$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b2a8059-96ea-4535-9507-b136ec5b8939.roa File: 3b2a8059-96ea-4535-9507-b136ec5b8939.roa (raw, json) Hash identifier: QOtZcwv5VNZrbFmM+pEdefQ/DwMNvrc2Fuo7onSSwfM= Subject key identifier: 2C:67:3B:3C:64:E6:9D:52:40:BC:6C:7F:4F:D2:0D:01:90:EC:88:25 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1EBAE2D6E2935EF543780B79834E9BEEF7AE62D2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b2a8059-96ea-4535-9507-b136ec5b8939.roa Signing time: Thu 25 Sep 2025 23:29:29 +0000 ROA not before: Thu 25 Sep 2025 23:29:29 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ba:e2:d6:e2:93:5e:f5:43:78:0b:79:83:4e:9b:ee:f7:ae:62:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:29:29 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=fb233057ee5498f2c4b0faa8562af2d4e6079ef19ffe2e533514fdb4d4bc5f61, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9c:69:86:a6:cb:ae:5d:41:c5:09:c1:c4:f3: b1:e5:28:20:30:71:03:bc:f9:70:5e:73:ac:96:fc: 2c:16:09:0f:9b:fe:2a:5b:5f:10:c1:d9:d7:ec:df: cf:23:db:7a:09:f9:56:23:ba:0b:6d:01:37:14:11: 33:3c:9c:89:65:33:8b:23:06:91:37:ad:13:7f:bb: 3f:4c:a2:ef:c2:2f:e3:df:1a:07:0f:df:1a:cb:b6: 5a:5c:e8:80:f4:d9:2d:e6:0b:a2:ab:fc:a8:d2:8c: de:4c:7b:3e:bd:de:a6:8e:61:ed:df:e5:a8:cf:8e: 49:d2:16:9e:2c:d6:c0:c8:7c:80:4f:1e:f8:ac:cb: e0:3d:60:80:d3:43:50:65:1f:7a:15:d3:d6:f5:83: 03:47:c0:a2:5b:f1:55:e2:c0:ba:30:00:37:5d:d1: 02:0c:63:02:2e:83:e7:d7:84:79:d8:bf:99:a3:07: db:6b:6b:0e:48:c3:38:b5:23:bd:cd:63:e5:66:4b: 69:77:d2:8c:71:49:31:b3:1d:d1:80:73:7c:22:82: 27:8a:fd:97:96:74:3a:5d:73:e8:61:99:e9:d8:b1: 04:5d:5f:b4:43:aa:f1:20:de:37:b3:49:c2:8f:28: 32:f8:04:32:f3:a5:6b:fa:6b:90:8a:40:25:39:c1: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:67:3B:3C:64:E6:9D:52:40:BC:6C:7F:4F:D2:0D:01:90:EC:88:25 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b2a8059-96ea-4535-9507-b136ec5b8939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.38.0/23 Signature Algorithm: sha256WithRSAEncryption 47:71:9a:62:19:3f:18:7c:d8:eb:a7:66:ff:5c:ae:94:d6:1d: ca:89:7a:34:f3:24:64:5d:13:97:4c:1e:8e:4b:98:df:c5:a3: 1e:3c:4b:bf:cf:0b:7e:de:2f:e3:d0:35:b0:dc:fe:bc:8b:64: 8b:25:2c:6d:50:93:ca:53:6f:ef:be:b8:c2:d1:b6:0d:87:ff: 0b:63:c7:04:91:13:12:97:c5:8d:13:4c:76:d3:b7:57:58:75: b4:1f:70:70:f4:da:ec:23:d6:5b:25:79:0a:33:09:9e:5a:1c: e4:7d:fb:33:c0:cd:20:d5:38:0d:a6:35:99:5a:69:14:0d:bd: e2:2c:e4:12:d4:5d:38:11:7f:a3:d6:24:81:7a:36:3f:2b:b3: 4d:38:82:91:6d:c8:c2:f6:04:ab:e2:21:bf:c5:ee:04:b5:ad: ff:84:fb:5f:d5:f2:26:34:ee:0f:64:14:56:52:24:b7:6b:ce: 57:0c:ff:bf:96:65:c0:56:cd:d2:d5:8f:9a:37:99:36:53:92: bf:da:5c:20:19:29:a8:80:6f:86:3b:c0:ad:a2:ee:48:14:82: 50:28:df:af:8b:6b:f3:ea:db:97:fd:4f:59:81:86:f3:8d:00: 98:76:88:a0:fa:0c:23:50:c8:74:4a:3d:eb:f2:38:4d:34:35: 02:8b:94:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHrri1uKTXvVDeAt5g06b7veuYtIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMyOTI5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjIzMzA1N2VlNTQ5OGYyYzRiMGZhYTg1NjJhZjJkNGU2 MDc5ZWYxOWZmZTJlNTMzNTE0ZmRiNGQ0YmM1ZjYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCinGmGpsuuXUHFCcHE87HlKCAwcQO8+XBec6yW/CwWCQ+b /ipbXxDB2dfs388j23oJ+VYjugttATcUETM8nIllM4sjBpE3rRN/uz9Mou/CL+Pf GgcP3xrLtlpc6ID02S3mC6Kr/KjSjN5Mez693qaOYe3f5ajPjknSFp4s1sDIfIBP Hvisy+A9YIDTQ1BlH3oV09b1gwNHwKJb8VXiwLowADdd0QIMYwIug+fXhHnYv5mj B9traw5Iwzi1I73NY+VmS2l30oxxSTGzHdGAc3wigieK/ZeWdDpdc+hhmenYsQRd X7RDqvEg3jezScKPKDL4BDLzpWv6a5CKQCU5wZc3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULGc7PGTmnVJAvGx/T9INAZDsiCUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiMmE4MDU5LTk2ZWEtNDUzNS05NTA3LWIxMzZlYzViODkzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrSYwDQYJKoZIhvcNAQELBQADggEBAEdxmmIZPxh82OunZv9crpTWHcqJ ejTzJGRdE5dMHo5LmN/Fox48S7/PC37eL+PQNbDc/ryLZIslLG1Qk8pTb+++uMLR tg2H/wtjxwSRExKXxY0TTHbTt1dYdbQfcHD02uwj1lsleQozCZ5aHOR9+zPAzSDV OA2mNZlaaRQNveIs5BLUXTgRf6PWJIF6Nj8rs004gpFtyML2BKviIb/F7gS1rf+E +1/V8iY07g9kFFZSJLdrzlcM/7+WZcBWzdLVj5o3mTZTkr/aXCAZKaiAb4Y7wK2i 7kgUglAo36+La/Pq25f9T1mBhvONAJh2iKD6DCNQyHRKPevyOE00NQKLlCo= -----END CERTIFICATE-----Generated at Sat Oct 18 00:18:08 2025 by rpki-client