$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e49f27e-42e3-4488-952b-8486a58a2d25.roa File: 0e49f27e-42e3-4488-952b-8486a58a2d25.roa (raw, json) Hash identifier: sxcNPKwOAl7bG/MDJQoJULIvs8aWAILcOTl9YJNpA1s= Subject key identifier: 54:4F:A2:39:10:74:32:EE:48:16:1C:F2:DF:E3:40:C6:99:39:2B:75 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0EC2C70B671D11C644D3E24B8DE323CF00C6F709 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e49f27e-42e3-4488-952b-8486a58a2d25.roa Signing time: Thu 25 Sep 2025 18:23:57 +0000 ROA not before: Thu 25 Sep 2025 18:23:57 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c2:c7:0b:67:1d:11:c6:44:d3:e2:4b:8d:e3:23:cf:00:c6:f7:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:23:57 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=ac5d718187cb6914d200ceb69cb90735c993fe7d22ebf7c9fb37e9463fdfd3e8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:cc:c9:36:c6:8a:8a:fc:df:18:bc:74:f2: e2:31:29:aa:5f:5f:e1:aa:73:36:f6:f4:25:86:b1: aa:80:a5:ff:16:57:7a:b0:cc:1a:c1:3e:77:6e:3e: 9e:21:6f:13:d2:e4:bf:30:90:7d:6d:38:fb:2c:6b: 13:d5:f0:3a:98:48:6d:f1:f4:f5:f0:3f:d2:dd:37: fa:09:5d:30:e8:c3:3c:51:bf:b6:ab:29:11:4c:67: ba:9c:e0:20:90:0f:b4:a7:5f:ee:82:45:1b:4a:fa: 7c:cd:c5:ec:db:ab:e5:c4:3e:42:71:e3:0e:eb:15: 76:ad:28:eb:22:5f:e2:0b:65:fd:15:b4:29:df:a6: 60:4c:0e:d6:96:6c:25:34:d2:aa:c8:4b:b2:42:4a: b3:76:32:b9:6a:19:7f:f4:1a:40:40:a4:f2:ba:26: a4:a5:97:81:6d:60:fc:f1:53:ba:2e:c1:b2:5a:64: fa:9c:ca:72:ad:b2:31:1a:da:0c:db:21:0d:87:78: b2:a6:e5:28:f1:a3:c8:3a:01:b0:95:ac:ce:c1:b0: 7f:9c:d9:0a:76:19:fe:b2:be:47:13:10:3f:c0:d4: 51:03:b7:95:af:50:f9:74:20:09:8d:07:81:ef:eb: e8:60:2f:b5:ec:fb:fb:fe:81:84:c3:d2:a3:1a:b3: 53:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4F:A2:39:10:74:32:EE:48:16:1C:F2:DF:E3:40:C6:99:39:2B:75 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e49f27e-42e3-4488-952b-8486a58a2d25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.244.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:4d:c4:c5:5f:c6:a9:ce:45:4a:ce:a1:0b:f9:6a:32:0f:cd: 8e:30:dd:42:8f:6f:14:89:2b:69:1b:9d:c3:ea:3e:82:f0:98: 7f:0f:4a:f9:50:6c:ba:c9:89:d6:2a:2a:6c:de:99:20:95:0a: 6b:23:76:cc:12:6e:9b:38:b9:e8:ef:0a:1f:c6:c7:66:45:6d: 9a:54:34:77:5f:f9:99:58:15:f6:30:a1:ae:82:f8:9c:fa:f7: 9b:e1:82:24:ba:cf:61:0d:01:3b:7f:c4:e9:6c:9c:81:f3:ae: 79:f4:78:52:b1:c7:cd:07:c3:99:31:54:74:e3:c9:bf:aa:3b: 83:6e:e5:ca:d9:cf:18:45:01:2b:34:18:8d:0a:ab:79:f0:21: 23:2d:fe:ac:2b:e5:c2:d4:3c:ef:2d:27:c7:8e:0b:cf:30:61: 0d:ba:9c:6d:cc:54:bf:06:11:7c:b4:55:4b:b5:b5:f5:42:58: 7f:19:75:27:87:5b:95:4e:0a:8f:9e:fa:a9:a4:22:e0:a2:3e: e6:e4:19:8b:4c:11:ee:fe:34:85:0d:a8:31:1b:1c:b8:70:65: 72:e9:c0:29:3c:f1:1d:1e:32:80:2c:b5:d1:55:08:3d:64:2d: d2:22:d4:35:fb:78:02:62:a8:15:f7:c3:6e:31:69:94:32:e5: 72:0f:c8:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDsLHC2cdEcZE0+JLjeMjzwDG9wkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgyMzU3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzVkNzE4MTg3Y2I2OTE0ZDIwMGNlYjY5Y2I5MDczNWM5 OTNmZTdkMjJlYmY3YzlmYjM3ZTk0NjNmZGZkM2U4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC++szJNsaKivzfGLx08uIxKapfX+Gqczb29CWGsaqApf8W V3qwzBrBPnduPp4hbxPS5L8wkH1tOPssaxPV8DqYSG3x9PXwP9LdN/oJXTDowzxR v7arKRFMZ7qc4CCQD7SnX+6CRRtK+nzNxezbq+XEPkJx4w7rFXatKOsiX+ILZf0V tCnfpmBMDtaWbCU00qrIS7JCSrN2MrlqGX/0GkBApPK6JqSll4FtYPzxU7ouwbJa ZPqcynKtsjEa2gzbIQ2HeLKm5Sjxo8g6AbCVrM7BsH+c2Qp2Gf6yvkcTED/A1FED t5WvUPl0IAmNB4Hv6+hgL7Xs+/v+gYTD0qMas1NdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVE+iORB0Mu5IFhzy3+NAxpk5K3UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBlNDlmMjdlLTQyZTMtNDQ4OC05NTJiLTg0ODZhNThhMmQyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpfQwDQYJKoZIhvcNAQELBQADggEBABpNxMVfxqnORUrOoQv5ajIPzY4w 3UKPbxSJK2kbncPqPoLwmH8PSvlQbLrJidYqKmzemSCVCmsjdswSbps4uejvCh/G x2ZFbZpUNHdf+ZlYFfYwoa6C+Jz695vhgiS6z2ENATt/xOlsnIHzrnn0eFKxx80H w5kxVHTjyb+qO4Nu5crZzxhFASs0GI0Kq3nwISMt/qwr5cLUPO8tJ8eOC88wYQ26 nG3MVL8GEXy0VUu1tfVCWH8ZdSeHW5VOCo+e+qmkIuCiPubkGYtMEe7+NIUNqDEb HLhwZXLpwCk88R0eMoAstdFVCD1kLdIi1DX7eAJiqBX3w24xaZQy5XIPyFQ= -----END CERTIFICATE-----Generated at Fri Oct 17 22:14:40 2025 by rpki-client