$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57e4b396-0871-496e-b1d0-e37827304f4d.roa File: 57e4b396-0871-496e-b1d0-e37827304f4d.roa (raw, json) Hash identifier: 1jLi1Y/u5QmiY91Cd3v+exsQDNcFO1tUBuWSqpdq5RI= Subject key identifier: B1:6E:DE:0E:C1:80:AB:7D:0A:F4:B9:BF:26:03:1E:A6:2C:4D:91:D2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33F5949A28931E97F63B904DAE2B10E6B6321481 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57e4b396-0871-496e-b1d0-e37827304f4d.roa Signing time: Thu 25 Sep 2025 17:06:47 +0000 ROA not before: Thu 25 Sep 2025 17:06:47 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f5:94:9a:28:93:1e:97:f6:3b:90:4d:ae:2b:10:e6:b6:32:14:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:06:47 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=eca6356a135b8e7e898837d6edb42f73a774fc7d15419c794ffdfd586363e6bb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:dd:e0:4e:95:a6:ed:44:6c:66:95:16:49: fc:21:8c:0a:da:89:b8:13:98:81:9d:32:cc:46:ef: eb:20:f6:f2:91:73:41:fa:04:bd:10:23:4b:eb:e3: 6e:54:22:e3:7f:6e:d8:52:c7:ba:a3:b0:10:60:a6: a9:fd:ff:01:19:47:f4:da:ba:12:2d:46:76:31:f6: 9d:14:12:b6:3b:c3:6f:4a:e3:ce:94:d4:20:bc:6c: 6f:80:0d:ef:c0:d4:e9:2c:2f:6a:e3:44:97:71:5b: d1:14:da:f9:fb:43:87:a6:8a:b7:db:18:20:5d:fb: fc:72:80:49:1e:34:d7:11:57:ad:5f:f0:6e:1d:eb: a2:02:e4:9f:f6:48:74:26:d2:49:d8:93:e5:ec:57: b2:3d:9a:54:15:f7:77:3a:a7:4b:63:d0:65:d3:14: 91:ff:53:ec:ae:e7:15:cb:0e:ae:e6:1e:c1:b1:4c: 60:4d:3d:ff:e5:e8:c2:1b:08:44:97:e6:ac:85:aa: f9:26:dc:fa:f8:11:39:22:79:8b:17:2b:a5:dc:f5: b3:87:b6:88:76:ac:71:a0:6b:98:64:43:36:b5:ed: 87:60:94:ab:78:81:fe:96:b8:bb:e3:13:a1:c5:40: 46:67:f4:0f:ae:a4:1f:95:7b:2c:01:f9:72:4a:e9: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6E:DE:0E:C1:80:AB:7D:0A:F4:B9:BF:26:03:1E:A6:2C:4D:91:D2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57e4b396-0871-496e-b1d0-e37827304f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.245.0/24 Signature Algorithm: sha256WithRSAEncryption 98:3c:66:41:f6:7b:f0:d3:0b:ef:99:65:8b:7c:1e:ad:5a:8d: f5:dc:a6:7e:30:1a:68:5c:53:b7:9d:36:30:bb:13:d9:32:ad: ad:97:eb:31:0f:80:ee:75:ea:f9:c9:bc:f3:b3:1d:b2:60:38: cd:9d:c7:4b:02:b7:9e:68:14:73:d0:33:5b:c5:6b:87:05:f3: c9:af:fc:8d:88:1a:29:c5:71:fc:b8:50:46:fe:bd:06:f9:0a: 85:2f:31:9c:bf:9d:77:cd:f7:05:b2:5d:7d:0e:e9:5e:28:f6: 2d:d2:a9:c5:11:f7:66:8c:79:8f:a3:47:41:fe:52:9c:45:63: 48:7b:6c:b9:4b:f0:23:83:3d:b8:d2:bf:ac:60:39:05:dc:f4: 32:fd:f6:50:90:e2:ad:ab:61:13:4c:f3:40:ab:b3:36:27:2c: 81:b8:f3:88:a3:28:79:aa:c7:b9:c7:24:fd:ce:dc:43:ec:44: 7e:d1:00:3a:6f:48:ab:f2:34:f8:b9:d3:ce:51:a3:15:92:ff: 43:45:f7:8a:c5:29:09:0e:f4:99:05:0d:4d:cd:24:57:4b:8e: 14:50:34:5c:cb:ec:bc:f8:3d:5e:c0:55:1b:16:de:fe:79:c1: 41:93:bd:e7:c2:86:33:c7:73:9b:f3:2d:21:d2:ab:5a:5a:32: 41:b7:0d:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM/WUmiiTHpf2O5BNrisQ5rYyFIEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTcwNjQ3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlY2E2MzU2YTEzNWI4ZTdlODk4ODM3ZDZlZGI0MmY3M2E3 NzRmYzdkMTU0MTljNzk0ZmZkZmQ1ODYzNjNlNmJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4Et3gTpWm7URsZpUWSfwhjAraibgTmIGdMsxG7+sg9vKR c0H6BL0QI0vr425UIuN/bthSx7qjsBBgpqn9/wEZR/TauhItRnYx9p0UErY7w29K 486U1CC8bG+ADe/A1OksL2rjRJdxW9EU2vn7Q4emirfbGCBd+/xygEkeNNcRV61f 8G4d66IC5J/2SHQm0knYk+XsV7I9mlQV93c6p0tj0GXTFJH/U+yu5xXLDq7mHsGx TGBNPf/l6MIbCESX5qyFqvkm3Pr4ETkieYsXK6Xc9bOHtoh2rHGga5hkQza17Ydg lKt4gf6WuLvjE6HFQEZn9A+upB+VeywB+XJK6XM9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsW7eDsGAq30K9Lm/JgMepixNkdIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU3ZTRiMzk2LTA4NzEtNDk2ZS1iMWQwLWUzNzgyNzMwNGY0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADofUwDQYJKoZIhvcNAQELBQADggEBAJg8ZkH2e/DTC++ZZYt8Hq1ajfXc pn4wGmhcU7edNjC7E9kyra2X6zEPgO516vnJvPOzHbJgOM2dx0sCt55oFHPQM1vF a4cF88mv/I2IGinFcfy4UEb+vQb5CoUvMZy/nXfN9wWyXX0O6V4o9i3SqcUR92aM eY+jR0H+UpxFY0h7bLlL8CODPbjSv6xgOQXc9DL99lCQ4q2rYRNM80CrszYnLIG4 84ijKHmqx7nHJP3O3EPsRH7RADpvSKvyNPi5085RoxWS/0NF94rFKQkO9JkFDU3N JFdLjhRQNFzL7Lz4PV7AVRsW3v55wUGTvefChjPHc5vzLSHSq1paMkG3DYw= -----END CERTIFICATE-----Generated at Fri Oct 17 23:56:15 2025 by rpki-client