$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c4e43d1-e156-4a39-9018-3501e0d30caf.roa File: 2c4e43d1-e156-4a39-9018-3501e0d30caf.roa (raw, json) Hash identifier: z1bTMT9hv9iAm/zWl64v/z5amp9FnabYHhE4aYTsTRI= Subject key identifier: 1E:E2:C2:D4:39:14:44:B1:22:66:3E:95:F4:66:87:1E:94:AC:3B:04 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 582E9E223274D2BEA9BACAFD9C1CFBCD64CD4B64 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c4e43d1-e156-4a39-9018-3501e0d30caf.roa Signing time: Fri 26 Sep 2025 01:42:11 +0000 ROA not before: Fri 26 Sep 2025 01:42:11 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:2e:9e:22:32:74:d2:be:a9:ba:ca:fd:9c:1c:fb:cd:64:cd:4b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:42:11 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=7ed0f93a832a59eb81b045b0d7d8289206613b3620c896005e96239326f0d7f1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:1d:61:ed:73:f5:0e:ca:84:66:94:57:f7: 51:e3:a1:40:a7:aa:69:50:65:33:63:17:ae:93:7c: 36:ee:e9:07:fd:64:48:d9:3d:25:bb:83:d6:9f:2d: 33:75:df:a0:9c:8d:85:34:49:ff:bd:87:b4:60:f2: 55:21:cc:55:56:bf:d8:ea:f2:40:79:c1:ac:47:e8: 6e:f0:c0:59:8b:48:27:3f:1e:db:63:36:76:55:99: f0:4f:73:80:11:6d:e6:91:70:aa:cd:a7:61:11:65: 50:ae:98:b1:16:a8:7c:d3:76:70:33:c2:8b:38:75: 01:47:a5:ad:7e:fd:36:56:29:a8:9f:76:df:27:d8: b5:1b:2f:40:28:8f:48:6f:15:41:6c:7d:39:98:9b: 9e:51:e1:1e:3d:87:fb:da:50:91:0f:ed:b1:9d:7f: e7:a0:ae:01:ba:b7:ce:7e:a5:e1:33:c5:a0:58:e2: 6d:e1:bb:f6:26:1b:1e:8b:aa:f9:3b:34:f3:07:d8: d8:10:bd:61:13:eb:ed:d6:3a:38:36:3c:03:a3:8d: fb:bc:b3:52:59:1d:e3:46:d9:0f:a4:45:ba:72:a8: 2e:ea:4f:28:42:11:be:1b:b9:25:d5:0b:e1:15:4e: 4a:8f:4b:d1:5a:50:60:1b:36:10:f0:d1:22:12:95: 76:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E2:C2:D4:39:14:44:B1:22:66:3E:95:F4:66:87:1E:94:AC:3B:04 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c4e43d1-e156-4a39-9018-3501e0d30caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.248.0/21 Signature Algorithm: sha256WithRSAEncryption 75:e3:56:1a:10:65:fb:32:25:14:50:fe:e1:7f:c7:32:c3:84: a6:9f:2d:cf:9f:1a:73:da:f2:e0:ab:1a:cc:d1:c6:34:21:99: de:c1:7f:97:5a:da:a6:5a:6c:74:9a:5c:8b:4e:dc:c8:6e:99: b0:63:44:0f:91:a9:ec:c3:3d:35:d3:00:5a:be:89:a4:c5:12: b4:41:92:04:ef:ca:c6:85:df:c7:3f:70:d6:32:f1:30:1c:fd: 6f:e9:83:a2:5b:51:56:ef:9a:fe:cc:e5:9a:d3:25:d4:a0:59: 4a:e4:19:5f:f3:d3:fc:8d:1d:7f:f3:dc:ac:03:33:4e:90:46: 75:6a:84:98:eb:9f:f5:1d:29:f3:63:ce:a1:02:ce:de:43:53: dd:ef:0d:b6:10:58:e8:6f:f8:4d:cf:d4:8f:d2:13:24:64:7e: 4d:b0:a2:43:71:e3:89:2a:32:29:20:77:06:0a:ad:2b:38:b7: f2:7f:fe:93:09:31:9f:36:3d:01:60:0e:d2:1e:bd:04:36:b4: bd:03:55:26:5b:7e:62:1c:79:1d:fb:37:5b:0e:e6:ab:48:7b: 98:8b:06:21:03:80:6a:62:1b:7b:f0:0c:69:a8:aa:1e:58:81: d0:9a:32:90:ec:8a:f1:9f:bd:64:4e:a2:cd:45:1d:f4:42:62: af:03:4c:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWC6eIjJ00r6pusr9nBz7zWTNS2QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDE0MjExWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZWQwZjkzYTgzMmE1OWViODFiMDQ1YjBkN2Q4Mjg5MjA2 NjEzYjM2MjBjODk2MDA1ZTk2MjM5MzI2ZjBkN2YxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj9h1h7XP1DsqEZpRX91HjoUCnqmlQZTNjF66TfDbu6Qf9 ZEjZPSW7g9afLTN136CcjYU0Sf+9h7Rg8lUhzFVWv9jq8kB5waxH6G7wwFmLSCc/ HttjNnZVmfBPc4ARbeaRcKrNp2ERZVCumLEWqHzTdnAzwos4dQFHpa1+/TZWKaif dt8n2LUbL0Aoj0hvFUFsfTmYm55R4R49h/vaUJEP7bGdf+egrgG6t85+peEzxaBY 4m3hu/YmGx6Lqvk7NPMH2NgQvWET6+3WOjg2PAOjjfu8s1JZHeNG2Q+kRbpyqC7q TyhCEb4buSXVC+EVTkqPS9FaUGAbNhDw0SISlXYrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHuLC1DkURLEiZj6V9GaHHpSsOwQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjNGU0M2QxLWUxNTYtNGEzOS05MDE4LTM1MDFlMGQzMGNhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDr/gwDQYJKoZIhvcNAQELBQADggEBAHXjVhoQZfsyJRRQ/uF/xzLDhKaf Lc+fGnPa8uCrGszRxjQhmd7Bf5da2qZabHSaXItO3MhumbBjRA+RqezDPTXTAFq+ iaTFErRBkgTvysaF38c/cNYy8TAc/W/pg6JbUVbvmv7M5ZrTJdSgWUrkGV/z0/yN HX/z3KwDM06QRnVqhJjrn/UdKfNjzqECzt5DU93vDbYQWOhv+E3P1I/SEyRkfk2w okNx44kqMikgdwYKrSs4t/J//pMJMZ82PQFgDtIevQQ2tL0DVSZbfmIceR37N1sO 5qtIe5iLBiEDgGpiG3vwDGmoqh5YgdCaMpDsivGfvWROos1FHfRCYq8DTE8= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:44 2025 by rpki-client