$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33bdd0f0-3fcd-4739-bd0d-7f95b1ea8620.roa File: 33bdd0f0-3fcd-4739-bd0d-7f95b1ea8620.roa (raw, json) Hash identifier: 6dFbK8NNf0d1sYW30wmc/1bO/7whmdxqEA6rLKpc3w8= Subject key identifier: 0A:DE:98:E6:3A:AF:A0:D6:DE:C1:D7:F5:6F:86:5F:03:95:9F:94:31 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 571A92BE5FB5A8AACC09388827153CF90A2CD39A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33bdd0f0-3fcd-4739-bd0d-7f95b1ea8620.roa Signing time: Fri 26 Sep 2025 01:14:49 +0000 ROA not before: Fri 26 Sep 2025 01:14:49 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.163.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1a:92:be:5f:b5:a8:aa:cc:09:38:88:27:15:3c:f9:0a:2c:d3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:14:49 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=0e7be90418769160ac3d004c1b3ea8116543df39f45ac419531561bd93e1dd1f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:03:cf:9e:97:20:1b:55:68:b5:35:bd:54:98: 00:3a:f3:86:cb:05:85:43:63:7d:99:fd:be:82:4a: 46:15:60:25:87:f9:2d:bd:41:5b:0c:7d:38:7a:a2: 72:b5:ac:fe:b3:ad:15:d9:42:ee:5c:c2:04:2a:b7: 04:4e:bd:ab:3e:32:24:01:e2:58:98:63:c9:22:20: ea:ce:6e:27:22:eb:3a:72:ab:6a:2c:f1:70:ea:16: 0a:b2:06:4f:a2:10:30:a1:f1:37:e1:11:49:84:76: fc:89:2e:84:7a:b9:c6:0b:04:e1:fc:7d:98:f7:f3: 38:77:02:78:8a:d7:26:4f:18:20:16:67:fe:3a:1c: f3:ce:03:89:d0:02:78:a9:b8:e1:43:28:c2:72:c2: cc:ad:4f:a2:ae:dc:f6:f3:65:83:92:1f:7c:b8:b5: bf:25:c2:59:3a:04:cd:46:5b:8f:fb:f6:0b:59:a6: 47:f5:66:ea:db:ce:e9:6b:47:a7:b3:ad:b6:10:8c: 8c:cd:b2:b3:ff:cb:e4:28:fc:90:7b:4d:8d:0e:8d: 33:58:de:c9:96:57:46:3d:c7:de:c9:5f:98:3b:d5: be:4d:f1:06:95:55:53:16:be:6e:c4:27:d8:53:3f: bf:19:63:8f:5f:21:06:ab:73:eb:2d:8d:9a:94:35: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DE:98:E6:3A:AF:A0:D6:DE:C1:D7:F5:6F:86:5F:03:95:9F:94:31 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33bdd0f0-3fcd-4739-bd0d-7f95b1ea8620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.163.88.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:10:7b:f9:f3:0c:31:3d:d2:96:56:8b:f9:9e:34:ec:e0:47: ff:74:a7:8b:37:cc:53:42:2a:08:cf:f8:3d:8e:4a:3e:1b:65: eb:9f:3f:1b:a5:18:a5:44:97:6d:76:7d:e3:74:37:71:37:9b: 6c:3e:28:1c:e4:a4:e0:a6:b4:5d:f4:18:f2:33:46:54:8f:66: 64:78:06:8e:2a:46:f5:ed:13:ee:3e:e1:22:90:2d:33:a4:06: 00:f2:e3:74:a7:aa:fd:1b:24:23:3a:c7:57:e2:65:8e:c3:5d: dc:2a:fa:3e:fa:e3:09:30:dd:c4:47:0f:47:53:27:6a:77:cc: d2:13:6b:5a:74:14:99:84:14:0c:76:9d:01:7f:94:cb:4d:da: 4c:2d:27:f5:f4:fc:7b:f1:6c:70:c6:b1:cf:eb:53:6f:df:2a: 05:4f:3c:9b:6d:5a:df:d9:c5:ff:26:63:56:3b:8f:46:fb:ab: 7b:c1:a2:46:b6:c0:0e:c8:5b:84:48:74:76:a5:42:04:82:cd: 23:2d:9a:01:60:de:22:b7:3a:4b:b5:b4:1e:7c:e8:61:73:51: d0:4d:a5:72:40:e4:49:5a:1a:07:10:b5:36:60:9b:79:f4:9d: ca:5e:ac:29:48:13:16:90:df:52:87:52:4e:a9:a6:7f:a6:f4: 1b:06:40:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVxqSvl+1qKrMCTiIJxU8+Qos05owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDExNDQ5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTdiZTkwNDE4NzY5MTYwYWMzZDAwNGMxYjNlYTgxMTY1 NDNkZjM5ZjQ1YWM0MTk1MzE1NjFiZDkzZTFkZDFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKA8+elyAbVWi1Nb1UmAA684bLBYVDY32Z/b6CSkYVYCWH +S29QVsMfTh6onK1rP6zrRXZQu5cwgQqtwROvas+MiQB4liYY8kiIOrObici6zpy q2os8XDqFgqyBk+iEDCh8TfhEUmEdvyJLoR6ucYLBOH8fZj38zh3AniK1yZPGCAW Z/46HPPOA4nQAnipuOFDKMJywsytT6Ku3PbzZYOSH3y4tb8lwlk6BM1GW4/79gtZ pkf1ZurbzulrR6ezrbYQjIzNsrP/y+Qo/JB7TY0OjTNY3smWV0Y9x97JX5g71b5N 8QaVVVMWvm7EJ9hTP78ZY49fIQarc+stjZqUNcVrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCt6Y5jqvoNbewdf1b4ZfA5WflDEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMzYmRkMGYwLTNmY2QtNDczOS1iZDBkLTdmOTViMWVhODYyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDo1gwDQYJKoZIhvcNAQELBQADggEBAB0Qe/nzDDE90pZWi/meNOzgR/90 p4s3zFNCKgjP+D2OSj4bZeufPxulGKVEl212feN0N3E3m2w+KBzkpOCmtF30GPIz RlSPZmR4Bo4qRvXtE+4+4SKQLTOkBgDy43Snqv0bJCM6x1fiZY7DXdwq+j764wkw 3cRHD0dTJ2p3zNITa1p0FJmEFAx2nQF/lMtN2kwtJ/X0/HvxbHDGsc/rU2/fKgVP PJttWt/Zxf8mY1Y7j0b7q3vBoka2wA7IW4RIdHalQgSCzSMtmgFg3iK3Oku1tB58 6GFzUdBNpXJA5ElaGgcQtTZgm3n0ncperClIExaQ31KHUk6ppn+m9BsGQDA= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:17 2025 by rpki-client