$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f5eb4723-522f-4294-b680-9e4ce79daa1d.roa File: f5eb4723-522f-4294-b680-9e4ce79daa1d.roa (raw, json) Hash identifier: S5IDSzUmCElx2krZvh5E7Zj9+so3NPMMGeuqr/kAX5w= Subject key identifier: 51:7A:47:5D:98:59:F6:91:3F:8A:98:D6:6B:2A:5E:95:4B:DD:DE:3F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 60BCFA2317A9D47B538B35539266E98F1452478D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f5eb4723-522f-4294-b680-9e4ce79daa1d.roa Signing time: Fri 26 Sep 2025 01:07:09 +0000 ROA not before: Fri 26 Sep 2025 01:07:09 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:bc:fa:23:17:a9:d4:7b:53:8b:35:53:92:66:e9:8f:14:52:47:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:07:09 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=8b6437bf7847a0e197ed3529f2036ca810d76a384376680037e9849a58797945, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:5b:89:ec:dd:d9:c8:6d:94:fc:85:72:af: 83:47:a5:2b:83:3b:49:44:9c:2e:b6:5f:6d:97:82: 9d:57:a4:10:00:c5:16:e2:44:c8:13:67:9f:ce:66: e4:b6:51:08:d3:e6:5c:94:52:d9:ea:65:d4:15:5c: 6c:0e:74:6d:69:68:79:4a:4b:c7:21:41:38:ba:d1: 43:70:c1:c5:86:2d:81:01:36:5a:1a:03:da:1e:22: 0e:7c:f4:ce:1c:04:a1:47:77:c3:0f:3d:65:a1:db: 14:d8:63:dc:a9:14:6a:00:a6:db:b4:ea:c2:c3:75: ff:4f:d3:9f:6c:e6:59:0c:95:a1:ac:39:cc:6d:4a: f7:e5:cc:93:b4:3d:dd:62:d8:1c:50:f5:71:cc:32: 81:25:84:5f:b3:43:43:0b:0f:12:9f:fb:81:b1:88: d7:4c:3f:17:9e:84:21:c9:34:bf:1f:f7:63:7e:bb: c8:01:f2:29:3f:af:4d:da:0d:b9:5d:4a:26:a8:e6: 44:7d:eb:76:ca:53:4d:06:75:21:a8:a5:e5:5f:ed: 36:5e:68:a2:a4:09:9c:89:d9:59:52:f3:e6:ec:64: f3:6a:e6:82:e5:a4:4d:d2:03:9b:c4:46:6c:ea:fd: 28:71:09:c6:2f:86:c5:b0:03:df:b6:95:11:35:cd: 74:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7A:47:5D:98:59:F6:91:3F:8A:98:D6:6B:2A:5E:95:4B:DD:DE:3F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f5eb4723-522f-4294-b680-9e4ce79daa1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.200.0/21 Signature Algorithm: sha256WithRSAEncryption 48:ef:b6:06:6e:e7:06:5a:86:59:e3:90:b0:3e:96:51:14:6d: a3:45:9b:c4:f8:d1:73:2d:77:ef:30:e9:f4:ac:95:83:4e:bd: fe:78:bb:b0:37:4e:6b:b7:f3:fa:c7:98:f9:f0:5c:f1:bf:06: 87:07:c5:87:49:8b:55:12:f4:fc:cf:75:c4:7b:1b:8f:0a:7a: 16:c6:55:78:3b:f9:86:07:28:73:22:82:01:4b:ea:e1:42:4f: 5d:ab:c6:de:9f:75:4a:ea:36:e1:b7:e9:a7:b9:11:34:82:97: 59:8b:d0:03:73:e9:30:ac:a5:f7:63:68:a1:37:5c:1c:ab:44: e0:3c:14:b0:cf:63:fc:72:ff:36:1d:c6:53:79:29:5b:1c:d5: e9:db:cb:7c:fd:e3:ca:94:eb:88:71:a0:7f:1c:1f:48:0e:3e: 11:9d:be:cc:2b:e8:8a:72:9a:1d:9d:9a:f0:54:ac:8f:3d:94: 14:02:7b:8a:e6:a4:89:de:e1:07:8b:29:73:2b:a2:c3:7b:45: 69:2b:ba:95:e1:21:17:a2:2f:f6:56:63:3e:68:11:a8:0d:10: 68:5a:42:ba:9f:8c:51:65:8c:e4:f6:9f:5f:46:27:65:24:3b: 44:f1:4b:72:fc:fa:5c:c1:98:dc:38:ec:a0:57:ca:36:f7:d8: f3:4c:4d:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYLz6Ixep1HtTizVTkmbpjxRSR40wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEwNzA5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjY0MzdiZjc4NDdhMGUxOTdlZDM1MjlmMjAzNmNhODEw ZDc2YTM4NDM3NjY4MDAzN2U5ODQ5YTU4Nzk3OTQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4nluJ7N3ZyG2U/IVyr4NHpSuDO0lEnC62X22Xgp1XpBAA xRbiRMgTZ5/OZuS2UQjT5lyUUtnqZdQVXGwOdG1paHlKS8chQTi60UNwwcWGLYEB NloaA9oeIg589M4cBKFHd8MPPWWh2xTYY9ypFGoAptu06sLDdf9P059s5lkMlaGs OcxtSvflzJO0Pd1i2BxQ9XHMMoElhF+zQ0MLDxKf+4GxiNdMPxeehCHJNL8f92N+ u8gB8ik/r03aDbldSiao5kR963bKU00GdSGopeVf7TZeaKKkCZyJ2VlS8+bsZPNq 5oLlpE3SA5vERmzq/ShxCcYvhsWwA9+2lRE1zXQfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUXpHXZhZ9pE/ipjWaypelUvd3j8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y1ZWI0NzIzLTUyMmYtNDI5NC1iNjgwLTllNGNlNzlkYWExZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDoMgwDQYJKoZIhvcNAQELBQADggEBAEjvtgZu5wZahlnjkLA+llEUbaNF m8T40XMtd+8w6fSslYNOvf54u7A3Tmu38/rHmPnwXPG/BocHxYdJi1US9PzPdcR7 G48KehbGVXg7+YYHKHMiggFL6uFCT12rxt6fdUrqNuG36ae5ETSCl1mL0ANz6TCs pfdjaKE3XByrROA8FLDPY/xy/zYdxlN5KVsc1enby3z948qU64hxoH8cH0gOPhGd vswr6Ipymh2dmvBUrI89lBQCe4rmpIne4QeLKXMrosN7RWkrupXhIReiL/ZWYz5o EagNEGhaQrqfjFFljOT2n19GJ2UkO0TxS3L8+lzBmNw47KBXyjb32PNMTYs= -----END CERTIFICATE-----Generated at Mon Oct 20 15:47:29 2025 by rpki-client