$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cac0024b-82b4-45c1-a739-f75385d5373e.roa File: cac0024b-82b4-45c1-a739-f75385d5373e.roa (raw, json) Hash identifier: VFz3vi+9EB6teFdsi88qfPREsktEmdVqMxKJ7zEfBWk= Subject key identifier: 1F:70:3C:9F:4F:D4:83:30:1B:E5:31:2F:37:D5:D8:E0:F6:0B:62:1B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2F4E11B3BC4D3CE2BC7BA818D33D27A079BB51F4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cac0024b-82b4-45c1-a739-f75385d5373e.roa Signing time: Thu 25 Sep 2025 16:40:07 +0000 ROA not before: Thu 25 Sep 2025 16:40:07 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:4e:11:b3:bc:4d:3c:e2:bc:7b:a8:18:d3:3d:27:a0:79:bb:51:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 16:40:07 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=abc22ebe3625458571baac35d0113ff4824f4bd4554ed76e4768bb1858cf6b5b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f8:b3:45:83:55:2d:67:4a:6d:ea:ac:3d:85: b9:f7:d8:d8:7f:2e:2c:4c:d4:db:fe:a7:fb:c1:39: 0a:af:60:1b:5a:0a:cb:64:be:96:71:21:ed:03:7d: 6c:29:30:3b:26:80:b3:35:4e:88:85:86:49:4a:c6: c1:a9:4d:ef:bc:7d:99:80:e2:07:58:78:c0:d6:77: bd:07:40:a3:d5:68:57:35:10:06:a8:3c:93:d3:d7: c5:17:4e:bc:64:6f:ae:fd:a1:63:b9:2e:a5:5c:ad: 6a:93:c7:0b:14:ee:43:46:f0:ce:16:90:9a:82:2f: 1a:b0:25:ff:f3:ee:f7:4a:34:27:6f:54:5a:36:08: 79:da:25:d2:e4:a3:6d:4c:66:fd:6b:b1:6f:67:8d: f5:2c:11:7d:0c:9c:03:f8:3d:22:eb:cb:68:f2:11: 2a:d8:19:99:71:b5:11:da:98:e3:de:ab:e8:a2:4e: a9:be:a9:0b:f1:79:82:1c:99:6a:d9:5f:2c:ae:b0: 5a:79:44:9b:8f:3a:69:f1:be:5d:80:2d:f5:bb:6b: 6d:de:80:93:fe:fb:36:70:6b:7b:f3:70:06:b8:d7: 8c:90:5b:40:d1:27:e0:51:4c:33:b8:b0:00:11:f6: e7:09:0b:e6:c7:4d:0e:1b:5c:9a:4d:c0:6d:bc:a7: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:70:3C:9F:4F:D4:83:30:1B:E5:31:2F:37:D5:D8:E0:F6:0B:62:1B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cac0024b-82b4-45c1-a739-f75385d5373e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.160.0/24 Signature Algorithm: sha256WithRSAEncryption 68:d0:14:89:ad:34:4f:5c:3a:d9:e8:75:df:aa:3b:ef:8d:5b: d9:f0:6d:31:92:4e:75:c6:60:f0:95:ef:c3:71:c1:5d:77:fa: eb:41:f3:6d:d5:27:f4:79:b0:87:b7:c2:5b:77:74:66:54:10: 76:54:42:89:85:72:92:62:5c:bb:87:5b:18:c0:99:3c:cd:d1: c1:11:0e:8f:00:80:b6:ce:18:96:96:67:28:7e:16:65:97:c0: a2:49:64:04:3d:c5:40:83:5f:a6:cf:aa:d9:ef:1d:32:0a:43: c3:d4:f8:99:85:93:a1:6c:64:4b:c5:02:c4:7b:d6:2f:e4:af: 6b:d2:88:33:bb:df:7c:7e:36:35:9b:54:42:d5:b8:c1:ce:5f: ae:ea:45:2b:af:74:35:71:b7:24:1c:96:6b:36:ef:16:f6:27: 28:4d:f5:78:b9:b4:76:21:1d:47:01:dd:fb:ce:ad:e7:dc:17: 59:fc:8b:3f:79:db:d8:ce:39:7a:63:a7:da:26:93:28:fd:68: 6a:fc:96:08:aa:68:9a:1a:f6:24:00:02:b3:b1:68:2c:12:18: c2:f5:8f:c8:43:ad:5c:3a:a8:ae:53:82:7f:14:f8:af:a3:34: 6e:56:d4:d6:20:69:ad:65:48:31:f8:0f:5c:19:2a:f4:cf:97: 0d:d4:fb:6f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL04Rs7xNPOK8e6gY0z0noHm7UfQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTY0MDA3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmMyMmViZTM2MjU0NTg1NzFiYWFjMzVkMDExM2ZmNDgy NGY0YmQ0NTU0ZWQ3NmU0NzY4YmIxODU4Y2Y2YjViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDq+LNFg1UtZ0pt6qw9hbn32Nh/LixM1Nv+p/vBOQqvYBta CstkvpZxIe0DfWwpMDsmgLM1ToiFhklKxsGpTe+8fZmA4gdYeMDWd70HQKPVaFc1 EAaoPJPT18UXTrxkb679oWO5LqVcrWqTxwsU7kNG8M4WkJqCLxqwJf/z7vdKNCdv VFo2CHnaJdLko21MZv1rsW9njfUsEX0MnAP4PSLry2jyESrYGZlxtRHamOPeq+ii Tqm+qQvxeYIcmWrZXyyusFp5RJuPOmnxvl2ALfW7a23egJP++zZwa3vzcAa414yQ W0DRJ+BRTDO4sAAR9ucJC+bHTQ4bXJpNwG28p1cxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH3A8n0/UgzAb5TEvN9XY4PYLYhswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NhYzAwMjRiLTgyYjQtNDVjMS1hNzM5LWY3NTM4NWQ1MzczZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoKAwDQYJKoZIhvcNAQELBQADggEBAGjQFImtNE9cOtnodd+qO++NW9nw bTGSTnXGYPCV78NxwV13+utB823VJ/R5sIe3wlt3dGZUEHZUQomFcpJiXLuHWxjA mTzN0cERDo8AgLbOGJaWZyh+FmWXwKJJZAQ9xUCDX6bPqtnvHTIKQ8PU+JmFk6Fs ZEvFAsR71i/kr2vSiDO733x+NjWbVELVuMHOX67qRSuvdDVxtyQclms27xb2JyhN 9Xi5tHYhHUcB3fvOrefcF1n8iz9529jOOXpjp9omkyj9aGr8lgiqaJoa9iQAArOx aCwSGML1j8hDrVw6qK5Tgn8U+K+jNG5W1NYgaa1lSDH4D1wZKvTPlw3U+28= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:57 2025 by rpki-client