$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/309dd152-4944-4dd4-87b6-0309155bfdac.roa File: 309dd152-4944-4dd4-87b6-0309155bfdac.roa (raw, json) Hash identifier: M3Uzx1vBOddDS0+eK0MLabUC5QqA2DB3H+YCbABUeZ0= Subject key identifier: C3:B7:3B:97:D9:33:59:4F:EB:41:00:57:8F:D2:02:04:4A:1B:79:C8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5443D1C78A921144A0565A040F7BE38470E72141 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/309dd152-4944-4dd4-87b6-0309155bfdac.roa Signing time: Thu 25 Sep 2025 18:39:53 +0000 ROA not before: Thu 25 Sep 2025 18:39:53 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:43:d1:c7:8a:92:11:44:a0:56:5a:04:0f:7b:e3:84:70:e7:21:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:39:53 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=cff3c211fcc1c402b1fff0bc7c3cec83f5d480b2bb84fc37f34626a2d0ed66be, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:65:54:4d:b3:2a:87:29:80:df:0d:7a:cd: 02:97:62:e2:42:f6:de:3a:ee:f0:51:f7:00:b7:0b: 04:4d:cb:7d:22:d4:d2:b8:f8:12:b2:e8:5b:35:30: 61:6d:64:a6:ee:b3:a2:2f:bc:a9:22:b2:90:59:83: e6:d5:24:50:d2:2a:1e:b4:8f:de:5c:0c:0f:8c:81: b8:d7:c0:10:c7:80:3d:c8:d2:e4:d9:ee:ef:b6:82: ae:9d:67:60:eb:45:ab:ef:b5:ed:e8:76:6c:df:1e: 53:ff:c0:07:5d:d6:bf:47:0e:df:42:71:96:e2:12: 42:18:ad:9a:8c:67:09:78:cd:d9:c0:e9:65:93:97: 4b:07:7d:43:d8:23:11:42:a9:a6:36:d0:cd:d5:84: 0c:56:29:0a:08:0c:c4:4f:a7:49:35:b0:35:8e:09: ef:9a:8a:21:29:64:56:81:69:6c:e9:35:d6:2c:28: af:5c:b0:80:08:12:a2:c0:21:8e:59:52:79:c4:c0: d3:e1:e1:11:87:9a:a5:63:bc:54:ab:8c:85:08:e5: f1:9a:a1:c5:a1:b1:ef:32:1c:21:a8:0f:15:b0:77: 40:2b:50:b3:ef:fd:2e:a4:e0:63:0d:86:cd:60:54: 61:cb:73:4d:fb:c6:3a:1c:8e:bf:33:3b:98:0d:4a: cb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B7:3B:97:D9:33:59:4F:EB:41:00:57:8F:D2:02:04:4A:1B:79:C8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/309dd152-4944-4dd4-87b6-0309155bfdac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.210.0/24 Signature Algorithm: sha256WithRSAEncryption 37:f4:06:8a:05:0a:8e:3c:c8:d8:8b:c1:3c:f6:b2:d5:6e:c9: 03:18:a1:29:68:07:94:90:07:9c:c4:0f:07:9f:b8:e0:03:3b: 6e:10:60:5f:af:03:3f:7f:34:71:93:dc:90:b4:ca:b1:48:0e: 40:37:87:03:3c:ab:d6:64:ba:25:15:79:0a:65:b1:b4:fb:3e: 0f:06:38:eb:f6:be:1e:e4:07:90:74:cc:82:c9:7a:03:0e:39: 45:bb:d6:c9:ce:4a:27:eb:c1:b5:30:40:d7:45:7d:28:06:85: c2:5c:9e:ec:7d:7a:9f:7f:b0:95:3a:07:f4:0e:fb:51:71:5b: 7f:76:22:80:c0:17:dc:08:ab:7c:5f:b4:82:80:7a:18:11:f2: db:04:52:9b:a2:16:d7:41:81:12:52:d1:aa:4f:a1:39:33:d4: 5c:dd:75:75:84:b7:a5:38:66:d8:82:3b:a5:80:e8:bb:49:d4: ef:c6:7c:98:1b:78:ab:ba:f9:ef:b6:cb:74:12:4a:3b:5d:89: 84:bb:eb:f3:70:bf:d4:4c:7b:21:d9:6e:2b:80:af:83:1c:bd: 74:d0:68:39:15:55:40:4a:95:2a:8f:1a:1c:5c:5c:b9:6e:0c: 01:50:34:83:49:a2:9b:4a:0e:e2:91:a5:f2:6c:a7:7f:17:8f: 40:7a:45:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVEPRx4qSEUSgVloED3vjhHDnIUEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgzOTUzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZmYzYzIxMWZjYzFjNDAyYjFmZmYwYmM3YzNjZWM4M2Y1 ZDQ4MGIyYmI4NGZjMzdmMzQ2MjZhMmQwZWQ2NmJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9c2VUTbMqhymA3w16zQKXYuJC9t467vBR9wC3CwRNy30i 1NK4+BKy6Fs1MGFtZKbus6IvvKkispBZg+bVJFDSKh60j95cDA+MgbjXwBDHgD3I 0uTZ7u+2gq6dZ2DrRavvte3odmzfHlP/wAdd1r9HDt9CcZbiEkIYrZqMZwl4zdnA 6WWTl0sHfUPYIxFCqaY20M3VhAxWKQoIDMRPp0k1sDWOCe+aiiEpZFaBaWzpNdYs KK9csIAIEqLAIY5ZUnnEwNPh4RGHmqVjvFSrjIUI5fGaocWhse8yHCGoDxWwd0Ar ULPv/S6k4GMNhs1gVGHLc037xjocjr8zO5gNSstvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUw7c7l9kzWU/rQQBXj9ICBEobecgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMwOWRkMTUyLTQ5NDQtNGRkNC04N2I2LTAzMDkxNTViZmRhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADptIwDQYJKoZIhvcNAQELBQADggEBADf0BooFCo48yNiLwTz2stVuyQMY oSloB5SQB5zEDwefuOADO24QYF+vAz9/NHGT3JC0yrFIDkA3hwM8q9ZkuiUVeQpl sbT7Pg8GOOv2vh7kB5B0zILJegMOOUW71snOSifrwbUwQNdFfSgGhcJcnux9ep9/ sJU6B/QO+1FxW392IoDAF9wIq3xftIKAehgR8tsEUpuiFtdBgRJS0apPoTkz1Fzd dXWEt6U4ZtiCO6WA6LtJ1O/GfJgbeKu6+e+2y3QSSjtdiYS76/Nwv9RMeyHZbiuA r4McvXTQaDkVVUBKlSqPGhxcXLluDAFQNINJoptKDuKRpfJsp38Xj0B6RcE= -----END CERTIFICATE-----Generated at Sat Oct 18 00:16:47 2025 by rpki-client