$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b275572-5782-4dae-9f59-f7035856dd5e.roa File: 3b275572-5782-4dae-9f59-f7035856dd5e.roa (raw, json) Hash identifier: kWQ8YzqEKIy68ut843WR1Pgc6eUUrI2nmDP40M1eGQY= Subject key identifier: DD:6F:A4:75:CB:54:10:30:E5:7F:16:B3:35:D3:41:E7:4D:90:E7:DF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 380D0B56DCAA92A6B203B2691C16B44956FD78FE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b275572-5782-4dae-9f59-f7035856dd5e.roa Signing time: Mon 13 Oct 2025 17:47:24 +0000 ROA not before: Mon 13 Oct 2025 17:47:24 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.23.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:0d:0b:56:dc:aa:92:a6:b2:03:b2:69:1c:16:b4:49:56:fd:78:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 17:47:24 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=473bcdc746b6fda8a24baffa1611a1e2f0cd96274e7a3126d0540f6b4b451f49, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:02:f2:72:e8:b2:c3:21:7b:b3:c5:59:6b: c4:eb:88:f4:6d:68:82:00:b6:d1:66:87:d5:df:75: 79:2a:c7:19:7c:ab:c9:01:0d:ff:12:00:e8:02:33: 9f:08:8d:4d:e1:67:8b:2f:2e:3e:08:ae:78:40:16: 4d:9f:46:13:14:ef:75:49:be:3d:59:b7:03:c3:e4: bb:39:8e:51:29:85:86:e2:1b:ef:1c:8b:a1:2f:e7: b9:4a:bf:e0:7e:09:74:f9:9e:5b:8f:aa:9d:7b:09: 31:48:7c:9c:e2:63:60:e5:27:1f:cb:e4:9e:94:e0: f3:f5:22:80:7e:e9:e3:98:a0:f0:25:e5:a5:bf:ed: 92:c4:85:6a:b3:c2:cb:bc:9c:14:78:1e:9a:17:67: ef:a1:de:96:9e:f0:f8:a7:6b:6c:6b:bd:f0:b8:a8: 43:39:44:8d:8e:80:1e:2b:19:6a:8c:54:8a:6d:29: d7:ce:3e:85:ea:ff:0e:72:9c:08:3d:33:02:c9:25: 2f:12:d6:6d:64:9e:38:46:0a:11:70:28:0f:47:27: 17:61:ea:f7:e1:a5:4e:bd:88:92:6b:5f:84:ec:4b: e6:70:82:ca:dd:c9:26:18:ec:77:c8:31:bf:d9:7c: 31:ad:b5:d9:22:7b:76:68:74:a8:8f:a8:b3:a6:13: 58:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6F:A4:75:CB:54:10:30:E5:7F:16:B3:35:D3:41:E7:4D:90:E7:DF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b275572-5782-4dae-9f59-f7035856dd5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.23.138.0/24 Signature Algorithm: sha256WithRSAEncryption 91:ab:0c:73:e1:3c:da:17:3e:5b:2f:1c:a0:18:b8:64:85:ce: 8f:06:cb:6e:2f:62:a1:82:62:d3:ea:17:4f:1e:02:68:cb:d6: a1:48:6a:27:e4:de:6a:b4:d8:63:18:77:b3:bd:29:0d:48:7f: 6b:c4:a9:9a:d5:8a:c7:d3:3e:33:fc:f7:67:1c:b1:00:1d:8f: 89:f1:e8:ef:df:5c:ba:64:73:23:db:12:6f:53:7e:a6:b9:c6: 45:04:56:3c:5b:54:49:2e:09:ac:73:05:e9:3b:00:d1:4e:4d: a7:f4:d9:56:eb:90:04:9b:04:c0:af:28:d4:d3:e4:c5:75:f1: f9:eb:8f:b2:df:34:88:cc:95:51:74:ca:d8:97:cf:4e:c7:de: d3:89:12:1f:8f:98:12:17:7b:40:ac:5d:71:13:ec:e3:5f:b6: 31:d0:55:2b:62:12:db:a9:92:0e:97:08:01:d7:41:bd:26:2b: f3:ea:49:0a:e3:78:9e:4c:4f:60:bb:56:c1:5b:52:26:f8:a9: a1:bb:43:1c:66:1f:9b:80:77:b8:c3:6f:75:23:c2:be:af:6a: 3a:07:64:6c:63:a5:d4:6c:11:ef:fb:63:b6:51:5b:16:37:0b: 78:b9:2d:6b:5c:01:02:7d:fd:2e:27:11:b8:b3:94:1e:fc:bb: ee:41:dc:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOA0LVtyqkqayA7JpHBa0SVb9eP4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEzMTc0NzI0WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzNiY2RjNzQ2YjZmZGE4YTI0YmFmZmExNjExYTFlMmYw Y2Q5NjI3NGU3YTMxMjZkMDU0MGY2YjRiNDUxZjQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKNQLycuiywyF7s8VZa8TriPRtaIIAttFmh9XfdXkqxxl8 q8kBDf8SAOgCM58IjU3hZ4svLj4IrnhAFk2fRhMU73VJvj1ZtwPD5Ls5jlEphYbi G+8ci6Ev57lKv+B+CXT5nluPqp17CTFIfJziY2DlJx/L5J6U4PP1IoB+6eOYoPAl 5aW/7ZLEhWqzwsu8nBR4HpoXZ++h3pae8Pina2xrvfC4qEM5RI2OgB4rGWqMVIpt KdfOPoXq/w5ynAg9MwLJJS8S1m1knjhGChFwKA9HJxdh6vfhpU69iJJrX4TsS+Zw gsrdySYY7HfIMb/ZfDGttdkie3ZodKiPqLOmE1jbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3W+kdctUEDDlfxazNdNB502Q598wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiMjc1NTcyLTU3ODItNGRhZS05ZjU5LWY3MDM1ODU2ZGQ1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADF4owDQYJKoZIhvcNAQELBQADggEBAJGrDHPhPNoXPlsvHKAYuGSFzo8G y24vYqGCYtPqF08eAmjL1qFIaifk3mq02GMYd7O9KQ1If2vEqZrVisfTPjP892cc sQAdj4nx6O/fXLpkcyPbEm9Tfqa5xkUEVjxbVEkuCaxzBek7ANFOTaf02VbrkASb BMCvKNTT5MV18fnrj7LfNIjMlVF0ytiXz07H3tOJEh+PmBIXe0CsXXET7ONftjHQ VStiEtupkg6XCAHXQb0mK/PqSQrjeJ5MT2C7VsFbUib4qaG7QxxmH5uAd7jDb3Uj wr6vajoHZGxjpdRsEe/7Y7ZRWxY3C3i5LWtcAQJ9/S4nEbizlB78u+5B3G0= -----END CERTIFICATE-----Generated at Sat Oct 18 02:42:11 2025 by rpki-client