$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2e493b7-3292-4922-b912-1a583dd056d5.roa File: f2e493b7-3292-4922-b912-1a583dd056d5.roa (raw, json) Hash identifier: JHfY7V2BYnNn85QrMmc8uvdlHw1p08JA9lb4hBSA0Jk= Subject key identifier: E0:59:C0:58:4A:34:10:9F:C4:C1:BA:C3:E0:EF:C5:CD:09:24:20:28 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2816A6F9A3F5393B7C7076B031761AC9F55C386D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2e493b7-3292-4922-b912-1a583dd056d5.roa Signing time: Mon 20 Oct 2025 07:22:33 +0000 ROA not before: Mon 20 Oct 2025 07:22:33 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:16:a6:f9:a3:f5:39:3b:7c:70:76:b0:31:76:1a:c9:f5:5c:38:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 07:22:33 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=fa845273a5552865bbe144c00ccbdee6bf921f560258d31efc8fc9e1e30c5466, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2a:1f:42:17:21:63:af:45:7c:4c:14:e0:16: e9:33:b9:36:aa:b5:78:4b:c5:a3:c3:45:d8:00:51: be:81:fc:35:d7:b8:40:cf:c9:cf:bc:06:8a:2f:19: ff:77:13:c6:90:f7:c4:d0:9d:f0:58:f9:d8:1b:45: 46:e3:8c:eb:88:a5:3a:0e:41:44:71:e2:30:45:3f: cc:54:10:20:20:0c:be:1a:d0:cf:a8:74:29:18:41: 9e:96:6b:14:3d:77:8d:4a:d4:37:17:cc:9b:79:39: bf:3b:c8:21:e8:0c:76:6a:e7:65:ba:fb:8e:90:27: ba:2d:e7:6c:f2:10:4e:ce:b5:bf:18:a8:7c:c2:f6: 8d:44:d6:1d:25:b2:ad:03:5f:29:d9:88:ce:58:6f: 12:bc:f7:6c:60:dc:2e:c4:07:67:a0:79:6e:b5:6a: a4:97:55:e4:a1:7c:c7:ce:37:36:fc:4c:e8:68:91: 98:6d:c8:51:93:e7:55:4d:b1:79:ef:03:ec:99:bd: 5a:bd:8b:a6:e1:87:21:d7:9d:eb:d4:1d:5d:a6:22: 21:54:ac:18:78:04:f6:49:17:9b:ae:be:de:69:01: d5:2b:00:24:81:51:04:c0:3b:7a:49:ec:13:ce:29: e3:76:43:d6:da:0c:08:b0:d8:50:14:15:92:1b:fa: 80:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:59:C0:58:4A:34:10:9F:C4:C1:BA:C3:E0:EF:C5:CD:09:24:20:28 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2e493b7-3292-4922-b912-1a583dd056d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.150.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:5d:24:52:09:76:a8:15:89:be:a8:48:ed:74:fb:77:12:27: 7e:48:8c:a9:49:00:c0:ea:8d:76:55:5a:1d:8c:4f:8f:e3:76: 14:f6:ab:f9:d3:eb:80:ae:da:a1:b5:97:a9:25:5a:7c:ff:b5: 3b:d9:35:13:fc:25:7c:08:12:c1:52:19:c9:27:f5:ae:5b:8e: 7a:a5:7a:a2:37:10:69:d9:9c:ca:48:8d:8e:05:31:53:ff:c5: a2:65:50:21:52:ad:c2:f0:95:82:eb:f2:9a:3b:d9:5f:8c:97: 0b:81:20:a1:cc:01:14:ba:41:d0:99:48:23:50:83:91:57:99: aa:d6:57:da:f5:be:e3:1e:68:2a:a0:a3:8b:38:43:f7:d2:fe: 44:d0:91:62:36:11:24:d2:5d:eb:3e:cd:60:33:79:29:ea:ad: 09:0f:de:54:13:dd:ff:06:32:e3:1a:06:19:67:23:ce:7b:34: 76:af:7d:4f:24:04:7b:49:7d:e8:ca:d9:be:a6:a8:1e:99:64: 29:22:72:1e:e1:57:4f:75:c5:58:53:8c:08:bb:1d:07:7a:bc: cc:5e:3f:f1:af:66:87:8d:bb:89:35:ea:a4:bf:47:1f:d7:f2: b7:8a:e8:9b:24:2f:74:74:fd:6e:b4:14:a4:e0:1b:43:1a:a3: f1:a1:ab:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKBam+aP1OTt8cHawMXYayfVcOG0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMDcyMjMzWhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTg0NTI3M2E1NTUyODY1YmJlMTQ0YzAwY2NiZGVlNmJm OTIxZjU2MDI1OGQzMWVmYzhmYzllMWUzMGM1NDY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbKh9CFyFjr0V8TBTgFukzuTaqtXhLxaPDRdgAUb6B/DXX uEDPyc+8BoovGf93E8aQ98TQnfBY+dgbRUbjjOuIpToOQURx4jBFP8xUECAgDL4a 0M+odCkYQZ6WaxQ9d41K1DcXzJt5Ob87yCHoDHZq52W6+46QJ7ot52zyEE7Otb8Y qHzC9o1E1h0lsq0DXynZiM5YbxK892xg3C7EB2egeW61aqSXVeShfMfONzb8TOho kZhtyFGT51VNsXnvA+yZvVq9i6bhhyHXnevUHV2mIiFUrBh4BPZJF5uuvt5pAdUr ACSBUQTAO3pJ7BPOKeN2Q9baDAiw2FAUFZIb+oCTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4FnAWEo0EJ/EwbrD4O/FzQkkICgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YyZTQ5M2I3LTMyOTItNDkyMi1iOTEyLTFhNTgzZGQwNTZkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoJYwDQYJKoZIhvcNAQELBQADggEBAIxdJFIJdqgVib6oSO10+3cSJ35I jKlJAMDqjXZVWh2MT4/jdhT2q/nT64Cu2qG1l6klWnz/tTvZNRP8JXwIEsFSGckn 9a5bjnqleqI3EGnZnMpIjY4FMVP/xaJlUCFSrcLwlYLr8po72V+MlwuBIKHMARS6 QdCZSCNQg5FXmarWV9r1vuMeaCqgo4s4Q/fS/kTQkWI2ESTSXes+zWAzeSnqrQkP 3lQT3f8GMuMaBhlnI857NHavfU8kBHtJfejK2b6mqB6ZZCkich7hV091xVhTjAi7 HQd6vMxeP/GvZoeNu4k16qS/Rx/X8reK6JskL3R0/W60FKTgG0Mao/Ghq18= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:38 2025 by rpki-client