$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ca6028b-d5c5-43cd-bc1f-d12356d82b7b.roa File: 3ca6028b-d5c5-43cd-bc1f-d12356d82b7b.roa (raw, json) Hash identifier: LoNkjTtFiitVnLs1k5I93ZhwQXOb2CZMUqmfo2pGsRY= Subject key identifier: 21:B6:18:FD:94:77:DF:60:FF:99:46:75:06:EC:52:9A:72:59:2F:21 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6226C99BFD18D00DD1F9A8F40CC25CF7BF9D9783 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ca6028b-d5c5-43cd-bc1f-d12356d82b7b.roa Signing time: Mon 20 Oct 2025 12:22:47 +0000 ROA not before: Mon 20 Oct 2025 12:22:47 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.162.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:26:c9:9b:fd:18:d0:0d:d1:f9:a8:f4:0c:c2:5c:f7:bf:9d:97:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 12:22:47 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=469893146454c3911c6e443febc1ebe771a0daf77b8d7c226cf75741f6f036cc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:cc:ac:08:29:e5:85:53:7e:13:36:57:17: 9b:bf:e1:21:a5:1a:27:03:31:44:58:32:7d:fc:b5: 74:fb:ee:a5:34:4f:fa:e8:a4:52:24:c4:e5:45:bf: 87:1c:d7:1f:24:c8:b5:8e:c2:5d:7f:86:a5:1f:45: f7:e0:7d:50:21:31:56:71:f7:89:85:c9:6a:20:fe: 54:d0:71:f0:a2:bc:c4:b3:32:16:dd:3e:1d:c0:24: 3d:4d:68:5b:61:0f:bd:46:15:45:bc:d0:8d:16:3c: 78:27:be:3c:93:32:0e:e7:cc:97:6c:34:41:5f:af: 87:b5:57:6d:cc:ef:e2:ea:4d:33:71:9a:d5:39:8f: a7:52:17:c7:54:c6:75:d0:59:9f:45:6c:87:65:a8: 0d:63:ae:22:cf:a9:a8:0f:5c:95:06:5e:93:7b:0f: aa:86:f1:6a:2e:01:ec:90:e3:20:4a:bd:ca:62:95: 81:85:dd:88:e5:6f:f9:77:df:59:a8:1d:06:8a:45: c0:10:17:04:53:e7:fd:b4:28:55:1c:ce:c2:15:0a: db:0f:5b:43:88:b2:8f:60:bb:59:24:2f:91:4f:5a: b5:f5:b4:7a:e3:e0:bb:e7:41:74:4b:ac:e6:94:d6: a0:ad:91:a9:b2:c4:03:9b:35:4f:d6:af:33:48:16: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B6:18:FD:94:77:DF:60:FF:99:46:75:06:EC:52:9A:72:59:2F:21 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ca6028b-d5c5-43cd-bc1f-d12356d82b7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.162.65.0/24 Signature Algorithm: sha256WithRSAEncryption 91:b2:40:35:aa:b8:78:5d:84:48:3b:7d:dd:e2:d5:10:23:5f: f5:31:53:23:c3:0c:02:a7:c1:4f:1b:66:91:2b:de:f2:31:4c: 8b:aa:ff:40:01:cc:98:82:26:62:89:c2:6a:8c:e2:04:87:c6: 69:8b:79:8d:34:fa:bd:97:08:68:71:3a:5f:a6:0e:fc:19:81: 7e:b6:7f:2e:fc:2e:52:06:26:5d:bc:09:30:4c:4d:5b:8d:20: 7d:17:1b:44:ff:b8:39:3a:2e:fd:9b:09:0b:54:b1:eb:c8:3e: d8:39:c4:c5:0b:db:c7:22:eb:90:c9:a5:ac:45:3c:e1:59:8c: 70:3e:93:49:02:64:6e:29:8c:47:de:ec:f5:a9:b3:08:13:15: 11:cc:81:b2:8f:dc:3d:b7:b8:03:c7:ee:96:e8:79:7f:2e:58: 79:36:cf:8d:38:76:eb:66:00:1e:ff:af:b4:c2:44:70:8c:5b: 42:bb:c2:24:e8:65:81:81:54:59:a7:53:14:7c:b8:da:41:5f: e9:4d:4a:68:1e:22:e7:6b:0a:d6:ab:ac:fd:7c:3a:cd:30:24: 15:97:84:20:16:7f:6f:76:c4:bd:88:0a:ad:e9:cf:62:b3:aa: 53:b9:e0:11:1b:91:dd:2a:4d:f1:12:c5:23:2b:b0:a0:cd:f8: 46:7a:80:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYibJm/0Y0A3R+aj0DMJc97+dl4MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMTIyMjQ3WhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Njk4OTMxNDY0NTRjMzkxMWM2ZTQ0M2ZlYmMxZWJlNzcx YTBkYWY3N2I4ZDdjMjI2Y2Y3NTc0MWY2ZjAzNmNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk5cysCCnlhVN+EzZXF5u/4SGlGicDMURYMn38tXT77qU0 T/ropFIkxOVFv4cc1x8kyLWOwl1/hqUfRffgfVAhMVZx94mFyWog/lTQcfCivMSz MhbdPh3AJD1NaFthD71GFUW80I0WPHgnvjyTMg7nzJdsNEFfr4e1V23M7+LqTTNx mtU5j6dSF8dUxnXQWZ9FbIdlqA1jriLPqagPXJUGXpN7D6qG8WouAeyQ4yBKvcpi lYGF3Yjlb/l331moHQaKRcAQFwRT5/20KFUczsIVCtsPW0OIso9gu1kkL5FPWrX1 tHrj4LvnQXRLrOaU1qCtkamyxAObNU/WrzNIFsWlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIbYY/ZR332D/mUZ1BuxSmnJZLyEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNjYTYwMjhiLWQ1YzUtNDNjZC1iYzFmLWQxMjM1NmQ4MmI3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADokEwDQYJKoZIhvcNAQELBQADggEBAJGyQDWquHhdhEg7fd3i1RAjX/Ux UyPDDAKnwU8bZpEr3vIxTIuq/0ABzJiCJmKJwmqM4gSHxmmLeY00+r2XCGhxOl+m DvwZgX62fy78LlIGJl28CTBMTVuNIH0XG0T/uDk6Lv2bCQtUsevIPtg5xMUL28ci 65DJpaxFPOFZjHA+k0kCZG4pjEfe7PWpswgTFRHMgbKP3D23uAPH7pboeX8uWHk2 z404dutmAB7/r7TCRHCMW0K7wiToZYGBVFmnUxR8uNpBX+lNSmgeIudrCtarrP18 Os0wJBWXhCAWf292xL2ICq3pz2KzqlO54BEbkd0qTfESxSMrsKDN+EZ6gCI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:45:33 2025 by rpki-client