$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2345b945-77f0-499c-8924-295f7745066a.roa File: 2345b945-77f0-499c-8924-295f7745066a.roa (raw, json) Hash identifier: hTGtwwc4tgPn10vNWZVghJzFPmwCtOsEGwY39e0XsG8= Subject key identifier: B9:19:4F:CD:84:7B:A6:AB:54:65:E8:89:6F:F3:08:53:96:99:BF:27 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D178178564C1829C7CC8BE111D46BE6526B74E4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2345b945-77f0-499c-8924-295f7745066a.roa Signing time: Thu 25 Sep 2025 18:31:53 +0000 ROA not before: Thu 25 Sep 2025 18:31:53 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:17:81:78:56:4c:18:29:c7:cc:8b:e1:11:d4:6b:e6:52:6b:74:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:31:53 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=a50a858ec404b8779b728f26f92401c6a74c674c544d1e4edb3c91f8fa968e11, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:25:ba:d7:27:d2:cc:65:25:dd:26:23:d5:1b: 8e:69:ce:61:06:80:19:f0:ef:bf:a1:7f:90:71:10: 97:fb:ad:b5:39:db:82:7b:3e:40:76:20:10:4c:9f: c4:91:9f:9b:51:8c:1f:11:73:b5:ee:16:41:cc:13: a0:76:e5:09:1e:c2:0a:e7:5f:72:99:6e:83:8c:58: 8f:19:dc:9e:58:9f:59:66:f0:d7:30:ab:fd:24:3f: 38:e6:37:d3:ca:82:91:81:ad:24:67:7e:a2:b7:56: 95:4c:8e:5c:74:51:71:56:5e:f6:5e:d3:f7:99:53: d2:d6:af:ba:3e:71:a6:85:27:b1:60:ed:33:ba:cb: 3c:5c:f4:ec:fa:8b:0a:16:46:0e:90:3c:f2:1e:c5: 90:54:ab:64:7b:3b:97:75:ba:2c:f8:42:5c:f1:7c: c3:f3:e6:99:4d:c4:11:f6:72:a2:a0:12:0e:c6:dd: 0d:cd:5c:e0:a5:b3:9c:74:f9:5f:da:f9:ce:37:e2: 9f:47:97:e4:2a:60:13:ef:d2:53:00:21:43:5d:4b: cb:d6:ef:12:20:9e:16:29:89:a3:78:a9:ad:f9:33: 07:a2:72:58:8d:77:32:34:74:c5:98:10:0d:a2:25: d8:87:95:43:79:5c:45:a6:6d:5b:ea:58:ec:c1:d4: 84:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:19:4F:CD:84:7B:A6:AB:54:65:E8:89:6F:F3:08:53:96:99:BF:27 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2345b945-77f0-499c-8924-295f7745066a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.12.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:05:07:9f:48:56:e0:d7:5d:58:42:b0:27:6d:e7:d5:9b:24: f6:9d:0b:e0:13:e7:d9:de:32:3a:d4:90:6c:38:5f:61:69:9c: 33:ca:59:5f:dd:9d:62:ba:d7:fd:b5:d7:e9:15:f5:33:d8:c9: be:15:00:65:85:84:92:ca:a1:1f:e6:41:d7:80:d4:dd:d9:fd: 43:c2:df:59:84:b2:10:8f:7b:c3:80:e6:dd:f2:fb:1f:c2:44: 6d:8e:39:48:79:ea:68:5a:2c:44:39:fa:bb:68:f6:17:2c:98: a0:fd:15:29:3d:1d:23:da:95:e9:f0:54:9b:e4:77:22:01:30: 0a:8c:41:49:5c:f5:30:94:11:21:69:62:29:f5:03:b7:9f:6b: 1c:7b:2b:15:7f:e6:e5:61:ac:b1:de:20:5b:ce:e3:02:45:b5: 9a:89:d2:50:17:a4:64:f4:77:c3:0e:98:1e:bb:0e:33:98:d7: 70:be:f4:5f:ff:c8:60:7e:39:56:7d:67:2b:95:11:97:ab:be: c5:ae:c7:14:49:c4:71:41:a4:df:85:b9:f2:a0:b3:6d:70:9f: 1f:02:5b:d1:6b:02:2f:72:6b:cc:b7:5e:72:57:cc:7c:90:74: 8e:90:34:e7:62:22:42:43:d9:5f:85:80:4d:69:48:e5:b5:ce: c6:3a:e9:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTReBeFZMGCnHzIvhEdRr5lJrdOQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgzMTUzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTBhODU4ZWM0MDRiODc3OWI3MjhmMjZmOTI0MDFjNmE3 NGM2NzRjNTQ0ZDFlNGVkYjNjOTFmOGZhOTY4ZTExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwJbrXJ9LMZSXdJiPVG45pzmEGgBnw77+hf5BxEJf7rbU5 24J7PkB2IBBMn8SRn5tRjB8Rc7XuFkHME6B25QkewgrnX3KZboOMWI8Z3J5Yn1lm 8Ncwq/0kPzjmN9PKgpGBrSRnfqK3VpVMjlx0UXFWXvZe0/eZU9LWr7o+caaFJ7Fg 7TO6yzxc9Oz6iwoWRg6QPPIexZBUq2R7O5d1uiz4QlzxfMPz5plNxBH2cqKgEg7G 3Q3NXOCls5x0+V/a+c434p9Hl+QqYBPv0lMAIUNdS8vW7xIgnhYpiaN4qa35Mwei cliNdzI0dMWYEA2iJdiHlUN5XEWmbVvqWOzB1IRlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuRlPzYR7pqtUZeiJb/MIU5aZvycwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIzNDViOTQ1LTc3ZjAtNDk5Yy04OTI0LTI5NWY3NzQ1MDY2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpgwwDQYJKoZIhvcNAQELBQADggEBADoFB59IVuDXXVhCsCdt59WbJPad C+AT59neMjrUkGw4X2FpnDPKWV/dnWK61/211+kV9TPYyb4VAGWFhJLKoR/mQdeA 1N3Z/UPC31mEshCPe8OA5t3y+x/CRG2OOUh56mhaLEQ5+rto9hcsmKD9FSk9HSPa lenwVJvkdyIBMAqMQUlc9TCUESFpYin1A7efaxx7KxV/5uVhrLHeIFvO4wJFtZqJ 0lAXpGT0d8MOmB67DjOY13C+9F//yGB+OVZ9ZyuVEZervsWuxxRJxHFBpN+FufKg s21wnx8CW9FrAi9ya8y3XnJXzHyQdI6QNOdiIkJD2V+FgE1pSOW1zsY66XA= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:18 2025 by rpki-client