$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2452510-983d-48d3-9b0a-22e70d3fcabc.roa File: f2452510-983d-48d3-9b0a-22e70d3fcabc.roa (raw, json) Hash identifier: GKh/cp6RkThtkF9OjFmHl1YqLyFWVIM4jXqAflSfsgA= Subject key identifier: 69:FC:4D:FA:B7:50:C9:77:3D:F2:B6:4F:53:34:82:C7:08:1B:A0:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 06AB197D299CAAC7F4F6FA612E1794EAA8BBA5C5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2452510-983d-48d3-9b0a-22e70d3fcabc.roa Signing time: Thu 25 Sep 2025 17:27:04 +0000 ROA not before: Thu 25 Sep 2025 17:27:04 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.162.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ab:19:7d:29:9c:aa:c7:f4:f6:fa:61:2e:17:94:ea:a8:bb:a5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:27:04 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=73caa304acdfeab9b3758f7ac238e0da9c164cca55dd0459cacd03cb2483bf5c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:6e:3e:f4:9a:bd:17:74:b7:b8:19:64:52: 95:6e:57:ca:b0:32:ae:14:1a:5f:50:b1:e8:c4:87: 99:4b:ad:dd:d6:26:c9:47:68:23:ef:84:b5:17:d5: 72:25:fb:f7:ea:2d:a8:62:64:2f:58:76:52:06:f4: 96:80:69:82:76:b1:29:fa:0a:00:55:78:fb:63:87: 31:3b:fd:19:8e:6d:99:c9:b1:ac:ee:7c:fe:4c:e0: cd:ee:86:fe:58:d0:73:57:1f:59:40:38:16:20:2a: 36:8d:6e:0d:57:89:49:5b:55:7c:5c:2a:e3:3a:6c: b7:c4:72:ee:f6:b4:e0:02:93:9a:c6:58:33:38:5c: 4c:78:32:12:06:42:c3:00:af:c4:56:b9:48:5d:a8: e4:84:1e:bc:64:f6:93:ea:41:ea:f3:ec:aa:f8:d9: 3d:37:6d:9a:da:b8:61:14:6e:b6:3d:35:12:7b:f7: 4c:15:84:76:20:42:4a:ad:85:8c:97:1d:c0:b7:fd: 8f:51:14:9d:c2:43:75:47:f8:65:02:bd:5b:6b:95: 5c:cd:5b:ec:95:60:32:e3:62:7f:c9:7b:43:ab:99: ec:56:25:b0:8b:2b:91:8a:4f:78:33:98:6a:85:0e: 35:d0:fe:1f:a0:a9:9f:a7:5d:ba:5e:4f:e2:ab:d6: aa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FC:4D:FA:B7:50:C9:77:3D:F2:B6:4F:53:34:82:C7:08:1B:A0:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2452510-983d-48d3-9b0a-22e70d3fcabc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.162.253.0/24 Signature Algorithm: sha256WithRSAEncryption 36:eb:23:a2:0b:b1:81:cc:48:aa:15:e2:39:85:f6:14:88:0c: fe:5e:19:08:50:0b:5d:1c:88:85:06:5b:14:4a:64:00:dc:df: 7e:9b:2a:48:c7:f9:cf:b3:d2:48:1e:fb:dc:51:a2:b0:ef:33: c0:73:da:01:1e:02:4e:de:fd:62:4b:9a:67:9e:ff:04:97:48: a2:de:4f:7c:0e:13:9c:90:1d:03:94:43:e0:c7:8b:7b:22:88: e8:d3:1f:dc:76:b3:6f:16:3f:6d:47:22:92:f7:ef:80:73:eb: 1c:bd:70:f6:ef:24:9d:9b:4b:41:09:48:9a:9e:d9:cb:90:3a: 7e:c2:a2:24:42:f2:74:e9:94:74:46:b3:ec:5e:3a:99:03:9a: bf:7f:ed:db:11:89:a7:24:60:c3:1b:7a:fa:ca:0a:d3:d4:78: c1:5c:b0:c6:3d:e4:85:e4:ae:35:d2:ef:de:57:86:01:44:72: 4c:b4:4f:39:32:3d:d4:e3:9b:16:fe:b5:10:5b:84:15:aa:19: 3c:67:2b:8b:8a:a2:de:fe:4c:10:62:2f:b4:c7:02:d2:61:57: 1b:6f:5c:a0:7a:c9:f7:d4:c7:1e:44:7e:5b:4c:59:76:c7:e4: dc:2f:77:25:e5:c8:dd:a8:31:b1:fd:c6:d6:10:68:c5:92:5c: 62:3a:3b:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBqsZfSmcqsf09vphLheU6qi7pcUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTcyNzA0WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3M2NhYTMwNGFjZGZlYWI5YjM3NThmN2FjMjM4ZTBkYTlj MTY0Y2NhNTVkZDA0NTljYWNkMDNjYjI0ODNiZjVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjeW4+9Jq9F3S3uBlkUpVuV8qwMq4UGl9QsejEh5lLrd3W JslHaCPvhLUX1XIl+/fqLahiZC9YdlIG9JaAaYJ2sSn6CgBVePtjhzE7/RmObZnJ sazufP5M4M3uhv5Y0HNXH1lAOBYgKjaNbg1XiUlbVXxcKuM6bLfEcu72tOACk5rG WDM4XEx4MhIGQsMAr8RWuUhdqOSEHrxk9pPqQerz7Kr42T03bZrauGEUbrY9NRJ7 90wVhHYgQkqthYyXHcC3/Y9RFJ3CQ3VH+GUCvVtrlVzNW+yVYDLjYn/Je0OrmexW JbCLK5GKT3gzmGqFDjXQ/h+gqZ+nXbpeT+Kr1qp7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUafxN+rdQyXc98rZPUzSCxwgboL4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YyNDUyNTEwLTk4M2QtNDhkMy05YjBhLTIyZTcwZDNmY2FiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADov0wDQYJKoZIhvcNAQELBQADggEBADbrI6ILsYHMSKoV4jmF9hSIDP5e GQhQC10ciIUGWxRKZADc336bKkjH+c+z0kge+9xRorDvM8Bz2gEeAk7e/WJLmmee /wSXSKLeT3wOE5yQHQOUQ+DHi3siiOjTH9x2s28WP21HIpL374Bz6xy9cPbvJJ2b S0EJSJqe2cuQOn7CoiRC8nTplHRGs+xeOpkDmr9/7dsRiackYMMbevrKCtPUeMFc sMY95IXkrjXS795XhgFEcky0TzkyPdTjmxb+tRBbhBWqGTxnK4uKot7+TBBiL7TH AtJhVxtvXKB6yffUxx5EfltMWXbH5NwvdyXlyN2oMbH9xtYQaMWSXGI6O8I= -----END CERTIFICATE-----Generated at Mon Oct 20 10:59:16 2025 by rpki-client