$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/299765b9-8003-4f72-b585-c4e2e0e8bf16.roa File: 299765b9-8003-4f72-b585-c4e2e0e8bf16.roa (raw, json) Hash identifier: VmHorEsNb0Z0ub5F2P0feLJgGMNrU3mKtNDjNY3QBG4= Subject key identifier: 31:29:9D:F7:E9:22:97:77:86:5D:5C:51:24:02:EA:ED:F7:63:FB:8D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53B6FEAFECDB2090911944730AAD9963FF4CBCD9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/299765b9-8003-4f72-b585-c4e2e0e8bf16.roa Signing time: Thu 25 Sep 2025 21:45:02 +0000 ROA not before: Thu 25 Sep 2025 21:45:02 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.162.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b6:fe:af:ec:db:20:90:91:19:44:73:0a:ad:99:63:ff:4c:bc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 21:45:02 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=9ec534383938d095ea4c01ae20db88793c777512c58ae42a73d63a3a684b6caa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:c0:27:dc:c5:1e:7a:96:05:3d:c9:c0:9d: ab:fa:a8:3c:08:83:6b:ed:0f:3e:73:45:3a:07:33: a1:8a:07:13:03:d9:c8:9b:e2:60:69:36:b8:1e:fd: 80:a2:58:c7:a4:ec:29:d3:4f:54:ce:b8:e4:c5:a5: be:7c:84:b1:23:6e:d7:d3:05:ff:dc:1a:3a:8d:06: b4:d2:7a:94:09:9d:2e:67:2a:5f:0f:9a:eb:52:80: ab:47:8b:ad:05:5b:6a:12:00:ff:f0:55:dc:6a:a3: 67:65:fd:a0:0c:91:56:31:eb:60:20:bc:92:62:48: 80:ce:e7:78:b4:93:0f:be:6e:8d:8d:60:6d:06:1c: 9f:3b:fd:76:d1:a2:22:dc:78:4f:8a:04:de:09:c2: 3d:d7:82:68:fe:bc:4c:35:5e:91:ef:5b:d7:17:6f: 8a:c5:c0:92:f7:5e:eb:b5:75:08:8a:4d:67:e3:eb: 55:b8:19:9e:85:6c:97:7b:71:33:0c:b1:31:17:95: 0e:e8:ed:c1:e8:3e:78:5c:26:90:c4:85:6b:1d:68: ce:a5:e4:13:73:f6:40:b2:b8:68:91:37:b5:87:ef: 67:b2:8b:ce:05:6b:13:e1:c8:a0:9c:0d:4f:83:02: ca:db:d3:3f:9a:21:18:ae:0f:42:83:56:0a:a3:33: 09:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:29:9D:F7:E9:22:97:77:86:5D:5C:51:24:02:EA:ED:F7:63:FB:8D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/299765b9-8003-4f72-b585-c4e2e0e8bf16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.162.20.0/23 Signature Algorithm: sha256WithRSAEncryption 18:be:b7:a1:43:ac:41:be:a2:8b:25:3a:04:a0:0a:83:8f:68: ba:df:69:bd:30:7f:e6:fc:cb:30:e4:7f:30:ba:8f:73:98:10: 01:d2:71:6c:ff:c1:6f:f0:df:61:1a:b7:1f:c1:de:4a:1f:52: 01:34:41:65:41:6a:c1:81:67:ca:b4:4c:98:31:6f:93:50:9f: 8e:7e:a2:de:05:84:ab:87:6f:57:4f:e2:cb:65:55:f8:95:ae: 24:33:76:c6:75:77:fb:d1:78:ef:59:c1:59:8f:ba:64:96:36: 4c:44:7f:b8:46:25:2a:22:56:5b:7e:7f:17:e8:7d:ac:d4:54: e5:ad:3f:e0:04:db:c6:d6:1a:90:28:c7:73:51:a1:3d:c9:1c: c0:bd:25:af:1c:f3:57:c7:37:e7:1b:db:0c:be:45:03:41:a9: 36:d2:b1:b7:e7:48:9d:c2:f7:6c:07:32:02:98:fa:15:70:85: 77:d9:ca:11:d5:64:d2:db:59:06:cc:3e:26:cf:29:08:d2:5b: 47:cc:ac:71:e9:dd:5e:84:79:1c:f9:f2:52:1e:94:6f:64:af: 14:04:8f:32:78:2f:a0:04:5d:36:df:d5:4c:38:19:ac:1e:56: c6:62:d3:81:c9:bd:37:42:3c:4e:8c:7e:ec:15:d1:0b:53:06: 68:e6:dd:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU7b+r+zbIJCRGURzCq2ZY/9MvNkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjE0NTAyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZWM1MzQzODM5MzhkMDk1ZWE0YzAxYWUyMGRiODg3OTNj Nzc3NTEyYzU4YWU0MmE3M2Q2M2EzYTY4NGI2Y2FhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuJMAn3MUeepYFPcnAnav6qDwIg2vtDz5zRToHM6GKBxMD 2cib4mBpNrge/YCiWMek7CnTT1TOuOTFpb58hLEjbtfTBf/cGjqNBrTSepQJnS5n Kl8PmutSgKtHi60FW2oSAP/wVdxqo2dl/aAMkVYx62AgvJJiSIDO53i0kw++bo2N YG0GHJ87/XbRoiLceE+KBN4Jwj3Xgmj+vEw1XpHvW9cXb4rFwJL3Xuu1dQiKTWfj 61W4GZ6FbJd7cTMMsTEXlQ7o7cHoPnhcJpDEhWsdaM6l5BNz9kCyuGiRN7WH72ey i84FaxPhyKCcDU+DAsrb0z+aIRiuD0KDVgqjMwm5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMSmd9+kil3eGXVxRJALq7fdj+40wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI5OTc2NWI5LTgwMDMtNGY3Mi1iNTg1LWM0ZTJlMGU4YmYxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDohQwDQYJKoZIhvcNAQELBQADggEBABi+t6FDrEG+ooslOgSgCoOPaLrf ab0wf+b8yzDkfzC6j3OYEAHScWz/wW/w32Eatx/B3kofUgE0QWVBasGBZ8q0TJgx b5NQn45+ot4FhKuHb1dP4stlVfiVriQzdsZ1d/vReO9ZwVmPumSWNkxEf7hGJSoi Vlt+fxfofazUVOWtP+AE28bWGpAox3NRoT3JHMC9Ja8c81fHN+cb2wy+RQNBqTbS sbfnSJ3C92wHMgKY+hVwhXfZyhHVZNLbWQbMPibPKQjSW0fMrHHp3V6EeRz58lIe lG9krxQEjzJ4L6AEXTbf1Uw4GaweVsZi04HJvTdCPE6MfuwV0QtTBmjm3YQ= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:17 2025 by rpki-client