$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1412ecd4-f686-4fb1-995a-bf52ec9d6068.roa File: 1412ecd4-f686-4fb1-995a-bf52ec9d6068.roa (raw, json) Hash identifier: u6FfNiZvy5aMdC8f0UP5WUh5gQeaHsIf3tyGu2/lgmo= Subject key identifier: 19:7B:01:53:9C:95:12:F3:50:D9:42:C5:4A:54:0B:2E:F6:72:09:0A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2AC6238A101C40F386B31D7FE535E2C2A7ABD981 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1412ecd4-f686-4fb1-995a-bf52ec9d6068.roa Signing time: Thu 25 Sep 2025 17:12:00 +0000 ROA not before: Thu 25 Sep 2025 17:12:00 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c6:23:8a:10:1c:40:f3:86:b3:1d:7f:e5:35:e2:c2:a7:ab:d9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:12:00 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=ee385094354270bef308eaf3dbb8104d037f2b032a5abd82d4931ac807ff3a2e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8e:60:3b:18:cb:6a:5b:e1:2f:91:86:44:b1: c2:89:19:59:dc:da:03:96:34:c1:5e:8d:d6:da:1d: 2c:ce:8a:77:61:d2:c3:58:2f:0f:bd:69:4a:d3:40: 5a:7a:4c:ae:0c:24:ac:59:38:f4:fc:96:fd:5a:8e: bb:82:6d:15:d1:a6:aa:e7:23:27:be:57:53:84:00: fc:db:a6:94:e9:05:93:ef:88:c0:59:1c:8d:9c:d3: 2c:37:a5:28:fe:1d:02:16:4e:80:85:37:e9:c0:16: 42:16:bb:54:49:6c:ce:e4:41:37:a7:c5:f6:07:96: 60:0f:50:a7:e2:4f:f9:5f:c3:7c:fe:85:2a:ae:be: ed:a3:13:4b:7b:98:c6:18:a9:1f:e3:d0:8e:84:6a: 23:0c:1b:0c:b3:4b:ab:d2:4b:f3:52:99:d1:36:d9: 2c:94:0e:b4:e7:b2:88:eb:e5:38:fe:04:fe:3a:37: 18:62:e8:d5:81:83:c7:27:f8:95:40:30:cf:ec:44: 63:c8:4d:9b:4a:eb:9d:99:d6:d5:a7:b1:cf:92:c4: 22:9a:50:b6:89:85:36:36:44:0b:e7:48:6c:14:41: 37:94:6c:f0:68:11:8f:8e:d4:38:a2:fd:2a:26:c1: 7d:ae:02:8f:96:0e:89:d5:26:9d:39:30:aa:d8:d1: 17:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7B:01:53:9C:95:12:F3:50:D9:42:C5:4A:54:0B:2E:F6:72:09:0A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1412ecd4-f686-4fb1-995a-bf52ec9d6068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.84.0/24 Signature Algorithm: sha256WithRSAEncryption 82:85:38:96:18:01:26:6e:87:a9:88:61:f1:23:44:c9:27:b5: c4:1b:7d:ad:ba:a6:93:b0:18:16:9d:10:8f:b4:40:2e:74:3b: b0:7d:44:ea:eb:39:31:17:43:f7:34:f6:61:18:2f:84:4c:e2: a8:66:e8:bc:98:4e:b1:f7:fd:5c:1a:9b:92:b8:2c:99:a4:45: 66:38:d8:ae:58:e4:45:d7:27:d7:c5:37:d9:4f:12:cb:6e:12: a5:51:60:64:ee:44:b4:2c:16:cc:5a:d1:da:52:79:d7:c3:4b: 2a:65:a7:45:40:9d:86:61:a6:aa:27:01:9f:49:12:58:46:bb: f5:d9:09:0f:1c:7b:72:f4:2d:f4:cb:fa:91:96:69:c7:2c:72: 86:c9:46:b4:cc:7b:f6:c0:d9:a4:31:71:fd:0d:ae:5c:c8:59: df:5b:28:85:2f:43:07:ac:1e:44:08:83:71:b6:52:f6:06:93: 47:8d:a1:6a:ca:6d:3a:37:b4:a8:2e:1f:a4:49:d8:d7:ae:19: 25:d0:9c:6b:40:32:36:55:96:3d:84:4b:c3:bb:90:1e:96:b7: 02:2e:96:48:5b:26:11:72:80:d4:78:d4:98:5b:39:d2:8f:5c: 73:3a:20:40:8d:59:20:69:3c:be:5d:c9:17:ed:5d:d0:02:97: 5c:e4:da:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKsYjihAcQPOGsx1/5TXiwqer2YEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTcxMjAwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTM4NTA5NDM1NDI3MGJlZjMwOGVhZjNkYmI4MTA0ZDAz N2YyYjAzMmE1YWJkODJkNDkzMWFjODA3ZmYzYTJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQjmA7GMtqW+EvkYZEscKJGVnc2gOWNMFejdbaHSzOindh 0sNYLw+9aUrTQFp6TK4MJKxZOPT8lv1ajruCbRXRpqrnIye+V1OEAPzbppTpBZPv iMBZHI2c0yw3pSj+HQIWToCFN+nAFkIWu1RJbM7kQTenxfYHlmAPUKfiT/lfw3z+ hSquvu2jE0t7mMYYqR/j0I6EaiMMGwyzS6vSS/NSmdE22SyUDrTnsojr5Tj+BP46 Nxhi6NWBg8cn+JVAMM/sRGPITZtK652Z1tWnsc+SxCKaULaJhTY2RAvnSGwUQTeU bPBoEY+O1Dii/SomwX2uAo+WDonVJp05MKrY0RcBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGXsBU5yVEvNQ2ULFSlQLLvZyCQowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE0MTJlY2Q0LWY2ODYtNGZiMS05OTVhLWJmNTJlYzlkNjA2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoVQwDQYJKoZIhvcNAQELBQADggEBAIKFOJYYASZuh6mIYfEjRMkntcQb fa26ppOwGBadEI+0QC50O7B9ROrrOTEXQ/c09mEYL4RM4qhm6LyYTrH3/Vwam5K4 LJmkRWY42K5Y5EXXJ9fFN9lPEstuEqVRYGTuRLQsFsxa0dpSedfDSyplp0VAnYZh pqonAZ9JElhGu/XZCQ8ce3L0LfTL+pGWaccscobJRrTMe/bA2aQxcf0NrlzIWd9b KIUvQwesHkQIg3G2UvYGk0eNoWrKbTo3tKguH6RJ2NeuGSXQnGtAMjZVlj2ES8O7 kB6WtwIulkhbJhFygNR41JhbOdKPXHM6IECNWSBpPL5dyRftXdACl1zk2lM= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:51 2025 by rpki-client