$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/156bbc69-c49c-426d-965a-6b385e6d6418.roa File: 156bbc69-c49c-426d-965a-6b385e6d6418.roa (raw, json) Hash identifier: dRxJOjMXDjbUQDfaGGYbR2L1uOuhw969jOqbiSL0xCk= Subject key identifier: 7E:AB:D7:DE:98:DD:E0:35:EB:9D:13:BB:53:5D:17:A4:7C:0D:F5:5A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 76BFD42A011C0116D98DF8A5FE2F3C9FA92A5588 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/156bbc69-c49c-426d-965a-6b385e6d6418.roa Signing time: Fri 26 Sep 2025 01:21:56 +0000 ROA not before: Fri 26 Sep 2025 01:21:56 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:bf:d4:2a:01:1c:01:16:d9:8d:f8:a5:fe:2f:3c:9f:a9:2a:55:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:21:56 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=0e63ed2f2b4a60b7057cc862f9441c6a7d516388a421a4f3290c742ebf97dacf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:b5:6d:b5:a9:90:ef:d3:1a:14:a1:64:77: 07:66:a5:d9:78:90:2d:ff:ad:ef:79:81:a6:23:6f: ac:01:3b:e5:8f:0b:01:74:ca:9f:c0:ff:e9:75:28: 53:45:b8:5c:73:70:7d:1a:6a:51:09:e7:5e:9e:03: d6:9d:b5:a0:ce:51:64:35:eb:24:46:df:b8:1a:f6: c5:08:46:49:ff:59:e7:c4:bb:21:61:a9:78:12:2f: bc:3d:ff:01:10:f8:a6:67:af:19:4d:e6:71:9f:38: 66:1e:82:67:7e:47:4d:7e:06:90:ca:da:df:15:32: 48:95:c8:94:3c:75:0b:e0:4f:fe:0a:ff:69:24:c2: 35:80:7e:5c:02:c6:80:da:0b:1e:27:b1:dd:ea:84: f1:4e:fe:d3:6c:e6:dd:83:b7:8f:ed:31:19:12:45: ff:fd:c6:39:af:7d:85:1e:06:b6:65:8b:1c:1e:dd: 16:17:1f:38:fb:56:56:dd:da:a0:ea:a8:85:7e:56: 0f:e6:b2:7c:b3:83:78:44:45:74:f4:93:b9:cd:a4: 93:2d:69:3d:cc:83:08:9d:f0:29:9d:98:6e:c8:73: 99:8f:fd:c2:f1:2b:bf:de:c4:61:13:eb:be:d5:5a: 1a:4c:1e:8e:aa:2f:d1:30:fc:15:8c:aa:9b:c0:2b: f6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AB:D7:DE:98:DD:E0:35:EB:9D:13:BB:53:5D:17:A4:7C:0D:F5:5A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/156bbc69-c49c-426d-965a-6b385e6d6418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.176.0/21 Signature Algorithm: sha256WithRSAEncryption 17:62:26:31:e0:a3:aa:ca:a9:60:b4:a8:48:a2:d0:41:ee:a6: e8:d3:e8:b6:a8:8f:1f:0b:12:dc:31:f9:94:d0:97:5c:a9:08: 61:08:17:01:38:d4:08:a3:85:1e:f4:f8:19:53:eb:c5:cd:7d: c6:81:eb:dc:71:15:ab:f0:5b:1c:ae:8c:85:29:d6:64:bb:88: 07:3d:b2:60:eb:7e:ff:58:33:4c:60:50:59:12:49:ed:29:71: f2:6f:98:f7:79:f2:92:e3:81:f0:36:9d:14:86:d8:42:b6:bb: 06:e9:f2:0b:d7:84:eb:ec:e1:b7:ba:8e:b6:e5:8e:03:7a:1a: e1:fb:ff:d4:ef:ec:0b:c4:93:a1:ce:7f:cf:42:25:a6:2d:04: c5:20:30:31:ae:e9:a8:b8:65:65:47:cb:a0:37:8c:ed:08:f1: df:37:d7:d0:9f:4b:f7:6b:82:35:99:c0:e4:63:6a:0d:f3:15: ef:bf:b3:93:4b:7b:32:44:ba:82:ad:fd:10:2c:2d:e2:c7:44: b5:7e:ba:3e:c5:2a:3a:d1:ec:77:97:aa:77:4a:38:a2:bd:8d: a9:19:f8:08:ab:8b:a4:45:c7:68:dd:20:91:00:b3:89:93:91: ca:e4:03:1a:f3:2b:96:4d:01:fe:19:6c:4f:6d:55:21:54:83: 89:17:cf:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdr/UKgEcARbZjfil/i88n6kqVYgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEyMTU2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTYzZWQyZjJiNGE2MGI3MDU3Y2M4NjJmOTQ0MWM2YTdk NTE2Mzg4YTQyMWE0ZjMyOTBjNzQyZWJmOTdkYWNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0ebVttamQ79MaFKFkdwdmpdl4kC3/re95gaYjb6wBO+WP CwF0yp/A/+l1KFNFuFxzcH0aalEJ516eA9adtaDOUWQ16yRG37ga9sUIRkn/WefE uyFhqXgSL7w9/wEQ+KZnrxlN5nGfOGYegmd+R01+BpDK2t8VMkiVyJQ8dQvgT/4K /2kkwjWAflwCxoDaCx4nsd3qhPFO/tNs5t2Dt4/tMRkSRf/9xjmvfYUeBrZlixwe 3RYXHzj7Vlbd2qDqqIV+Vg/msnyzg3hERXT0k7nNpJMtaT3Mgwid8CmdmG7Ic5mP /cLxK7/exGET677VWhpMHo6qL9Ew/BWMqpvAK/b7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfqvX3pjd4DXrnRO7U10XpHwN9VowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE1NmJiYzY5LWM0OWMtNDI2ZC05NjVhLTZiMzg1ZTZkNjQxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDprAwDQYJKoZIhvcNAQELBQADggEBABdiJjHgo6rKqWC0qEii0EHupujT 6Laojx8LEtwx+ZTQl1ypCGEIFwE41AijhR70+BlT68XNfcaB69xxFavwWxyujIUp 1mS7iAc9smDrfv9YM0xgUFkSSe0pcfJvmPd58pLjgfA2nRSG2EK2uwbp8gvXhOvs 4be6jrbljgN6GuH7/9Tv7AvEk6HOf89CJaYtBMUgMDGu6ai4ZWVHy6A3jO0I8d83 19CfS/drgjWZwORjag3zFe+/s5NLezJEuoKt/RAsLeLHRLV+uj7FKjrR7HeXqndK OKK9jakZ+Airi6RFx2jdIJEAs4mTkcrkAxrzK5ZNAf4ZbE9tVSFUg4kXz+I= -----END CERTIFICATE-----Generated at Fri Oct 17 22:15:10 2025 by rpki-client