$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b515909-a36d-45e5-94f0-16c9074cae29.roa File: 6b515909-a36d-45e5-94f0-16c9074cae29.roa (raw, json) Hash identifier: aIqUOZByf01vSC/Wf1CrZUkS5a2qPR9tMQw6uyVh9qM= Subject key identifier: BA:0A:42:76:72:A0:AF:D2:CD:5D:98:DB:09:EE:00:18:40:F7:41:0B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 06E83BC48ABA25B31508FB69560BC1015991154D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b515909-a36d-45e5-94f0-16c9074cae29.roa Signing time: Thu 25 Sep 2025 19:42:02 +0000 ROA not before: Thu 25 Sep 2025 19:42:02 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e8:3b:c4:8a:ba:25:b3:15:08:fb:69:56:0b:c1:01:59:91:15:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:42:02 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=10e2e7f9d4aa99233aa9ae44ca1de8dd179e6a52f29fa29cf60a90d5bdaf8f8e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a7:ca:ea:2f:ab:ee:77:8b:b1:6f:93:0e:60: cf:93:ff:62:b6:66:b8:8d:1e:40:bd:9a:da:00:ec: a6:96:62:c6:f0:4a:bf:07:d2:0b:c1:12:0b:24:c8: 9d:67:22:f1:8b:53:7d:1c:e1:60:79:f8:33:5f:5c: 2d:6f:c5:89:4f:c3:41:d5:14:92:dd:ec:9d:a3:42: e4:94:8e:3f:7f:40:e6:a3:99:af:f3:68:46:03:8f: fb:44:5b:76:54:a4:a1:31:b5:c2:86:0f:5b:76:7f: 5e:75:9f:40:c3:b3:68:32:2d:20:ff:11:29:e7:e6: d7:db:12:68:cd:93:ef:a2:d6:ed:e7:84:6a:61:ad: 05:a4:75:ca:82:0d:a2:d3:5d:00:d5:10:bf:6f:f0: 74:f3:db:3b:2b:14:f8:15:66:1f:ff:48:8f:2f:e5: 24:39:86:bf:3b:e0:6d:10:ff:89:be:b5:8f:d0:70: ae:1a:69:88:c7:50:e6:fa:29:2d:ea:6d:9c:40:f4: 37:12:f6:b2:36:11:d8:9c:8a:41:ee:5f:34:ac:45: 3d:d1:a8:c8:8d:e2:71:3c:e2:66:03:6b:db:f8:5f: a6:24:08:31:2e:2e:39:cf:87:2b:83:63:9a:cb:bc: f2:54:ae:5c:58:ce:3b:45:75:c2:ac:3c:74:78:31: 80:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0A:42:76:72:A0:AF:D2:CD:5D:98:DB:09:EE:00:18:40:F7:41:0B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b515909-a36d-45e5-94f0-16c9074cae29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.43.0/24 Signature Algorithm: sha256WithRSAEncryption 92:83:2c:c4:31:d3:1c:14:99:16:d1:13:d4:da:15:1e:90:71: 57:80:16:e2:3d:54:5c:a6:73:9a:05:22:e7:91:7d:c8:f9:cc: 85:cc:24:9c:45:69:a8:d7:1b:c2:26:51:79:31:49:a0:48:8e: 64:9c:eb:ea:8c:f4:9c:9a:f8:44:fc:a4:77:fd:1f:13:f8:c9: e9:b3:c2:46:1b:45:21:3e:76:1f:35:6a:8a:27:92:46:0c:eb: 71:be:12:86:55:b4:c3:f3:e7:01:52:72:ef:0b:6d:aa:3d:06: c9:c7:93:aa:3f:31:00:e7:69:8b:f7:5f:ee:90:2e:6f:6b:9d: fd:26:93:da:7c:39:2a:7a:79:10:9c:65:8e:79:ab:38:e4:eb: 72:cc:8b:b0:6e:7c:be:be:ca:59:e4:64:47:5d:17:3e:75:c6: ae:51:df:b2:4a:85:3a:9e:5a:b1:75:5b:ce:e7:b9:eb:d2:5d: 02:e5:f2:71:25:73:a2:ac:f2:34:93:db:ed:1a:4e:6d:4d:3c: fd:91:e7:c8:a1:7f:3d:24:74:ce:2e:4c:e0:51:7f:d5:19:19: 72:f3:8a:15:a2:9e:75:db:ab:a5:e8:92:f8:1f:12:81:9d:79: 08:20:96:14:78:7e:54:5a:e1:37:0c:cc:c8:c0:30:02:f5:a6: aa:b3:16:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBug7xIq6JbMVCPtpVgvBAVmRFU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTk0MjAyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGUyZTdmOWQ0YWE5OTIzM2FhOWFlNDRjYTFkZThkZDE3 OWU2YTUyZjI5ZmEyOWNmNjBhOTBkNWJkYWY4ZjhlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDep8rqL6vud4uxb5MOYM+T/2K2ZriNHkC9mtoA7KaWYsbw Sr8H0gvBEgskyJ1nIvGLU30c4WB5+DNfXC1vxYlPw0HVFJLd7J2jQuSUjj9/QOaj ma/zaEYDj/tEW3ZUpKExtcKGD1t2f151n0DDs2gyLSD/ESnn5tfbEmjNk++i1u3n hGphrQWkdcqCDaLTXQDVEL9v8HTz2zsrFPgVZh//SI8v5SQ5hr874G0Q/4m+tY/Q cK4aaYjHUOb6KS3qbZxA9DcS9rI2EdicikHuXzSsRT3RqMiN4nE84mYDa9v4X6Yk CDEuLjnPhyuDY5rLvPJUrlxYzjtFdcKsPHR4MYD1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUugpCdnKgr9LNXZjbCe4AGED3QQswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZiNTE1OTA5LWEzNmQtNDVlNS05NGYwLTE2YzkwNzRjYWUyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqSswDQYJKoZIhvcNAQELBQADggEBAJKDLMQx0xwUmRbRE9TaFR6QcVeA FuI9VFymc5oFIueRfcj5zIXMJJxFaajXG8ImUXkxSaBIjmSc6+qM9Jya+ET8pHf9 HxP4yemzwkYbRSE+dh81aoonkkYM63G+EoZVtMPz5wFScu8Lbao9BsnHk6o/MQDn aYv3X+6QLm9rnf0mk9p8OSp6eRCcZY55qzjk63LMi7BufL6+ylnkZEddFz51xq5R 37JKhTqeWrF1W87nuevSXQLl8nElc6Ks8jST2+0aTm1NPP2R58ihfz0kdM4uTOBR f9UZGXLzihWinnXbq6XokvgfEoGdeQgglhR4flRa4TcMzMjAMAL1pqqzFtE= -----END CERTIFICATE-----Generated at Fri Oct 17 22:01:56 2025 by rpki-client