$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/398c531a-1e4d-4160-b579-f9ea3146780c.roa File: 398c531a-1e4d-4160-b579-f9ea3146780c.roa (raw, json) Hash identifier: j5nvqsuX+C3a9M/eZfS9GdEe+SHM14G0k7a9KZkU0Y8= Subject key identifier: 26:E5:11:95:DF:59:4B:89:82:38:9C:24:04:75:8A:61:37:7F:4C:82 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6729B94C9412D5503F5BB8BA2D1A619AFC7D6A1E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/398c531a-1e4d-4160-b579-f9ea3146780c.roa Signing time: Thu 25 Sep 2025 17:44:38 +0000 ROA not before: Thu 25 Sep 2025 17:44:38 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.163.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:29:b9:4c:94:12:d5:50:3f:5b:b8:ba:2d:1a:61:9a:fc:7d:6a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:44:38 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=fe0b5d24028201ea75ca28eb4a37c6371b0e0b6b7c18a5e642053ff5288a90b8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4e:e9:78:d9:84:7c:5c:b0:e0:4e:36:f3:d9: 1b:74:44:5a:df:9f:61:2a:59:a0:3d:2a:f2:ef:fc: a1:6d:2d:e0:06:f7:f3:aa:8b:78:c2:7e:cc:c7:ee: 22:bf:2a:05:1f:22:09:2f:23:af:cf:ed:ac:81:eb: 20:09:ad:39:45:17:19:ba:5a:9c:7a:aa:c5:19:10: 7f:c5:65:cf:8f:24:c6:4b:9b:5a:9e:ed:2e:ad:1f: d0:05:51:2f:c6:c5:69:d6:95:73:3f:58:9a:3f:21: 09:ef:c0:3f:31:81:a2:2e:6b:ba:6d:a9:fa:a7:4a: 33:2c:18:28:3d:6d:66:7c:8d:52:b5:c9:02:34:33: 71:c9:4d:9a:62:5f:2f:4d:b6:ca:7f:b5:e1:e3:c6: 27:3a:9a:45:85:24:e0:7f:eb:9c:f0:c0:2d:ea:62: c4:51:bf:89:73:6c:81:9d:20:b0:37:b8:15:9d:e8: d1:b5:ef:c3:c6:60:f1:6f:3d:d5:cc:2f:d7:cd:2e: d5:7c:87:73:97:12:e2:89:33:2b:73:65:f4:b4:18: 62:8b:71:2f:18:7a:d3:2e:14:0c:9c:55:7f:cc:60: 4d:86:a3:11:b1:61:b2:af:26:a3:b9:8c:3c:cb:bb: 68:c0:60:92:52:f8:19:56:4d:ba:1d:6c:4f:cd:81: f1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E5:11:95:DF:59:4B:89:82:38:9C:24:04:75:8A:61:37:7F:4C:82 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/398c531a-1e4d-4160-b579-f9ea3146780c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.163.36.0/24 Signature Algorithm: sha256WithRSAEncryption 95:9c:05:44:64:f7:dc:2d:97:ee:41:f4:b7:24:15:dc:cc:e2: ee:b7:07:72:27:ef:98:2a:df:42:c4:9b:e0:d9:af:d3:42:0e: e3:6a:ef:61:9a:bb:e4:7c:72:24:21:9b:08:ea:36:86:d5:7b: 02:11:45:c2:01:7f:72:4c:a0:80:31:34:73:3c:73:47:76:0c: 86:3e:ea:ad:a0:5c:4d:88:c2:87:9e:a8:8a:47:d0:23:48:6a: 6c:d3:ac:b7:d1:d3:77:14:f9:7d:c3:78:83:77:07:6b:85:f5: bb:82:cf:b3:bd:1f:e9:1b:67:24:e1:f3:f6:76:8c:2a:88:99: 13:b8:10:fb:df:1e:c3:4f:ff:87:cc:94:d9:71:42:b1:3f:83: 56:31:3c:28:f0:7a:38:81:6c:19:55:1e:d6:56:2f:22:61:1c: 34:55:bc:45:8c:97:71:c2:8f:59:02:cd:5a:e0:7a:0e:07:d6: 7b:17:c2:b7:e6:be:86:f7:eb:22:66:72:29:c6:af:69:4e:c1: c1:6d:98:f9:b8:95:19:fc:8f:88:75:40:a8:ce:d7:50:16:40: c0:34:45:66:3b:f1:92:98:42:6f:d6:00:21:58:f8:20:4b:ff: 2f:d3:2f:c0:ab:08:7f:b2:cf:58:da:b8:e5:63:4d:85:5e:da: e5:6d:05:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZym5TJQS1VA/W7i6LRphmvx9ah4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTc0NDM4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTBiNWQyNDAyODIwMWVhNzVjYTI4ZWI0YTM3YzYzNzFi MGUwYjZiN2MxOGE1ZTY0MjA1M2ZmNTI4OGE5MGI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNTul42YR8XLDgTjbz2Rt0RFrfn2EqWaA9KvLv/KFtLeAG 9/Oqi3jCfszH7iK/KgUfIgkvI6/P7ayB6yAJrTlFFxm6Wpx6qsUZEH/FZc+PJMZL m1qe7S6tH9AFUS/GxWnWlXM/WJo/IQnvwD8xgaIua7ptqfqnSjMsGCg9bWZ8jVK1 yQI0M3HJTZpiXy9Ntsp/teHjxic6mkWFJOB/65zwwC3qYsRRv4lzbIGdILA3uBWd 6NG178PGYPFvPdXML9fNLtV8h3OXEuKJMytzZfS0GGKLcS8YetMuFAycVX/MYE2G oxGxYbKvJqO5jDzLu2jAYJJS+BlWTbodbE/NgfEpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJuURld9ZS4mCOJwkBHWKYTd/TIIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5OGM1MzFhLTFlNGQtNDE2MC1iNTc5LWY5ZWEzMTQ2NzgwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoyQwDQYJKoZIhvcNAQELBQADggEBAJWcBURk99wtl+5B9LckFdzM4u63 B3In75gq30LEm+DZr9NCDuNq72Gau+R8ciQhmwjqNobVewIRRcIBf3JMoIAxNHM8 c0d2DIY+6q2gXE2IwoeeqIpH0CNIamzTrLfR03cU+X3DeIN3B2uF9buCz7O9H+kb ZyTh8/Z2jCqImRO4EPvfHsNP/4fMlNlxQrE/g1YxPCjwejiBbBlVHtZWLyJhHDRV vEWMl3HCj1kCzVrgeg4H1nsXwrfmvob36yJmcinGr2lOwcFtmPm4lRn8j4h1QKjO 11AWQMA0RWY78ZKYQm/WACFY+CBL/y/TL8CrCH+yz1jauOVjTYVe2uVtBVs= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:20 2025 by rpki-client