$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fb5eee7-b3c4-4c7c-9f80-4a7cc6ce2255.roa File: 2fb5eee7-b3c4-4c7c-9f80-4a7cc6ce2255.roa (raw, json) Hash identifier: jwCPxOcQVsjh2ik94iLkUX3fW2kA1OlIh+VMW4GVxP0= Subject key identifier: 3A:87:B6:70:A7:6E:89:81:94:5D:DB:50:32:2F:CE:DB:38:C9:2A:3B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 305F286149F2DC21F89F37D9A7943217CE3B7609 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fb5eee7-b3c4-4c7c-9f80-4a7cc6ce2255.roa Signing time: Thu 25 Sep 2025 20:14:52 +0000 ROA not before: Thu 25 Sep 2025 20:14:52 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5f:28:61:49:f2:dc:21:f8:9f:37:d9:a7:94:32:17:ce:3b:76:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:14:52 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c9dce0cbd5ffb1ac43ea0e6478b22cc089628870614d46a38e906410e0f37c3b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:09:7a:af:cd:82:e2:7a:5a:cb:52:0b:42: 4d:0e:b2:b3:6f:e4:d8:23:81:f2:22:cf:40:bf:1f: bd:fc:3b:64:be:47:01:eb:a7:1a:cc:27:05:27:eb: c1:f3:72:2a:ea:04:17:aa:eb:9e:06:fb:84:e8:4e: 67:1e:4b:bd:a8:1f:b5:b5:c6:9d:57:f2:51:8c:b6: 4c:ac:0c:fd:9b:87:d1:c5:e3:1b:54:52:04:60:df: 39:95:15:45:1f:f4:1e:a2:54:3d:7a:a4:12:8e:0c: 8b:e3:96:3e:ab:f3:84:02:c4:66:82:58:7c:a5:11: 78:8b:e6:33:74:20:14:e9:c4:44:49:b3:00:2d:ce: 92:8b:94:6e:9d:e0:6d:bf:b8:e8:7e:8e:83:aa:c7: 00:37:36:55:fa:a6:8f:92:c0:1d:ad:c7:2b:b0:ec: dd:d1:99:01:e8:71:2b:48:dc:ce:5f:0a:be:eb:d0: 67:bf:9a:41:38:86:77:62:6e:32:5f:6f:5c:5c:77: 7e:58:ee:22:cb:77:8b:a9:61:a4:b8:d2:73:38:dc: c0:2e:00:78:c5:f5:bd:02:7c:3d:c3:18:0d:0e:d3: 58:87:e4:41:c9:a1:92:98:08:56:59:88:4a:64:d0: b0:71:2e:43:92:cb:9a:ee:41:e6:04:bf:15:e5:51: 9e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:87:B6:70:A7:6E:89:81:94:5D:DB:50:32:2F:CE:DB:38:C9:2A:3B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fb5eee7-b3c4-4c7c-9f80-4a7cc6ce2255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.25.0/24 Signature Algorithm: sha256WithRSAEncryption 32:d9:50:e1:57:cf:f9:c1:63:6e:d9:34:71:9a:86:cc:72:25: 9a:35:8a:90:dd:d8:87:fb:a2:9a:bf:a9:c1:f7:02:f5:39:41: ce:c8:4d:ca:3b:fa:5a:50:47:c5:74:1e:e0:a3:24:f4:92:40: 2d:90:06:da:4a:c2:3c:b7:cd:69:3c:3c:2a:a8:74:6c:2b:61: 67:eb:f2:64:76:21:d8:68:23:55:16:e2:61:99:dd:35:be:c6: d3:cc:af:c3:34:8d:35:e7:2b:65:0a:f0:f5:c3:48:28:d2:b6: 6b:c4:ac:5a:d7:dd:68:ea:0f:e4:34:b7:7a:e4:2a:75:c2:ba: 93:4a:87:18:09:14:89:4b:a4:8e:8c:58:3e:0f:bf:7c:b4:12: e6:b3:24:76:66:56:58:23:42:70:20:1f:7f:06:9b:06:87:a8: 1e:33:c1:14:33:3e:5e:7b:8d:32:a9:5f:e6:4b:27:db:0f:fa: 09:19:2b:53:bc:4e:eb:e6:13:dd:25:1e:b9:a1:19:09:ca:59: 66:94:dc:98:da:6b:92:86:7a:11:1a:19:02:58:9b:4d:87:57: 4f:d0:5c:46:fe:ee:82:e8:51:05:34:a3:a3:97:d0:03:ff:bb: ad:87:46:95:2e:12:db:a1:9d:1f:de:16:ef:de:f1:1b:15:87: e1:12:5e:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMF8oYUny3CH4nzfZp5QyF847dgkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjAxNDUyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWRjZTBjYmQ1ZmZiMWFjNDNlYTBlNjQ3OGIyMmNjMDg5 NjI4ODcwNjE0ZDQ2YTM4ZTkwNjQxMGUwZjM3YzNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIBgl6r82C4npay1ILQk0OsrNv5NgjgfIiz0C/H738O2S+ RwHrpxrMJwUn68HzcirqBBeq654G+4ToTmceS72oH7W1xp1X8lGMtkysDP2bh9HF 4xtUUgRg3zmVFUUf9B6iVD16pBKODIvjlj6r84QCxGaCWHylEXiL5jN0IBTpxERJ swAtzpKLlG6d4G2/uOh+joOqxwA3NlX6po+SwB2txyuw7N3RmQHocStI3M5fCr7r 0Ge/mkE4hndibjJfb1xcd35Y7iLLd4upYaS40nM43MAuAHjF9b0CfD3DGA0O01iH 5EHJoZKYCFZZiEpk0LBxLkOSy5ruQeYEvxXlUZ7FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOoe2cKduiYGUXdtQMi/O2zjJKjswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJmYjVlZWU3LWIzYzQtNGM3Yy05ZjgwLTRhN2NjNmNlMjI1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqxkwDQYJKoZIhvcNAQELBQADggEBADLZUOFXz/nBY27ZNHGahsxyJZo1 ipDd2If7opq/qcH3AvU5Qc7ITco7+lpQR8V0HuCjJPSSQC2QBtpKwjy3zWk8PCqo dGwrYWfr8mR2IdhoI1UW4mGZ3TW+xtPMr8M0jTXnK2UK8PXDSCjStmvErFrX3Wjq D+Q0t3rkKnXCupNKhxgJFIlLpI6MWD4Pv3y0EuazJHZmVlgjQnAgH38GmwaHqB4z wRQzPl57jTKpX+ZLJ9sP+gkZK1O8TuvmE90lHrmhGQnKWWaU3Jjaa5KGehEaGQJY m02HV0/QXEb+7oLoUQU0o6OX0AP/u62HRpUuEtuhnR/eFu/e8RsVh+ESXkE= -----END CERTIFICATE-----Generated at Sat Oct 18 02:14:08 2025 by rpki-client