$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33ab6399-3fc3-4185-a9aa-69cc6c9127d0.roa File: 33ab6399-3fc3-4185-a9aa-69cc6c9127d0.roa (raw, json) Hash identifier: +dS+VHNZXlzs/a+HYWWQxvCyHuHWUR3D17duxmtuA68= Subject key identifier: 71:F1:B5:85:01:56:CC:00:75:AA:2E:1C:9A:71:2D:2B:FE:9F:77:AE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 28D6DA2749954AEB6EFCDC355A8850330D638E37 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33ab6399-3fc3-4185-a9aa-69cc6c9127d0.roa Signing time: Thu 25 Sep 2025 17:51:41 +0000 ROA not before: Thu 25 Sep 2025 17:51:41 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.163.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d6:da:27:49:95:4a:eb:6e:fc:dc:35:5a:88:50:33:0d:63:8e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:51:41 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=6356f45dabb168899974bcc967794b8762e460faccbaf2802c739460217297d5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5f:fa:26:7a:34:71:9e:35:9a:ad:b2:8d:68: 07:e1:6d:d0:28:76:72:c9:33:68:7c:6e:d5:41:3c: a2:49:ad:ed:16:ec:79:44:e9:b2:13:56:ad:2c:04: 0d:a6:30:57:7b:27:de:9d:fe:c9:2b:fd:eb:52:9c: ec:e8:75:79:21:7d:1b:38:36:ad:ae:2c:34:07:47: 7a:79:4f:99:f2:54:ba:fe:7b:38:5e:e3:ac:0c:27: e3:26:87:50:bb:ae:42:d7:ad:0c:4e:e4:af:aa:5d: 9a:e7:73:8f:f2:df:3f:71:d8:57:f3:52:8a:52:b8: d5:24:a8:6f:ab:19:08:fb:af:87:9e:7f:bc:e9:ac: 77:89:55:32:b6:e2:3d:79:0e:1b:58:94:a4:fd:d5: 5b:e8:04:9b:72:c7:50:f8:1d:65:c8:1e:1d:54:7c: fa:9a:e8:22:a3:a8:36:89:da:37:15:4a:ee:9b:77: 93:25:43:1c:39:6a:13:d5:a6:67:a9:cc:a1:b3:3a: 9f:c8:02:f7:df:a1:e5:20:82:33:6a:6a:b1:f4:17: 07:fa:b3:a0:82:49:09:86:e9:07:17:b2:00:f8:83: 06:78:46:64:a9:6d:a6:36:2b:b3:9e:61:a0:21:c5: 04:43:86:b0:9e:32:dc:08:3f:9f:4a:4d:b7:0e:ac: cf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F1:B5:85:01:56:CC:00:75:AA:2E:1C:9A:71:2D:2B:FE:9F:77:AE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33ab6399-3fc3-4185-a9aa-69cc6c9127d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.163.89.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:3b:5e:37:eb:a5:cd:b5:8b:4a:c5:f3:93:43:58:79:3b:0d: ea:d5:b4:12:95:5d:b2:57:50:cd:41:f3:24:8b:90:af:c7:17: 99:7c:17:3d:af:a7:22:fc:72:4d:7f:2e:12:22:fb:42:42:73: c2:a3:5a:4f:9f:92:3d:56:47:38:08:11:1a:5f:49:d8:f7:a9: 68:51:94:62:46:cc:f4:be:8c:5f:c1:21:5c:27:3e:95:a5:e5: 47:58:2b:1f:0a:3f:fe:f0:14:a1:56:ff:c3:4c:96:6a:de:56: 9f:52:13:28:54:30:8a:c9:fe:57:8e:21:32:26:b1:f7:21:ea: e9:f0:06:e3:24:6a:84:08:46:5a:65:21:e3:c4:6e:5e:ba:74: a4:80:b7:d4:0a:49:0f:76:64:80:d4:64:c5:f8:fe:33:34:fc: b4:0f:43:80:6d:44:74:90:71:fb:e4:5f:73:7b:44:c9:67:5b: da:4b:3d:32:97:54:bd:d0:25:c4:71:9b:ba:ce:7c:af:44:ef: 3f:59:eb:df:d8:51:48:87:eb:75:4e:99:c8:95:2c:74:fe:a9: 82:98:24:96:73:bf:41:bd:db:e6:b2:31:c1:ef:e1:71:70:73: a9:77:5a:c0:ce:63:9a:c2:73:af:87:12:50:27:90:05:c5:55: e8:6f:60:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKNbaJ0mVSutu/Nw1WohQMw1jjjcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTc1MTQxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzU2ZjQ1ZGFiYjE2ODg5OTk3NGJjYzk2Nzc5NGI4NzYy ZTQ2MGZhY2NiYWYyODAyYzczOTQ2MDIxNzI5N2Q1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYX/omejRxnjWarbKNaAfhbdAodnLJM2h8btVBPKJJre0W 7HlE6bITVq0sBA2mMFd7J96d/skr/etSnOzodXkhfRs4Nq2uLDQHR3p5T5nyVLr+ ezhe46wMJ+Mmh1C7rkLXrQxO5K+qXZrnc4/y3z9x2FfzUopSuNUkqG+rGQj7r4ee f7zprHeJVTK24j15DhtYlKT91VvoBJtyx1D4HWXIHh1UfPqa6CKjqDaJ2jcVSu6b d5MlQxw5ahPVpmepzKGzOp/IAvffoeUggjNqarH0Fwf6s6CCSQmG6QcXsgD4gwZ4 RmSpbaY2K7OeYaAhxQRDhrCeMtwIP59KTbcOrM+NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcfG1hQFWzAB1qi4cmnEtK/6fd64wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMzYWI2Mzk5LTNmYzMtNDE4NS1hOWFhLTY5Y2M2YzkxMjdkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADo1kwDQYJKoZIhvcNAQELBQADggEBAB07Xjfrpc21i0rF85NDWHk7DerV tBKVXbJXUM1B8ySLkK/HF5l8Fz2vpyL8ck1/LhIi+0JCc8KjWk+fkj1WRzgIERpf Sdj3qWhRlGJGzPS+jF/BIVwnPpWl5UdYKx8KP/7wFKFW/8NMlmreVp9SEyhUMIrJ /leOITImsfch6unwBuMkaoQIRlplIePEbl66dKSAt9QKSQ92ZIDUZMX4/jM0/LQP Q4BtRHSQcfvkX3N7RMlnW9pLPTKXVL3QJcRxm7rOfK9E7z9Z69/YUUiH63VOmciV LHT+qYKYJJZzv0G92+ayMcHv4XFwc6l3WsDOY5rCc6+HElAnkAXFVehvYKg= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:53 2025 by rpki-client