$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a24e2a0c-6094-47ca-875e-b0ca69890bb5.roa File: a24e2a0c-6094-47ca-875e-b0ca69890bb5.roa (raw, json) Hash identifier: tJrvm8B7bW57ayx6vtP2eb8Wt90Lj/r8OeWcbA9lS30= Subject key identifier: A3:AC:63:30:0A:49:48:B0:FF:85:B8:EC:72:ED:A7:7C:94:B4:CE:D1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 384441F4AD90C65B6CAF2612A3413525FC124D9F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a24e2a0c-6094-47ca-875e-b0ca69890bb5.roa Signing time: Thu 25 Sep 2025 16:37:02 +0000 ROA not before: Thu 25 Sep 2025 16:37:02 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:44:41:f4:ad:90:c6:5b:6c:af:26:12:a3:41:35:25:fc:12:4d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 16:37:02 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=8eb7de9a76c665c00127462d0aa6499b2a5cb0d314bd535fc71ba1b95debc099, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:c4:f6:c2:e2:e2:fe:06:de:89:34:aa:73: 66:3e:d3:30:83:97:04:d2:57:8e:cc:4a:03:d6:a8: d1:bb:e3:91:c8:32:cd:57:6a:a5:4f:5a:0f:7b:c9: bb:59:f7:28:87:da:70:f2:db:d4:f5:b4:0d:71:f3: 3b:a1:a2:55:8f:a6:f1:b1:7c:39:b2:89:e3:a4:69: ac:87:8f:17:15:3c:7e:0d:d0:2b:da:b2:36:d2:d2: 15:ae:46:d2:52:d3:46:37:0b:ce:d6:95:de:77:9f: 25:37:62:fd:46:1c:6f:5f:c8:3b:e9:eb:f8:ae:20: 97:07:b9:75:32:ca:aa:13:4d:86:d2:74:0d:4e:fc: 96:73:51:77:5e:20:5b:83:80:1c:fa:56:4a:f5:a2: 76:ba:c8:87:12:5f:fb:db:95:4b:d5:80:37:e2:da: c8:cb:84:60:b5:a2:5a:2f:c9:b4:65:0b:d9:fd:15: 9c:b4:74:20:93:10:f8:90:24:9d:ad:db:87:a3:68: e9:0e:82:08:01:84:02:5a:ab:9b:0d:d3:f9:bd:0a: 02:9a:f2:6c:5a:af:61:75:bb:b3:c3:16:92:de:d8: e5:70:fa:e6:45:28:78:64:13:d0:af:ca:7e:23:2c: f9:37:21:b7:7c:be:3b:05:3e:87:28:af:bd:66:1c: 09:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AC:63:30:0A:49:48:B0:FF:85:B8:EC:72:ED:A7:7C:94:B4:CE:D1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a24e2a0c-6094-47ca-875e-b0ca69890bb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.101.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:4a:2e:42:47:6e:97:bc:e0:63:4e:85:57:b9:ba:f5:5b:20: fe:42:3b:be:8a:b5:e6:d6:bf:d6:1f:ce:02:82:d4:85:52:fc: a1:eb:48:01:8b:0c:62:01:a9:5e:f1:c8:a3:56:96:47:25:df: d1:5d:54:76:d2:6e:e1:da:18:f4:c8:ae:52:97:30:d7:31:03: ed:c3:be:9e:f3:d7:6a:88:8e:cd:74:66:a3:f9:c2:af:46:04: fd:2b:4e:31:9f:b3:a7:b9:07:b9:3e:9a:61:7b:be:b4:25:57: d4:75:a2:fb:bb:b2:90:a5:27:79:b6:1b:ba:fb:0f:3c:25:80: bb:b5:4e:01:1f:33:4f:36:13:12:3e:81:a8:23:26:60:a7:2d: 09:a2:e0:50:13:fe:a2:91:c6:3e:6d:15:ee:f8:43:82:65:5d: bd:b5:36:af:03:76:d2:0c:ec:b2:f4:dd:42:bb:8d:dd:77:7e: 0e:c9:1c:c5:6b:fb:7e:e0:16:c0:4c:d9:2d:40:b9:ff:db:51: dc:fc:08:ba:03:75:eb:1e:4d:e4:78:7e:30:8b:9a:ce:cb:0d: 79:4f:90:4c:c8:41:b6:88:d3:56:ca:74:6f:d2:de:02:be:e4: 35:9c:b7:3d:39:6a:5b:ae:0d:e8:55:48:8c:98:54:72:0c:35: dd:f1:b0:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOERB9K2QxltsryYSo0E1JfwSTZ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTYzNzAyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZWI3ZGU5YTc2YzY2NWMwMDEyNzQ2MmQwYWE2NDk5YjJh NWNiMGQzMTRiZDUzNWZjNzFiYTFiOTVkZWJjMDk5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxKMT2wuLi/gbeiTSqc2Y+0zCDlwTSV47MSgPWqNG745HI Ms1XaqVPWg97ybtZ9yiH2nDy29T1tA1x8zuholWPpvGxfDmyieOkaayHjxcVPH4N 0CvasjbS0hWuRtJS00Y3C87Wld53nyU3Yv1GHG9fyDvp6/iuIJcHuXUyyqoTTYbS dA1O/JZzUXdeIFuDgBz6Vkr1ona6yIcSX/vblUvVgDfi2sjLhGC1olovybRlC9n9 FZy0dCCTEPiQJJ2t24ejaOkOgggBhAJaq5sN0/m9CgKa8mxar2F1u7PDFpLe2OVw +uZFKHhkE9Cvyn4jLPk3Ibd8vjsFPocor71mHAlZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUo6xjMApJSLD/hbjscu2nfJS0ztEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyNGUyYTBjLTYwOTQtNDdjYS04NzVlLWIwY2E2OTg5MGJiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoGUwDQYJKoZIhvcNAQELBQADggEBAE5KLkJHbpe84GNOhVe5uvVbIP5C O76KtebWv9YfzgKC1IVS/KHrSAGLDGIBqV7xyKNWlkcl39FdVHbSbuHaGPTIrlKX MNcxA+3Dvp7z12qIjs10ZqP5wq9GBP0rTjGfs6e5B7k+mmF7vrQlV9R1ovu7spCl J3m2G7r7DzwlgLu1TgEfM082ExI+gagjJmCnLQmi4FAT/qKRxj5tFe74Q4JlXb21 Nq8DdtIM7LL03UK7jd13fg7JHMVr+37gFsBM2S1Auf/bUdz8CLoDdeseTeR4fjCL ms7LDXlPkEzIQbaI01bKdG/S3gK+5DWctz05aluuDehVSIyYVHIMNd3xsFs= -----END CERTIFICATE-----Generated at Sat Oct 18 02:17:33 2025 by rpki-client