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:81:6b:90:5e:6e:ba:90:cc:d1:c4:d7:92:8a: 63:7b:fc:f1:03:27:eb:d0:6c:fe:18:48:77:85:ff: 8f:10:77:f5:5e:c8:d7:b2:7b:72:d1:30:19:8a:91: e4:20:cb:6b:d4:a7:3b:91:b4:1d:c5:8b:2b:59:4c: 1e:e7:6d:26:f8:f2:f3:a1:22:3d:c0:b5:24:53:9f: 53:85:46:39:23:9b:68:09:b2:78:5a:09:f6:ca:a2: c1:63:1c:e5:d9:1f:ef:97:28:bc:f0:65:ec:52:f9: 04:21:63:fe:ce:41:ad:13:77:17:78:bf:1d:59:06: e0:d8:ae:bb:37:6c:e7:05:5e:66:cb:93:a9:f2:f9: 8c:e5:25:9d:5b:27:07:e2:86:84:ed:e2:3b:1b:6f: 22:43:a2:fc:cb:3f:9c:2c:13:15:5b:80:0d:82:8b: 64:bd:39:d6:9b:84:f6:d5:a4:b5:d7:57:e0:46:99: fd:5d:f6:d8:9b:a2:bc:7b:e0:f7:0e:7d:ed:f2:e8: b5:38:24:86:16:11:ef:a9:1e:cc:3e:35:fe:3d:c1: ae:38:f9:7f:fd:e1:fa:2c:a8:db:b1:c1:ce:10:20: 2c:3f:f7:dd:e5:e2:00:9c:e6:b1:2d:c1:1b:6e:0c: 00:cf:20:a8:95:e1:35:50:f0:fa:86:31:93:bc:65: 78:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:38:A8:19:84:D4:37:7D:BE:42:0D:63:B6:C8:85:EB:54:EC:8A:83 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2fd36ca-0519-4ebc-9ce9-631030f00e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.120.0/24 Signature Algorithm: sha256WithRSAEncryption a0:9f:f6:a9:83:85:50:c2:90:5c:66:65:bb:da:6e:7f:86:00: aa:1e:73:ec:c1:ef:6a:f5:2c:87:2c:ba:7c:56:16:e8:77:64: b4:2b:11:9c:ca:67:de:2b:d9:6a:5a:09:73:d5:7c:df:7e:bd: d4:0f:4f:83:77:50:b3:64:b4:2d:ad:42:18:78:e8:11:7f:51: 7f:d6:a8:1a:dd:cf:7e:02:3a:9c:91:dc:a8:e8:e3:0c:c7:89: 8b:26:b7:d9:ef:b6:7f:c5:6c:36:e6:1d:52:b3:67:e3:6c:42: c9:d9:43:02:c7:90:7b:f0:69:ea:3d:69:ac:4f:d0:19:ca:44: 41:0a:a8:33:a4:ec:20:fb:d1:80:6e:7a:91:d8:43:e1:4a:c1: d0:1c:7d:ec:f9:74:b0:99:be:c0:fc:bb:75:e3:fb:d5:7a:2d: 4b:26:aa:13:0a:b7:a7:6c:2e:3f:8b:be:66:28:47:c6:a2:e1: e4:2c:c1:52:ee:4f:4f:7d:be:c0:24:60:2f:0b:9a:a3:2c:3b: cd:37:91:6b:d2:53:c6:e8:2a:0e:3c:75:a9:8a:a6:4d:2c:c0: c2:10:31:cc:b6:e5:43:5e:a2:1b:c3:b4:7f:8c:f5:03:35:53: e3:1f:24:3b:72:2f:45:63:53:1a:1e:0f:92:71:64:58:3c:79: 86:e7:56:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZPuFdPbqApyKn5mYMVNAiKb4in0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTc1NDA4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjA5ODRkZjgyZGM4MzI1NDM3ZDIzMjU1YTZhNzU0ZTA2 MGY5YWMxNzgxNzg0MGM0OTYyMGVhODRjYzM5YzMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDigWuQXm66kMzRxNeSimN7/PEDJ+vQbP4YSHeF/48Qd/Ve yNeye3LRMBmKkeQgy2vUpzuRtB3FiytZTB7nbSb48vOhIj3AtSRTn1OFRjkjm2gJ snhaCfbKosFjHOXZH++XKLzwZexS+QQhY/7OQa0Tdxd4vx1ZBuDYrrs3bOcFXmbL k6ny+YzlJZ1bJwfihoTt4jsbbyJDovzLP5wsExVbgA2Ci2S9OdabhPbVpLXXV+BG mf1d9tiborx74PcOfe3y6LU4JIYWEe+pHsw+Nf49wa44+X/94fosqNuxwc4QICw/ 993l4gCc5rEtwRtuDADPIKiV4TVQ8PqGMZO8ZXjJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3DioGYTUN32+Qg1jtsiF61TsioMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UyZmQzNmNhLTA1MTktNGViYy05Y2U5LTYzMTAzMGYwMGU3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpHgwDQYJKoZIhvcNAQELBQADggEBAKCf9qmDhVDCkFxmZbvabn+GAKoe c+zB72r1LIcsunxWFuh3ZLQrEZzKZ94r2WpaCXPVfN9+vdQPT4N3ULNktC2tQhh4 6BF/UX/WqBrdz34COpyR3Kjo4wzHiYsmt9nvtn/FbDbmHVKzZ+NsQsnZQwLHkHvw aeo9aaxP0BnKREEKqDOk7CD70YBuepHYQ+FKwdAcfez5dLCZvsD8u3Xj+9V6LUsm qhMKt6dsLj+LvmYoR8ai4eQswVLuT099vsAkYC8LmqMsO803kWvSU8boKg48damK pk0swMIQMcy25UNeohvDtH+M9QM1U+MfJDtyL0VjUxoeD5JxZFg8eYbnVmE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:07:23 2025 by rpki-client