$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b38380eb-0daa-4648-abe5-f0d881baf631.roa File: b38380eb-0daa-4648-abe5-f0d881baf631.roa (raw, json) Hash identifier: D1JJP5JVv6JoM5cJde6F5m7BmNNM+YEn1cZI1nBAbJM= Subject key identifier: 29:12:C6:D8:6D:83:85:91:92:41:A6:15:3C:DE:6E:B2:FB:0B:DB:F7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 102C79EA9CB5AA72825D9D940C2BAFA1A14EAE60 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b38380eb-0daa-4648-abe5-f0d881baf631.roa Signing time: Thu 25 Sep 2025 22:14:49 +0000 ROA not before: Thu 25 Sep 2025 22:14:49 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:2c:79:ea:9c:b5:aa:72:82:5d:9d:94:0c:2b:af:a1:a1:4e:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:14:49 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=5c769f679629b6fe2354a14f026014d801c4cf47f42e2ef251418e0c2d306e08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:97:3b:64:c2:76:5d:93:d8:c9:1a:73:e4:5c: 2e:fa:9f:c3:cb:ee:dc:6c:62:78:c6:08:76:54:cc: c0:6f:3f:c7:4d:fe:6d:85:f3:75:b6:06:a0:e7:5a: f9:e5:87:2f:20:c5:42:5a:0e:ba:06:23:0e:20:b7: fd:28:d8:27:76:55:c6:00:8d:ce:c8:65:e4:ca:11: 7f:a8:e6:f1:33:8a:ea:e0:06:76:16:b1:08:d0:70: d0:f8:a7:17:21:3c:71:61:67:dd:a6:db:60:f3:ee: eb:d3:ce:bc:8f:e4:82:58:fc:a4:92:c7:72:b6:5b: 65:c1:1b:6d:44:fd:4c:ca:81:3a:e6:0d:52:25:92: 87:95:5a:e0:37:a0:f3:50:7e:a5:3e:45:ef:de:1c: 3c:0c:11:4e:08:5b:9f:4c:c2:29:c6:65:bc:86:ee: 69:aa:ed:2f:c5:66:f5:7f:7f:d1:21:8f:0b:23:ce: e7:c3:bb:45:af:9e:eb:21:50:04:34:23:ce:7b:06: 71:de:1e:94:b9:78:07:26:76:89:54:17:1e:72:79: aa:50:f2:7f:39:83:c1:7e:b8:ba:fe:5c:96:f1:23: f1:7c:70:ad:2d:d1:26:d6:f6:bd:9e:48:39:f8:c7: 9d:61:55:06:31:dc:e7:fb:f4:f3:ba:4f:10:3d:92: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:12:C6:D8:6D:83:85:91:92:41:A6:15:3C:DE:6E:B2:FB:0B:DB:F7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b38380eb-0daa-4648-abe5-f0d881baf631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.188.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:d5:02:e1:b8:e9:d5:96:d1:58:77:e0:9b:ef:21:2d:40:1e: 40:26:66:46:11:44:43:83:32:41:a0:47:e0:11:0e:de:8a:5e: 7b:28:1f:61:b5:a4:28:94:0f:96:18:11:c1:03:9e:83:3c:77: 4a:30:fb:71:69:ff:ab:7a:dd:9e:1c:f6:0b:5a:e1:9c:27:0f: ad:b7:00:c6:1c:8a:1d:e2:10:38:1e:20:bd:5f:a3:6a:45:dc: 73:a9:10:9b:e0:d0:a5:7b:5a:9d:2c:be:cf:cf:28:c5:f3:73: fa:47:28:0b:11:02:c5:07:be:f4:75:b8:59:1c:d2:64:49:1f: 0e:c8:57:92:d9:97:54:fa:e6:d4:b1:8f:ca:95:30:41:11:ed: cc:f6:4e:cd:c8:7e:15:cf:54:74:7c:51:8d:7d:52:93:82:20: bc:96:c1:f2:60:51:bc:49:0d:8e:d3:00:18:f5:96:cb:a5:86: 6a:8c:ba:63:bf:52:c6:09:ae:8a:bf:39:b0:f5:da:05:2f:d7: 63:e6:91:0d:91:35:a6:7c:d3:90:46:de:06:fc:1a:cd:d3:e6: c5:c4:cf:e8:9a:35:36:0f:83:7f:bf:08:82:01:9a:a7:55:a2: 12:fe:87:52:2e:e9:1b:ec:ce:ad:13:0e:4e:ec:a2:26:86:d4: 0c:79:84:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUECx56py1qnKCXZ2UDCuvoaFOrmAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIxNDQ5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Yzc2OWY2Nzk2MjliNmZlMjM1NGExNGYwMjYwMTRkODAx YzRjZjQ3ZjQyZTJlZjI1MTQxOGUwYzJkMzA2ZTA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjlztkwnZdk9jJGnPkXC76n8PL7txsYnjGCHZUzMBvP8dN /m2F83W2BqDnWvnlhy8gxUJaDroGIw4gt/0o2Cd2VcYAjc7IZeTKEX+o5vEziurg BnYWsQjQcND4pxchPHFhZ92m22Dz7uvTzryP5IJY/KSSx3K2W2XBG21E/UzKgTrm DVIlkoeVWuA3oPNQfqU+Re/eHDwMEU4IW59MwinGZbyG7mmq7S/FZvV/f9Ehjwsj zufDu0WvnushUAQ0I857BnHeHpS5eAcmdolUFx5yeapQ8n85g8F+uLr+XJbxI/F8 cK0t0SbW9r2eSDn4x51hVQYx3Of79PO6TxA9kg+9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKRLG2G2DhZGSQaYVPN5usvsL2/cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IzODM4MGViLTBkYWEtNDY0OC1hYmU1LWYwZDg4MWJhZjYzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDpbwwDQYJKoZIhvcNAQELBQADggEBAErVAuG46dWW0Vh34JvvIS1AHkAm ZkYRREODMkGgR+ARDt6KXnsoH2G1pCiUD5YYEcEDnoM8d0ow+3Fp/6t63Z4c9gta 4ZwnD623AMYcih3iEDgeIL1fo2pF3HOpEJvg0KV7Wp0svs/PKMXzc/pHKAsRAsUH vvR1uFkc0mRJHw7IV5LZl1T65tSxj8qVMEER7cz2Ts3IfhXPVHR8UY19UpOCILyW wfJgUbxJDY7TABj1lsulhmqMumO/UsYJroq/ObD12gUv12PmkQ2RNaZ805BG3gb8 Gs3T5sXEz+iaNTYPg3+/CIIBmqdVohL+h1Iu6Rvszq0TDk7soiaG1Ax5hDg= -----END CERTIFICATE-----Generated at Fri Oct 17 21:59:04 2025 by rpki-client