$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ce66f62-231f-47bd-8e96-865d0b6161a4.roa File: 3ce66f62-231f-47bd-8e96-865d0b6161a4.roa (raw, json) Hash identifier: Bx/Acy8agDfVvyqocd7qWLBKLNKbNPYXnQ/m4hX7xRs= Subject key identifier: 46:79:55:09:68:80:FA:5D:07:2F:1D:47:DF:CC:F9:09:89:7B:21:64 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 46405754D78DBE552D4916C1A0E523D3D1C1695A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ce66f62-231f-47bd-8e96-865d0b6161a4.roa Signing time: Thu 25 Sep 2025 23:09:23 +0000 ROA not before: Thu 25 Sep 2025 23:09:23 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:40:57:54:d7:8d:be:55:2d:49:16:c1:a0:e5:23:d3:d1:c1:69:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:09:23 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=97a768160be12450be8ab0bca02e9cd2ea87dd0551d840101aad067b1ab94b56, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:d7:bb:54:f9:4d:5e:9c:67:4b:84:90:1e: e4:49:2f:3a:fb:0d:3b:93:45:a4:42:d5:69:31:ab: 24:92:49:9a:a0:0d:0d:85:e8:96:1a:c4:5f:db:32: 2c:2d:c9:4b:23:d7:0e:c9:91:09:d8:84:c0:97:50: ab:85:5d:cb:03:23:18:1f:18:a9:43:ca:94:b2:2a: 75:c2:87:d3:e2:7a:b5:3a:2e:3f:85:da:a0:55:9a: 14:8f:d7:cd:c0:4b:9f:ae:67:54:76:f8:46:de:18: 7b:8e:c2:4d:da:0f:3e:da:41:7d:45:f4:f0:cf:b3: c7:2a:c4:e2:9d:d7:fb:52:70:ff:77:1e:14:a0:b6: bc:2a:52:92:f9:ae:85:d9:81:23:4e:dd:b7:58:69: ba:75:3d:af:93:e6:45:02:46:50:e3:41:7e:ba:69: 8d:0d:4e:15:00:76:40:cc:01:ab:de:9f:79:0b:7e: a5:de:ec:6b:01:fc:71:db:a9:c3:0c:63:97:e9:90: 3f:d1:c4:87:a9:f9:9d:36:e9:4f:3c:9e:62:84:3d: eb:8b:d7:39:49:81:1b:dc:3f:f7:d8:eb:01:2d:1e: e7:a5:10:16:30:d3:5f:ac:82:b6:38:25:a7:3b:03: 8b:74:23:f4:bd:53:02:e0:ba:21:d4:52:ee:74:dd: c9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:79:55:09:68:80:FA:5D:07:2F:1D:47:DF:CC:F9:09:89:7B:21:64 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ce66f62-231f-47bd-8e96-865d0b6161a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.80.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:e9:45:d0:87:32:f3:ac:ea:6b:f7:00:f8:15:4a:60:49:61: ef:15:07:a4:96:7b:9f:66:32:17:5a:53:c6:70:dd:3a:e4:4f: c3:09:1e:f9:4f:b4:de:af:7f:10:26:b1:68:b9:f5:6f:b8:72: 55:58:01:93:dd:45:b9:b1:5b:e5:cb:ed:64:25:ed:eb:2a:da: b9:e4:81:9c:0f:d4:32:b6:82:94:83:0e:bc:98:8f:f4:24:1a: bc:97:a6:e2:a1:24:88:66:1a:4c:8b:0e:3c:ec:a7:ff:bb:a9: 67:fb:af:43:84:cb:05:56:69:fc:30:74:e4:bd:ad:3b:81:4f: 05:15:a3:41:8b:fc:e3:f3:7d:a2:3c:60:50:c4:a9:69:ad:f3: 2f:92:a0:1b:a6:e9:ad:fb:e5:45:d1:78:5c:dc:91:27:f2:bf: 31:4b:ea:2d:62:79:72:e4:5e:e2:4e:ba:95:92:24:ce:63:4b: 59:cd:b9:56:9b:c2:30:26:e6:d1:a7:63:dc:55:51:8c:a0:a2: 12:d9:dc:d9:eb:75:20:6f:40:a1:bf:b5:84:94:75:af:3e:ef: a9:f4:ce:7a:f7:6f:12:43:a1:09:30:84:39:92:d9:c9:0c:47: 04:20:22:18:d4:0d:46:cd:d9:a8:32:8d:24:e7:13:ea:14:3d: c0:49:33:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURkBXVNeNvlUtSRbBoOUj09HBaVowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMwOTIzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5N2E3NjgxNjBiZTEyNDUwYmU4YWIwYmNhMDJlOWNkMmVh ODdkZDA1NTFkODQwMTAxYWFkMDY3YjFhYjk0YjU2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvPde7VPlNXpxnS4SQHuRJLzr7DTuTRaRC1WkxqySSSZqg DQ2F6JYaxF/bMiwtyUsj1w7JkQnYhMCXUKuFXcsDIxgfGKlDypSyKnXCh9PierU6 Lj+F2qBVmhSP183AS5+uZ1R2+EbeGHuOwk3aDz7aQX1F9PDPs8cqxOKd1/tScP93 HhSgtrwqUpL5roXZgSNO3bdYabp1Pa+T5kUCRlDjQX66aY0NThUAdkDMAaven3kL fqXe7GsB/HHbqcMMY5fpkD/RxIep+Z026U88nmKEPeuL1zlJgRvcP/fY6wEtHuel EBYw01+sgrY4Jac7A4t0I/S9UwLguiHUUu503ckzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURnlVCWiA+l0HLx1H38z5CYl7IWQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNjZTY2ZjYyLTIzMWYtNDdiZC04ZTk2LTg2NWQwYjYxNjFhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqlAwDQYJKoZIhvcNAQELBQADggEBAHrpRdCHMvOs6mv3APgVSmBJYe8V B6SWe59mMhdaU8Zw3TrkT8MJHvlPtN6vfxAmsWi59W+4clVYAZPdRbmxW+XL7WQl 7esq2rnkgZwP1DK2gpSDDryYj/QkGryXpuKhJIhmGkyLDjzsp/+7qWf7r0OEywVW afwwdOS9rTuBTwUVo0GL/OPzfaI8YFDEqWmt8y+SoBum6a375UXReFzckSfyvzFL 6i1ieXLkXuJOupWSJM5jS1nNuVabwjAm5tGnY9xVUYygohLZ3NnrdSBvQKG/tYSU da8+76n0znr3bxJDoQkwhDmS2ckMRwQgIhjUDUbN2agyjSTnE+oUPcBJM6Y= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:25 2025 by rpki-client