$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ae5a054-2637-44c2-b0e9-b0a976aefa3f.roa File: 1ae5a054-2637-44c2-b0e9-b0a976aefa3f.roa (raw, json) Hash identifier: AXObHejx46KvXtLnlZ2msHpSG+ruzzXIgyyMwpPZ4qU= Subject key identifier: 70:F2:F0:97:A8:34:26:43:BE:EB:CA:C2:D7:CA:20:48:EB:C5:4A:81 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34966300F5DC2718FD6502E95A61347D9E2CCFFC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ae5a054-2637-44c2-b0e9-b0a976aefa3f.roa Signing time: Thu 25 Sep 2025 22:12:11 +0000 ROA not before: Thu 25 Sep 2025 22:12:11 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:96:63:00:f5:dc:27:18:fd:65:02:e9:5a:61:34:7d:9e:2c:cf:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:12:11 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c8c23d9a567263f4d27d228d9e1a22fa7ffc931bfa6c3645094d5d86b027b459, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:19:3f:b4:6f:03:90:73:cc:63:0f:9f:fa:b7: 2c:ba:d4:4c:d1:e1:48:44:95:21:0c:31:32:f9:f0: 2f:5e:62:24:97:d1:33:3f:ea:a8:60:29:89:67:50: 4d:52:4c:8c:63:5a:61:4e:c7:2d:c0:4a:5d:ba:da: 5c:5d:f9:5b:e8:8a:83:bf:28:53:34:f2:d9:8b:44: f3:73:22:b1:94:a9:84:25:82:37:69:e5:2d:3b:d6: 55:ad:8f:48:9e:25:d0:68:5c:ca:06:71:b5:b9:c5: 6b:5a:2e:74:a1:de:f4:d4:7a:13:51:ad:4f:2b:cd: 9b:61:2b:9f:df:a6:b2:19:a5:19:75:f7:1d:de:c0: c0:29:a3:d8:1b:b7:0b:e3:e6:b2:b4:10:99:83:55: ee:fb:0e:f3:ce:59:0e:2b:7c:53:33:db:cc:09:68: bc:11:82:1f:b2:af:c9:1c:19:ac:10:14:9b:14:10: 39:f4:87:73:ed:26:13:cd:78:89:19:38:86:92:52: 1b:41:fc:64:67:88:cc:dd:31:70:3f:98:bc:c1:9d: fd:86:56:b1:46:be:0b:5b:4e:c0:54:c9:e6:32:d2: 8f:8d:af:a9:df:da:40:36:e3:19:3f:ff:a5:f7:4e: fc:a3:49:d5:f3:1c:c0:d3:08:24:7d:ea:c3:0e:67: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F2:F0:97:A8:34:26:43:BE:EB:CA:C2:D7:CA:20:48:EB:C5:4A:81 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ae5a054-2637-44c2-b0e9-b0a976aefa3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.108.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:ea:cd:1e:01:7c:d1:b7:91:41:42:69:12:45:cd:5d:94:1a: 35:38:50:4e:38:ad:61:f5:ec:b7:c3:a9:6c:89:a5:6c:0b:4e: d4:62:ed:a2:93:7c:e6:f8:5f:15:f6:e9:d4:68:eb:a6:b7:2b: 68:e9:ab:45:45:02:96:87:71:24:84:a9:9b:b4:6f:0c:1d:84: 59:d0:af:b0:99:cd:11:73:0e:87:54:2a:6c:1a:2b:dd:12:94: 07:7c:7f:69:8d:3c:66:08:7e:90:cc:a1:9f:58:ff:74:05:f4: bf:01:9e:f9:26:b5:f2:4a:1e:4a:db:53:96:50:02:4f:21:6b: 44:ca:01:de:8f:8f:62:80:a8:5d:2c:af:94:5d:da:c1:d8:b4: fd:18:13:b2:a9:47:8d:cc:52:51:a5:d6:2b:34:5d:27:90:ab: 4b:d9:54:08:c0:a9:52:ee:ee:58:14:19:dc:cc:67:04:9b:82: ef:98:96:8d:a9:e3:13:fa:d6:47:bc:42:f7:a7:55:10:4c:3f: ff:3a:a1:e1:5e:0d:3e:99:ce:7a:93:4e:21:6b:8d:43:6e:ac: 9b:58:ea:49:9c:90:f7:5d:ab:e4:d4:fc:69:ab:8b:cb:2b:0c: bf:d4:2a:69:b4:e4:89:e0:f1:78:a7:96:9b:07:de:ed:7a:4a: 09:69:22:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNJZjAPXcJxj9ZQLpWmE0fZ4sz/wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIxMjExWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOGMyM2Q5YTU2NzI2M2Y0ZDI3ZDIyOGQ5ZTFhMjJmYTdm ZmM5MzFiZmE2YzM2NDUwOTRkNWQ4NmIwMjdiNDU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKGT+0bwOQc8xjD5/6tyy61EzR4UhElSEMMTL58C9eYiSX 0TM/6qhgKYlnUE1STIxjWmFOxy3ASl262lxd+VvoioO/KFM08tmLRPNzIrGUqYQl gjdp5S071lWtj0ieJdBoXMoGcbW5xWtaLnSh3vTUehNRrU8rzZthK5/fprIZpRl1 9x3ewMApo9gbtwvj5rK0EJmDVe77DvPOWQ4rfFMz28wJaLwRgh+yr8kcGawQFJsU EDn0h3PtJhPNeIkZOIaSUhtB/GRniMzdMXA/mLzBnf2GVrFGvgtbTsBUyeYy0o+N r6nf2kA24xk//6X3TvyjSdXzHMDTCCR96sMOZ/sdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcPLwl6g0JkO+68rC18ogSOvFSoEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhZTVhMDU0LTI2MzctNDRjMi1iMGU5LWIwYTk3NmFlZmEzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDpWwwDQYJKoZIhvcNAQELBQADggEBAF3qzR4BfNG3kUFCaRJFzV2UGjU4 UE44rWH17LfDqWyJpWwLTtRi7aKTfOb4XxX26dRo66a3K2jpq0VFApaHcSSEqZu0 bwwdhFnQr7CZzRFzDodUKmwaK90SlAd8f2mNPGYIfpDMoZ9Y/3QF9L8BnvkmtfJK HkrbU5ZQAk8ha0TKAd6Pj2KAqF0sr5Rd2sHYtP0YE7KpR43MUlGl1is0XSeQq0vZ VAjAqVLu7lgUGdzMZwSbgu+Ylo2p4xP61ke8QvenVRBMP/86oeFeDT6ZznqTTiFr jUNurJtY6kmckPddq+TU/Gmri8srDL/UKmm05Ing8XinlpsH3u16SglpIlk= -----END CERTIFICATE-----Generated at Sat Oct 18 00:00:25 2025 by rpki-client