$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f570d60a-ccbf-489e-9f91-c2db7af43c1e.roa File: f570d60a-ccbf-489e-9f91-c2db7af43c1e.roa (raw, json) Hash identifier: F4wuZ09inX28PSNWHn79Y9AXIx4IER3xoPXAvYtZocQ= Subject key identifier: 4F:D5:97:E5:C4:77:B2:6F:DD:AF:81:71:5D:4B:E4:BD:F3:54:9C:18 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 17B0599C0926647FA2CEC6DCC5BD01ECA188D087 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f570d60a-ccbf-489e-9f91-c2db7af43c1e.roa Signing time: Thu 25 Sep 2025 17:27:16 +0000 ROA not before: Thu 25 Sep 2025 17:27:16 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.162.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b0:59:9c:09:26:64:7f:a2:ce:c6:dc:c5:bd:01:ec:a1:88:d0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:27:16 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=5dc1b7048c7a30d46b672e4b556db9409189c7ca2e963bb29d470e26b55bf749, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:cc:39:7e:34:5b:d5:b7:8c:a0:1f:37:a0: 99:b6:e0:f5:be:d2:9f:5e:c0:e0:9e:70:41:b7:7f: c4:ce:6d:39:de:16:fc:67:2f:57:78:6f:e2:ee:ef: 26:05:d7:f9:c5:41:1c:f7:f5:20:86:31:a7:55:5d: 01:d5:a5:a1:40:13:f3:a9:cf:3c:e3:4b:7b:bd:31: 8f:be:c0:e5:65:a3:3f:96:29:58:f8:74:b5:01:1d: 57:d6:98:25:fe:5d:f7:7b:fc:72:22:24:ca:af:1b: 6f:9e:91:7c:e2:ab:09:a2:68:03:84:5e:40:03:44: 50:6f:59:d2:3a:72:2c:f7:3a:d0:06:b1:c6:cc:48: dd:ff:1b:9d:a4:3e:cb:8d:bd:0a:ab:e5:ea:31:41: d8:15:b3:43:07:4b:68:db:40:ab:48:4b:e5:eb:8d: 0d:9b:65:3e:6d:ae:85:c9:81:08:44:91:20:89:d8: fa:7f:49:09:4b:3e:c5:05:9c:16:af:c7:9b:8a:d6: a4:7d:f4:5d:d9:8a:88:4b:de:6a:34:21:0f:d7:84: 67:41:7e:05:44:39:75:8d:5a:a2:53:da:eb:d2:3a: f7:77:05:2a:cc:67:19:35:16:75:26:2d:d3:7c:dd: 7e:65:83:6c:ed:e4:5c:47:1d:7b:73:c5:73:65:f6: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D5:97:E5:C4:77:B2:6F:DD:AF:81:71:5D:4B:E4:BD:F3:54:9C:18 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f570d60a-ccbf-489e-9f91-c2db7af43c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.162.32.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:59:dd:d7:17:77:9b:02:95:15:1f:ed:e3:05:3b:0b:bc:87: 69:74:bc:f9:f5:99:d7:90:df:ac:be:cf:ce:67:db:82:e0:0c: d3:11:09:63:5e:8e:2d:d5:c0:23:62:b4:76:f4:a7:33:ad:94: 7e:2c:2f:25:aa:49:98:db:b9:d0:28:a0:2d:7d:c9:ae:d5:6a: f1:69:e1:5a:5d:97:f0:8d:b9:68:72:96:14:98:18:5c:e1:e5: c2:fa:a5:55:bf:a1:56:58:0b:5b:1f:3d:d8:49:7e:a3:4f:09: 07:02:f8:9f:53:88:fb:a4:d3:09:5f:ba:6c:ef:16:2d:72:6c: d2:19:2f:56:36:0f:fe:81:e3:de:4f:a5:74:26:14:52:1b:65: 36:95:f9:92:90:87:fc:f9:75:7a:a7:fe:23:0b:86:d4:a9:01: 9f:2d:e9:20:fb:7c:8c:42:50:b6:5b:8e:ba:9b:d6:46:04:6a: a5:03:91:f4:8a:df:c2:20:33:bf:fe:d0:79:ef:19:f3:40:f9: 1f:47:bd:69:1f:d9:22:76:7a:c4:e1:34:42:e4:1c:4e:98:59: 0d:5f:e2:63:f6:78:eb:de:a9:26:76:49:90:44:bd:fa:c4:1b: 34:44:c8:a0:4b:86:2a:7c:ee:54:01:75:68:58:f3:fe:02:66: 97:da:98:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF7BZnAkmZH+izsbcxb0B7KGI0IcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTcyNzE2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZGMxYjcwNDhjN2EzMGQ0NmI2NzJlNGI1NTZkYjk0MDkx ODljN2NhMmU5NjNiYjI5ZDQ3MGUyNmI1NWJmNzQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIZ8w5fjRb1beMoB83oJm24PW+0p9ewOCecEG3f8TObTne FvxnL1d4b+Lu7yYF1/nFQRz39SCGMadVXQHVpaFAE/OpzzzjS3u9MY++wOVloz+W KVj4dLUBHVfWmCX+Xfd7/HIiJMqvG2+ekXziqwmiaAOEXkADRFBvWdI6ciz3OtAG scbMSN3/G52kPsuNvQqr5eoxQdgVs0MHS2jbQKtIS+XrjQ2bZT5troXJgQhEkSCJ 2Pp/SQlLPsUFnBavx5uK1qR99F3ZiohL3mo0IQ/XhGdBfgVEOXWNWqJT2uvSOvd3 BSrMZxk1FnUmLdN83X5lg2zt5FxHHXtzxXNl9o/zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUT9WX5cR3sm/dr4FxXUvkvfNUnBgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y1NzBkNjBhLWNjYmYtNDg5ZS05ZjkxLWMyZGI3YWY0M2MxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoiAwDQYJKoZIhvcNAQELBQADggEBAG5Z3dcXd5sClRUf7eMFOwu8h2l0 vPn1mdeQ36y+z85n24LgDNMRCWNeji3VwCNitHb0pzOtlH4sLyWqSZjbudAooC19 ya7VavFp4Vpdl/CNuWhylhSYGFzh5cL6pVW/oVZYC1sfPdhJfqNPCQcC+J9TiPuk 0wlfumzvFi1ybNIZL1Y2D/6B495PpXQmFFIbZTaV+ZKQh/z5dXqn/iMLhtSpAZ8t 6SD7fIxCULZbjrqb1kYEaqUDkfSK38IgM7/+0HnvGfNA+R9HvWkf2SJ2esThNELk HE6YWQ1f4mP2eOveqSZ2SZBEvfrEGzREyKBLhip87lQBdWhY8/4CZpfamJY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:36 2025 by rpki-client