$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/295a6c31-7de8-495a-aa3f-e0c714d37550.roa File: 295a6c31-7de8-495a-aa3f-e0c714d37550.roa (raw, json) Hash identifier: 7mLJG8vJ7O5HvFsevQiObnK8OteqHOCKy4lDmUPdODo= Subject key identifier: 85:70:C6:03:66:29:33:FE:B8:FA:E0:9E:CF:D0:54:71:42:C1:AA:1E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 040F06054A1DB73DC356A7B219FDEFB3786ACE5F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/295a6c31-7de8-495a-aa3f-e0c714d37550.roa Signing time: Thu 25 Sep 2025 23:57:40 +0000 ROA not before: Thu 25 Sep 2025 23:57:40 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0f:06:05:4a:1d:b7:3d:c3:56:a7:b2:19:fd:ef:b3:78:6a:ce:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:57:40 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=d10b185dde4121904b960e15227e1da2cb9d84fc4d8c0c1cf0284a6504c0278b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:15:c5:fb:cd:20:9e:33:4b:0f:62:c4:d2:88: ac:fa:b6:3a:1c:bc:6d:45:8a:a3:1c:c5:92:3a:4e: c9:5f:e3:bc:23:4e:36:f3:bb:9f:b6:69:fb:3a:29: 92:cd:b5:0a:3c:40:54:fb:f9:29:8c:da:a0:9c:59: ce:e7:82:c4:51:d7:0e:e6:9c:24:5f:0f:86:fd:ee: 89:43:dd:ab:91:9d:c5:e8:c4:68:c9:58:bf:2b:94: 0a:0e:11:79:fe:32:2b:52:80:32:2f:bb:dd:1a:e0: da:e4:61:5a:a4:bc:57:51:a5:dc:da:6b:8d:0a:e3: f8:d9:f3:73:83:c4:4a:93:e6:53:b0:60:1a:c9:9f: 6e:1f:22:5b:28:34:49:29:53:ec:28:25:8d:c6:75: de:d4:2b:67:f1:e2:25:ad:70:2a:9a:8c:b5:6b:3d: 18:bd:af:b9:ad:fe:0a:21:d8:14:a0:15:e1:e0:65: f4:25:f6:52:df:4d:17:db:8b:c7:3f:75:dc:98:8e: 79:0f:58:1a:73:ce:90:6b:fc:82:fd:42:76:15:97: aa:81:8e:23:34:8a:9a:65:75:0e:4e:74:c3:20:ad: 61:2f:a1:8b:d9:97:92:c6:87:72:f3:72:d7:dd:70: 7b:6e:a8:89:a8:14:28:b0:f7:25:81:03:c9:e5:04: b4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:70:C6:03:66:29:33:FE:B8:FA:E0:9E:CF:D0:54:71:42:C1:AA:1E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/295a6c31-7de8-495a-aa3f-e0c714d37550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.184.0/22 Signature Algorithm: sha256WithRSAEncryption 98:96:f0:23:7c:37:c8:e2:fb:15:f4:18:b2:0e:de:97:a0:39: 79:79:78:78:91:d9:61:3f:5e:28:e8:10:73:33:86:33:b8:10: 38:c9:63:08:04:90:36:22:47:2b:d6:43:e1:e1:86:e0:0e:f8: 66:fc:cc:65:19:bd:67:3a:5f:d5:29:bc:ef:ce:da:3e:bc:1b: bb:39:fc:9b:cc:ee:ef:37:91:80:c6:b2:7a:f6:b1:8f:0c:b8: 72:e3:dd:d2:99:9c:a9:96:36:d9:89:b1:6a:83:20:78:12:f0: 84:16:71:00:a2:1a:2c:1c:45:53:eb:35:c9:2a:9b:cb:60:6f: 1f:3b:a4:0c:9f:53:be:b4:f1:f4:cd:ee:55:98:4a:14:29:55: 77:7f:1f:0d:5c:7c:37:dd:f3:f0:e2:18:3f:82:32:4b:c2:0d: 2e:ca:0d:39:85:01:05:c4:4b:b7:e4:7c:f2:91:c8:57:bf:d4: 52:5d:7d:f4:9b:a4:f9:ea:64:4d:d9:d8:66:71:2d:34:6a:cc: b2:cf:e0:f5:24:4f:0a:03:31:42:68:31:b0:8d:36:06:6e:2b: 98:fd:72:6c:c4:2a:4a:30:1c:10:95:c6:2a:6d:0e:e8:6f:e2: 91:5e:c1:ac:e0:1b:d2:f3:b5:5d:8f:6e:58:6c:5e:0f:92:ad: 08:83:89:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBA8GBUodtz3DVqeyGf3vs3hqzl8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjM1NzQwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTBiMTg1ZGRlNDEyMTkwNGI5NjBlMTUyMjdlMWRhMmNi OWQ4NGZjNGQ4YzBjMWNmMDI4NGE2NTA0YzAyNzhiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsFcX7zSCeM0sPYsTSiKz6tjocvG1FiqMcxZI6Tslf47wj Tjbzu5+2afs6KZLNtQo8QFT7+SmM2qCcWc7ngsRR1w7mnCRfD4b97olD3auRncXo xGjJWL8rlAoOEXn+MitSgDIvu90a4NrkYVqkvFdRpdzaa40K4/jZ83ODxEqT5lOw YBrJn24fIlsoNEkpU+woJY3Gdd7UK2fx4iWtcCqajLVrPRi9r7mt/goh2BSgFeHg ZfQl9lLfTRfbi8c/ddyYjnkPWBpzzpBr/IL9QnYVl6qBjiM0ippldQ5OdMMgrWEv oYvZl5LGh3LzctfdcHtuqImoFCiw9yWBA8nlBLTPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhXDGA2YpM/64+uCez9BUcULBqh4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI5NWE2YzMxLTdkZTgtNDk1YS1hYTNmLWUwYzcxNGQzNzU1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDobgwDQYJKoZIhvcNAQELBQADggEBAJiW8CN8N8ji+xX0GLIO3pegOXl5 eHiR2WE/XijoEHMzhjO4EDjJYwgEkDYiRyvWQ+HhhuAO+Gb8zGUZvWc6X9UpvO/O 2j68G7s5/JvM7u83kYDGsnr2sY8MuHLj3dKZnKmWNtmJsWqDIHgS8IQWcQCiGiwc RVPrNckqm8tgbx87pAyfU7608fTN7lWYShQpVXd/Hw1cfDfd8/DiGD+CMkvCDS7K DTmFAQXES7fkfPKRyFe/1FJdffSbpPnqZE3Z2GZxLTRqzLLP4PUkTwoDMUJoMbCN NgZuK5j9cmzEKkowHBCVxiptDuhv4pFewazgG9LztV2PblhsXg+SrQiDif0= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:24 2025 by rpki-client