$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1848e96c-c26e-4cba-8362-0ad506b31755.roa File: 1848e96c-c26e-4cba-8362-0ad506b31755.roa (raw, json) Hash identifier: uKYUR6g5okb4wIwvkdwwdf12dZVppyYP9Sr1vC6AmdM= Subject key identifier: 57:FB:79:19:64:3B:88:8C:4D:94:68:97:5E:F1:97:25:46:46:2F:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 76987D63949785FA849741686202208E798F4261 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1848e96c-c26e-4cba-8362-0ad506b31755.roa Signing time: Thu 25 Sep 2025 16:37:25 +0000 ROA not before: Thu 25 Sep 2025 16:37:25 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:98:7d:63:94:97:85:fa:84:97:41:68:62:02:20:8e:79:8f:42:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 16:37:25 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=4da001b81bb75962877a53cf099772f8f3513eea4d6c8adaaec46266b18c4421, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b0:9e:55:a0:19:7b:ab:eb:4e:e1:17:ee:e3: 7b:c8:2f:d3:07:38:0d:7c:5e:0c:00:42:d3:b1:dc: 2f:c8:1d:a2:b2:16:c8:0c:85:b4:4a:7d:3b:c2:35: dd:4d:ae:c9:b6:92:bb:5a:31:80:88:9e:9e:d6:f0: 84:76:5c:d2:6f:05:13:7c:d8:1a:f3:cb:30:ba:56: 3f:f7:8b:a4:f1:35:22:2a:ed:b7:2e:21:a7:37:a1: c7:4d:b0:34:89:90:ff:bf:61:64:2f:53:49:42:d4: ed:e2:0a:ef:34:6e:4f:d8:88:27:52:81:36:cb:e7: 03:a3:91:92:28:df:b7:7f:7e:14:9d:93:de:b5:72: d5:e4:cb:52:b3:4a:8d:05:79:ea:08:7d:a7:e3:24: 3d:10:88:b6:4d:02:cc:bb:6e:79:d9:02:43:49:3b: 43:c4:9a:30:c9:1a:92:12:39:82:5e:23:b3:56:c1: 5d:1f:5c:0d:32:1d:31:39:56:46:cc:65:02:23:cd: 46:ec:55:aa:73:9b:95:b2:7b:09:fe:d5:fa:83:68: 83:b7:ca:35:3a:d6:3e:b9:72:fb:b6:4b:f1:25:4d: c0:6f:c3:80:22:72:df:8f:8c:09:3d:eb:18:67:ca: db:01:d7:3d:05:e0:d4:79:95:fe:f6:eb:0e:51:b5: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FB:79:19:64:3B:88:8C:4D:94:68:97:5E:F1:97:25:46:46:2F:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1848e96c-c26e-4cba-8362-0ad506b31755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.120.0/24 Signature Algorithm: sha256WithRSAEncryption ae:36:99:b2:c8:76:96:58:ab:de:db:d0:05:df:06:21:3a:ef: 9d:37:81:a6:44:be:4f:ae:95:08:86:fc:24:f6:8c:37:50:64: 3b:e0:74:b0:e3:69:12:a0:3e:aa:eb:9c:ac:aa:e1:dd:78:84: fd:33:11:36:35:94:bd:6b:62:63:e1:63:46:f2:0c:4a:27:a6: f2:a8:c5:d7:5d:73:0a:db:44:dc:db:66:f1:80:8f:39:a0:2e: 21:bf:84:7e:88:1b:8b:5d:81:74:98:80:7f:3c:77:0a:63:c0: c9:0b:db:da:ab:73:03:90:a7:17:70:21:6c:49:62:3f:9d:e2: aa:9a:3e:8c:60:a9:d1:f2:5a:88:eb:9f:dd:f0:8e:70:b0:5d: c2:04:41:b7:1f:4d:d1:d3:97:3c:e8:1a:fd:b1:fa:6d:c4:65: c3:34:c3:50:f1:db:23:3d:45:22:c2:59:ae:90:83:59:f2:ab: 15:b7:77:09:39:00:74:05:7a:bf:01:1e:1a:cb:e6:0f:f4:39: 58:93:af:1f:8c:5e:1f:07:e5:0c:a7:61:8e:c7:8e:17:33:a6: 39:c1:b7:0a:f7:81:b5:62:f3:da:31:1f:f7:f6:17:43:c2:bd: 8b:4d:79:77:1d:09:b1:e8:9a:2b:e7:55:c5:27:39:cd:ce:83: 05:1f:34:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdph9Y5SXhfqEl0FoYgIgjnmPQmEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTYzNzI1WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZGEwMDFiODFiYjc1OTYyODc3YTUzY2YwOTk3NzJmOGYz NTEzZWVhNGQ2YzhhZGFhZWM0NjI2NmIxOGM0NDIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDisJ5VoBl7q+tO4Rfu43vIL9MHOA18XgwAQtOx3C/IHaKy FsgMhbRKfTvCNd1Nrsm2krtaMYCInp7W8IR2XNJvBRN82BrzyzC6Vj/3i6TxNSIq 7bcuIac3ocdNsDSJkP+/YWQvU0lC1O3iCu80bk/YiCdSgTbL5wOjkZIo37d/fhSd k961ctXky1KzSo0FeeoIfafjJD0QiLZNAsy7bnnZAkNJO0PEmjDJGpISOYJeI7NW wV0fXA0yHTE5VkbMZQIjzUbsVapzm5Wyewn+1fqDaIO3yjU61j65cvu2S/ElTcBv w4Aict+PjAk96xhnytsB1z0F4NR5lf726w5RtSsDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV/t5GWQ7iIxNlGiXXvGXJUZGL0UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE4NDhlOTZjLWMyNmUtNGNiYS04MzYyLTBhZDUwNmIzMTc1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoHgwDQYJKoZIhvcNAQELBQADggEBAK42mbLIdpZYq97b0AXfBiE67503 gaZEvk+ulQiG/CT2jDdQZDvgdLDjaRKgPqrrnKyq4d14hP0zETY1lL1rYmPhY0by DEonpvKoxdddcwrbRNzbZvGAjzmgLiG/hH6IG4tdgXSYgH88dwpjwMkL29qrcwOQ pxdwIWxJYj+d4qqaPoxgqdHyWojrn93wjnCwXcIEQbcfTdHTlzzoGv2x+m3EZcM0 w1Dx2yM9RSLCWa6Qg1nyqxW3dwk5AHQFer8BHhrL5g/0OViTrx+MXh8H5QynYY7H jhczpjnBtwr3gbVi89oxH/f2F0PCvYtNeXcdCbHomivnVcUnOc3OgwUfNI0= -----END CERTIFICATE-----Generated at Sat Oct 18 00:00:13 2025 by rpki-client