$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf6444d8-ea2d-4ae6-bd5a-3a4bfa320162.roa File: bf6444d8-ea2d-4ae6-bd5a-3a4bfa320162.roa (raw, json) Hash identifier: jgGXpSQvhi6onle90af74NSRlOB4YM7CRxBx2NMTMP0= Subject key identifier: 9D:9C:BE:AA:7E:14:7B:1F:A2:BF:B4:2F:8A:0E:02:71:3E:38:2A:6D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 61ECD7E4410507DEAFD2EAB31D420B4344476139 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf6444d8-ea2d-4ae6-bd5a-3a4bfa320162.roa Signing time: Sun 19 Oct 2025 07:21:31 +0000 ROA not before: Sun 19 Oct 2025 07:21:31 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.3.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ec:d7:e4:41:05:07:de:af:d2:ea:b3:1d:42:0b:43:44:47:61:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:21:31 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=1dd63d51924b31b95043cef6a72e9ece2236a6ae876dd07144e5327fdab79536, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:97:ef:07:9e:62:a3:e4:74:1f:4e:05:69: 6c:3a:59:a4:cd:28:f7:13:fb:07:01:99:f9:b1:32: 32:8e:57:07:cd:62:fa:46:95:d4:22:ed:6a:31:4c: 74:54:0f:95:9a:0f:73:ab:8d:0f:18:3f:c3:5f:08: da:64:ef:37:44:36:b0:cc:65:a4:01:67:05:6f:ce: 0e:9e:4f:d4:dc:7f:67:39:2f:9e:0b:e7:25:f7:68: 3f:b5:4e:a6:6e:81:dd:e6:e0:5c:89:41:12:9b:4e: 64:14:96:2c:18:20:01:fd:ab:2d:4f:73:df:72:ae: 51:ea:ec:b1:82:1e:7f:6d:0d:03:b0:79:e6:4d:49: f3:a1:53:f4:e6:8c:a0:c0:8f:45:9f:b9:19:0e:53: b9:40:11:1d:17:80:8d:62:70:b0:8d:0c:b1:f0:f0: 39:82:12:dd:2c:0a:aa:db:57:4c:64:bf:47:aa:1a: 24:4a:04:f9:a9:c6:aa:d1:76:f0:77:97:ba:c7:f8: 66:42:f3:39:82:b0:e7:a6:0f:ed:71:37:cc:69:d9: ad:f3:ff:5f:47:7a:24:a8:48:7a:7c:b2:a2:81:8e: ec:8a:6b:5f:ff:4f:1e:b1:29:a4:14:81:9a:97:d6: 0c:c0:c0:00:c0:97:2e:fa:05:f5:8a:96:f9:89:e1: 19:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9C:BE:AA:7E:14:7B:1F:A2:BF:B4:2F:8A:0E:02:71:3E:38:2A:6D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf6444d8-ea2d-4ae6-bd5a-3a4bfa320162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.3.2.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:8c:e1:5e:dd:1c:db:53:4e:6a:9d:1c:f1:09:1f:01:63:80: 83:dd:ed:d1:9c:47:c9:f2:ff:3b:6b:83:87:4a:50:3a:0d:8e: 35:fa:3c:1d:56:65:d3:dd:78:82:27:5b:b5:cb:d0:32:9c:c7: e2:70:d3:7b:b8:32:fa:31:99:60:fa:51:ff:24:27:5b:8a:2c: 58:0e:67:c5:67:74:ea:59:63:21:4f:ed:83:86:fa:4a:af:73: 48:dc:3c:df:5f:3b:56:ef:2c:06:3a:b0:f2:27:3d:99:73:97: 2c:4a:f3:ae:61:4d:fd:55:5c:bd:c4:b2:57:75:e1:51:43:55: 54:01:8e:a6:b9:95:64:4d:99:a0:0d:9f:65:a3:aa:b9:d1:c9: 57:5c:52:af:47:6b:a7:6c:67:20:42:23:76:8c:4b:7e:28:49: b5:17:d2:74:31:f1:10:9d:e1:c4:b7:7b:21:73:16:67:47:5c: 9c:60:f1:50:d5:3f:ef:c3:a3:30:4b:bb:b8:ce:9e:a5:90:fd: 92:0b:d6:ec:ed:f8:d3:92:f0:7c:de:2f:00:7e:9d:ac:2d:e7: d9:88:13:79:07:80:a7:2f:dd:f3:1f:59:97:49:fc:cd:44:d2: 85:aa:65:62:37:cf:95:2a:07:56:c6:3d:6e:2e:42:65:bd:40: 63:e8:b5:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYezX5EEFB96v0uqzHUILQ0RHYTkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDcyMTMxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGQ2M2Q1MTkyNGIzMWI5NTA0M2NlZjZhNzJlOWVjZTIy MzZhNmFlODc2ZGQwNzE0NGU1MzI3ZmRhYjc5NTM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwE5fvB55io+R0H04FaWw6WaTNKPcT+wcBmfmxMjKOVwfN YvpGldQi7WoxTHRUD5WaD3OrjQ8YP8NfCNpk7zdENrDMZaQBZwVvzg6eT9Tcf2c5 L54L5yX3aD+1TqZugd3m4FyJQRKbTmQUliwYIAH9qy1Pc99yrlHq7LGCHn9tDQOw eeZNSfOhU/TmjKDAj0WfuRkOU7lAER0XgI1icLCNDLHw8DmCEt0sCqrbV0xkv0eq GiRKBPmpxqrRdvB3l7rH+GZC8zmCsOemD+1xN8xp2a3z/19HeiSoSHp8sqKBjuyK a1//Tx6xKaQUgZqX1gzAwADAly76BfWKlvmJ4RmPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnZy+qn4Uex+iv7Qvig4CcT44Km0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JmNjQ0NGQ4LWVhMmQtNGFlNi1iZDVhLTNhNGJmYTMyMDE2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAwIwDQYJKoZIhvcNAQELBQADggEBAD2M4V7dHNtTTmqdHPEJHwFjgIPd 7dGcR8ny/ztrg4dKUDoNjjX6PB1WZdPdeIInW7XL0DKcx+Jw03u4MvoxmWD6Uf8k J1uKLFgOZ8VndOpZYyFP7YOG+kqvc0jcPN9fO1bvLAY6sPInPZlzlyxK865hTf1V XL3Esld14VFDVVQBjqa5lWRNmaANn2WjqrnRyVdcUq9Ha6dsZyBCI3aMS34oSbUX 0nQx8RCd4cS3eyFzFmdHXJxg8VDVP+/DozBLu7jOnqWQ/ZIL1uzt+NOS8HzeLwB+ nawt59mIE3kHgKcv3fMfWZdJ/M1E0oWqZWI3z5UqB1bGPW4uQmW9QGPotW4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:23:53 2025 by rpki-client