$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4439ae0-d1cc-41ce-a7c4-8d96c75a00e9.roa File: f4439ae0-d1cc-41ce-a7c4-8d96c75a00e9.roa (raw, json) Hash identifier: /zaWjU4JQf9U3FxlMDko8eaWqEGjh47hr0Vv+PNENLs= Subject key identifier: A2:83:0C:C9:AB:3F:6A:57:4C:7D:16:F6:A8:20:27:FE:17:B7:56:C3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 118122CC6D6BB49C4B49B4200A3D25CCDA9AB6BA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4439ae0-d1cc-41ce-a7c4-8d96c75a00e9.roa Signing time: Thu 25 Sep 2025 18:02:56 +0000 ROA not before: Thu 25 Sep 2025 18:02:56 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:81:22:cc:6d:6b:b4:9c:4b:49:b4:20:0a:3d:25:cc:da:9a:b6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:02:56 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=9edb975cfad0734a9aa2889c233883c2c0c2c4cf8211a731c973aab4f4f454ca, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4a:76:4e:0b:09:7d:21:c4:e9:e6:01:73:34: d2:7c:67:bc:01:e7:39:0f:c2:32:59:a6:eb:32:0c: 68:56:e8:43:b2:2f:ff:1f:9a:47:6b:1f:44:bc:28: b2:a4:ad:20:0c:56:24:18:e0:fe:3e:26:15:8e:dd: 20:56:38:d2:e8:a1:79:3b:39:f0:20:df:fd:64:81: 92:d3:4c:d5:c1:d3:4b:cd:8f:1a:de:86:a7:91:50: c8:64:73:05:5e:e8:fc:bc:18:1a:be:54:81:7b:0a: 49:f9:97:1c:67:28:ff:e4:f8:7b:87:d7:62:6c:60: 16:46:9c:86:99:72:2e:72:53:6e:d3:9e:8a:78:1c: 39:67:c2:03:17:9d:56:a7:20:0d:47:02:74:71:0b: b9:85:6b:68:c1:ad:46:81:b2:c3:1f:80:70:cb:bd: 59:8e:0d:48:22:a7:ae:cd:54:62:33:5f:60:92:20: 7c:14:df:f8:e9:44:7a:1b:4c:36:59:06:bc:5e:cb: 98:53:0d:f5:17:46:fd:8c:b4:ab:13:a4:cf:a1:f0: e3:37:cd:54:06:d8:6c:d2:3c:62:be:4e:9a:80:7b: 4f:76:dd:6e:3b:a9:58:8c:22:57:44:08:4b:1d:20: 47:7a:b0:4a:1c:f5:6a:8a:90:c8:2d:69:ee:83:c9: 10:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:83:0C:C9:AB:3F:6A:57:4C:7D:16:F6:A8:20:27:FE:17:B7:56:C3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4439ae0-d1cc-41ce-a7c4-8d96c75a00e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.254.0/24 Signature Algorithm: sha256WithRSAEncryption 22:86:27:14:aa:38:da:4d:07:91:a6:2f:cc:e8:fd:82:8e:27: f5:30:2d:39:4c:43:ee:eb:18:3d:b7:5e:c7:b0:ee:8c:9c:58: ff:5f:54:0e:11:7c:cd:e7:de:2a:4d:37:4a:98:bd:5f:3d:1d: 44:eb:04:1d:a0:df:4d:4e:ea:73:5f:4c:4f:f5:6a:6f:80:c3: dd:75:4f:d2:a4:86:df:b6:96:8e:8f:d6:4b:66:8b:c1:4c:81: 77:f4:ac:5e:b9:71:8f:87:c1:d3:07:bd:a3:27:8a:ff:9d:50: ea:0d:98:ec:56:cc:76:22:16:cc:1d:ef:7b:14:40:c8:bf:d7: 3b:cd:9b:d1:17:3f:92:13:a9:5b:8f:76:e3:1b:7b:51:0c:ea: 2d:4e:c0:83:7c:c7:af:d3:30:d7:a3:8a:c4:bd:f0:39:ad:89: 9b:ea:70:94:02:6b:67:71:d8:e0:72:b3:75:e9:56:74:b0:dc: ce:9c:58:d1:78:78:98:04:cd:1e:3a:c8:65:d2:e7:60:bd:10: 15:49:9b:16:68:5a:2f:db:08:14:10:e0:3b:58:70:34:2d:6a: e6:62:79:3e:db:15:db:a3:bf:77:19:8c:89:08:46:0b:e3:09: 7a:6a:98:f6:ab:89:cb:1e:70:f9:28:5d:8d:1f:54:cd:45:d4: f7:a1:8f:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEYEizG1rtJxLSbQgCj0lzNqatrowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgwMjU2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZWRiOTc1Y2ZhZDA3MzRhOWFhMjg4OWMyMzM4ODNjMmMw YzJjNGNmODIxMWE3MzFjOTczYWFiNGY0ZjQ1NGNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbSnZOCwl9IcTp5gFzNNJ8Z7wB5zkPwjJZpusyDGhW6EOy L/8fmkdrH0S8KLKkrSAMViQY4P4+JhWO3SBWONLooXk7OfAg3/1kgZLTTNXB00vN jxrehqeRUMhkcwVe6Py8GBq+VIF7Ckn5lxxnKP/k+HuH12JsYBZGnIaZci5yU27T nop4HDlnwgMXnVanIA1HAnRxC7mFa2jBrUaBssMfgHDLvVmODUgip67NVGIzX2CS IHwU3/jpRHobTDZZBrxey5hTDfUXRv2MtKsTpM+h8OM3zVQG2GzSPGK+TpqAe092 3W47qViMIldECEsdIEd6sEoc9WqKkMgtae6DyRAjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUooMMyas/aldMfRb2qCAn/he3VsMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y0NDM5YWUwLWQxY2MtNDFjZS1hN2M0LThkOTZjNzVhMDBlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpP4wDQYJKoZIhvcNAQELBQADggEBACKGJxSqONpNB5GmL8zo/YKOJ/Uw LTlMQ+7rGD23Xsew7oycWP9fVA4RfM3n3ipNN0qYvV89HUTrBB2g301O6nNfTE/1 am+Aw911T9Kkht+2lo6P1ktmi8FMgXf0rF65cY+HwdMHvaMniv+dUOoNmOxWzHYi Fswd73sUQMi/1zvNm9EXP5ITqVuPduMbe1EM6i1OwIN8x6/TMNejisS98DmtiZvq cJQCa2dx2OBys3XpVnSw3M6cWNF4eJgEzR46yGXS52C9EBVJmxZoWi/bCBQQ4DtY cDQtauZieT7bFdujv3cZjIkIRgvjCXpqmParicsecPkoXY0fVM1F1Pehj80= -----END CERTIFICATE-----Generated at Mon Oct 20 11:01:59 2025 by rpki-client