$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6723ece6-decd-42bc-bdc3-9885c7d60558.roa File: 6723ece6-decd-42bc-bdc3-9885c7d60558.roa (raw, json) Hash identifier: oel3maRlFrNpYl33YSFJbVmrgAzqbbJk/63GjZN4KJQ= Subject key identifier: DB:79:FE:D2:58:81:16:75:D3:64:15:A5:36:BD:C6:0A:83:AA:FC:D3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 09D1AC6036E8D00D3ADE1D866CAFE874B9EB3CF7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6723ece6-decd-42bc-bdc3-9885c7d60558.roa Signing time: Thu 25 Sep 2025 16:57:47 +0000 ROA not before: Thu 25 Sep 2025 16:57:47 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d1:ac:60:36:e8:d0:0d:3a:de:1d:86:6c:af:e8:74:b9:eb:3c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 16:57:47 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=6bfd7c1b954fcb48797e9d0a5e3cec9bfc33f57c0a6b936653671cc664343103, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:17:64:a6:4c:f2:17:34:df:4a:29:27:df: 54:f8:ee:99:be:fe:85:fd:76:9b:57:d8:a1:f5:26: ca:a2:21:00:53:6b:71:1b:be:aa:84:aa:b0:e9:6c: be:31:0a:7f:d4:6d:93:4a:6d:48:0c:32:f5:2f:c5: bb:77:a4:2d:97:d9:4d:d1:5f:db:59:04:64:74:48: fb:7f:a4:ba:ce:2c:c7:2e:cd:51:c8:71:3e:5c:b6: 57:18:68:51:4d:9e:4d:da:05:e0:f0:e2:e5:a1:5c: 4d:c7:d9:8a:83:32:3a:61:c3:b7:1c:8f:9d:3d:70: 3c:92:30:4c:89:75:16:33:44:e4:04:c6:67:7a:a9: 35:76:37:64:c4:ae:da:f2:19:cc:10:f6:05:f2:c4: a8:0e:d4:b0:7a:e8:67:17:d5:15:52:06:95:7f:2e: 78:59:b2:fd:79:14:f6:41:89:fe:55:4e:6e:90:29: 28:6a:a9:a4:c7:e4:6e:e9:f5:d3:8b:59:f8:14:67: 3a:00:a3:10:b6:4c:8f:52:97:c7:5c:9b:32:63:3c: 25:57:0e:7a:90:aa:50:cc:e1:71:9b:60:ed:2e:e7: 7b:2d:16:a3:82:ff:92:20:cc:4f:1b:4d:f6:d2:af: df:3d:07:b7:fc:a7:5c:41:88:b6:29:4a:8b:17:b0: a4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:79:FE:D2:58:81:16:75:D3:64:15:A5:36:BD:C6:0A:83:AA:FC:D3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6723ece6-decd-42bc-bdc3-9885c7d60558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.15.0/24 Signature Algorithm: sha256WithRSAEncryption 54:b3:61:9b:2a:88:a4:1e:39:30:55:10:8e:4d:e7:02:2e:c3: 52:08:e7:a7:68:8f:43:1f:89:f5:a4:95:b1:59:2e:90:de:06: 15:0c:b7:33:1c:1b:90:8b:d0:65:02:ab:8a:4e:ea:67:77:fe: d5:f3:b6:98:f0:01:1e:3a:86:4c:2c:16:8a:59:b5:a8:46:aa: 6c:11:5b:2e:2c:33:7b:b7:69:08:af:0a:4c:e4:be:91:8c:dc: 9e:7e:6f:57:58:1e:24:c3:6a:bf:4c:c0:0b:66:5c:47:d1:89: d6:bd:57:e0:2b:c8:e1:ac:19:97:25:f1:47:e5:6d:9e:d3:53: 65:0a:6a:51:06:58:3c:b2:f8:0f:23:30:d3:eb:81:5b:76:48: 7e:80:f8:29:e6:a6:98:a6:85:77:27:11:81:6b:e3:48:55:d0: c0:13:8d:51:19:28:b3:aa:ed:05:de:3f:9e:50:1c:36:cd:35: 3c:1e:7e:bb:30:6e:c4:37:df:76:2b:3b:fc:d8:af:ed:90:81: b4:4a:6e:1a:11:29:32:49:b7:f3:1b:cc:b0:27:0f:85:06:39: 0d:81:b4:4c:f3:a9:58:a9:92:c6:65:85:35:d3:74:21:05:ba: 8a:61:99:51:6a:fd:23:8a:57:93:33:52:d8:7a:79:53:f2:c4: f3:1c:0f:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCdGsYDbo0A063h2GbK/odLnrPPcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTY1NzQ3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YmZkN2MxYjk1NGZjYjQ4Nzk3ZTlkMGE1ZTNjZWM5YmZj MzNmNTdjMGE2YjkzNjY1MzY3MWNjNjY0MzQzMTAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPKBdkpkzyFzTfSikn31T47pm+/oX9dptX2KH1JsqiIQBT a3EbvqqEqrDpbL4xCn/UbZNKbUgMMvUvxbt3pC2X2U3RX9tZBGR0SPt/pLrOLMcu zVHIcT5ctlcYaFFNnk3aBeDw4uWhXE3H2YqDMjphw7ccj509cDySMEyJdRYzROQE xmd6qTV2N2TErtryGcwQ9gXyxKgO1LB66GcX1RVSBpV/LnhZsv15FPZBif5VTm6Q KShqqaTH5G7p9dOLWfgUZzoAoxC2TI9Sl8dcmzJjPCVXDnqQqlDM4XGbYO0u53st FqOC/5IgzE8bTfbSr989B7f8p1xBiLYpSosXsKQnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU23n+0liBFnXTZBWlNr3GCoOq/NMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY3MjNlY2U2LWRlY2QtNDJiYy1iZGMzLTk4ODVjN2Q2MDU1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoQ8wDQYJKoZIhvcNAQELBQADggEBAFSzYZsqiKQeOTBVEI5N5wIuw1II 56doj0MfifWklbFZLpDeBhUMtzMcG5CL0GUCq4pO6md3/tXztpjwAR46hkwsFopZ tahGqmwRWy4sM3u3aQivCkzkvpGM3J5+b1dYHiTDar9MwAtmXEfRida9V+AryOGs GZcl8UflbZ7TU2UKalEGWDyy+A8jMNPrgVt2SH6A+CnmppimhXcnEYFr40hV0MAT jVEZKLOq7QXeP55QHDbNNTwefrswbsQ333YrO/zYr+2QgbRKbhoRKTJJt/MbzLAn D4UGOQ2BtEzzqVipksZlhTXTdCEFuophmVFq/SOKV5MzUth6eVPyxPMcD0w= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:37 2025 by rpki-client