$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63f7e521-a091-41c7-bc25-c288def96e38.roa File: 63f7e521-a091-41c7-bc25-c288def96e38.roa (raw, json) Hash identifier: jgeCdmIW97NfFisvrAParK3mfwunx2RvVpznsQkpero= Subject key identifier: 73:EF:84:1F:8A:E9:F5:D9:71:3C:AF:B3:A8:75:C7:52:53:44:13:5D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72D788725EC0CEF1D7005DC69B87C7CC882DB01F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63f7e521-a091-41c7-bc25-c288def96e38.roa Signing time: Thu 25 Sep 2025 16:39:32 +0000 ROA not before: Thu 25 Sep 2025 16:39:32 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d7:88:72:5e:c0:ce:f1:d7:00:5d:c6:9b:87:c7:cc:88:2d:b0:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 16:39:32 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=ab70ad8cbd84cbe48f15437cb92b0fb4ea060a01082a94a88a0fd72dd56dcb2a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:68:10:8d:f1:3c:58:f2:19:dd:0e:5b:fe: 56:dc:c9:9d:a2:a3:aa:fc:f7:99:51:7b:d4:c4:38: 22:4f:e3:59:3b:58:33:05:f0:0d:87:0f:c6:9f:f2: 73:50:62:e6:a6:a4:28:09:e8:8b:55:1b:a9:5c:bc: 3e:88:14:dd:4e:41:7a:8d:1b:de:82:c5:8b:9d:f0: c6:27:36:e2:40:5b:44:f4:66:04:2d:e7:3b:b4:77: c7:d0:99:9a:6d:65:19:cf:60:93:cb:86:3d:31:76: a9:b4:fc:cf:3a:5f:76:60:9a:be:5a:8e:73:f7:ac: db:60:70:37:28:c4:6f:bb:fd:23:99:79:bc:2e:57: db:9c:95:aa:62:32:78:24:0d:f4:56:48:ae:cc:06: e4:91:38:a8:ab:1e:4c:f2:7d:1e:71:a5:40:73:33: 6e:c5:94:17:72:4c:f1:04:38:be:0f:d2:0c:3d:2e: c1:d9:1c:da:ec:e2:83:d0:73:e0:b8:9a:a9:a5:d1: f2:6e:e5:d8:23:27:81:e9:a5:c0:f0:4d:d6:ce:ca: 39:81:e4:99:7b:4c:ff:61:c9:a5:02:b6:c4:82:e6: 23:29:8e:fe:92:c0:e7:14:b2:34:bb:91:41:ca:85: 91:d1:bf:04:08:16:03:53:2a:1d:6e:c9:04:c9:d6: bf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EF:84:1F:8A:E9:F5:D9:71:3C:AF:B3:A8:75:C7:52:53:44:13:5D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63f7e521-a091-41c7-bc25-c288def96e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.132.0/24 Signature Algorithm: sha256WithRSAEncryption 69:14:a0:00:05:15:07:9a:a0:c2:94:5a:53:03:9a:10:21:e0: a4:83:c8:4c:41:5e:89:73:d2:ba:b6:36:af:40:d9:a5:1a:b9: ce:39:75:97:1f:c4:01:94:cb:8f:0b:17:6a:ac:80:4a:26:fc: 7b:26:9f:4a:46:43:8b:7a:cb:c4:d2:ac:2e:49:d9:5d:59:bb: 83:84:63:96:0c:47:e6:65:49:89:a3:43:47:ef:f7:64:12:e1: f5:58:85:2d:48:a5:13:5f:b3:63:0d:58:c7:46:d1:0f:cb:dc: 7d:0f:92:80:58:c8:98:a2:6d:a0:ef:bb:bb:65:e4:62:df:35: ea:1d:39:b9:f6:8d:8c:f1:3b:1b:33:fa:7c:c6:3b:8f:42:cd: 4b:59:a5:94:01:82:fd:71:d9:9c:62:d0:7c:9f:23:2f:aa:7e: 1e:01:3f:cb:67:5d:fe:04:e9:e7:ab:b2:13:f4:69:3c:c2:89: d0:ca:ac:6b:25:27:14:75:53:6c:e2:b4:28:ea:d5:0c:27:82: ca:a2:3d:78:d2:b0:eb:6c:9a:93:98:f4:cd:73:7b:15:cd:c0: 4e:57:96:d7:d6:80:d4:17:b9:bc:e6:28:83:93:d3:a4:9d:32: 80:2c:14:9f:50:e0:47:e3:0d:fd:45:3a:32:e1:b1:2f:d3:ac: 73:b5:fa:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcteIcl7AzvHXAF3Gm4fHzIgtsB8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTYzOTMyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjcwYWQ4Y2JkODRjYmU0OGYxNTQzN2NiOTJiMGZiNGVh MDYwYTAxMDgyYTk0YTg4YTBmZDcyZGQ1NmRjYjJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfi2gQjfE8WPIZ3Q5b/lbcyZ2io6r895lRe9TEOCJP41k7 WDMF8A2HD8af8nNQYuampCgJ6ItVG6lcvD6IFN1OQXqNG96CxYud8MYnNuJAW0T0 ZgQt5zu0d8fQmZptZRnPYJPLhj0xdqm0/M86X3Zgmr5ajnP3rNtgcDcoxG+7/SOZ ebwuV9uclapiMngkDfRWSK7MBuSROKirHkzyfR5xpUBzM27FlBdyTPEEOL4P0gw9 LsHZHNrs4oPQc+C4mqml0fJu5dgjJ4HppcDwTdbOyjmB5Jl7TP9hyaUCtsSC5iMp jv6SwOcUsjS7kUHKhZHRvwQIFgNTKh1uyQTJ1r+1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc++EH4rp9dlxPK+zqHXHUlNEE10wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYzZjdlNTIxLWEwOTEtNDFjNy1iYzI1LWMyODhkZWY5NmUzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoIQwDQYJKoZIhvcNAQELBQADggEBAGkUoAAFFQeaoMKUWlMDmhAh4KSD yExBXolz0rq2Nq9A2aUauc45dZcfxAGUy48LF2qsgEom/Hsmn0pGQ4t6y8TSrC5J 2V1Zu4OEY5YMR+ZlSYmjQ0fv92QS4fVYhS1IpRNfs2MNWMdG0Q/L3H0PkoBYyJii baDvu7tl5GLfNeodObn2jYzxOxsz+nzGO49CzUtZpZQBgv1x2Zxi0HyfIy+qfh4B P8tnXf4E6eershP0aTzCidDKrGslJxR1U2zitCjq1QwngsqiPXjSsOtsmpOY9M1z exXNwE5XltfWgNQXubzmKIOT06SdMoAsFJ9Q4EfjDf1FOjLhsS/TrHO1+oo= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:14 2025 by rpki-client