$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11c985a9-8dd2-4625-a809-b77b052a1488.roa File: 11c985a9-8dd2-4625-a809-b77b052a1488.roa (raw, json) Hash identifier: hDuWWTUsg69qyr7UNJ07dasT5WNVj/PBOrbNm4yCLw8= Subject key identifier: 8F:4B:17:7D:75:CF:9A:3A:57:BB:78:A7:CD:33:C2:53:5D:EB:AC:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40E5EF42FB1F810368F9B82AAC256125068B9476 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11c985a9-8dd2-4625-a809-b77b052a1488.roa Signing time: Thu 25 Sep 2025 22:32:10 +0000 ROA not before: Thu 25 Sep 2025 22:32:10 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e5:ef:42:fb:1f:81:03:68:f9:b8:2a:ac:25:61:25:06:8b:94:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:32:10 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=0fae4af41495dea6cdc7038686bfe21f1e50e55241eb447eb401fd90f4145cb4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:59:6a:73:b0:d9:65:39:b4:31:95:94:d4: 6e:e3:69:57:49:05:1c:ca:c0:68:d0:26:c6:4d:5f: ce:08:c8:f7:b5:80:af:5b:7f:27:0b:b6:5a:10:69: 8e:07:11:2d:eb:81:70:ce:b4:65:d1:5e:de:20:3e: 30:14:3a:c7:f8:0a:86:db:27:53:33:0a:b6:80:3f: ab:a8:a7:15:d1:58:c1:ca:a1:f6:97:ec:14:6f:e9: f1:20:c9:18:2c:9e:7e:ab:7a:16:63:96:cc:fa:3d: 4c:08:2f:df:09:cc:d4:85:0b:e7:05:67:c1:52:85: 57:03:c3:bf:71:b8:68:85:e8:91:30:d2:d4:19:1e: c8:14:c3:c6:ce:63:89:0c:80:5f:f8:a8:42:8a:3a: 92:46:67:17:40:0d:08:87:b5:fd:38:69:ce:56:4b: ba:b2:b0:43:db:db:fc:0a:a1:35:b1:1f:c3:62:ac: fb:31:97:48:5e:9a:64:a1:a9:bb:c6:8c:34:b5:46: 8c:4d:6a:71:be:f3:80:cf:b1:b7:7a:61:81:13:d2: dd:33:ba:56:94:1a:61:6f:30:43:01:31:7d:e9:35: e0:88:24:15:f0:64:25:86:10:43:88:99:ad:14:1e: d8:60:e5:a4:22:be:5b:50:62:39:98:85:30:ba:b3: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4B:17:7D:75:CF:9A:3A:57:BB:78:A7:CD:33:C2:53:5D:EB:AC:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11c985a9-8dd2-4625-a809-b77b052a1488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.162.0/23 Signature Algorithm: sha256WithRSAEncryption a5:73:c9:7d:28:07:86:c6:bf:e4:69:09:ac:52:c3:fb:9b:aa: 1d:e7:ab:9b:72:d6:fd:1f:6e:9e:54:a7:68:bc:2c:b4:d6:d9: b4:b4:59:47:14:a4:16:54:01:97:d4:29:ae:8d:ed:e1:86:9f: 94:ff:58:1d:2f:99:63:5e:ff:67:67:e6:ca:a2:63:23:c8:dc: 8b:6f:60:d1:97:c5:99:2e:53:98:b7:b7:26:5f:7b:21:62:3d: 91:bb:25:30:e8:f9:5c:d8:11:d6:f3:f5:a5:72:84:61:5f:fd: 16:3e:7e:f4:b6:99:09:67:9e:10:bc:99:e8:25:e2:08:3a:fa: fe:7a:2e:42:37:42:84:1f:07:35:d3:13:e9:90:f4:7f:7c:fb: 68:34:90:0d:8e:6d:f0:0f:a6:04:18:37:4d:ec:88:36:0b:f6: df:2b:4a:c4:2c:45:30:00:e1:00:9e:eb:78:5c:c5:2b:71:3a: d2:d4:ea:45:e9:a2:b9:9e:25:fa:03:09:6c:b8:a0:81:00:05: 7a:86:8f:ff:0c:6a:0f:16:31:6c:2d:e4:76:d5:aa:f4:3a:d2: 61:3f:33:a0:aa:aa:c2:df:e1:18:44:46:14:b9:85:70:5e:2a: 38:3d:8a:75:6c:0f:be:af:7c:57:8f:4a:df:48:46:9c:12:e4: 7b:97:30:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQOXvQvsfgQNo+bgqrCVhJQaLlHYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIzMjEwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmFlNGFmNDE0OTVkZWE2Y2RjNzAzODY4NmJmZTIxZjFl NTBlNTUyNDFlYjQ0N2ViNDAxZmQ5MGY0MTQ1Y2I0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCllVlqc7DZZTm0MZWU1G7jaVdJBRzKwGjQJsZNX84IyPe1 gK9bfycLtloQaY4HES3rgXDOtGXRXt4gPjAUOsf4CobbJ1MzCraAP6uopxXRWMHK ofaX7BRv6fEgyRgsnn6rehZjlsz6PUwIL98JzNSFC+cFZ8FShVcDw79xuGiF6JEw 0tQZHsgUw8bOY4kMgF/4qEKKOpJGZxdADQiHtf04ac5WS7qysEPb2/wKoTWxH8Ni rPsxl0hemmShqbvGjDS1RoxNanG+84DPsbd6YYET0t0zulaUGmFvMEMBMX3pNeCI JBXwZCWGEEOIma0UHthg5aQivltQYjmYhTC6s1VhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUj0sXfXXPmjpXu3inzTPCU13rrE8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzExYzk4NWE5LThkZDItNDYyNS1hODA5LWI3N2IwNTJhMTQ4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDp6IwDQYJKoZIhvcNAQELBQADggEBAKVzyX0oB4bGv+RpCaxSw/ubqh3n q5ty1v0fbp5Up2i8LLTW2bS0WUcUpBZUAZfUKa6N7eGGn5T/WB0vmWNe/2dn5sqi YyPI3ItvYNGXxZkuU5i3tyZfeyFiPZG7JTDo+VzYEdbz9aVyhGFf/RY+fvS2mQln nhC8megl4gg6+v56LkI3QoQfBzXTE+mQ9H98+2g0kA2ObfAPpgQYN03siDYL9t8r SsQsRTAA4QCe63hcxStxOtLU6kXpormeJfoDCWy4oIEABXqGj/8Mag8WMWwt5HbV qvQ60mE/M6CqqsLf4RhERhS5hXBeKjg9inVsD76vfFePSt9IRpwS5HuXMBk= -----END CERTIFICATE-----Generated at Sat Oct 18 00:16:05 2025 by rpki-client