$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fea2144-b253-46fa-9c9b-fcdf65044844.roa File: 3fea2144-b253-46fa-9c9b-fcdf65044844.roa (raw, json) Hash identifier: mti7gRltBaWp2iV+TdtckYCbMUjNnfGkmdzmEqkaS6k= Subject key identifier: 50:51:E0:87:E4:5B:EE:68:86:31:A6:57:98:B6:86:71:CD:7E:5C:6F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6653327810A9F8BE5766A028E0B2534EA61B6882 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fea2144-b253-46fa-9c9b-fcdf65044844.roa Signing time: Fri 26 Sep 2025 01:46:58 +0000 ROA not before: Fri 26 Sep 2025 01:46:58 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.163.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:53:32:78:10:a9:f8:be:57:66:a0:28:e0:b2:53:4e:a6:1b:68:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:46:58 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=8722fe91e85e1a1bc56a7e47ea7ca1c6db2f1416b8633903960ffa4f77d81a47, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f6:dd:0b:28:cf:49:3a:b7:12:b6:0d:8c:64: 0d:77:df:14:2a:0b:d0:1f:76:12:a5:8d:be:69:d0: 88:cf:c8:66:63:fa:3c:77:f4:d3:00:2f:19:1c:83: 03:ed:88:a6:37:f7:8d:b2:ec:3b:ce:e4:18:3a:63: c1:e4:85:a2:2a:fe:a4:ce:fb:56:ca:48:10:d4:08: d9:9f:e5:7b:de:76:3a:b6:7f:df:89:ae:5f:a9:8a: 4e:da:90:95:75:b5:7b:84:ca:84:ef:7f:09:45:34: aa:0c:3e:b4:f4:b4:9b:0f:79:7e:6f:3d:9e:87:f7: 04:08:a9:15:a7:95:12:6f:55:8a:0a:2f:ff:28:1d: 60:11:83:f1:9f:52:28:ef:1c:07:3e:8f:07:15:3e: 35:f0:35:2e:b5:47:f4:d0:80:97:7a:6e:24:83:51: ae:8f:49:84:f8:28:4c:a0:1b:12:6e:76:c9:56:98: 22:24:6a:f4:b8:13:77:2e:50:b4:b6:86:95:68:a2: 8e:f3:36:1b:0d:c7:fc:2d:8d:7d:c2:71:9b:e8:61: 3d:75:74:9e:63:6c:53:98:ae:cf:c4:ed:4e:ac:6f: 15:ec:8e:ba:db:82:ae:54:33:c7:30:66:79:55:9f: 3b:7d:a0:1d:49:01:b1:5d:f2:61:aa:53:09:d1:60: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:51:E0:87:E4:5B:EE:68:86:31:A6:57:98:B6:86:71:CD:7E:5C:6F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fea2144-b253-46fa-9c9b-fcdf65044844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.163.112.0/20 Signature Algorithm: sha256WithRSAEncryption ae:9b:6b:6a:40:07:c1:c0:3a:e8:eb:07:d8:25:ba:ac:a9:c3: 63:09:bd:f5:e8:bf:b6:47:52:a8:67:ff:72:3d:d3:68:b9:fd: 5b:9f:e2:09:1f:0e:2c:0a:85:7b:37:44:71:ae:2c:38:49:de: d3:55:8a:56:66:fc:63:ff:42:1e:28:73:d0:48:28:d5:cc:88: 2c:1b:bd:c5:f7:1c:0b:d7:e9:2d:e3:37:9e:4d:33:a4:97:3a: 39:0e:c2:22:51:ad:0a:46:05:b3:62:b2:7a:ab:e7:c8:e8:bb: ea:29:af:4b:ea:a9:c9:40:94:cb:c3:be:c9:1d:a6:ed:e0:d9: 6b:78:b0:ab:be:f4:ec:c8:45:85:a4:cc:5f:ca:6b:7c:11:d3: 7b:4b:d7:58:f4:37:8e:04:9c:16:51:5a:7c:84:ef:99:0f:96: 02:fd:64:52:e8:17:0a:20:f4:cb:dc:68:c0:03:87:bc:63:08: 6d:c7:28:ce:7c:ad:3e:da:57:c3:54:13:7a:c1:0e:6e:c7:d6: 98:a3:46:b3:13:61:e0:71:85:a8:bb:b0:7c:f0:2b:03:98:4c: 81:58:70:89:dd:8d:8f:b8:2c:3a:7a:dc:45:06:1f:9b:ab:a7: 81:71:b7:c7:2a:01:ee:2c:ae:73:31:a6:cb:5f:80:9c:88:81: ea:c0:af:d0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZlMyeBCp+L5XZqAo4LJTTqYbaIIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDE0NjU4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzIyZmU5MWU4NWUxYTFiYzU2YTdlNDdlYTdjYTFjNmRi MmYxNDE2Yjg2MzM5MDM5NjBmZmE0Zjc3ZDgxYTQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDT9t0LKM9JOrcStg2MZA133xQqC9AfdhKljb5p0IjPyGZj +jx39NMALxkcgwPtiKY3942y7DvO5Bg6Y8HkhaIq/qTO+1bKSBDUCNmf5Xvedjq2 f9+Jrl+pik7akJV1tXuEyoTvfwlFNKoMPrT0tJsPeX5vPZ6H9wQIqRWnlRJvVYoK L/8oHWARg/GfUijvHAc+jwcVPjXwNS61R/TQgJd6biSDUa6PSYT4KEygGxJudslW mCIkavS4E3cuULS2hpVooo7zNhsNx/wtjX3CcZvoYT11dJ5jbFOYrs/E7U6sbxXs jrrbgq5UM8cwZnlVnzt9oB1JAbFd8mGqUwnRYFeJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUFHgh+Rb7miGMaZXmLaGcc1+XG8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNmZWEyMTQ0LWIyNTMtNDZmYS05YzliLWZjZGY2NTA0NDg0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDo3AwDQYJKoZIhvcNAQELBQADggEBAK6ba2pAB8HAOujrB9gluqypw2MJ vfXov7ZHUqhn/3I902i5/Vuf4gkfDiwKhXs3RHGuLDhJ3tNVilZm/GP/Qh4oc9BI KNXMiCwbvcX3HAvX6S3jN55NM6SXOjkOwiJRrQpGBbNisnqr58jou+opr0vqqclA lMvDvskdpu3g2Wt4sKu+9OzIRYWkzF/Ka3wR03tL11j0N44EnBZRWnyE75kPlgL9 ZFLoFwog9MvcaMADh7xjCG3HKM58rT7aV8NUE3rBDm7H1pijRrMTYeBxhai7sHzw KwOYTIFYcIndjY+4LDp63EUGH5urp4Fxt8cqAe4srnMxpstfgJyIgerAr9A= -----END CERTIFICATE-----Generated at Sat Oct 18 02:37:56 2025 by rpki-client