$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9885ea31-5002-437c-8665-18eb227c36f9.roa File: 9885ea31-5002-437c-8665-18eb227c36f9.roa (raw, json) Hash identifier: DpKJWTd+1aJmm9ZJQF91Ug4fXbiNdoEvzAvtScrfm4Q= Subject key identifier: 43:AF:E1:8A:AC:6C:59:51:B1:47:CA:00:1C:56:C5:4F:F0:D1:C8:63 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 74537C91AB32A636263B790DD0C1B1439B205B11 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9885ea31-5002-437c-8665-18eb227c36f9.roa Signing time: Thu 25 Sep 2025 18:14:47 +0000 ROA not before: Thu 25 Sep 2025 18:14:47 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:53:7c:91:ab:32:a6:36:26:3b:79:0d:d0:c1:b1:43:9b:20:5b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:14:47 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=1552ecc026ca7adf1012cec8106a7ef75a5e40b690c163a82d294183584a3c85, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:53:2c:18:a4:c3:8f:b5:d3:f1:42:70:86:0c: 0a:82:e3:ff:f4:37:d1:e8:03:0f:7c:89:df:8f:d8: 01:31:d5:e4:8a:5d:e8:a1:a7:8c:b4:a4:28:79:aa: ab:50:db:6a:20:84:01:a4:be:a5:da:65:89:ad:0c: ec:36:62:29:c7:cb:0f:88:63:a4:fd:18:7c:7a:5b: ed:3b:33:6b:64:2e:67:b2:80:a0:75:dc:9f:0c:24: 63:9c:93:62:f1:8d:b7:b4:c7:c0:85:96:77:bf:86: 84:f5:6d:74:13:f3:4f:86:20:bb:19:07:bc:5a:97: 02:ca:ab:46:37:55:55:39:4a:64:0f:2d:d1:d2:f9: 96:b9:43:17:89:cd:b6:06:be:2a:8b:a5:e8:d8:5f: bf:a1:8a:5a:ba:77:de:56:cc:f8:4d:2f:fb:1b:19: 3e:43:3c:9b:15:7d:8a:06:70:f0:b2:ac:0b:02:95: aa:0f:20:f1:ba:8a:67:ac:72:b1:f6:f4:95:eb:1c: ee:2f:fc:c0:07:5d:e2:47:06:6f:fe:97:a3:81:d6: f0:c8:d1:f5:80:8f:f1:ae:cc:0f:2d:d9:bf:97:17: fa:2e:19:9d:b2:fb:0a:64:5c:04:5f:52:4e:c3:3e: 59:dd:48:ba:ec:eb:f8:e1:a9:b3:02:8b:01:03:ec: 30:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AF:E1:8A:AC:6C:59:51:B1:47:CA:00:1C:56:C5:4F:F0:D1:C8:63 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9885ea31-5002-437c-8665-18eb227c36f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.160.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:05:40:fc:9e:e3:8c:4c:b5:52:87:be:5c:fb:55:a5:ec:69: e7:0e:e5:00:ba:b6:b8:89:6f:5a:5c:80:7d:a3:f5:09:70:4c: 87:8f:78:57:4b:18:c7:7e:80:69:68:8e:34:af:6a:c2:ca:3a: c0:27:51:3a:db:e9:da:a6:73:99:0f:78:a3:0a:c2:cc:8b:e9: 57:48:0c:e9:1d:c4:c6:cb:94:db:d7:7b:2e:9c:d9:f2:2e:80: 66:f6:30:1b:4e:b7:e4:4f:16:77:85:22:57:be:ab:9d:52:eb: c2:53:a9:f0:46:87:1a:ae:74:24:ef:54:65:54:c8:9b:ea:5e: ee:b6:f6:26:54:9c:d1:54:0b:25:2a:e5:34:ee:da:bd:04:83: fa:73:26:d6:6f:5d:1d:a7:2c:22:7d:10:b6:41:3e:d5:8f:d3: 70:52:3a:cf:e9:3c:eb:41:a5:3c:1f:67:39:9a:74:ab:18:e4: 95:6d:17:48:db:eb:bb:c8:94:4a:6f:06:65:b0:5f:74:46:da: 54:e3:61:66:ed:63:ab:f9:b9:80:3b:95:88:7a:93:83:47:3d: eb:81:f3:b1:d0:b9:19:09:f7:88:0b:37:79:12:f5:27:b9:bf: c1:8e:5b:c3:a6:30:d0:f1:d4:9a:97:58:c9:7c:8d:06:a3:fd: 7a:ed:fa:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdFN8kasypjYmO3kN0MGxQ5sgWxEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgxNDQ3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTUyZWNjMDI2Y2E3YWRmMTAxMmNlYzgxMDZhN2VmNzVh NWU0MGI2OTBjMTYzYTgyZDI5NDE4MzU4NGEzYzg1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwUywYpMOPtdPxQnCGDAqC4//0N9HoAw98id+P2AEx1eSK Xeihp4y0pCh5qqtQ22oghAGkvqXaZYmtDOw2YinHyw+IY6T9GHx6W+07M2tkLmey gKB13J8MJGOck2Lxjbe0x8CFlne/hoT1bXQT80+GILsZB7xalwLKq0Y3VVU5SmQP LdHS+Za5QxeJzbYGviqLpejYX7+hilq6d95WzPhNL/sbGT5DPJsVfYoGcPCyrAsC laoPIPG6imescrH29JXrHO4v/MAHXeJHBm/+l6OB1vDI0fWAj/GuzA8t2b+XF/ou GZ2y+wpkXARfUk7DPlndSLrs6/jhqbMCiwED7DDdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ6/hiqxsWVGxR8oAHFbFT/DRyGMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk4ODVlYTMxLTUwMDItNDM3Yy04NjY1LTE4ZWIyMjdjMzZmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpaAwDQYJKoZIhvcNAQELBQADggEBAJsFQPye44xMtVKHvlz7VaXsaecO 5QC6triJb1pcgH2j9QlwTIePeFdLGMd+gGlojjSvasLKOsAnUTrb6dqmc5kPeKMK wsyL6VdIDOkdxMbLlNvXey6c2fIugGb2MBtOt+RPFneFIle+q51S68JTqfBGhxqu dCTvVGVUyJvqXu629iZUnNFUCyUq5TTu2r0Eg/pzJtZvXR2nLCJ9ELZBPtWP03BS Os/pPOtBpTwfZzmadKsY5JVtF0jb67vIlEpvBmWwX3RG2lTjYWbtY6v5uYA7lYh6 k4NHPeuB87HQuRkJ94gLN3kS9Se5v8GOW8OmMNDx1JqXWMl8jQaj/Xrt+sQ= -----END CERTIFICATE-----Generated at Fri Oct 17 23:53:59 2025 by rpki-client