$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/197161b7-0b73-4064-8e37-cdf5da11e488.roa File: 197161b7-0b73-4064-8e37-cdf5da11e488.roa (raw, json) Hash identifier: rGe1CHn0xgUYEZrns6/McxHboBOkZUMcjmLTChiIgNU= Subject key identifier: 73:74:CD:06:DF:97:D3:45:0E:D9:2A:D7:23:06:F4:0C:DA:07:DE:CA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 399083D64C1D34D51866C4B2394C62D3BA7C3DC4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/197161b7-0b73-4064-8e37-cdf5da11e488.roa Signing time: Thu 25 Sep 2025 18:51:42 +0000 ROA not before: Thu 25 Sep 2025 18:51:42 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:90:83:d6:4c:1d:34:d5:18:66:c4:b2:39:4c:62:d3:ba:7c:3d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:51:42 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=b9cd48fdb93da72b46325a643ed089f45c76825d606967352e82da54c6ee15a9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6d:5b:58:59:9a:37:58:36:f5:f3:13:16:83: 57:79:1c:7a:f6:54:23:39:ca:52:de:84:47:80:3b: 7a:fd:74:8c:00:7c:49:f7:73:5a:63:ea:da:03:3d: 54:1a:0b:04:fc:37:fa:08:71:1b:f7:b3:fc:18:2c: d0:23:99:5b:19:ab:6c:82:e7:a3:cf:39:2e:ab:6b: 9b:fb:9e:ab:3a:3e:66:0a:6a:8d:0b:8c:cb:75:10: a2:8a:90:f5:5e:6f:5e:93:55:4d:8e:47:19:48:65: 6b:6e:ce:b8:30:59:76:39:2d:83:5e:34:40:e2:fa: ec:5f:2f:c1:36:8a:15:cd:5d:94:9c:b6:43:80:04: d1:2e:05:75:eb:70:7f:3b:14:ed:c1:08:ac:02:43: f5:2b:0b:92:54:a3:c3:3c:10:1b:c4:ee:b0:4b:c5: 6e:bc:8f:7c:b0:e0:74:fb:f9:ba:8c:f8:80:27:13: b3:5b:df:65:bf:50:7d:63:3c:4c:97:e1:39:d5:c4: 8f:b7:1a:53:05:47:0c:76:96:2f:f8:67:2c:93:dc: a3:a0:4b:f9:f3:f7:c1:64:ee:7e:4c:46:bd:9d:12: c5:63:7e:cc:2b:84:00:6f:3d:16:85:0e:9f:26:01: db:b1:97:4a:11:96:cf:7f:6e:df:da:76:45:79:3e: 4b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:74:CD:06:DF:97:D3:45:0E:D9:2A:D7:23:06:F4:0C:DA:07:DE:CA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/197161b7-0b73-4064-8e37-cdf5da11e488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.108.0/24 Signature Algorithm: sha256WithRSAEncryption 20:6d:c5:9c:59:ae:a4:86:3e:13:5f:7c:dd:13:1f:59:e2:76: d3:b7:ce:58:44:69:0b:60:b4:3f:87:71:6a:2d:40:28:74:30: 04:45:43:57:9a:91:34:2a:ae:c7:3a:95:3c:90:3a:0b:a2:cc: b3:89:67:20:fb:62:b7:91:a6:53:fb:85:2b:f6:dc:61:e8:ea: 8f:9f:84:47:a1:58:83:1d:df:8b:76:28:7a:85:72:eb:3b:7b: a9:43:0e:92:d1:b1:fb:1d:45:7a:86:88:c2:8f:5e:ac:d0:2c: 82:ea:07:1d:50:61:43:0c:b2:9f:a4:f8:67:c6:f5:79:5f:3b: 3b:c4:bd:e6:ea:1c:58:72:29:79:dc:91:60:da:c6:67:f5:fb: 75:41:a1:49:32:b2:17:85:47:67:2b:05:b2:2d:e7:ba:5d:fc: b4:99:7b:6c:b0:ac:da:a9:84:22:43:b8:53:e2:3b:d9:40:72: 5b:43:f3:11:18:19:b2:26:76:5a:52:59:26:2a:c3:ac:4e:eb: 03:75:6d:22:be:27:99:bc:72:a0:72:a8:e9:c6:f1:83:55:77: 29:7c:d9:24:c2:f5:c5:6c:70:0a:a8:1d:2f:b2:c5:40:70:56: dc:89:92:ea:48:78:12:95:9a:07:06:2a:f8:b2:40:ca:e0:df: be:bc:a1:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOZCD1kwdNNUYZsSyOUxi07p8PcQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTg1MTQyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOWNkNDhmZGI5M2RhNzJiNDYzMjVhNjQzZWQwODlmNDVj NzY4MjVkNjA2OTY3MzUyZTgyZGE1NGM2ZWUxNWE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRbVtYWZo3WDb18xMWg1d5HHr2VCM5ylLehEeAO3r9dIwA fEn3c1pj6toDPVQaCwT8N/oIcRv3s/wYLNAjmVsZq2yC56PPOS6ra5v7nqs6PmYK ao0LjMt1EKKKkPVeb16TVU2ORxlIZWtuzrgwWXY5LYNeNEDi+uxfL8E2ihXNXZSc tkOABNEuBXXrcH87FO3BCKwCQ/UrC5JUo8M8EBvE7rBLxW68j3yw4HT7+bqM+IAn E7Nb32W/UH1jPEyX4TnVxI+3GlMFRwx2li/4ZyyT3KOgS/nz98Fk7n5MRr2dEsVj fswrhABvPRaFDp8mAduxl0oRls9/bt/adkV5PkspAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc3TNBt+X00UO2SrXIwb0DNoH3sowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE5NzE2MWI3LTBiNzMtNDA2NC04ZTM3LWNkZjVkYTExZTQ4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADp2wwDQYJKoZIhvcNAQELBQADggEBACBtxZxZrqSGPhNffN0TH1nidtO3 zlhEaQtgtD+HcWotQCh0MARFQ1eakTQqrsc6lTyQOguizLOJZyD7YreRplP7hSv2 3GHo6o+fhEehWIMd34t2KHqFcus7e6lDDpLRsfsdRXqGiMKPXqzQLILqBx1QYUMM sp+k+GfG9XlfOzvEvebqHFhyKXnckWDaxmf1+3VBoUkysheFR2crBbIt57pd/LSZ e2ywrNqphCJDuFPiO9lAcltD8xEYGbImdlpSWSYqw6xO6wN1bSK+J5m8cqByqOnG 8YNVdyl82STC9cVscAqoHS+yxUBwVtyJkupIeBKVmgcGKviyQMrg3768oY4= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:40 2025 by rpki-client