$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/249ed213-d1cc-4b51-a2c9-7c2c168edab9.roa File: 249ed213-d1cc-4b51-a2c9-7c2c168edab9.roa (raw, json) Hash identifier: o7VPYBGrOk8A/msOOvX9kKqifubrwVRfgJzvD9Fruu0= Subject key identifier: 8B:3A:99:51:AA:1B:D9:1E:BC:5E:AD:DF:63:0C:66:BD:C2:B8:E4:99 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 56D889746465D8456A335820A0606999D8E11C8E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/249ed213-d1cc-4b51-a2c9-7c2c168edab9.roa Signing time: Fri 26 Sep 2025 00:18:34 +0000 ROA not before: Fri 26 Sep 2025 00:18:34 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d8:89:74:64:65:d8:45:6a:33:58:20:a0:60:69:99:d8:e1:1c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:18:34 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=139d092a479091e4a51ec1f0a59299f6206cc04a5511d914cc4155a852854276, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:32:9f:0b:4f:09:6e:d0:c3:45:24:1e:65:76: 1d:9d:27:52:b3:27:52:75:74:cc:18:43:b6:62:a6: 64:06:85:8c:96:03:f8:67:d8:9f:15:12:73:ba:22: 8a:47:78:b4:6a:b9:62:02:5d:06:46:ac:7a:ac:d3: f6:ba:ad:0f:ed:89:cf:90:8f:90:42:5d:a0:32:e9: a9:f3:26:63:d0:75:15:6a:39:11:28:d8:e0:a0:94: ff:5f:cf:dd:ff:c9:8f:06:71:a0:89:f6:f2:49:dd: 38:a0:f6:e5:39:7d:82:f4:36:24:3c:21:7c:4c:3b: b9:2d:3f:22:12:b3:12:d2:97:03:f9:f2:4b:e2:bd: 0f:48:88:a1:e2:0f:2a:bd:f5:5a:dd:1f:fd:a8:6f: 68:36:97:60:f0:4c:14:9e:3a:0e:18:2e:c4:82:11: 44:ae:84:19:1d:a9:15:5b:87:df:d5:bc:de:9d:3d: 90:dc:92:42:db:ad:f9:01:74:12:ab:2b:03:3a:96: 43:b9:67:14:61:4c:c3:8e:ab:48:2b:38:a2:08:d2: 9d:86:05:bf:9d:0b:9b:8b:79:1d:80:67:75:ce:14: 84:1e:3f:83:da:65:bf:06:f3:09:c3:4a:dc:5d:15: e2:db:6d:53:e1:09:dd:15:01:39:6a:d1:01:c6:87: 5e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3A:99:51:AA:1B:D9:1E:BC:5E:AD:DF:63:0C:66:BD:C2:B8:E4:99 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/249ed213-d1cc-4b51-a2c9-7c2c168edab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.28.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:59:11:12:4f:a3:44:c2:3a:75:49:1c:80:22:5a:e4:f8:62: 40:d0:7a:c9:df:bf:ae:e1:08:02:3d:39:ac:65:00:f8:4a:bb: 49:f4:89:3f:f6:66:a0:65:c3:5b:68:4b:3b:56:61:c0:00:6d: 87:f4:10:00:8f:bd:49:cd:81:24:1c:88:9b:f5:85:e1:32:4f: e2:2b:c9:c7:b8:6d:cb:15:5a:2c:af:75:ba:28:62:39:e1:bc: 16:c4:56:ab:1a:b0:38:00:a8:ed:ff:fd:cc:70:a7:46:61:57: 71:94:0b:50:47:b8:29:1c:d0:21:d9:f8:65:a1:40:42:58:f9: 15:c7:d7:e9:5f:32:dd:d5:9a:cd:e3:14:40:d8:6f:ba:74:cd: 53:4a:78:c3:c7:39:9d:15:04:b7:2f:e2:a0:a8:ec:89:1e:90: d2:f7:ef:92:b5:79:03:ba:d9:23:4c:db:c6:20:a1:92:e6:1f: 23:62:e5:c9:72:97:44:11:ec:1b:50:e1:93:55:f0:1d:20:31: b3:11:92:c1:94:32:3c:05:3b:e5:66:c3:a2:f7:5f:c0:26:27: 41:a0:4e:1b:4b:bc:4b:bd:e3:79:3b:65:64:2f:13:11:ab:7a: 73:f9:2e:7b:46:f0:f6:70:89:15:28:fc:88:e9:62:60:f5:24: d3:4e:d0:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVtiJdGRl2EVqM1ggoGBpmdjhHI4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDAxODM0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzlkMDkyYTQ3OTA5MWU0YTUxZWMxZjBhNTkyOTlmNjIw NmNjMDRhNTUxMWQ5MTRjYzQxNTVhODUyODU0Mjc2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfMp8LTwlu0MNFJB5ldh2dJ1KzJ1J1dMwYQ7ZipmQGhYyW A/hn2J8VEnO6IopHeLRquWICXQZGrHqs0/a6rQ/tic+Qj5BCXaAy6anzJmPQdRVq OREo2OCglP9fz93/yY8GcaCJ9vJJ3Tig9uU5fYL0NiQ8IXxMO7ktPyISsxLSlwP5 8kvivQ9IiKHiDyq99VrdH/2ob2g2l2DwTBSeOg4YLsSCEUSuhBkdqRVbh9/VvN6d PZDckkLbrfkBdBKrKwM6lkO5ZxRhTMOOq0grOKII0p2GBb+dC5uLeR2AZ3XOFIQe P4PaZb8G8wnDStxdFeLbbVPhCd0VATlq0QHGh14pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUizqZUaob2R68Xq3fYwxmvcK45JkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0OWVkMjEzLWQxY2MtNGI1MS1hMmM5LTdjMmMxNjhlZGFiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDpRwwDQYJKoZIhvcNAQELBQADggEBAE5ZERJPo0TCOnVJHIAiWuT4YkDQ esnfv67hCAI9OaxlAPhKu0n0iT/2ZqBlw1toSztWYcAAbYf0EACPvUnNgSQciJv1 heEyT+Iryce4bcsVWiyvdbooYjnhvBbEVqsasDgAqO3//cxwp0ZhV3GUC1BHuCkc 0CHZ+GWhQEJY+RXH1+lfMt3Vms3jFEDYb7p0zVNKeMPHOZ0VBLcv4qCo7IkekNL3 75K1eQO62SNM28YgoZLmHyNi5clyl0QR7BtQ4ZNV8B0gMbMRksGUMjwFO+Vmw6L3 X8AmJ0GgThtLvEu943k7ZWQvExGrenP5LntG8PZwiRUo/IjpYmD1JNNO0J8= -----END CERTIFICATE-----Generated at Sat Oct 18 02:12:13 2025 by rpki-client