$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a2e96a9-ba6d-4b7b-bb50-b2b0f6fe0539.roa File: 1a2e96a9-ba6d-4b7b-bb50-b2b0f6fe0539.roa (raw, json) Hash identifier: Fy35Dc3jvF79BaQo/dZutEIcALvk/TUr2tQujYz+exs= Subject key identifier: 62:F3:B9:70:E8:C3:C2:65:E3:37:BE:6F:83:DF:1F:66:9B:D4:CB:BD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2D03D9FB23375C052BCDDBADA15D2820C6275E1E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a2e96a9-ba6d-4b7b-bb50-b2b0f6fe0539.roa Signing time: Thu 25 Sep 2025 23:57:28 +0000 ROA not before: Thu 25 Sep 2025 23:57:28 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:03:d9:fb:23:37:5c:05:2b:cd:db:ad:a1:5d:28:20:c6:27:5e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:57:28 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=f6ee4135925db0902701fb3344131bc995207cfe5108f4632fa308f3e8b9e047, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:ab:23:8e:8f:04:7a:15:83:79:2d:43:f7: 25:35:19:92:56:45:d6:e6:03:61:56:eb:39:e3:22: 44:2f:8b:b1:22:43:0a:0a:47:81:5e:f7:87:b8:51: 17:b3:68:2c:52:63:17:1a:f1:b9:e9:7d:23:03:02: b6:27:2e:6c:c1:ef:d9:c7:d0:86:cb:ce:a5:92:e6: cb:6a:5a:b3:0c:c1:4e:ed:cd:10:bd:8a:10:a2:4f: cc:ce:ce:2f:bd:b4:f5:9a:3e:f3:d0:bc:20:fc:cb: c7:07:0c:ac:b5:7c:7e:ae:22:01:9b:08:f3:ea:ec: 64:c2:ed:5f:90:f2:cf:50:05:44:6e:7b:ec:b6:c2: 7a:db:9f:bb:b2:bd:5c:45:f0:01:3d:3a:6e:02:c4: 05:8d:3b:07:64:ff:2c:81:ef:2b:52:63:8d:ba:b4: b1:6d:89:a9:3d:e9:c0:cd:92:62:55:d4:e3:8d:d4: 53:fa:e1:d3:f1:5d:f1:af:db:35:2e:ab:5e:b4:8e: dd:af:4c:c5:15:73:5c:7a:ab:0e:85:9e:49:2b:f3: 29:cb:d5:bd:89:46:d5:d9:ae:08:c8:91:32:6b:82: 34:10:8f:f6:ed:e9:b0:87:0a:de:bd:71:e2:24:d8: e7:27:bd:13:6f:69:f0:ba:d9:f1:28:b2:b0:9b:6c: 7a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F3:B9:70:E8:C3:C2:65:E3:37:BE:6F:83:DF:1F:66:9B:D4:CB:BD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a2e96a9-ba6d-4b7b-bb50-b2b0f6fe0539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.136.0/22 Signature Algorithm: sha256WithRSAEncryption a3:aa:07:e1:60:d8:24:ce:57:90:13:8b:7b:9d:3a:d7:b4:f0: c6:00:aa:24:b6:55:34:f3:3c:b3:35:a4:63:cb:50:bb:b0:15: 78:b9:53:a4:e6:f8:57:22:92:ee:08:0c:46:a1:32:56:e0:de: 28:d5:69:d3:c5:ce:ab:5b:1d:ae:b6:96:75:f6:1b:fb:4c:c8: e4:15:c3:44:92:d8:f7:26:87:f0:66:8c:cc:dd:aa:61:a5:50: bb:a3:6b:fb:12:91:6d:e1:ee:8e:6f:0b:ce:e8:22:5e:bd:e4: b6:0b:ff:dd:f4:3f:97:b0:c9:e7:dc:a1:99:17:fe:f1:6a:95: 0e:f0:a7:71:31:c8:be:5c:a5:d4:d1:64:00:5f:c0:d8:94:71: e5:d5:cc:2c:b5:52:9d:a5:75:01:d7:43:a3:05:3d:00:9e:bc: 8d:fc:79:65:ad:01:73:cc:3f:9c:2d:ea:a2:88:55:b0:4a:fa: 6b:b2:b2:06:3e:ce:16:3c:55:9c:10:2e:48:a3:8d:f6:8a:8c: 8d:bc:2b:99:c7:8b:c8:03:21:dc:1b:c3:fc:b7:41:d6:77:d9: 21:1c:c8:e1:19:6c:1f:99:e9:79:54:3c:4f:d5:5f:a2:fd:5b: dc:a9:99:ac:59:b4:e6:1c:7a:5a:cc:1f:52:54:71:3c:fa:72: 1c:a1:3b:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULQPZ+yM3XAUrzdutoV0oIMYnXh4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjM1NzI4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmVlNDEzNTkyNWRiMDkwMjcwMWZiMzM0NDEzMWJjOTk1 MjA3Y2ZlNTEwOGY0NjMyZmEzMDhmM2U4YjllMDQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtHqsjjo8EehWDeS1D9yU1GZJWRdbmA2FW6znjIkQvi7Ei QwoKR4Fe94e4URezaCxSYxca8bnpfSMDArYnLmzB79nH0IbLzqWS5stqWrMMwU7t zRC9ihCiT8zOzi+9tPWaPvPQvCD8y8cHDKy1fH6uIgGbCPPq7GTC7V+Q8s9QBURu e+y2wnrbn7uyvVxF8AE9Om4CxAWNOwdk/yyB7ytSY426tLFtiak96cDNkmJV1OON 1FP64dPxXfGv2zUuq160jt2vTMUVc1x6qw6Fnkkr8ynL1b2JRtXZrgjIkTJrgjQQ j/bt6bCHCt69ceIk2OcnvRNvafC62fEosrCbbHqlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYvO5cOjDwmXjN75vg98fZpvUy70wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhMmU5NmE5LWJhNmQtNGI3Yi1iYjUwLWIyYjBmNmZlMDUzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDoYgwDQYJKoZIhvcNAQELBQADggEBAKOqB+Fg2CTOV5ATi3udOte08MYA qiS2VTTzPLM1pGPLULuwFXi5U6Tm+Fciku4IDEahMlbg3ijVadPFzqtbHa62lnX2 G/tMyOQVw0SS2Pcmh/BmjMzdqmGlULuja/sSkW3h7o5vC87oIl695LYL/930P5ew yefcoZkX/vFqlQ7wp3ExyL5cpdTRZABfwNiUceXVzCy1Up2ldQHXQ6MFPQCevI38 eWWtAXPMP5wt6qKIVbBK+muysgY+zhY8VZwQLkijjfaKjI28K5nHi8gDIdwbw/y3 QdZ32SEcyOEZbB+Z6XlUPE/VX6L9W9ypmaxZtOYcelrMH1JUcTz6chyhOzg= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:08 2025 by rpki-client