$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/225a367e-eda7-4e97-9687-d9a8c7ea4c92.roa File: 225a367e-eda7-4e97-9687-d9a8c7ea4c92.roa (raw, json) Hash identifier: o16QpH8LbvkiJkjiktwPuej8Ppfe85KRA4h8qyC0slQ= Subject key identifier: 1D:15:55:71:1A:67:10:F7:C8:15:CC:D8:31:4B:6E:13:F4:EF:6F:B8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7B4B7E4C9DDDEF506884D5113AEDCEB605FB934B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/225a367e-eda7-4e97-9687-d9a8c7ea4c92.roa Signing time: Thu 25 Sep 2025 19:42:05 +0000 ROA not before: Thu 25 Sep 2025 19:42:05 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:4b:7e:4c:9d:dd:ef:50:68:84:d5:11:3a:ed:ce:b6:05:fb:93:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:42:05 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=2a030fd080600a218428efacb21a8c9d91762e7aee4356f55a616b66ceb100de, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7d:99:40:a6:71:fb:71:5e:65:bb:3c:ad:da: a8:2a:a9:6a:e9:19:7a:1c:a5:45:2a:15:18:85:72: 77:bf:03:80:27:38:81:e6:5c:73:bf:d2:f1:dd:e6: 04:58:d0:fb:b0:b3:a3:02:87:a3:ff:bf:51:34:24: e8:ad:b9:16:dd:ea:e1:04:c2:92:98:7b:e1:fe:93: 15:8d:84:7e:81:9d:6f:6b:b7:fa:4f:f4:86:95:ba: fb:50:62:d4:6c:98:0b:6f:8e:08:61:0c:51:aa:16: 45:f7:e6:c3:ba:35:32:86:b4:36:c0:8f:28:72:47: 96:00:86:19:1d:60:2d:89:a5:8f:43:1e:52:8c:9f: 0e:81:8f:dd:97:d3:09:b3:56:64:b2:17:0d:6f:da: 0f:4b:91:3e:63:c9:b0:fc:6d:86:40:af:40:e3:b3: 26:22:51:cb:b2:4d:11:f4:88:c8:c8:e3:08:0e:12: 75:aa:76:92:c9:97:63:3d:ed:47:5c:b7:38:b9:0a: b3:de:e5:31:7a:d2:c7:a6:30:aa:43:3b:60:89:dd: 89:48:9e:89:29:d0:91:ff:45:e8:ff:4a:69:a6:de: c7:a2:43:f4:cd:9e:09:65:b6:0f:12:d0:e7:be:55: 1e:ae:1f:27:90:9a:1a:31:d4:16:97:d4:2b:48:04: fd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:15:55:71:1A:67:10:F7:C8:15:CC:D8:31:4B:6E:13:F4:EF:6F:B8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/225a367e-eda7-4e97-9687-d9a8c7ea4c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.45.0/24 Signature Algorithm: sha256WithRSAEncryption 55:04:63:57:2f:fe:c6:2d:dc:54:17:14:3b:cb:32:d7:b6:82: 02:06:ca:ea:db:1c:b2:1c:af:19:31:a5:cc:58:ad:4e:bb:1b: 60:13:a6:8d:13:b1:ee:5f:96:ec:3b:0e:fe:23:1f:dd:b8:a9: 85:0c:25:7b:c9:f1:f1:4c:19:2e:ad:57:17:48:e0:9b:ed:10: 93:05:80:fc:93:fb:e2:f1:6d:f0:d1:f9:d8:4d:07:5a:87:5b: 0f:34:c5:c0:cb:74:b1:c7:7c:c6:a4:33:bf:a3:4b:27:6f:29: b9:91:2e:41:41:6a:21:74:a5:75:bb:89:96:61:51:16:ce:7c: c8:a4:a9:df:da:9b:97:7a:53:a0:5f:97:32:ac:50:11:c8:f3: 74:ec:7e:68:6f:81:a2:1b:47:7e:d9:b5:e0:36:01:06:ff:05: 11:e0:de:7f:f6:94:b4:bb:73:aa:bf:01:cb:72:6d:f9:2f:84: d8:00:09:da:1c:03:7e:4d:71:45:73:7a:75:21:3b:14:74:d7: 6f:64:35:a2:d2:4f:a6:15:fe:01:87:84:8f:04:ee:ab:ee:3b: 74:37:6e:10:e0:2b:79:1e:ff:63:50:ed:cc:4d:1a:2b:27:f4: bd:90:59:ba:d8:e4:4d:e2:bb:ec:7f:d0:23:a8:b9:67:be:1b: 53:0c:b6:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe0t+TJ3d71BohNUROu3OtgX7k0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTk0MjA1WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTAzMGZkMDgwNjAwYTIxODQyOGVmYWNiMjFhOGM5ZDkx NzYyZTdhZWU0MzU2ZjU1YTYxNmI2NmNlYjEwMGRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqfZlApnH7cV5luzyt2qgqqWrpGXocpUUqFRiFcne/A4An OIHmXHO/0vHd5gRY0Puws6MCh6P/v1E0JOituRbd6uEEwpKYe+H+kxWNhH6BnW9r t/pP9IaVuvtQYtRsmAtvjghhDFGqFkX35sO6NTKGtDbAjyhyR5YAhhkdYC2JpY9D HlKMnw6Bj92X0wmzVmSyFw1v2g9LkT5jybD8bYZAr0DjsyYiUcuyTRH0iMjI4wgO EnWqdpLJl2M97Udctzi5CrPe5TF60semMKpDO2CJ3YlInokp0JH/Rej/Smmm3sei Q/TNnglltg8S0Oe+VR6uHyeQmhox1BaX1CtIBP3bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHRVVcRpnEPfIFczYMUtuE/Tvb7gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIyNWEzNjdlLWVkYTctNGU5Ny05Njg3LWQ5YThjN2VhNGM5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqS0wDQYJKoZIhvcNAQELBQADggEBAFUEY1cv/sYt3FQXFDvLMte2ggIG yurbHLIcrxkxpcxYrU67G2ATpo0Tse5fluw7Dv4jH924qYUMJXvJ8fFMGS6tVxdI 4JvtEJMFgPyT++LxbfDR+dhNB1qHWw80xcDLdLHHfMakM7+jSydvKbmRLkFBaiF0 pXW7iZZhURbOfMikqd/am5d6U6BflzKsUBHI83TsfmhvgaIbR37ZteA2AQb/BRHg 3n/2lLS7c6q/ActybfkvhNgACdocA35NcUVzenUhOxR0129kNaLST6YV/gGHhI8E 7qvuO3Q3bhDgK3ke/2NQ7cxNGisn9L2QWbrY5E3iu+x/0COouWe+G1MMtig= -----END CERTIFICATE-----Generated at Fri Oct 17 23:59:46 2025 by rpki-client