$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0920c1b5-8fd5-46b7-917c-47009a6d31cb.roa File: 0920c1b5-8fd5-46b7-917c-47009a6d31cb.roa (raw, json) Hash identifier: Y6iNhesRsI2qWkv19AlHX/4PlY3zJRvfOdpdlGDdXVY= Subject key identifier: 8B:00:91:15:70:AC:40:93:6B:C3:12:78:0D:A9:8C:22:AE:B7:C8:7C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6922028594671226AB31A0A2CED5DA2CAF386767 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0920c1b5-8fd5-46b7-917c-47009a6d31cb.roa Signing time: Thu 25 Sep 2025 22:27:24 +0000 ROA not before: Thu 25 Sep 2025 22:27:24 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:22:02:85:94:67:12:26:ab:31:a0:a2:ce:d5:da:2c:af:38:67:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:27:24 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=e6c84ab0b388099f69fef2cb0158961fd6cb543c754c4abf8ea2afade0eb0aea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:2c:1a:cc:c5:17:ca:84:3f:89:d7:67:df: 2f:47:ba:58:bd:00:01:70:44:93:a2:b0:01:df:82: 80:bb:65:7a:fc:04:64:94:1a:08:99:97:2a:0b:5d: 1e:29:f2:86:a6:d2:2f:45:4c:95:73:7b:d4:11:ed: 7a:a5:a0:f4:8a:77:a6:c2:eb:3d:85:aa:72:14:b3: ef:2e:9d:0d:3a:c0:93:8d:09:b0:a1:17:77:bd:a4: 6b:97:9d:a7:77:a7:71:13:f4:35:5e:cf:7a:8f:58: a3:63:ac:81:ba:48:55:f5:dd:87:04:c6:c3:2d:ab: 43:b7:8b:6c:a3:2f:cf:f0:c4:69:34:06:eb:2f:b5: b3:7b:3c:3e:94:a6:de:b7:3a:e0:5d:29:a7:d7:45: ae:ba:fa:ad:10:5e:93:4e:77:d2:27:db:ff:84:ae: 5d:c1:b9:23:51:77:52:47:cf:5c:31:78:b8:27:23: 28:bd:e0:c5:dd:71:7f:65:54:a0:f4:7f:f3:37:b9: 9a:b3:02:1e:65:f5:77:94:44:15:77:4c:d3:0c:45: 4a:d0:7c:cd:5b:62:22:1a:6c:7c:9d:4f:8f:e0:a2: b5:a7:e5:e9:a8:58:f5:a9:50:4f:45:61:2e:15:40: df:17:f6:c5:2c:de:e8:0d:80:45:86:3a:76:48:c1: c4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:00:91:15:70:AC:40:93:6B:C3:12:78:0D:A9:8C:22:AE:B7:C8:7C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0920c1b5-8fd5-46b7-917c-47009a6d31cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.38.0/23 Signature Algorithm: sha256WithRSAEncryption 77:50:a5:1b:a3:db:e6:b7:45:e5:b1:9e:56:b4:61:21:da:d8: af:de:c8:f0:59:44:61:a2:88:ac:46:10:90:90:36:fb:31:ae: 6f:32:f1:eb:06:59:d9:cc:7d:3e:ce:39:a4:4b:66:85:28:ae: 51:1b:3a:90:19:9d:71:35:9d:34:69:18:51:28:b5:08:a8:ee: 5d:ba:e1:44:57:e7:55:70:fd:dc:0a:0f:dd:dc:d5:37:55:dd: 62:9e:d0:4e:6e:53:9e:e5:27:86:94:7d:19:d8:9c:71:0d:4a: c4:35:5d:19:40:f6:2f:01:86:16:d2:ac:08:af:87:7c:10:73: 9b:b1:5c:4b:1d:fd:6d:ee:fd:2f:56:e2:f7:7e:9a:f1:0c:95: 99:40:95:95:70:9e:55:63:1f:21:55:ec:70:d9:4b:c2:3d:26: b4:7a:db:e0:b8:21:c2:56:d5:7a:56:12:ab:77:8a:af:65:00: 07:f8:e6:07:9e:4c:6a:61:98:dd:79:d1:8e:e3:43:7a:b6:0d: dc:e1:fc:ae:05:43:8a:8b:f0:be:bf:11:c5:ca:22:66:aa:b4: 39:8e:ac:5a:de:3f:1d:99:dc:ec:b7:13:64:2e:8f:47:38:5a: 95:5a:af:dc:b2:55:dd:d4:9c:ae:3c:40:cd:46:32:4c:4d:db: 1c:d7:71:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaSIChZRnEiarMaCiztXaLK84Z2cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIyNzI0WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmM4NGFiMGIzODgwOTlmNjlmZWYyY2IwMTU4OTYxZmQ2 Y2I1NDNjNzU0YzRhYmY4ZWEyYWZhZGUwZWIwYWVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWECwazMUXyoQ/iddn3y9Huli9AAFwRJOisAHfgoC7ZXr8 BGSUGgiZlyoLXR4p8oam0i9FTJVze9QR7XqloPSKd6bC6z2FqnIUs+8unQ06wJON CbChF3e9pGuXnad3p3ET9DVez3qPWKNjrIG6SFX13YcExsMtq0O3i2yjL8/wxGk0 BusvtbN7PD6Upt63OuBdKafXRa66+q0QXpNOd9In2/+Erl3BuSNRd1JHz1wxeLgn Iyi94MXdcX9lVKD0f/M3uZqzAh5l9XeURBV3TNMMRUrQfM1bYiIabHydT4/gorWn 5emoWPWpUE9FYS4VQN8X9sUs3ugNgEWGOnZIwcTfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiwCRFXCsQJNrwxJ4DamMIq63yHwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA5MjBjMWI1LThmZDUtNDZiNy05MTdjLTQ3MDA5YTZkMzFjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDpiYwDQYJKoZIhvcNAQELBQADggEBAHdQpRuj2+a3ReWxnla0YSHa2K/e yPBZRGGiiKxGEJCQNvsxrm8y8esGWdnMfT7OOaRLZoUorlEbOpAZnXE1nTRpGFEo tQio7l264URX51Vw/dwKD93c1TdV3WKe0E5uU57lJ4aUfRnYnHENSsQ1XRlA9i8B hhbSrAivh3wQc5uxXEsd/W3u/S9W4vd+mvEMlZlAlZVwnlVjHyFV7HDZS8I9JrR6 2+C4IcJW1XpWEqt3iq9lAAf45geeTGphmN150Y7jQ3q2Ddzh/K4FQ4qL8L6/EcXK ImaqtDmOrFrePx2Z3Oy3E2Quj0c4WpVar9yyVd3UnK48QM1GMkxN2xzXcUc= -----END CERTIFICATE-----Generated at Fri Oct 17 23:58:28 2025 by rpki-client