$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e70ce68b-31f7-4410-903e-daadfc494273.roa File: e70ce68b-31f7-4410-903e-daadfc494273.roa (raw, json) Hash identifier: Q7txL3DePUwmJLM21OcQx6+YcE7fAhkDGbeCE4DfJco= Subject key identifier: 3F:A9:B8:5B:0E:9F:44:7A:01:3F:24:93:AC:4E:52:B9:97:28:ED:E1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31335D0A6E7DB78E7038C327CC39D8169906F189 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e70ce68b-31f7-4410-903e-daadfc494273.roa Signing time: Tue 04 Nov 2025 02:30:40 +0000 ROA not before: Tue 04 Nov 2025 02:30:40 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.248.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:33:5d:0a:6e:7d:b7:8e:70:38:c3:27:cc:39:d8:16:99:06:f1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 02:30:40 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=2b459bed166754421753f2d08a595a7ec5facb3bb18d80aa14526d7895b3dbf1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:28:9c:5f:0e:4c:cb:95:56:32:1e:d0:d3: 31:ba:4c:8b:83:2f:d1:56:f9:a1:82:94:59:d6:8c: 26:e2:04:ce:e5:2f:ee:8c:1f:d5:86:e9:7e:42:36: 28:9e:f6:e6:bf:52:65:b6:e0:82:26:e7:f4:58:0d: a9:ea:a8:da:2c:f2:2b:0a:aa:48:b0:cc:e2:89:ed: 8b:30:32:1a:fe:53:05:32:6e:4c:c2:02:ac:dd:64: 1a:95:fc:86:2f:07:03:48:11:c6:3d:d4:63:84:22: 5d:df:fb:56:66:12:69:cd:f9:f6:55:3b:bd:c7:8a: 8d:bc:dc:83:32:9c:c8:db:03:b9:0f:55:ea:3c:ba: fb:48:1f:aa:cf:e0:ba:c9:cc:71:e2:4d:d5:9d:81: 07:90:6f:6b:b6:20:7f:e3:4c:9b:8d:65:76:ce:8a: 05:9d:31:2d:59:6d:c2:58:b2:09:07:f3:cd:63:9c: c4:73:bb:36:16:3e:b9:38:0b:8b:a9:8e:c6:5f:eb: 82:e5:b5:7d:53:4e:e7:68:09:f1:e1:34:44:c3:cd: cd:a2:2c:37:ad:28:1b:f2:e4:aa:d0:fa:54:d9:82: 8d:36:1e:ce:c0:00:6a:99:05:9a:82:8c:44:6e:5f: 53:29:e4:38:ba:e1:72:2f:ba:c8:26:38:71:7f:b6: d1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A9:B8:5B:0E:9F:44:7A:01:3F:24:93:AC:4E:52:B9:97:28:ED:E1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e70ce68b-31f7-4410-903e-daadfc494273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.248.240.0/24 Signature Algorithm: sha256WithRSAEncryption 79:6b:df:04:c4:c7:53:86:76:0c:92:7a:ab:48:2e:85:27:e9: bb:de:06:9e:be:9f:cf:ca:23:20:41:af:98:97:4f:0d:1e:2b: 46:35:1b:26:e7:ce:3a:8b:96:33:d7:93:90:95:20:65:d1:54: 7d:39:9a:d7:a0:0d:39:42:e4:47:a1:dd:a7:dd:ea:fe:db:60: d5:ad:e7:ac:c0:47:4a:76:96:0f:b8:fb:51:c2:69:e3:57:f3: e2:b5:2a:82:e4:2a:62:17:5d:0f:6e:35:c5:e4:f4:03:69:b6: 58:d9:7f:16:ff:ff:96:4f:0c:a8:9f:33:de:32:77:81:f8:0e: 44:a5:e3:92:74:ca:cf:07:01:34:71:7e:a2:55:63:22:7c:d2: 48:cf:28:6d:a2:1d:32:79:45:c5:95:8b:11:56:1b:0f:ab:d5: c2:8e:6e:3e:b7:98:5d:b2:6e:23:55:e4:33:a0:72:d0:b2:6c: 64:52:92:14:1c:20:f7:60:ac:13:73:15:79:a3:ea:a5:d4:93: 2e:86:5b:e5:61:84:63:a2:b2:9f:fc:6f:3c:23:e9:14:f6:78: 68:77:7d:9c:65:34:9c:1a:b9:ba:85:3c:4f:18:5c:72:09:05: af:c1:4d:ae:4f:96:ee:cf:e7:99:5d:83:c3:8f:b8:9a:5e:a1: 8b:3a:1a:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMTNdCm59t45wOMMnzDnYFpkG8YkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDIzMDQwWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjQ1OWJlZDE2Njc1NDQyMTc1M2YyZDA4YTU5NWE3ZWM1 ZmFjYjNiYjE4ZDgwYWExNDUyNmQ3ODk1YjNkYmYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3ySicXw5My5VWMh7Q0zG6TIuDL9FW+aGClFnWjCbiBM7l L+6MH9WG6X5CNiie9ua/UmW24IIm5/RYDanqqNos8isKqkiwzOKJ7YswMhr+UwUy bkzCAqzdZBqV/IYvBwNIEcY91GOEIl3f+1ZmEmnN+fZVO73Hio283IMynMjbA7kP Veo8uvtIH6rP4LrJzHHiTdWdgQeQb2u2IH/jTJuNZXbOigWdMS1ZbcJYsgkH881j nMRzuzYWPrk4C4upjsZf64LltX1TTudoCfHhNETDzc2iLDetKBvy5KrQ+lTZgo02 Hs7AAGqZBZqCjERuX1Mp5Di64XIvusgmOHF/ttF5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP6m4Ww6fRHoBPySTrE5SuZco7eEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U3MGNlNjhiLTMxZjctNDQxMC05MDNlLWRhYWRmYzQ5NDI3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAD+PAwDQYJKoZIhvcNAQELBQADggEBAHlr3wTEx1OGdgySeqtILoUn6bve Bp6+n8/KIyBBr5iXTw0eK0Y1GybnzjqLljPXk5CVIGXRVH05mtegDTlC5Eeh3afd 6v7bYNWt56zAR0p2lg+4+1HCaeNX8+K1KoLkKmIXXQ9uNcXk9ANptljZfxb//5ZP DKifM94yd4H4DkSl45J0ys8HATRxfqJVYyJ80kjPKG2iHTJ5RcWVixFWGw+r1cKO bj63mF2ybiNV5DOgctCybGRSkhQcIPdgrBNzFXmj6qXUky6GW+VhhGOisp/8bzwj 6RT2eGh3fZxlNJwaubqFPE8YXHIJBa/BTa5Plu7P55ldg8OPuJpeoYs6Gh0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:49:07 2025 by rpki-client