$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39666c12-c6bf-4356-a498-1cab212ff36e.roa File: 39666c12-c6bf-4356-a498-1cab212ff36e.roa (raw, json) Hash identifier: idbleSznsp2U5Qml3dQUdlKLN+Js73s21XGFHztRlAo= Subject key identifier: AB:AD:A6:03:7D:56:23:F2:96:3E:7F:BA:63:90:31:FE:EF:91:95:EF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4E0D4A9DE12EB8C2372D493A2FD050501E21EE47 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39666c12-c6bf-4356-a498-1cab212ff36e.roa Signing time: Thu 25 Sep 2025 22:02:41 +0000 ROA not before: Thu 25 Sep 2025 22:02:41 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0d:4a:9d:e1:2e:b8:c2:37:2d:49:3a:2f:d0:50:50:1e:21:ee:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:02:41 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c53bbc5ca7718834635c86ff401d36b2e1aefb44cb9132b94ae30f19a1b0abe0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:8d:0b:fc:39:57:b5:8d:3d:ca:44:1f:e8: 5e:67:ab:4c:5c:0d:3a:7b:67:0e:5e:1d:78:43:8e: 3c:c7:23:ed:6d:9c:34:bd:d8:7b:6b:1f:16:23:a1: 82:61:e5:78:b2:09:93:b0:4b:35:5a:84:c9:01:c3: f1:ca:0d:7c:d5:9c:dc:33:b0:03:37:9b:35:db:c0: 37:21:83:0f:a6:b5:40:97:b3:8a:47:0f:43:d8:ce: 9e:99:4c:ff:58:de:2b:2e:6e:30:d9:3a:f2:9d:57: 90:70:e7:04:c6:af:1b:8d:77:23:22:20:4b:68:e4: eb:75:c5:dd:0a:25:77:fa:4c:7b:d7:5a:62:a5:05: 48:3f:45:c2:f8:eb:16:b3:27:2f:c9:51:0c:2f:3b: 19:82:27:c6:97:38:e2:e6:9a:43:13:1b:f1:ac:49: b9:b4:8c:f3:56:92:e9:2e:2f:c3:6b:8f:44:73:0b: f5:5f:c5:d3:b4:7f:68:56:21:b0:30:6c:23:bc:43: ed:24:d3:e2:a6:73:26:1c:10:5f:6b:d8:c7:6d:88: f0:a3:c3:30:ea:83:22:3c:95:c4:62:e8:26:f1:c3: 5c:43:6b:fb:e6:02:9d:24:cb:db:9e:88:e4:33:44: 39:26:9a:9f:8f:93:78:0f:98:21:36:89:28:e0:73: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AD:A6:03:7D:56:23:F2:96:3E:7F:BA:63:90:31:FE:EF:91:95:EF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39666c12-c6bf-4356-a498-1cab212ff36e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.160.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:15:71:ae:1f:61:3f:c2:98:2d:27:79:b7:65:fd:11:96:9f: ac:dd:40:da:01:02:3a:61:d4:5c:59:a5:08:a3:d2:b2:1a:53: 33:50:ba:e1:c5:ac:98:22:a2:be:3b:17:ef:77:c7:e6:ae:2e: 81:c6:33:26:7e:b2:7a:66:5e:fb:9e:e0:06:88:f9:31:26:90: e0:03:30:00:ff:ef:d6:16:53:c9:e3:dc:27:a3:3b:d2:c0:24: 16:54:08:98:28:f2:2c:87:44:d8:86:36:bf:08:a5:c3:7d:3a: da:b8:4b:f5:ef:cf:ca:93:da:c0:9f:10:d7:de:d2:f5:3f:d5: ad:d3:76:46:5c:4f:98:0f:a7:43:d8:5e:a7:49:d1:c2:f4:11: 2b:b2:e2:a2:9a:af:44:e1:7e:6d:ef:60:bd:c8:a8:77:87:64: 6a:2c:df:14:ae:35:f0:cd:2e:28:4c:1b:da:fd:fd:37:42:80: 48:68:67:91:89:89:2b:b3:7f:26:5a:90:18:fe:45:2c:55:63: 6a:c5:56:a0:95:6f:8d:ff:ca:35:e1:0f:19:ad:87:ec:dc:b9: 59:4c:4b:6b:b9:4e:11:cf:0f:a2:c2:e9:4c:7c:bb:9f:4c:9a: bb:13:bf:0c:15:2b:c6:ea:ea:ef:cd:49:e5:81:63:cf:ed:c9: e9:f1:32:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTg1KneEuuMI3LUk6L9BQUB4h7kcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIwMjQxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTNiYmM1Y2E3NzE4ODM0NjM1Yzg2ZmY0MDFkMzZiMmUx YWVmYjQ0Y2I5MTMyYjk0YWUzMGYxOWExYjBhYmUwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh1Y0L/DlXtY09ykQf6F5nq0xcDTp7Zw5eHXhDjjzHI+1t nDS92HtrHxYjoYJh5XiyCZOwSzVahMkBw/HKDXzVnNwzsAM3mzXbwDchgw+mtUCX s4pHD0PYzp6ZTP9Y3isubjDZOvKdV5Bw5wTGrxuNdyMiIEto5Ot1xd0KJXf6THvX WmKlBUg/RcL46xazJy/JUQwvOxmCJ8aXOOLmmkMTG/GsSbm0jPNWkukuL8Nrj0Rz C/VfxdO0f2hWIbAwbCO8Q+0k0+KmcyYcEF9r2MdtiPCjwzDqgyI8lcRi6Cbxw1xD a/vmAp0ky9ueiOQzRDkmmp+Pk3gPmCE2iSjgc9M7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq62mA31WI/KWPn+6Y5Ax/u+Rle8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5NjY2YzEyLWM2YmYtNDM1Ni1hNDk4LTFjYWIyMTJmZjM2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDpKAwDQYJKoZIhvcNAQELBQADggEBAF0Vca4fYT/CmC0nebdl/RGWn6zd QNoBAjph1FxZpQij0rIaUzNQuuHFrJgior47F+93x+auLoHGMyZ+snpmXvue4AaI +TEmkOADMAD/79YWU8nj3CejO9LAJBZUCJgo8iyHRNiGNr8IpcN9Otq4S/Xvz8qT 2sCfENfe0vU/1a3TdkZcT5gPp0PYXqdJ0cL0ESuy4qKar0Thfm3vYL3IqHeHZGos 3xSuNfDNLihMG9r9/TdCgEhoZ5GJiSuzfyZakBj+RSxVY2rFVqCVb43/yjXhDxmt h+zcuVlMS2u5ThHPD6LC6Ux8u59MmrsTvwwVK8bq6u/NSeWBY8/tyenxMn8= -----END CERTIFICATE-----Generated at Sat Oct 18 02:36:51 2025 by rpki-client