$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5e68e362-eaca-4c55-95e3-949d07497494.roa File: 5e68e362-eaca-4c55-95e3-949d07497494.roa (raw, json) Hash identifier: h7eyOws9LChThJXiC0xG02U50AlxAIvz54C2sYBC/18= Subject key identifier: 64:85:88:97:CE:23:A9:0C:AF:A9:0D:8A:31:21:AF:CC:F5:AB:D9:3E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1A3101B26322C668FDF9233F1BB5042523DC19B5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5e68e362-eaca-4c55-95e3-949d07497494.roa Signing time: Thu 25 Sep 2025 18:24:04 +0000 ROA not before: Thu 25 Sep 2025 18:24:04 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:31:01:b2:63:22:c6:68:fd:f9:23:3f:1b:b5:04:25:23:dc:19:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:24:04 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=a2cd33c283f82156a70703eef70f0f5812d161d859b24f3addebafb555a21e92, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:97:7a:fd:ec:b8:09:f8:5a:6c:07:1a:ae: f4:8c:b7:b5:0d:4e:37:97:3b:8e:1f:f4:04:69:99: a2:72:c3:99:ff:91:f7:91:d0:35:ec:7e:f0:ca:9c: 3e:51:63:0b:57:87:cf:e1:03:73:1f:7b:23:79:9d: 8c:c8:1f:53:9a:73:8a:26:d4:e6:6b:6c:8d:61:ea: f2:cb:43:06:bb:75:84:09:18:0e:19:2a:88:e4:02: bf:fb:77:48:b9:84:2e:b7:d3:5c:04:7f:49:f5:70: f2:78:d3:b7:38:08:9e:b6:27:bb:fe:36:52:f9:4e: e2:0f:f7:b9:fb:94:69:dd:a6:d3:fb:b9:ed:6d:c7: d0:6b:02:0f:87:a5:b8:5a:56:60:2d:02:3d:28:93: 84:f4:ef:40:c0:a7:c8:09:ae:b7:1d:75:b5:b4:18: d7:fb:c9:59:e3:03:de:b2:34:3e:f0:e5:1e:87:df: 12:3d:65:29:b3:48:0a:44:ae:6e:2d:0e:ed:0e:f8: d9:57:a2:8e:8c:95:b5:39:b9:c5:2d:e0:43:89:6e: 88:3f:6d:8e:74:36:ab:0e:42:65:a4:00:21:48:97: 35:b8:61:3a:ed:e3:23:c7:54:bc:3f:08:89:2e:93: 09:db:c1:ef:95:35:19:e5:f3:35:5f:bc:00:6d:2f: 3d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:85:88:97:CE:23:A9:0C:AF:A9:0D:8A:31:21:AF:CC:F5:AB:D9:3E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5e68e362-eaca-4c55-95e3-949d07497494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.252.0/24 Signature Algorithm: sha256WithRSAEncryption 43:ea:a7:25:78:e8:08:ca:b3:b0:d4:e8:70:7e:c3:e9:c9:19: 45:6a:eb:49:33:15:99:3c:61:22:72:2c:8d:21:d6:f7:4b:51: 6c:1f:47:58:20:78:5d:d1:19:d5:da:84:a1:b2:73:de:60:e2: bb:03:c9:9b:c7:01:d1:81:df:a5:a2:50:a4:08:24:6f:dc:a4: 3e:95:c3:2d:b2:93:ac:b3:c7:34:e9:3e:81:e5:cc:0d:08:c8: 18:a3:7c:54:37:5a:ed:9a:94:11:31:0f:6e:99:55:f5:b7:4d: 5d:0a:5e:b0:bc:67:40:7f:58:e3:7c:53:c7:b9:cf:cb:16:7b: cc:ee:d7:4d:14:4f:c7:19:9b:54:70:15:9b:4e:0f:b5:0a:24: 69:59:cd:30:0d:49:74:c1:e5:40:33:0a:41:24:1c:11:26:a2: fa:c4:66:b9:58:72:12:81:10:40:0e:d1:fa:0b:b4:dd:e2:45: b4:f6:29:3d:15:91:5b:0e:16:b4:ec:5c:ce:06:3a:68:ea:e0: c8:e6:a4:1f:65:3a:3e:db:2d:dd:1e:3d:62:06:f7:66:71:b2: f6:22:93:c8:a7:70:f6:31:9a:27:66:9c:e5:63:00:72:48:2f: 4a:50:b9:22:7c:54:b4:61:39:36:ea:eb:d8:d4:ce:ce:3a:24: b0:38:db:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGjEBsmMixmj9+SM/G7UEJSPcGbUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgyNDA0WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmNkMzNjMjgzZjgyMTU2YTcwNzAzZWVmNzBmMGY1ODEy ZDE2MWQ4NTliMjRmM2FkZGViYWZiNTU1YTIxZTkyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGopd6/ey4CfhabAcarvSMt7UNTjeXO44f9ARpmaJyw5n/ kfeR0DXsfvDKnD5RYwtXh8/hA3MfeyN5nYzIH1Oac4om1OZrbI1h6vLLQwa7dYQJ GA4ZKojkAr/7d0i5hC6301wEf0n1cPJ407c4CJ62J7v+NlL5TuIP97n7lGndptP7 ue1tx9BrAg+HpbhaVmAtAj0ok4T070DAp8gJrrcddbW0GNf7yVnjA96yND7w5R6H 3xI9ZSmzSApErm4tDu0O+NlXoo6MlbU5ucUt4EOJbog/bY50NqsOQmWkACFIlzW4 YTrt4yPHVLw/CIkukwnbwe+VNRnl8zVfvABtLz0pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZIWIl84jqQyvqQ2KMSGvzPWr2T4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVlNjhlMzYyLWVhY2EtNGM1NS05NWUzLTk0OWQwNzQ5NzQ5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpfwwDQYJKoZIhvcNAQELBQADggEBAEPqpyV46AjKs7DU6HB+w+nJGUVq 60kzFZk8YSJyLI0h1vdLUWwfR1ggeF3RGdXahKGyc95g4rsDyZvHAdGB36WiUKQI JG/cpD6Vwy2yk6yzxzTpPoHlzA0IyBijfFQ3Wu2alBExD26ZVfW3TV0KXrC8Z0B/ WON8U8e5z8sWe8zu100UT8cZm1RwFZtOD7UKJGlZzTANSXTB5UAzCkEkHBEmovrE ZrlYchKBEEAO0foLtN3iRbT2KT0VkVsOFrTsXM4GOmjq4MjmpB9lOj7bLd0ePWIG 92ZxsvYik8incPYxmidmnOVjAHJIL0pQuSJ8VLRhOTbq69jUzs46JLA423c= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:05 2025 by rpki-client