$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe7544c6-1e09-4779-ad22-7052980909b3.roa File: fe7544c6-1e09-4779-ad22-7052980909b3.roa (raw, json) Hash identifier: MJFrb7cG3YavcS4MwIJiSLOOznGq+soIRu8VGQieXh8= Subject key identifier: D2:B7:22:58:E0:17:B3:76:F6:4B:06:0E:A2:65:E0:61:95:57:C6:69 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3BF129050A91A60C003B05109FA1A715C2E94194 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe7544c6-1e09-4779-ad22-7052980909b3.roa Signing time: Fri 26 Sep 2025 00:12:44 +0000 ROA not before: Fri 26 Sep 2025 00:12:44 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f1:29:05:0a:91:a6:0c:00:3b:05:10:9f:a1:a7:15:c2:e9:41:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:12:44 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=e0e2013876ab73a8b1a8d3431921bf8c4e188f7457766319ba843d71fd04e010, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:30:06:ad:4d:cf:4c:4d:b9:70:e2:17:65: 2f:3c:27:e7:63:54:2a:d9:c0:b3:21:c1:41:3b:3b: ea:64:7a:8e:37:a8:cb:65:3b:e2:5a:6b:cb:44:7a: fc:81:2d:cb:68:07:4e:4e:48:27:a6:5f:91:bc:ff: 37:e5:63:87:16:3f:ee:7d:2f:4d:4b:9f:0e:df:42: 54:05:f9:1d:61:8d:0e:94:bb:53:29:9c:5d:a2:17: d4:1e:59:c8:a5:e8:62:44:2f:77:1e:5d:3d:bb:c7: f9:30:6a:6f:c4:82:d9:dd:2b:89:3c:51:ad:01:2a: f6:8c:1f:5a:01:52:0a:85:7a:40:4b:aa:53:0b:50: 23:3e:7d:5d:cc:dd:f6:69:79:3c:d9:5d:a7:be:2b: 6c:9f:8e:0a:f2:18:a7:ba:eb:8d:64:80:5e:8b:be: 30:b4:08:36:0d:89:26:59:e3:11:f2:30:9a:33:01: 81:6d:62:2f:7c:f7:33:3f:ff:35:c3:e2:b9:ec:50: 3c:cf:2d:2e:38:8b:de:f7:35:0e:b3:0c:d4:f6:f4: e5:68:a4:51:6e:01:e7:53:1f:ef:f1:d2:e4:de:5e: 9d:6a:88:27:09:ec:38:79:f6:37:01:87:8b:18:ee: 65:93:80:37:12:e0:fe:55:24:b3:7f:fa:2c:5d:ba: fd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B7:22:58:E0:17:B3:76:F6:4B:06:0E:A2:65:E0:61:95:57:C6:69 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe7544c6-1e09-4779-ad22-7052980909b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.124.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:4a:1a:a7:eb:8b:0e:6a:4e:9c:49:14:1e:05:53:a0:2f:15: f0:b7:63:dc:d1:58:5d:4f:bb:1e:15:7c:d9:c9:1a:97:91:0f: 63:ea:f1:3f:a4:b1:50:d6:e4:82:6d:e4:48:fb:bc:b8:86:da: 2b:00:69:66:97:72:7d:e1:7a:23:f4:09:d0:3f:24:29:1d:6a: 1e:0b:69:a2:b6:af:6e:21:8d:33:67:ab:4f:8e:32:45:a6:cd: 63:76:ff:18:e4:e1:b9:30:c3:1c:3b:52:6e:86:79:ec:e4:e3: c2:be:4d:8c:49:1a:8f:af:c3:03:94:61:2b:63:7d:a8:44:1e: 8f:2b:d0:55:bb:cc:3f:58:e0:77:ff:9d:e3:59:1c:87:29:1b: 15:ec:5a:12:9b:94:16:16:b2:7b:d4:01:86:7e:9d:7e:40:8d: 56:e8:fa:ea:35:58:40:b5:07:5c:52:57:fc:88:2a:be:93:7f: 67:20:ff:13:07:e3:2e:c9:23:ca:b5:99:0e:e9:13:4b:f1:d8: 9b:2c:01:fc:fe:ed:77:ba:f2:17:42:d9:55:23:6e:72:46:c8: 3d:d7:b8:a2:1e:88:5f:a5:7a:17:0f:7e:14:87:06:11:a1:72: dc:43:e7:bf:24:12:26:b8:6e:26:5c:16:c0:d4:97:ed:29:8d: d4:9e:7d:fa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO/EpBQqRpgwAOwUQn6GnFcLpQZQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDAxMjQ0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMGUyMDEzODc2YWI3M2E4YjFhOGQzNDMxOTIxYmY4YzRl MTg4Zjc0NTc3NjYzMTliYTg0M2Q3MWZkMDRlMDEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCktTAGrU3PTE25cOIXZS88J+djVCrZwLMhwUE7O+pkeo43 qMtlO+Jaa8tEevyBLctoB05OSCemX5G8/zflY4cWP+59L01Lnw7fQlQF+R1hjQ6U u1MpnF2iF9QeWcil6GJEL3ceXT27x/kwam/EgtndK4k8Ua0BKvaMH1oBUgqFekBL qlMLUCM+fV3M3fZpeTzZXae+K2yfjgryGKe6641kgF6LvjC0CDYNiSZZ4xHyMJoz AYFtYi989zM//zXD4rnsUDzPLS44i973NQ6zDNT29OVopFFuAedTH+/x0uTeXp1q iCcJ7Dh59jcBh4sY7mWTgDcS4P5VJLN/+ixduv3rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0rciWOAXs3b2SwYOomXgYZVXxmkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZlNzU0NGM2LTFlMDktNDc3OS1hZDIyLTcwNTI5ODA5MDliMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDpHwwDQYJKoZIhvcNAQELBQADggEBAH9KGqfriw5qTpxJFB4FU6AvFfC3 Y9zRWF1Pux4VfNnJGpeRD2Pq8T+ksVDW5IJt5Ej7vLiG2isAaWaXcn3heiP0CdA/ JCkdah4LaaK2r24hjTNnq0+OMkWmzWN2/xjk4bkwwxw7Um6Geezk48K+TYxJGo+v wwOUYStjfahEHo8r0FW7zD9Y4Hf/neNZHIcpGxXsWhKblBYWsnvUAYZ+nX5AjVbo +uo1WEC1B1xSV/yIKr6Tf2cg/xMH4y7JI8q1mQ7pE0vx2JssAfz+7Xe68hdC2VUj bnJGyD3XuKIeiF+lehcPfhSHBhGhctxD578kEia4biZcFsDUl+0pjdSeffo= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:18 2025 by rpki-client