$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec9db8fd-f9bd-4035-972e-632995dd5135.roa File: ec9db8fd-f9bd-4035-972e-632995dd5135.roa (raw, json) Hash identifier: V0XseIg02gAtIQWBXXAno8t5CrxAHPL/bw5hUBpfe8I= Subject key identifier: 93:05:75:36:F0:59:EA:EC:21:95:2F:08:33:41:0A:AB:90:DE:2C:D8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4C85C653B0C96812617B18D42D48B12DA5EA6F90 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec9db8fd-f9bd-4035-972e-632995dd5135.roa Signing time: Thu 25 Sep 2025 17:27:20 +0000 ROA not before: Thu 25 Sep 2025 17:27:20 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.162.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:85:c6:53:b0:c9:68:12:61:7b:18:d4:2d:48:b1:2d:a5:ea:6f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:27:20 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=35be7b8291e1ea1d8ec278b8dfde3c2a5f47ec94bc137a9c5e6df76c9dea0a40, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:7a:54:c0:cd:3e:b1:a7:63:1e:cb:2a:d8: 95:ca:df:33:ef:1e:f0:55:f8:2e:ba:89:6f:6c:43: 22:26:07:2f:12:5f:a1:fc:94:ef:97:09:4a:2d:0c: 52:5b:26:c7:b9:4f:47:35:bb:fb:58:96:0c:16:91: 09:94:7e:f7:45:f6:89:25:82:98:8a:40:0f:f5:0e: 1a:08:cc:c5:45:41:de:be:9a:12:a9:b4:69:56:26: 9a:18:7e:84:f6:be:f8:4b:ac:02:5b:48:32:8d:fa: 4d:6a:6f:25:3b:ff:8a:b5:55:27:81:6f:75:a1:60: 26:3f:41:45:87:aa:51:42:6e:36:96:14:7e:55:06: db:a5:9a:c7:0c:ab:ad:57:b6:33:c4:0f:f3:cd:6d: 52:6f:98:67:3e:60:18:c5:30:e8:37:7e:7f:13:05: cc:a4:48:0d:13:91:b7:44:11:37:77:17:96:1f:35: 69:2e:4d:9f:8d:8f:3e:78:d5:b3:31:dc:53:fc:a6: 12:9c:20:c3:e9:b7:67:33:2f:43:0a:e5:1e:53:6a: ee:cf:a9:e2:4a:80:ca:f2:36:21:e0:53:8f:de:f3: 98:26:48:6c:26:61:da:0a:dc:0b:ac:45:62:31:3d: b2:d2:09:f3:78:e7:27:ca:30:e5:d5:cb:0a:70:70: bc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:05:75:36:F0:59:EA:EC:21:95:2F:08:33:41:0A:AB:90:DE:2C:D8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec9db8fd-f9bd-4035-972e-632995dd5135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.162.37.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:b0:a0:43:79:ed:de:78:9b:27:a0:09:41:84:34:71:92:3c: 15:92:74:f6:f9:b0:dc:00:1b:6a:94:20:db:c0:a7:05:68:cf: 1d:dc:4e:1c:da:fb:24:d1:0a:1d:d0:38:48:13:57:d4:cc:3b: 68:94:d4:03:32:eb:7b:24:1e:7a:f5:cd:4c:52:be:08:30:cf: fd:2c:c8:ed:34:55:84:b3:36:39:ba:cd:0c:ff:e2:41:2f:7c: 13:49:28:01:d4:7e:66:c0:7b:a6:42:a2:67:7d:8e:44:13:17: 86:24:dc:1c:df:24:fd:0b:80:9d:a8:81:fd:be:99:18:fc:0f: 19:30:ff:76:b0:b8:16:93:cf:94:31:99:f5:58:81:2a:6b:f2: 2a:5a:25:93:6f:a7:f1:99:14:b8:c0:80:88:36:d0:b1:17:69: c5:7a:0c:b9:14:2c:8e:0f:fe:5f:87:ec:1e:65:f8:36:be:09: 73:5a:26:ae:11:28:c3:41:6c:0f:fe:96:0c:22:5d:e9:ce:5e: 94:5d:24:64:21:7b:24:d0:c3:14:6c:77:04:1b:4d:10:5a:df: 06:09:0b:e7:3d:a0:32:4f:f4:2e:65:5b:7b:58:26:39:50:ad: d6:d1:27:76:c1:4e:cd:bd:00:9c:d6:87:f5:12:bc:e3:51:82: f4:78:24:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTIXGU7DJaBJhexjULUixLaXqb5AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTcyNzIwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNWJlN2I4MjkxZTFlYTFkOGVjMjc4YjhkZmRlM2MyYTVm NDdlYzk0YmMxMzdhOWM1ZTZkZjc2YzlkZWEwYTQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNUXpUwM0+sadjHssq2JXK3zPvHvBV+C66iW9sQyImBy8S X6H8lO+XCUotDFJbJse5T0c1u/tYlgwWkQmUfvdF9oklgpiKQA/1DhoIzMVFQd6+ mhKptGlWJpoYfoT2vvhLrAJbSDKN+k1qbyU7/4q1VSeBb3WhYCY/QUWHqlFCbjaW FH5VBtulmscMq61XtjPED/PNbVJvmGc+YBjFMOg3fn8TBcykSA0TkbdEETd3F5Yf NWkuTZ+Njz541bMx3FP8phKcIMPpt2czL0MK5R5Tau7PqeJKgMryNiHgU4/e85gm SGwmYdoK3AusRWIxPbLSCfN45yfKMOXVywpwcLz7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkwV1NvBZ6uwhlS8IM0EKq5DeLNgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VjOWRiOGZkLWY5YmQtNDAzNS05NzJlLTYzMjk5NWRkNTEzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoiUwDQYJKoZIhvcNAQELBQADggEBAHywoEN57d54myegCUGENHGSPBWS dPb5sNwAG2qUINvApwVozx3cThza+yTRCh3QOEgTV9TMO2iU1AMy63skHnr1zUxS vggwz/0syO00VYSzNjm6zQz/4kEvfBNJKAHUfmbAe6ZComd9jkQTF4Yk3BzfJP0L gJ2ogf2+mRj8Dxkw/3awuBaTz5QxmfVYgSpr8ipaJZNvp/GZFLjAgIg20LEXacV6 DLkULI4P/l+H7B5l+Da+CXNaJq4RKMNBbA/+lgwiXenOXpRdJGQheyTQwxRsdwQb TRBa3wYJC+c9oDJP9C5lW3tYJjlQrdbRJ3bBTs29AJzWh/USvONRgvR4JKc= -----END CERTIFICATE-----Generated at Mon Oct 20 03:07:49 2025 by rpki-client