$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5730c03b-18a7-4b0e-bf92-97807515f270.roa File: 5730c03b-18a7-4b0e-bf92-97807515f270.roa (raw, json) Hash identifier: 8yi4ZRbOXeIbUCrm/xFUWRxs3BNR4WVz1oNWN5xjocQ= Subject key identifier: 14:B0:03:80:67:3B:5D:A1:DA:71:C0:D6:04:1F:12:91:69:C7:01:63 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 62A81394C7A2FB82372EF6D4AADF01301E35E727 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5730c03b-18a7-4b0e-bf92-97807515f270.roa Signing time: Thu 25 Sep 2025 17:30:11 +0000 ROA not before: Thu 25 Sep 2025 17:30:11 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.162.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a8:13:94:c7:a2:fb:82:37:2e:f6:d4:aa:df:01:30:1e:35:e7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:30:11 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=5f9e5dfb7edaab549f755fe0de44b6313ee1a25c6e271054310861c3a4c6adc7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:52:cf:4f:36:27:6f:bf:ed:86:03:ab:5a: 81:c0:4d:8e:74:05:57:ee:b5:9f:7d:65:67:0a:b4: ca:7a:e1:ce:fb:eb:f9:82:80:8f:d6:7e:96:de:6c: 7a:90:e3:98:62:ae:a3:b7:09:bd:27:b8:a2:b5:57: 6d:c9:10:5d:fe:28:66:33:db:da:ab:f2:1a:53:0c: 70:bd:05:7e:ab:03:ca:32:e0:d1:a8:ae:50:01:a8: 2b:68:c4:16:e5:13:34:c4:8c:fe:d1:37:8b:e7:ae: f3:51:59:8a:c1:82:b2:30:6d:cd:23:e6:4e:a0:c9: ea:aa:ac:e3:5f:53:bc:6f:6c:66:fe:9c:97:05:a3: b3:4d:47:16:7d:5a:56:26:00:a3:43:f9:18:cd:2c: fc:e7:5d:36:30:a9:84:bc:bb:3b:6c:dc:81:40:d0: 57:c8:67:f2:b6:30:49:da:bf:9b:17:e0:12:ec:e0: 93:ce:06:19:83:9b:32:b4:54:26:9e:73:0f:da:cc: 16:2f:4b:9c:a9:9d:da:ea:17:ad:fe:f4:a8:f3:20: 5f:df:44:e0:31:dd:b7:93:91:41:15:bc:d6:78:fd: 3d:04:e8:c2:d8:71:15:c5:6d:82:c4:32:20:e2:57: 85:de:cb:d6:5a:ed:b9:28:a9:dd:33:82:67:3b:ac: 0e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B0:03:80:67:3B:5D:A1:DA:71:C0:D6:04:1F:12:91:69:C7:01:63 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5730c03b-18a7-4b0e-bf92-97807515f270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.162.86.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:c4:08:86:4d:4b:89:49:01:a9:14:6c:35:73:43:47:0e:df: 08:0a:47:48:91:f5:d7:2c:bf:9d:76:2b:f7:79:f4:52:07:16: e3:67:65:59:eb:8a:95:2b:3f:c8:22:78:35:65:8d:ea:27:38: 30:c6:78:b1:14:94:2c:5d:03:bc:95:b9:83:63:10:80:a0:26: bf:96:7c:c6:97:53:a3:d2:0f:1b:39:1e:a2:bf:08:29:c0:db: 85:80:ed:06:e3:75:1b:8e:e8:0d:cc:3e:95:a8:03:55:4e:b9: 4d:71:39:6e:b1:9b:1d:ae:07:cd:7f:6f:37:9c:86:17:78:94: 69:ae:fb:c7:07:39:99:75:c8:a5:9f:e5:cb:83:8a:97:a8:c8: 93:60:50:b0:fd:8d:d5:fb:9d:88:c3:60:dd:a2:7e:c4:3a:19: 5b:ad:35:17:03:7f:af:49:51:e1:a7:7e:cb:70:da:0e:3b:fa: 75:c6:12:82:b5:da:f1:43:da:71:7e:fd:64:28:38:4d:f6:48: 28:28:15:d7:6e:45:1a:5c:a9:48:0e:0b:cd:b4:f1:22:ac:e5: 25:f8:b2:ce:dc:85:1a:55:11:f2:75:a1:16:b9:6f:b0:41:94: 4e:56:b5:39:43:cf:22:3e:bb:f8:e3:37:59:06:07:da:0f:1c: 96:0e:36:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYqgTlMei+4I3LvbUqt8BMB415ycwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTczMDExWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZjllNWRmYjdlZGFhYjU0OWY3NTVmZTBkZTQ0YjYzMTNl ZTFhMjVjNmUyNzEwNTQzMTA4NjFjM2E0YzZhZGM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7TlLPTzYnb7/thgOrWoHATY50BVfutZ99ZWcKtMp64c77 6/mCgI/WfpbebHqQ45hirqO3Cb0nuKK1V23JEF3+KGYz29qr8hpTDHC9BX6rA8oy 4NGorlABqCtoxBblEzTEjP7RN4vnrvNRWYrBgrIwbc0j5k6gyeqqrONfU7xvbGb+ nJcFo7NNRxZ9WlYmAKND+RjNLPznXTYwqYS8uzts3IFA0FfIZ/K2MEnav5sX4BLs 4JPOBhmDmzK0VCaecw/azBYvS5ypndrqF63+9KjzIF/fROAx3beTkUEVvNZ4/T0E 6MLYcRXFbYLEMiDiV4Xey9Za7bkoqd0zgmc7rA53AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFLADgGc7XaHaccDWBB8SkWnHAWMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU3MzBjMDNiLTE4YTctNGIwZS1iZjkyLTk3ODA3NTE1ZjI3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADolYwDQYJKoZIhvcNAQELBQADggEBAEvECIZNS4lJAakUbDVzQ0cO3wgK R0iR9dcsv512K/d59FIHFuNnZVnripUrP8gieDVljeonODDGeLEUlCxdA7yVuYNj EICgJr+WfMaXU6PSDxs5HqK/CCnA24WA7QbjdRuO6A3MPpWoA1VOuU1xOW6xmx2u B81/bzechhd4lGmu+8cHOZl1yKWf5cuDipeoyJNgULD9jdX7nYjDYN2ifsQ6GVut NRcDf69JUeGnfstw2g47+nXGEoK12vFD2nF+/WQoOE32SCgoFdduRRpcqUgOC820 8SKs5SX4ss7chRpVEfJ1oRa5b7BBlE5WtTlDzyI+u/jjN1kGB9oPHJYONlA= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:58 2025 by rpki-client