$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/344e861c-471f-4445-a388-ff1d88a0b251.roa File: 344e861c-471f-4445-a388-ff1d88a0b251.roa (raw, json) Hash identifier: 5YdpCkK6Ubgfki5+AXU0cBeFdPvZoUfPNkOiNN5DlPI= Subject key identifier: 3E:C1:BC:B9:B5:0C:56:B1:B7:B6:F3:B1:4D:0A:16:FF:B7:2D:BC:83 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4BA78ED148690E4D2AC4BB9D61C2FC9B853B8EF3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/344e861c-471f-4445-a388-ff1d88a0b251.roa Signing time: Thu 25 Sep 2025 21:09:27 +0000 ROA not before: Thu 25 Sep 2025 21:09:27 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a7:8e:d1:48:69:0e:4d:2a:c4:bb:9d:61:c2:fc:9b:85:3b:8e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 21:09:27 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=907458a245440574b5e030725a8fc6e2351f7a24c3cb4be8122928025a952e4d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:a7:c6:ff:24:99:70:78:c8:a1:8a:ca:95: b7:c6:97:1e:d2:be:cb:e1:ec:a2:46:ef:30:11:db: 73:79:25:ed:dd:6b:09:98:d9:f5:d8:e4:4f:22:e2: bb:8f:3f:4b:2f:fc:b7:69:0c:19:cc:d5:82:e3:dd: 71:41:99:72:c9:c0:bc:da:ff:5e:fe:8a:ea:0b:df: 2a:a7:22:75:26:1e:c3:95:79:fb:f8:9a:ff:b4:81: 10:f9:1d:b2:49:a8:66:a7:f6:8f:b3:33:dd:76:35: a8:bc:d3:89:07:3b:cd:d5:ad:06:5e:0b:04:55:08: cf:bf:a3:1a:1d:5e:78:a3:32:ac:ac:24:b7:bb:a0: 9a:fd:6d:cb:6c:96:25:db:88:f8:17:4b:73:5c:d6: 01:3f:d8:dc:7b:ef:fb:c0:b0:e7:56:35:fd:57:86: 2e:76:5f:e4:ed:4e:12:1b:75:88:33:4d:1d:d4:5c: 2a:31:a3:82:7a:64:e2:bd:98:03:01:e9:69:c6:bc: d9:69:01:8c:71:a7:01:21:45:0c:e5:fa:41:4f:b1: 68:3f:e1:c1:12:d2:18:f6:3f:93:21:a4:c6:1e:e0: 09:a2:d6:8e:69:5a:24:6c:a2:e4:ae:f2:95:05:b0: 00:3c:bb:4a:f3:56:d0:c3:82:51:27:f1:6a:a7:59: ad:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C1:BC:B9:B5:0C:56:B1:B7:B6:F3:B1:4D:0A:16:FF:B7:2D:BC:83 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/344e861c-471f-4445-a388-ff1d88a0b251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.152.0/24 Signature Algorithm: sha256WithRSAEncryption 66:75:1a:f8:25:41:b2:40:89:a0:4f:a9:45:fe:91:64:ae:fc: 7c:56:9c:f4:f1:94:7b:d6:a1:a0:7d:88:4c:43:f6:91:1f:82: c2:f0:7a:cd:bf:df:af:35:21:73:0b:eb:fa:1a:12:0c:b2:39: 2b:cb:3b:0b:30:eb:8a:12:03:6d:f7:7f:79:ed:37:9e:72:f5: e3:14:93:eb:ba:00:3d:5a:02:11:1c:fb:8a:1a:23:41:98:65: 68:53:18:90:9b:04:aa:fa:38:63:20:f7:e8:f1:bb:86:46:ec: 54:8d:15:42:11:39:24:74:00:87:e1:e6:ef:2d:91:c1:13:2b: 8b:d7:cb:3e:d4:d3:e8:ad:fe:66:ed:a4:27:e1:96:8e:7c:19: 13:c9:cc:14:06:67:7f:2f:4b:92:51:32:65:cc:5a:50:e1:95: 2d:3c:0d:09:2a:d1:2d:88:b2:17:c3:f8:62:f1:94:91:3e:be: ae:af:1b:87:10:97:a7:1f:0c:6e:da:03:45:55:82:84:2d:ec: 07:70:0b:27:b9:4b:bb:39:59:72:29:dc:a1:f4:2b:5c:4e:ae: 2d:d1:ca:ff:89:10:db:8d:33:9f:71:d5:67:82:ab:28:99:c1: 24:8e:48:85:32:37:82:ad:7b:9b:e1:ae:1d:72:be:b9:9e:4b: c7:63:d5:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS6eO0UhpDk0qxLudYcL8m4U7jvMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjEwOTI3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDc0NThhMjQ1NDQwNTc0YjVlMDMwNzI1YThmYzZlMjM1 MWY3YTI0YzNjYjRiZTgxMjI5MjgwMjVhOTUyZTRkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUzqfG/ySZcHjIoYrKlbfGlx7Svsvh7KJG7zAR23N5Je3d awmY2fXY5E8i4ruPP0sv/LdpDBnM1YLj3XFBmXLJwLza/17+iuoL3yqnInUmHsOV efv4mv+0gRD5HbJJqGan9o+zM912Nai804kHO83VrQZeCwRVCM+/oxodXnijMqys JLe7oJr9bctsliXbiPgXS3Nc1gE/2Nx77/vAsOdWNf1Xhi52X+TtThIbdYgzTR3U XCoxo4J6ZOK9mAMB6WnGvNlpAYxxpwEhRQzl+kFPsWg/4cES0hj2P5MhpMYe4Ami 1o5pWiRsouSu8pUFsAA8u0rzVtDDglEn8WqnWa3/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPsG8ubUMVrG3tvOxTQoW/7ctvIMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0NGU4NjFjLTQ3MWYtNDQ0NS1hMzg4LWZmMWQ4OGEwYjI1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADr5gwDQYJKoZIhvcNAQELBQADggEBAGZ1GvglQbJAiaBPqUX+kWSu/HxW nPTxlHvWoaB9iExD9pEfgsLwes2/3681IXML6/oaEgyyOSvLOwsw64oSA233f3nt N55y9eMUk+u6AD1aAhEc+4oaI0GYZWhTGJCbBKr6OGMg9+jxu4ZG7FSNFUIROSR0 AIfh5u8tkcETK4vXyz7U0+it/mbtpCfhlo58GRPJzBQGZ38vS5JRMmXMWlDhlS08 DQkq0S2IshfD+GLxlJE+vq6vG4cQl6cfDG7aA0VVgoQt7AdwCye5S7s5WXIp3KH0 K1xOri3Ryv+JENuNM59x1WeCqyiZwSSOSIUyN4Kte5vhrh1yvrmeS8dj1U4= -----END CERTIFICATE-----Generated at Sat Oct 18 02:15:23 2025 by rpki-client