$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16070da7-9e23-4a70-80a1-3ed5a8951024.roa File: 16070da7-9e23-4a70-80a1-3ed5a8951024.roa (raw, json) Hash identifier: 9VE+DiOqydqsw00F87xiXeA5hF3GITD8heW2PnFp73w= Subject key identifier: 20:07:42:82:E1:2E:F8:6C:07:78:0E:9E:43:81:B4:11:C3:60:30:0E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1EF955449CBFC4D5DEB6732BDAA4CD172B837E9F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16070da7-9e23-4a70-80a1-3ed5a8951024.roa Signing time: Fri 26 Sep 2025 02:17:44 +0000 ROA not before: Fri 26 Sep 2025 02:17:44 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f9:55:44:9c:bf:c4:d5:de:b6:73:2b:da:a4:cd:17:2b:83:7e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:17:44 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=012c3e7996a11a5dd3eacc6124d4d0c2ab4f87e417b3882e319de4af70279e1e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:e9:de:c2:ea:8c:54:d9:a0:31:6b:73:a0: 74:f8:1c:73:21:df:65:ef:49:e7:c6:c9:76:95:05: a6:6e:11:6b:b6:3a:05:47:1b:aa:6c:f3:e8:13:92: 04:ad:12:79:e1:dd:49:ee:f4:42:e6:93:d9:c6:70: 6f:f4:92:d3:da:c4:cd:c0:82:04:8e:f0:73:cd:f3: 0e:4f:b9:51:03:1d:6d:be:28:84:54:8c:05:d0:b7: 82:13:bf:aa:06:1c:bb:96:3e:d7:d5:1a:72:a9:5e: 07:29:1f:9a:d1:de:c3:b4:88:72:3b:2f:24:ce:ab: 95:6b:cd:75:f6:81:20:a3:c1:c2:9c:2f:75:fd:d2: 4c:58:92:59:57:44:2e:a8:0d:93:60:ed:58:2d:93: bd:6d:fe:87:45:5c:f3:1a:47:7c:b6:23:20:f2:99: 6b:a7:2d:b2:c5:17:e2:83:72:13:ab:f7:44:5f:67: b1:74:74:bb:42:b8:3e:82:1f:a7:2b:12:9f:37:b7: ee:28:15:31:02:ce:4d:55:ed:3a:ea:e3:75:09:a0: 68:1e:7f:53:d7:03:58:0b:d5:1c:5a:e5:24:43:96: 16:22:d6:78:5d:f3:d0:a9:a9:12:da:de:59:b3:f2: 0d:ef:a7:c6:38:f4:a3:47:47:b3:71:b1:32:8a:b1: d7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:07:42:82:E1:2E:F8:6C:07:78:0E:9E:43:81:B4:11:C3:60:30:0E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16070da7-9e23-4a70-80a1-3ed5a8951024.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption a3:6a:92:7d:27:11:21:37:e7:46:10:11:9e:9a:a8:5a:8a:fe: 8e:a8:5c:71:2e:b4:9c:49:0c:a9:20:a5:2e:77:55:8b:5d:fc: 5d:93:34:69:68:0e:3c:9c:e6:30:40:9c:dc:16:96:01:67:87: 29:78:98:59:6f:f9:15:cc:a0:1b:7d:c9:65:e5:e6:c0:71:cf: 7e:79:e7:44:61:da:1d:ce:8f:93:8f:cd:9b:c3:78:15:fd:49: 29:ef:68:68:44:fb:9e:6f:48:5c:7a:8b:5f:29:3c:dc:3d:dc: 6a:8e:7f:fd:c5:32:0a:8c:d1:be:e6:cc:37:35:e2:ed:15:f3: c7:69:f7:21:8d:bc:6f:a4:50:0f:69:30:7e:0a:95:92:79:bb: 5a:0a:8f:f3:05:6b:a6:77:31:e2:4c:bc:84:36:7b:78:92:3a: c3:ce:6b:f7:c0:07:bb:0b:60:7c:aa:c3:39:0c:2c:e2:26:73: ba:21:fb:94:e5:de:8c:d5:07:a3:34:38:d1:9d:68:1a:7e:8b: 08:f5:c7:bc:f6:61:06:e9:b0:bd:51:99:1f:bd:61:c7:d3:08: 62:6c:3f:64:ad:02:ef:9b:2c:25:91:bd:35:43:c6:3e:a1:e3: 13:96:1e:9e:06:55:a1:b2:73:75:e0:29:0b:4b:75:0f:95:84: b4:e2:93:9e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHvlVRJy/xNXetnMr2qTNFyuDfp8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIxNzQ0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTJjM2U3OTk2YTExYTVkZDNlYWNjNjEyNGQ0ZDBjMmFi NGY4N2U0MTdiMzg4MmUzMTlkZTRhZjcwMjc5ZTFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv4unewuqMVNmgMWtzoHT4HHMh32XvSefGyXaVBaZuEWu2 OgVHG6ps8+gTkgStEnnh3Unu9ELmk9nGcG/0ktPaxM3AggSO8HPN8w5PuVEDHW2+ KIRUjAXQt4ITv6oGHLuWPtfVGnKpXgcpH5rR3sO0iHI7LyTOq5VrzXX2gSCjwcKc L3X90kxYkllXRC6oDZNg7Vgtk71t/odFXPMaR3y2IyDymWunLbLFF+KDchOr90Rf Z7F0dLtCuD6CH6crEp83t+4oFTECzk1V7Trq43UJoGgef1PXA1gL1Rxa5SRDlhYi 1nhd89CpqRLa3lmz8g3vp8Y49KNHR7NxsTKKsdejAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUIAdCguEu+GwHeA6eQ4G0EcNgMA4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2MDcwZGE3LTllMjMtNGE3MC04MGExLTNlZDVhODk1MTAyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwADqTANBgkqhkiG9w0BAQsFAAOCAQEAo2qSfScRITfnRhARnpqoWor+jqhc cS60nEkMqSClLndVi138XZM0aWgOPJzmMECc3BaWAWeHKXiYWW/5FcygG33JZeXm wHHPfnnnRGHaHc6Pk4/Nm8N4Ff1JKe9oaET7nm9IXHqLXyk83D3cao5//cUyCozR vubMNzXi7RXzx2n3IY28b6RQD2kwfgqVknm7WgqP8wVrpncx4ky8hDZ7eJI6w85r 98AHuwtgfKrDOQws4iZzuiH7lOXejNUHozQ40Z1oGn6LCPXHvPZhBumwvVGZH71h x9MIYmw/ZK0C75ssJZG9NUPGPqHjE5YengZVobJzdeApC0t1D5WEtOKTng== -----END CERTIFICATE-----Generated at Fri Oct 17 22:15:32 2025 by rpki-client