$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fde685e6-4834-47fe-9245-055d88d9f79b.roa File: fde685e6-4834-47fe-9245-055d88d9f79b.roa (raw, json) Hash identifier: HEPOUS7tDNf0y8VveNCTCq5PnD3TGRWw4CrigOMJsUU= Subject key identifier: 62:50:12:B5:DD:C3:B4:59:58:CF:04:B6:0F:E7:49:7F:B2:48:B6:35 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 468B642BCEE5BD38D9DF82A25ACC46AD4A092988 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fde685e6-4834-47fe-9245-055d88d9f79b.roa Signing time: Thu 25 Sep 2025 21:11:51 +0000 ROA not before: Thu 25 Sep 2025 21:11:51 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8b:64:2b:ce:e5:bd:38:d9:df:82:a2:5a:cc:46:ad:4a:09:29:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 21:11:51 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c0439001824c66e35926e713fbce58bb403176a19dbf595b79372423f3f85c4c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:e7:c0:9e:43:93:18:06:6b:9b:f6:2d:9c: cd:39:22:6e:29:b1:fb:5d:ae:ea:77:69:e8:c2:6e: 1b:e0:a9:aa:3e:b9:11:6d:66:ea:0a:94:27:ce:e8: ed:9b:c7:bb:ea:fd:aa:9a:3c:58:59:54:e3:61:44: 3c:39:de:b5:a4:b0:b5:94:d6:0d:dc:1c:57:c5:e7: 64:b2:c1:c2:23:ca:b7:24:23:66:38:46:91:f6:f9: 84:a5:c1:03:69:5e:ca:99:dd:ef:17:cd:76:12:8a: 98:49:03:2c:71:9b:b6:38:75:5e:7e:ee:fa:90:83: 3c:29:2a:ad:c8:c0:25:9b:39:e0:54:bf:33:4a:9c: 46:92:2c:23:0e:ba:d6:75:c6:85:03:02:9f:30:2c: 6e:8f:2a:f3:52:80:73:5c:a8:fd:ec:2a:18:ef:4f: 77:17:a0:4d:e1:82:1b:83:7f:3f:d7:17:8c:cf:c9: b3:84:95:6c:b4:a3:ce:0e:e2:d0:d5:aa:68:91:9e: 6e:83:67:89:05:73:52:21:7b:24:91:ee:aa:74:a7: d5:f1:bc:39:30:79:da:4c:a3:0d:90:04:6f:38:39: 27:9f:f0:ac:66:0a:cb:f3:ab:a2:a7:1f:e1:33:31: 18:32:78:d9:7f:e0:8b:8a:1a:6b:c3:86:fa:e0:93: 24:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:50:12:B5:DD:C3:B4:59:58:CF:04:B6:0F:E7:49:7F:B2:48:B6:35 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fde685e6-4834-47fe-9245-055d88d9f79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.180.0/24 Signature Algorithm: sha256WithRSAEncryption 73:ce:da:f6:88:2c:ef:83:a3:8d:ab:a2:7e:9a:cd:c3:9d:d7: 69:d5:b8:6e:3c:94:f2:5e:87:bd:23:ba:f4:86:fa:d5:8d:73: 22:9f:1e:a0:5f:7d:72:b1:ec:34:b4:e9:b8:1c:6f:44:be:da: 19:6f:8c:e2:1a:3c:b0:28:4a:4c:1a:80:d0:a6:8b:cb:c7:31: 90:a2:ed:07:95:03:74:98:f9:ec:5d:a7:96:42:7f:22:64:05: be:3d:b8:b2:fd:65:ba:8c:00:4c:13:14:fb:c4:78:12:4e:1a: f7:9a:0c:89:a2:47:de:42:3d:40:a7:9a:cc:03:f4:bc:8c:43: b0:4a:60:5f:b0:01:24:45:e2:33:d6:d4:61:6f:1c:ad:fb:47: 9f:bd:15:ec:53:6a:e6:b5:db:a2:25:f6:e3:95:11:0f:99:65: b8:8b:aa:b9:a0:24:bf:99:32:62:59:59:2c:5d:96:8d:ad:fb: 8b:96:d3:48:72:85:71:7f:4d:7c:b4:d1:3e:c6:09:74:0b:02: 00:b2:66:9f:11:16:c9:76:a4:c4:69:62:41:75:34:4c:ae:7d: fc:aa:f7:2c:dc:40:9c:19:07:96:ac:80:b8:69:4d:ef:52:27: 2b:08:6e:33:94:e1:0e:ea:4f:9d:df:af:04:9b:e8:ea:38:81: ce:79:cb:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURotkK87lvTjZ34KiWsxGrUoJKYgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjExMTUxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDQzOTAwMTgyNGM2NmUzNTkyNmU3MTNmYmNlNThiYjQw MzE3NmExOWRiZjU5NWI3OTM3MjQyM2YzZjg1YzRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd3+fAnkOTGAZrm/YtnM05Im4psftdrup3aejCbhvgqao+ uRFtZuoKlCfO6O2bx7vq/aqaPFhZVONhRDw53rWksLWU1g3cHFfF52SywcIjyrck I2Y4RpH2+YSlwQNpXsqZ3e8XzXYSiphJAyxxm7Y4dV5+7vqQgzwpKq3IwCWbOeBU vzNKnEaSLCMOutZ1xoUDAp8wLG6PKvNSgHNcqP3sKhjvT3cXoE3hghuDfz/XF4zP ybOElWy0o84O4tDVqmiRnm6DZ4kFc1IheySR7qp0p9XxvDkwedpMow2QBG84OSef 8KxmCsvzq6KnH+EzMRgyeNl/4IuKGmvDhvrgkyRnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYlAStd3DtFlYzwS2D+dJf7JItjUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZkZTY4NWU2LTQ4MzQtNDdmZS05MjQ1LTA1NWQ4OGQ5Zjc5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADr7QwDQYJKoZIhvcNAQELBQADggEBAHPO2vaILO+Do42ron6azcOd12nV uG48lPJeh70juvSG+tWNcyKfHqBffXKx7DS06bgcb0S+2hlvjOIaPLAoSkwagNCm i8vHMZCi7QeVA3SY+exdp5ZCfyJkBb49uLL9ZbqMAEwTFPvEeBJOGveaDImiR95C PUCnmswD9LyMQ7BKYF+wASRF4jPW1GFvHK37R5+9FexTaua126Il9uOVEQ+ZZbiL qrmgJL+ZMmJZWSxdlo2t+4uW00hyhXF/TXy00T7GCXQLAgCyZp8RFsl2pMRpYkF1 NEyuffyq9yzcQJwZB5asgLhpTe9SJysIbjOU4Q7qT53frwSb6Oo4gc55y1s= -----END CERTIFICATE-----Generated at Mon Oct 20 03:06:11 2025 by rpki-client