$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b15501db-8824-4da2-8ac8-c264624cd090.roa File: b15501db-8824-4da2-8ac8-c264624cd090.roa (raw, json) Hash identifier: ePk9LS7+hx3fX5ZJnCQfxB273Slvm6VoYDW3jNTmFuE= Subject key identifier: 9E:40:9E:5A:D0:81:14:05:B3:45:5D:D5:42:08:B4:E7:50:AE:35:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 681B1FC60E4972F9185564660204ECF6AE9D7E12 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b15501db-8824-4da2-8ac8-c264624cd090.roa Signing time: Thu 25 Sep 2025 20:57:06 +0000 ROA not before: Thu 25 Sep 2025 20:57:06 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1b:1f:c6:0e:49:72:f9:18:55:64:66:02:04:ec:f6:ae:9d:7e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:57:06 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=d3770d0f467bf4401bab8f48df98c457565384cb6d482595e5cbd7e5c275fdc2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:74:7f:d0:a4:08:f6:1d:a7:fe:66:c1:27: 39:34:97:22:54:23:b3:75:92:7f:4f:15:43:0b:2d: 23:a2:dd:0b:0f:93:fc:f5:e1:8d:96:4f:2e:c6:40: 98:b3:f4:c5:ed:cd:b5:fe:81:a4:f5:25:20:e6:a3: 10:0c:5c:f2:5e:c9:56:89:c1:f6:6b:c1:b3:18:85: 1c:9a:34:ce:89:03:a1:21:31:23:36:2f:5a:20:4c: bb:67:96:29:41:47:4c:3b:6f:05:28:ca:da:9e:a6: 1c:f4:47:f7:65:9d:a7:5c:9b:6d:f9:0d:5a:de:b7: 4e:bc:4a:40:3a:f1:f2:43:01:a7:ff:5e:51:58:f9: e7:a4:de:d6:4e:81:23:c5:98:99:5a:90:c9:0a:14: 8c:22:c3:fc:08:1d:37:48:09:64:b2:fe:c5:5e:ec: 8d:5b:41:a2:a2:b9:c7:36:1e:73:64:86:16:e8:f7: a9:5a:91:34:b9:f8:30:38:fd:b8:3e:9a:9c:be:6f: be:08:59:85:b6:fe:48:10:e7:64:6e:15:38:c9:f1: 6e:64:7e:46:e8:63:84:84:37:37:fc:6b:37:56:c2: 78:e2:6c:18:a9:7b:24:97:0e:8d:03:6c:b4:eb:09: 6c:1b:af:5c:30:e0:61:df:30:8c:a9:8b:f1:ee:a3: 19:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:40:9E:5A:D0:81:14:05:B3:45:5D:D5:42:08:B4:E7:50:AE:35:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b15501db-8824-4da2-8ac8-c264624cd090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.225.0/24 Signature Algorithm: sha256WithRSAEncryption 84:98:77:65:a1:1d:fe:df:b9:66:b9:e6:4c:11:ae:6a:9e:0b: 36:8b:a0:60:95:71:6c:af:46:e6:87:de:d2:ce:bb:73:6a:ba: 71:c3:21:55:0f:30:da:d3:43:ff:a5:95:79:a8:b1:f4:6d:22: 1a:59:2c:75:89:68:9d:17:ec:c1:e4:a5:5a:61:56:ff:39:a6: 70:a9:9f:de:b4:83:51:8a:66:de:b8:c4:e4:ae:71:b3:0e:d9: c6:ab:d6:dd:c5:f2:94:b1:ad:45:ce:be:95:de:0c:2a:ff:74: c7:77:09:72:67:8c:79:d8:de:ea:aa:49:e7:b9:fd:b1:56:1d: 75:ab:59:84:14:ab:8c:fb:a9:e1:e5:a1:d9:4f:a5:aa:52:f4: e3:48:89:0e:c7:d2:db:b6:16:26:cc:20:83:e3:c0:c4:37:d3: 78:bc:1c:9d:2c:23:de:42:fd:88:7d:30:3c:a2:ba:2f:09:dc: 99:15:c5:e3:35:46:7f:c8:8b:17:3b:f5:10:2a:fc:44:fa:88: 50:6c:68:8f:9b:f8:8c:97:77:a2:96:36:d4:f2:a3:85:28:fa: 4c:4e:97:58:36:74:eb:b6:56:53:ad:22:8e:16:f5:4c:fe:a7: fb:5e:8f:7f:1d:3d:9a:b7:f5:50:01:87:e7:59:ec:da:95:0c: e0:b8:bf:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaBsfxg5JcvkYVWRmAgTs9q6dfhIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjA1NzA2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzc3MGQwZjQ2N2JmNDQwMWJhYjhmNDhkZjk4YzQ1NzU2 NTM4NGNiNmQ0ODI1OTVlNWNiZDdlNWMyNzVmZGMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7zHR/0KQI9h2n/mbBJzk0lyJUI7N1kn9PFUMLLSOi3QsP k/z14Y2WTy7GQJiz9MXtzbX+gaT1JSDmoxAMXPJeyVaJwfZrwbMYhRyaNM6JA6Eh MSM2L1ogTLtnlilBR0w7bwUoytqephz0R/dlnadcm235DVret068SkA68fJDAaf/ XlFY+eek3tZOgSPFmJlakMkKFIwiw/wIHTdICWSy/sVe7I1bQaKiucc2HnNkhhbo 96lakTS5+DA4/bg+mpy+b74IWYW2/kgQ52RuFTjJ8W5kfkboY4SENzf8azdWwnji bBipeySXDo0DbLTrCWwbr1ww4GHfMIypi/HuoxmrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnkCeWtCBFAWzRV3VQgi051CuNWYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IxNTUwMWRiLTg4MjQtNGRhMi04YWM4LWMyNjQ2MjRjZDA5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADruEwDQYJKoZIhvcNAQELBQADggEBAISYd2WhHf7fuWa55kwRrmqeCzaL oGCVcWyvRuaH3tLOu3NqunHDIVUPMNrTQ/+llXmosfRtIhpZLHWJaJ0X7MHkpVph Vv85pnCpn960g1GKZt64xOSucbMO2car1t3F8pSxrUXOvpXeDCr/dMd3CXJnjHnY 3uqqSee5/bFWHXWrWYQUq4z7qeHlodlPpapS9ONIiQ7H0tu2FibMIIPjwMQ303i8 HJ0sI95C/Yh9MDyiui8J3JkVxeM1Rn/Iixc79RAq/ET6iFBsaI+b+IyXd6KWNtTy o4Uo+kxOl1g2dOu2VlOtIo4W9Uz+p/tej38dPZq39VABh+dZ7NqVDOC4vwQ= -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:37 2025 by rpki-client