$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d9777dc-ce21-4e10-b20a-355b46d763f2.roa File: 2d9777dc-ce21-4e10-b20a-355b46d763f2.roa (raw, json) Hash identifier: QC8riv+qEjgQ31BDGx1iB3nT6TyF3MVHTWxOYl40FMY= Subject key identifier: 12:24:C4:44:2C:08:6B:DF:A8:56:71:62:71:21:C0:13:58:49:C1:6E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1651B79EE78CDFD7B4184DEBA53C0323DA2107A5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d9777dc-ce21-4e10-b20a-355b46d763f2.roa Signing time: Sat 27 Sep 2025 00:52:22 +0000 ROA not before: Sat 27 Sep 2025 00:52:22 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.102.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:51:b7:9e:e7:8c:df:d7:b4:18:4d:eb:a5:3c:03:23:da:21:07:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 27 00:52:22 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=fa2b2342a9cd04ae407b4d9a5a0b039278d2d348514eb201b3817e55390387a4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:c5:e8:4a:31:2f:4d:73:23:a2:94:89:f4: a3:8d:69:e5:9a:bd:f7:66:66:fd:13:37:63:ee:8a: 11:d9:ea:48:3d:10:be:5a:b5:1e:31:98:be:42:66: 68:7f:d5:cb:e8:41:04:ad:d7:a5:3f:ed:1d:0e:ee: 42:27:d8:80:47:6d:64:4c:9d:50:f2:cb:18:5b:2b: 19:57:e1:a2:13:d8:fd:20:1d:2f:84:fd:3f:21:f9: 3a:71:5a:b9:fb:02:e1:82:07:32:d2:28:9d:31:58: 98:e8:6a:94:5a:80:b5:d3:69:c6:dd:f8:4a:db:10: 9b:4c:3c:c0:32:d4:1d:3a:b6:3c:5f:bf:28:d6:1c: 2e:09:dd:53:c1:bf:ff:ff:f6:a4:3a:d0:d6:ef:47: e6:12:a6:f6:54:36:8e:b9:bd:b3:31:c8:09:82:98: e2:4f:82:fc:ce:9c:92:7a:ac:b0:f2:6f:1c:8e:6b: 55:08:7f:2b:d6:fb:4f:c1:90:0a:10:2a:85:ac:c3: 3d:d6:41:60:5c:dc:cd:24:47:91:b7:c1:29:d2:0e: 88:a7:64:ba:fc:04:5f:5f:9e:de:4c:17:d8:d6:3b: 26:c5:c2:ec:ca:81:9e:ad:98:1e:89:2a:d8:db:45: f6:8b:ad:2b:40:4d:f1:0b:1e:dc:e4:56:7d:41:9a: d3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:24:C4:44:2C:08:6B:DF:A8:56:71:62:71:21:C0:13:58:49:C1:6E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d9777dc-ce21-4e10-b20a-355b46d763f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.102.49.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:a8:ed:cb:4c:b3:cb:d0:85:bb:5c:90:10:65:15:45:11:fb: 86:f4:7f:42:be:7c:0b:f8:ba:ef:4e:91:9a:c4:20:8b:59:e0: 93:87:b4:67:62:e4:bc:72:87:f9:63:3d:86:58:be:98:11:3e: 58:c7:da:da:88:4a:2b:a6:bc:f9:39:cc:48:14:3b:a1:ec:df: 31:d6:c2:82:5d:f2:48:90:8f:f5:55:2f:fe:a4:fc:92:5f:e6: 87:40:13:b5:54:9f:e3:13:ce:8b:7f:9a:75:1c:90:ed:3e:3d: 17:61:b3:21:5c:96:da:89:7a:a3:99:8c:49:7f:18:90:78:a6: 90:80:09:d2:d7:6d:d1:27:68:f1:ee:ab:1e:21:13:3b:39:42: 35:3e:2e:55:fa:0f:d7:0b:38:92:05:ee:b1:39:34:7c:dd:ea: fb:59:cf:83:ff:c9:2d:f6:c5:94:f9:97:1d:4b:d3:2f:5f:6e: a6:60:dd:fb:80:cc:f5:06:a6:14:54:bc:89:bc:89:17:70:a7: 39:99:02:8c:d1:92:fa:f7:9a:2a:e6:26:f7:2e:02:72:af:7c: 8a:e3:a3:78:7a:06:8f:18:19:15:e5:da:a5:26:f5:95:32:6c: 8d:b9:60:3a:02:c6:a3:66:88:10:98:b7:10:52:d9:6f:9c:32: f0:f9:df:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFlG3nueM39e0GE3rpTwDI9ohB6UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI3MDA1MjIyWhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTJiMjM0MmE5Y2QwNGFlNDA3YjRkOWE1YTBiMDM5Mjc4 ZDJkMzQ4NTE0ZWIyMDFiMzgxN2U1NTM5MDM4N2E0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn58XoSjEvTXMjopSJ9KONaeWavfdmZv0TN2PuihHZ6kg9 EL5atR4xmL5CZmh/1cvoQQSt16U/7R0O7kIn2IBHbWRMnVDyyxhbKxlX4aIT2P0g HS+E/T8h+TpxWrn7AuGCBzLSKJ0xWJjoapRagLXTacbd+ErbEJtMPMAy1B06tjxf vyjWHC4J3VPBv///9qQ60NbvR+YSpvZUNo65vbMxyAmCmOJPgvzOnJJ6rLDybxyO a1UIfyvW+0/BkAoQKoWswz3WQWBc3M0kR5G3wSnSDoinZLr8BF9fnt5MF9jWOybF wuzKgZ6tmB6JKtjbRfaLrStATfELHtzkVn1BmtNHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEiTERCwIa9+oVnFicSHAE1hJwW4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkOTc3N2RjLWNlMjEtNGUxMC1iMjBhLTM1NWI0NmQ3NjNmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADZjEwDQYJKoZIhvcNAQELBQADggEBAC6o7ctMs8vQhbtckBBlFUUR+4b0 f0K+fAv4uu9OkZrEIItZ4JOHtGdi5Lxyh/ljPYZYvpgRPljH2tqISiumvPk5zEgU O6Hs3zHWwoJd8kiQj/VVL/6k/JJf5odAE7VUn+MTzot/mnUckO0+PRdhsyFcltqJ eqOZjEl/GJB4ppCACdLXbdEnaPHuqx4hEzs5QjU+LlX6D9cLOJIF7rE5NHzd6vtZ z4P/yS32xZT5lx1L0y9fbqZg3fuAzPUGphRUvIm8iRdwpzmZAozRkvr3mirmJvcu AnKvfIrjo3h6Bo8YGRXl2qUm9ZUybI25YDoCxqNmiBCYtxBS2W+cMvD53+I= -----END CERTIFICATE-----Generated at Sat Oct 18 00:14:45 2025 by rpki-client