$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e456283-6735-4ef0-b763-763ccac765dc.roa File: 2e456283-6735-4ef0-b763-763ccac765dc.roa (raw, json) Hash identifier: 65njrlN07sFyo3wGMtfiHaUouasAs0qB6Cu9A7WnN6Q= Subject key identifier: 6F:B1:9C:1E:59:FC:51:DB:3D:A5:45:DF:DB:D1:BF:18:82:77:D2:0E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C102D64130644982BF51AEEC61D2D7247FF2AB4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e456283-6735-4ef0-b763-763ccac765dc.roa Signing time: Thu 25 Sep 2025 17:24:27 +0000 ROA not before: Thu 25 Sep 2025 17:24:27 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.162.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:10:2d:64:13:06:44:98:2b:f5:1a:ee:c6:1d:2d:72:47:ff:2a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:24:27 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=4c7487f945993cdaea013de3729810e0503a96df79212cb658adfef66f1f8cbe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:83:44:23:c1:8e:89:fe:12:c7:75:f4:1a:6d: 5a:da:2f:69:f4:12:b4:3a:a2:8e:f7:3e:17:ea:87: 58:57:c3:41:df:08:b8:82:7a:d7:16:0c:da:35:8d: 0a:3a:c8:66:2f:64:21:64:75:d3:99:b3:3d:00:b9: bb:4a:fd:23:87:7f:33:a0:c8:ca:42:9e:ab:7f:8e: 8d:76:5c:fe:e6:48:b4:18:3d:11:18:dd:97:fe:0c: 7a:4a:d3:fe:e2:6e:a3:28:23:ac:03:c2:66:08:49: 69:a9:e8:73:89:c8:8f:21:9d:16:8e:1e:46:03:77: 1d:27:85:c7:a1:87:75:16:8b:37:f1:04:b9:af:ab: e9:f2:d2:2e:f6:92:a6:3a:85:ac:57:d2:46:9f:45: 29:f2:47:64:a9:94:86:fd:a3:5d:d8:e1:e9:71:34: c1:c3:cd:a7:f0:ed:ae:b3:3b:b0:e3:86:d3:72:ac: 65:07:32:c8:45:5d:a1:4f:11:15:a8:18:0e:57:65: 18:5b:dc:31:0d:a2:2a:0a:90:f3:49:0c:6c:62:bc: 29:f3:6a:85:52:f4:be:7d:5c:17:fd:25:07:7f:b0: 64:fa:12:96:50:13:0c:7c:96:60:36:4a:95:44:c8: 9c:cf:80:ac:95:46:d5:4c:90:59:10:0f:e8:56:a9: 9a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B1:9C:1E:59:FC:51:DB:3D:A5:45:DF:DB:D1:BF:18:82:77:D2:0E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e456283-6735-4ef0-b763-763ccac765dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.162.226.0/24 Signature Algorithm: sha256WithRSAEncryption 49:fc:1a:f9:d4:3c:c4:94:94:36:46:75:43:45:25:21:89:b8: 6e:f5:39:80:ed:cc:3f:80:10:ac:71:25:ec:4a:1a:8c:cd:5a: 38:2c:38:11:95:93:24:98:e2:8a:a6:4d:9f:1e:5a:d2:0e:34: 22:7c:de:0b:ba:20:bf:95:1e:d8:0e:45:95:98:c0:fd:00:fc: fb:6c:cd:ed:dc:d1:02:63:5b:e9:0f:98:50:a1:2c:37:de:fb: 2d:6f:ca:18:b2:3e:b6:5e:53:9a:5e:3b:3e:d1:9d:e1:d9:e3: 5e:7a:c8:0a:2f:89:8a:76:9b:2e:66:81:14:87:a7:87:19:16: f2:80:20:c4:22:c3:5f:ae:d6:8f:10:b6:98:8a:27:30:e0:89: 83:e8:d5:15:c3:d3:26:b2:65:29:ab:94:60:b6:1a:07:75:d6: e5:ee:cf:be:e1:48:c8:e3:c4:16:7e:14:e6:b5:bd:a6:8e:95: c8:b0:ba:59:1a:3b:ed:08:e8:cd:7d:96:ab:78:5e:e2:d9:3e: 27:bf:a2:bf:45:2f:50:f0:8c:40:c7:a4:87:02:92:71:82:7c: f7:4e:b7:3d:03:15:5b:0f:7a:61:14:9b:1e:e5:e8:b8:59:ea: c5:40:08:27:45:41:d0:7b:9a:61:8a:46:8e:7d:63:4c:f2:ef: 6d:aa:4e:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbBAtZBMGRJgr9Rruxh0tckf/KrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTcyNDI3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Yzc0ODdmOTQ1OTkzY2RhZWEwMTNkZTM3Mjk4MTBlMDUw M2E5NmRmNzkyMTJjYjY1OGFkZmVmNjZmMWY4Y2JlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkg0QjwY6J/hLHdfQabVraL2n0ErQ6oo73Phfqh1hXw0Hf CLiCetcWDNo1jQo6yGYvZCFkddOZsz0AubtK/SOHfzOgyMpCnqt/jo12XP7mSLQY PREY3Zf+DHpK0/7ibqMoI6wDwmYISWmp6HOJyI8hnRaOHkYDdx0nhcehh3UWizfx BLmvq+ny0i72kqY6haxX0kafRSnyR2SplIb9o13Y4elxNMHDzafw7a6zO7DjhtNy rGUHMshFXaFPERWoGA5XZRhb3DENoioKkPNJDGxivCnzaoVS9L59XBf9JQd/sGT6 EpZQEwx8lmA2SpVEyJzPgKyVRtVMkFkQD+hWqZr5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb7GcHln8Uds9pUXf29G/GIJ30g4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJlNDU2MjgzLTY3MzUtNGVmMC1iNzYzLTc2M2NjYWM3NjVkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADouIwDQYJKoZIhvcNAQELBQADggEBAEn8GvnUPMSUlDZGdUNFJSGJuG71 OYDtzD+AEKxxJexKGozNWjgsOBGVkySY4oqmTZ8eWtIONCJ83gu6IL+VHtgORZWY wP0A/Ptsze3c0QJjW+kPmFChLDfe+y1vyhiyPrZeU5peOz7RneHZ4156yAoviYp2 my5mgRSHp4cZFvKAIMQiw1+u1o8QtpiKJzDgiYPo1RXD0yayZSmrlGC2Ggd11uXu z77hSMjjxBZ+FOa1vaaOlciwulkaO+0I6M19lqt4XuLZPie/or9FL1DwjEDHpIcC knGCfPdOtz0DFVsPemEUmx7l6LhZ6sVACCdFQdB7mmGKRo59Y0zy722qTps= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:45 2025 by rpki-client