$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23142ba7-3e18-4f08-b777-aa3e4decec6e.roa File: 23142ba7-3e18-4f08-b777-aa3e4decec6e.roa (raw, json) Hash identifier: 3uUaa+/ZbpU0hS8RDooezg4P3fz8HDLhCNnnhSOLrk4= Subject key identifier: 87:54:37:E4:7D:89:77:6A:EE:A4:23:49:95:3D:89:8D:7C:5B:70:F0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20D0913B9487F7FE87CF5F64F4D1A50DA7C5D5F2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23142ba7-3e18-4f08-b777-aa3e4decec6e.roa Signing time: Thu 25 Sep 2025 16:54:57 +0000 ROA not before: Thu 25 Sep 2025 16:54:57 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d0:91:3b:94:87:f7:fe:87:cf:5f:64:f4:d1:a5:0d:a7:c5:d5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 16:54:57 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=2b7f1abe1cf268a59be32301e553a5cd5f9a457cdd2ffd80713c0df44553f0b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0d:f8:4e:89:a4:d4:22:47:e4:14:d7:3f:4b: ba:80:0b:af:65:b3:d1:28:64:d6:b8:1c:0f:ea:93: 88:fc:56:73:4c:8f:eb:f7:c7:1d:81:99:07:aa:3f: b5:6f:0a:3d:7e:13:3a:6d:37:ed:79:47:e6:4a:4c: 48:38:cd:49:0e:e0:9e:d0:d2:3c:63:63:4d:7d:bf: 31:28:68:e3:32:7b:09:57:83:12:24:97:b7:f2:64: 7b:1d:1f:6e:38:bc:d9:27:27:90:63:e8:72:99:8a: c0:a9:b1:22:3a:ab:f3:00:ff:2c:ac:df:8c:81:46: 49:c2:a6:b7:17:98:6f:db:24:a9:e9:c3:56:3c:52: 4b:66:d3:17:d9:b1:e7:a9:72:ea:4d:fc:2b:b5:f0: 84:27:d5:06:66:ab:98:ba:57:7c:81:dc:be:de:c2: 19:2e:a3:4a:e6:9d:75:97:78:fc:8a:f0:16:d4:6f: 1d:3d:56:d5:92:44:73:ed:af:49:a2:4c:5d:4e:52: 23:e4:70:62:1f:9b:a8:4e:c1:60:28:38:df:42:5d: de:d4:9d:99:13:8c:59:28:bb:4b:5f:50:5a:de:d2: 69:6c:d1:f9:9a:f6:35:b4:23:6c:b9:95:1c:17:1b: eb:72:37:9a:7d:cc:32:cb:fa:e9:25:0c:ec:29:77: 54:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:54:37:E4:7D:89:77:6A:EE:A4:23:49:95:3D:89:8D:7C:5B:70:F0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23142ba7-3e18-4f08-b777-aa3e4decec6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.110.0/24 Signature Algorithm: sha256WithRSAEncryption 87:9a:ce:4b:e8:32:a6:c0:64:4f:5c:f5:99:07:98:53:59:4d: 3f:e7:c0:35:d0:c8:b7:87:a3:da:a0:dd:c7:e0:a1:c7:1a:23: a9:83:f8:55:5b:29:e1:5c:a6:6a:a6:98:9b:5b:5e:00:97:20: e9:95:b2:93:d5:5b:1f:a4:e5:2d:3e:de:f5:ee:98:44:36:83: d5:3e:fc:2f:72:a0:a4:83:3f:89:3d:7f:48:eb:9e:f7:50:95: fa:13:bf:33:29:84:e1:74:f6:80:15:01:fa:7c:17:44:18:2e: 5a:5b:a5:a7:e6:ec:18:bb:7a:05:c3:34:f2:9b:81:1e:5e:eb: 8a:5b:ca:4c:54:cc:50:a6:c8:a3:56:5e:85:d8:16:8b:25:74: 85:5f:80:ac:33:e3:ab:d6:9a:2e:e1:00:41:c1:34:fb:01:ec: 42:bc:7d:c6:9b:e3:ea:83:12:65:02:83:eb:6f:28:ab:c7:a6: 71:40:82:21:31:39:25:24:06:83:c3:1d:1d:8d:d6:69:24:51: 1b:88:d8:b0:a3:fa:39:f0:81:e4:de:33:2d:42:75:dd:78:82: e8:07:c5:95:b0:cb:2f:2c:cb:8d:4c:58:1d:c9:c8:51:15:3e: 47:54:47:65:66:9c:60:1a:75:8e:7a:37:91:a2:fc:7d:f8:2b: ef:d5:ff:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUINCRO5SH9/6Hz19k9NGlDafF1fIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTY1NDU3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjdmMWFiZTFjZjI2OGE1OWJlMzIzMDFlNTUzYTVjZDVm OWE0NTdjZGQyZmZkODA3MTNjMGRmNDQ1NTNmMGIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLDfhOiaTUIkfkFNc/S7qAC69ls9EoZNa4HA/qk4j8VnNM j+v3xx2BmQeqP7VvCj1+EzptN+15R+ZKTEg4zUkO4J7Q0jxjY019vzEoaOMyewlX gxIkl7fyZHsdH244vNknJ5Bj6HKZisCpsSI6q/MA/yys34yBRknCprcXmG/bJKnp w1Y8Uktm0xfZseepcupN/Cu18IQn1QZmq5i6V3yB3L7ewhkuo0rmnXWXePyK8BbU bx09VtWSRHPtr0miTF1OUiPkcGIfm6hOwWAoON9CXd7UnZkTjFkou0tfUFre0mls 0fma9jW0I2y5lRwXG+tyN5p9zDLL+uklDOwpd1SxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh1Q35H2Jd2rupCNJlT2JjXxbcPAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIzMTQyYmE3LTNlMTgtNGYwOC1iNzc3LWFhM2U0ZGVjZWM2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoW4wDQYJKoZIhvcNAQELBQADggEBAIeazkvoMqbAZE9c9ZkHmFNZTT/n wDXQyLeHo9qg3cfgoccaI6mD+FVbKeFcpmqmmJtbXgCXIOmVspPVWx+k5S0+3vXu mEQ2g9U+/C9yoKSDP4k9f0jrnvdQlfoTvzMphOF09oAVAfp8F0QYLlpbpafm7Bi7 egXDNPKbgR5e64pbykxUzFCmyKNWXoXYFosldIVfgKwz46vWmi7hAEHBNPsB7EK8 fcab4+qDEmUCg+tvKKvHpnFAgiExOSUkBoPDHR2N1mkkURuI2LCj+jnwgeTeMy1C dd14gugHxZWwyy8sy41MWB3JyFEVPkdUR2VmnGAadY56N5Gi/H34K+/V/xo= -----END CERTIFICATE-----Generated at Fri Oct 17 22:14:42 2025 by rpki-client