$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c08da84-6114-4dc1-8022-30529d49b480.roa File: 3c08da84-6114-4dc1-8022-30529d49b480.roa (raw, json) Hash identifier: dC+FQJMw9v4Zj21verNtDVPepGaSsHIkeNSt+2EbK7U= Subject key identifier: 21:4F:76:C5:B1:16:55:27:BC:EE:11:6A:21:A7:70:95:AB:03:50:6C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7B9BF6A3580D9D072B37EDAC525AFD057B7A309E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c08da84-6114-4dc1-8022-30529d49b480.roa Signing time: Fri 26 Sep 2025 01:17:44 +0000 ROA not before: Fri 26 Sep 2025 01:17:44 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:9b:f6:a3:58:0d:9d:07:2b:37:ed:ac:52:5a:fd:05:7b:7a:30:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:17:44 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=0f073a89bb6fa69207d65205ce9b6a51bcf58ff1bfb11e0e04e8d56421c7343c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:f1:e1:63:76:bf:b4:dd:c8:21:9c:93:82: 2f:cd:7f:ee:18:5f:d1:3c:7a:a3:b8:06:76:ac:74: c9:ca:7d:af:d2:bb:79:d6:68:df:11:f4:5a:ac:b3: 79:4b:e6:5a:d5:03:8d:c9:5c:cc:1b:98:92:1c:dd: 6f:56:53:17:d8:22:d1:60:30:50:d2:14:d1:34:f8: 28:11:df:77:9b:de:3b:a8:3e:00:87:6c:8e:c2:ea: 80:0f:83:0e:31:fa:0f:3d:5c:3c:e6:a7:3e:3a:df: 64:9a:79:64:b9:b2:76:3c:ce:5c:2a:ad:c4:2a:e6: 89:b2:7d:58:75:91:f4:d4:c2:24:93:01:15:0d:14: f6:ca:62:8f:09:bc:da:1a:59:00:15:6c:40:64:45: be:06:88:89:38:1f:a1:83:ba:fa:be:3f:75:59:c4: 6c:a9:38:db:63:0f:07:b1:95:e9:73:0d:dc:62:ff: 94:93:f1:22:48:e3:13:d0:6a:20:1c:a9:d6:b0:d5: 4f:a2:8a:d8:48:1b:df:ff:42:4b:bc:7a:20:20:74: ed:91:c0:db:bb:65:d8:7d:46:0d:3e:b3:6a:95:f9: 81:4b:75:1a:83:0c:b3:75:72:7c:db:2a:16:03:ff: ec:f9:65:6c:7c:98:c9:87:a8:ba:2e:90:b0:79:bb: 26:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4F:76:C5:B1:16:55:27:BC:EE:11:6A:21:A7:70:95:AB:03:50:6C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c08da84-6114-4dc1-8022-30529d49b480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.240.0/21 Signature Algorithm: sha256WithRSAEncryption 6a:2d:08:32:ff:b3:8a:61:d0:1a:12:0f:b6:1d:18:8b:9c:09: 65:fa:b2:db:04:06:6b:80:71:17:ff:b2:59:71:89:e8:0b:9e: 07:83:de:90:ae:e5:b6:2e:98:07:61:9b:7d:ff:09:42:f4:7e: 5d:95:55:7d:6d:18:4d:ef:66:a7:6e:6d:9a:93:c6:ea:8b:bc: 82:b0:fb:1b:2b:68:cf:0a:69:f9:2c:70:76:d5:d8:b6:5b:ad: b2:60:27:4a:d9:a9:f2:88:78:29:59:6d:dc:ff:d5:e9:b3:bc: 40:70:56:a2:5c:49:16:f9:51:63:5a:48:4b:d4:1f:6d:13:bd: d1:11:45:00:1a:b3:dd:20:89:d3:fb:7e:a2:dc:91:1a:00:43: f9:9c:12:86:00:66:fa:11:9b:80:52:0d:4f:4a:b6:2b:18:8b: 11:ea:15:4b:c1:7f:e8:a7:35:69:5f:34:26:27:a7:81:85:56: 17:64:51:28:8c:24:8e:7b:e2:ed:ea:97:36:b7:1f:bf:ca:e9: 19:76:2c:83:03:a0:f7:08:a5:80:1d:06:6b:1f:4b:10:38:0c: aa:ef:55:6c:d9:56:f3:03:17:27:d8:29:84:fd:ba:ac:46:f4: 99:85:e5:77:13:f3:e9:e3:43:7e:5b:34:b4:39:4d:2f:2b:5e: 6d:f4:f9:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe5v2o1gNnQcrN+2sUlr9BXt6MJ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDExNzQ0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjA3M2E4OWJiNmZhNjkyMDdkNjUyMDVjZTliNmE1MWJj ZjU4ZmYxYmZiMTFlMGUwNGU4ZDU2NDIxYzczNDNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCN/HhY3a/tN3IIZyTgi/Nf+4YX9E8eqO4BnasdMnKfa/S u3nWaN8R9Fqss3lL5lrVA43JXMwbmJIc3W9WUxfYItFgMFDSFNE0+CgR33eb3juo PgCHbI7C6oAPgw4x+g89XDzmpz4632SaeWS5snY8zlwqrcQq5omyfVh1kfTUwiST ARUNFPbKYo8JvNoaWQAVbEBkRb4GiIk4H6GDuvq+P3VZxGypONtjDwexlelzDdxi /5ST8SJI4xPQaiAcqdaw1U+iithIG9//Qku8eiAgdO2RwNu7Zdh9Rg0+s2qV+YFL dRqDDLN1cnzbKhYD/+z5ZWx8mMmHqLoukLB5uyZFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIU92xbEWVSe87hFqIadwlasDUGwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNjMDhkYTg0LTYxMTQtNGRjMS04MDIyLTMwNTI5ZDQ5YjQ4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDpfAwDQYJKoZIhvcNAQELBQADggEBAGotCDL/s4ph0BoSD7YdGIucCWX6 stsEBmuAcRf/sllxiegLngeD3pCu5bYumAdhm33/CUL0fl2VVX1tGE3vZqdubZqT xuqLvIKw+xsraM8KafkscHbV2LZbrbJgJ0rZqfKIeClZbdz/1emzvEBwVqJcSRb5 UWNaSEvUH20TvdERRQAas90gidP7fqLckRoAQ/mcEoYAZvoRm4BSDU9KtisYixHq FUvBf+inNWlfNCYnp4GFVhdkUSiMJI574u3qlza3H7/K6Rl2LIMDoPcIpYAdBmsf SxA4DKrvVWzZVvMDFyfYKYT9uqxG9JmF5XcT8+njQ35bNLQ5TS8rXm30+ao= -----END CERTIFICATE-----Generated at Sat Oct 18 02:37:57 2025 by rpki-client