$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ca24f77-be6e-4904-b5ae-0837f586cdae.roa File: 2ca24f77-be6e-4904-b5ae-0837f586cdae.roa (raw, json) Hash identifier: 493p91Jei9SGLNw5r/yTWKOInJ8JC+WAJ6ZIXiLgsw8= Subject key identifier: 55:83:1D:AF:6F:56:C2:8E:B4:D6:E2:BD:A1:75:86:51:DD:96:B7:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1638D54B7EA51F0EF8DC84BDD52E1A0C998332D4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ca24f77-be6e-4904-b5ae-0837f586cdae.roa Signing time: Fri 26 Sep 2025 01:02:14 +0000 ROA not before: Fri 26 Sep 2025 01:02:14 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:38:d5:4b:7e:a5:1f:0e:f8:dc:84:bd:d5:2e:1a:0c:99:83:32:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:02:14 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=5e68ec5bcefbdd4b927f2348b3444f78add9a0f1a7c51d8f8061187b98e95c6d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:11:42:79:33:4d:a2:ba:32:71:87:30:6e:1f: 41:5e:99:81:f4:f2:2a:9e:34:fc:2c:fc:67:f1:43: b2:6d:27:ec:7a:cf:56:fa:bc:57:ce:ce:88:7b:c8: 15:14:d1:29:60:7b:2e:46:17:c2:a4:f7:e8:08:2d: ef:13:92:35:9c:22:60:aa:9c:26:19:07:9b:0c:0c: 91:a2:a5:fc:26:0b:23:99:ab:27:14:33:d0:02:0e: 8b:c8:8a:7f:7c:cb:cf:02:69:bc:8f:5c:e5:91:92: 60:ba:f1:3b:cc:c2:18:8b:1b:ec:fc:ab:e7:fe:fa: 9e:31:c7:cb:7f:db:bc:c1:23:c3:7e:e6:2a:41:a5: 41:67:2d:7a:65:48:80:11:b9:e8:4f:2e:a7:29:e8: ab:04:36:0e:27:93:d7:52:07:17:3f:c8:96:fe:87: 88:bf:8a:b5:76:71:99:dc:b8:e0:9a:8e:7c:d2:4d: 75:d5:12:7a:14:38:34:8f:a9:f8:fc:f2:80:fb:db: 42:5f:05:1c:96:ea:1e:47:09:49:5d:90:b9:c7:08: 4f:c8:af:6c:37:f0:50:c7:50:21:8a:5e:4a:c6:40: 12:e1:7d:c1:86:b7:e9:e8:b4:23:8c:3e:a1:8d:d3: 38:fc:c5:63:bd:19:ea:6e:21:75:b5:90:49:06:a6: 19:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:83:1D:AF:6F:56:C2:8E:B4:D6:E2:BD:A1:75:86:51:DD:96:B7:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ca24f77-be6e-4904-b5ae-0837f586cdae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.208.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:68:90:e8:d2:dc:c6:f3:8d:81:a2:c9:c8:9a:e3:98:d0:f5: a1:04:f5:03:4c:02:46:a0:66:0a:4e:39:7c:c0:e2:31:1e:00: 56:86:a9:31:3d:df:b0:f8:79:3b:5c:f0:4b:48:51:70:95:4c: 45:82:a5:8d:37:21:d7:14:1e:83:61:a8:07:e8:c4:95:2e:50: 00:4f:80:8f:d5:0e:a5:6e:c5:da:a1:95:f3:67:b2:36:f9:fa: ab:4f:7a:e6:df:0c:36:bf:4b:17:b9:2c:2d:70:ab:60:f0:4b: 7e:2a:0d:ea:b6:5b:22:4c:68:1d:fd:c0:9a:a0:54:74:07:c8: db:bf:a9:82:d2:13:97:a6:6f:6a:9f:54:0c:18:32:8b:64:d8: 85:6d:0c:a4:dd:ea:18:aa:15:b3:ee:c3:7a:cc:98:07:05:7d: e8:39:b8:7b:48:fb:55:cf:be:0b:59:5f:39:2a:23:a9:14:7d: 2a:8b:29:79:83:43:e2:83:2f:53:10:39:d8:3d:96:08:e2:7c: f7:44:e8:aa:c1:6c:a0:73:e8:04:61:0a:58:86:fb:82:ff:12: be:7b:4f:47:e7:3a:71:30:ef:70:7e:da:ad:ed:11:99:b8:2e: 77:99:ee:c1:60:69:b2:9b:29:f3:62:6e:77:39:ef:cc:ca:1c: 2f:58:06:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFjjVS36lHw743IS91S4aDJmDMtQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEwMjE0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTY4ZWM1YmNlZmJkZDRiOTI3ZjIzNDhiMzQ0NGY3OGFk ZDlhMGYxYTdjNTFkOGY4MDYxMTg3Yjk4ZTk1YzZkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeEUJ5M02iujJxhzBuH0FemYH08iqeNPws/GfxQ7JtJ+x6 z1b6vFfOzoh7yBUU0Slgey5GF8Kk9+gILe8TkjWcImCqnCYZB5sMDJGipfwmCyOZ qycUM9ACDovIin98y88CabyPXOWRkmC68TvMwhiLG+z8q+f++p4xx8t/27zBI8N+ 5ipBpUFnLXplSIARuehPLqcp6KsENg4nk9dSBxc/yJb+h4i/irV2cZncuOCajnzS TXXVEnoUODSPqfj88oD720JfBRyW6h5HCUldkLnHCE/Ir2w38FDHUCGKXkrGQBLh fcGGt+notCOMPqGN0zj8xWO9GepuIXW1kEkGphkrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVYMdr29Wwo601uK9oXWGUd2Wt48wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjYTI0Zjc3LWJlNmUtNDkwNC1iNWFlLTA4MzdmNTg2Y2RhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDr9AwDQYJKoZIhvcNAQELBQADggEBAI5okOjS3MbzjYGiycia45jQ9aEE 9QNMAkagZgpOOXzA4jEeAFaGqTE937D4eTtc8EtIUXCVTEWCpY03IdcUHoNhqAfo xJUuUABPgI/VDqVuxdqhlfNnsjb5+qtPeubfDDa/Sxe5LC1wq2DwS34qDeq2WyJM aB39wJqgVHQHyNu/qYLSE5emb2qfVAwYMotk2IVtDKTd6hiqFbPuw3rMmAcFfeg5 uHtI+1XPvgtZXzkqI6kUfSqLKXmDQ+KDL1MQOdg9lgjifPdE6KrBbKBz6ARhCliG +4L/Er57T0fnOnEw73B+2q3tEZm4LneZ7sFgabKbKfNibnc578zKHC9YBkc= -----END CERTIFICATE-----Generated at Fri Oct 17 22:15:33 2025 by rpki-client