$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/863d5686-e20c-4c9c-a3e3-3a5350b09ca2.roa File: 863d5686-e20c-4c9c-a3e3-3a5350b09ca2.roa (raw, json) Hash identifier: yVhsgyrv1W7Biuxbkti2b8qbEL3uSRCIr9NGu4hrEiE= Subject key identifier: 35:3D:35:A0:DA:65:5F:BF:C7:F3:BF:66:D4:16:1A:DA:95:92:8A:4C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2BDD633F7750A3C02A18257B5771C5A0BB7DDC73 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/863d5686-e20c-4c9c-a3e3-3a5350b09ca2.roa Signing time: Thu 25 Sep 2025 17:07:08 +0000 ROA not before: Thu 25 Sep 2025 17:07:08 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:dd:63:3f:77:50:a3:c0:2a:18:25:7b:57:71:c5:a0:bb:7d:dc:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:07:08 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=20cd22644292e594a3d74f531cb8b8a26a8161958a8687728ea522304f40c9ea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:e4:c0:3b:69:16:bf:eb:21:d5:6a:4c:89: 96:97:af:68:fd:9f:7c:f3:79:78:34:6a:4e:c6:55: 01:33:c3:a8:ed:e3:ab:97:a6:16:d2:25:0a:22:f9: e5:77:ef:17:d7:b4:27:75:1f:19:34:38:23:ee:47: 1e:33:cf:aa:d2:01:1c:d8:65:26:c5:b7:60:a3:36: 7e:ec:7b:9d:0e:28:65:1b:40:bf:7b:bc:29:6b:c2: 38:6a:9f:de:eb:ac:8b:24:fb:bc:9e:dd:7b:71:be: 5a:fa:7b:dd:96:e3:03:9f:79:68:d4:ba:cc:fb:fb: ac:72:44:3a:83:ed:c5:03:a7:b9:1a:db:02:70:ee: 3b:79:be:dc:32:3b:2f:7a:5e:86:1b:d1:f5:a1:c6: 99:84:91:2e:c2:ce:5a:67:8c:54:4f:c0:05:9e:85: f4:9a:8f:c6:e8:f9:d8:b0:12:34:62:ac:9b:24:dc: ab:5e:a0:46:f7:52:1a:bb:59:6e:df:4c:7c:0c:a7: a1:31:e9:bf:54:71:fb:bb:d4:55:ef:41:82:fc:dd: dc:4c:82:01:95:fa:93:0c:42:b7:b8:34:33:ce:6c: 18:b9:2c:87:9d:16:17:10:d1:82:ec:c4:1e:f9:93: 2f:99:53:bf:1b:54:15:15:fd:a9:e9:f8:dd:cf:1b: 1a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3D:35:A0:DA:65:5F:BF:C7:F3:BF:66:D4:16:1A:DA:95:92:8A:4C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/863d5686-e20c-4c9c-a3e3-3a5350b09ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.31.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:dd:42:76:8a:92:4a:dd:19:13:72:85:da:e1:64:3e:cc:bb: 20:e2:af:71:83:cd:fc:1a:4d:8a:42:e5:a8:dd:06:56:3f:ed: 04:9d:ee:17:41:af:5e:41:01:55:33:c4:02:56:7c:9b:f3:48: 8e:ba:62:49:f7:52:b1:05:77:1f:1e:e6:fb:21:8c:43:df:1f: c0:3b:4a:4b:65:01:66:85:32:6a:af:17:b1:7a:6c:96:59:bb: b5:c0:41:cf:e1:f3:42:79:53:f9:3e:b9:5e:eb:89:e9:2b:f3: 94:22:d0:dc:8b:f4:f4:f5:79:79:36:53:f8:65:63:62:38:d1: 97:b7:64:19:ce:3c:bd:fe:47:bc:fd:fb:b0:0f:65:1b:e3:6d: 61:d6:1e:32:ed:ba:7d:79:96:78:56:0d:69:eb:31:62:ea:f3: 25:af:85:2a:9c:60:41:ad:9d:18:9a:4e:2d:68:c7:9c:7f:9f: 13:96:35:e3:a9:53:9e:f3:ff:87:d5:df:fa:f1:b4:53:17:ca: 47:00:24:d7:ae:71:4d:0b:bf:57:16:a3:0a:2d:83:35:48:96: a5:2d:6c:e6:be:9f:09:a8:17:64:a8:17:99:79:36:c9:b9:31: 1a:f5:4c:af:f9:1c:e9:1f:6d:7e:2f:23:02:03:ce:ea:5e:73: 14:1f:83:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK91jP3dQo8AqGCV7V3HFoLt93HMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTcwNzA4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGNkMjI2NDQyOTJlNTk0YTNkNzRmNTMxY2I4YjhhMjZh ODE2MTk1OGE4Njg3NzI4ZWE1MjIzMDRmNDBjOWVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6++TAO2kWv+sh1WpMiZaXr2j9n3zzeXg0ak7GVQEzw6jt 46uXphbSJQoi+eV37xfXtCd1Hxk0OCPuRx4zz6rSARzYZSbFt2CjNn7se50OKGUb QL97vClrwjhqn97rrIsk+7ye3Xtxvlr6e92W4wOfeWjUusz7+6xyRDqD7cUDp7ka 2wJw7jt5vtwyOy96XoYb0fWhxpmEkS7CzlpnjFRPwAWehfSaj8bo+diwEjRirJsk 3KteoEb3Uhq7WW7fTHwMp6Ex6b9Ucfu71FXvQYL83dxMggGV+pMMQre4NDPObBi5 LIedFhcQ0YLsxB75ky+ZU78bVBUV/anp+N3PGxoFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNT01oNplX7/H879m1BYa2pWSikwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2M2Q1Njg2LWUyMGMtNGM5Yy1hM2UzLTNhNTM1MGIwOWNhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoR8wDQYJKoZIhvcNAQELBQADggEBABrdQnaKkkrdGRNyhdrhZD7MuyDi r3GDzfwaTYpC5ajdBlY/7QSd7hdBr15BAVUzxAJWfJvzSI66Ykn3UrEFdx8e5vsh jEPfH8A7SktlAWaFMmqvF7F6bJZZu7XAQc/h80J5U/k+uV7riekr85Qi0NyL9PT1 eXk2U/hlY2I40Ze3ZBnOPL3+R7z9+7APZRvjbWHWHjLtun15lnhWDWnrMWLq8yWv hSqcYEGtnRiaTi1ox5x/nxOWNeOpU57z/4fV3/rxtFMXykcAJNeucU0Lv1cWowot gzVIlqUtbOa+nwmoF2SoF5l5Nsm5MRr1TK/5HOkfbX4vIwIDzupecxQfg1Y= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:19 2025 by rpki-client