$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b7fb0cb-c1d6-4de5-8905-47493ebddea0.roa File: 3b7fb0cb-c1d6-4de5-8905-47493ebddea0.roa (raw, json) Hash identifier: rzUsZAYmMUrchX9ops2Pr/rnqHVzMP7yc2q1ckecnhY= Subject key identifier: 18:80:51:CC:AB:15:5D:A1:03:FB:C1:AA:FE:45:2D:2F:F9:3F:D6:A8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4BE1CD0CA5DE257E76BA9A51D71B683F4432B535 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b7fb0cb-c1d6-4de5-8905-47493ebddea0.roa Signing time: Thu 25 Sep 2025 21:36:49 +0000 ROA not before: Thu 25 Sep 2025 21:36:49 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e1:cd:0c:a5:de:25:7e:76:ba:9a:51:d7:1b:68:3f:44:32:b5:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 21:36:49 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c47b2570c41f024504655fe7a12c823740188860d2d53c19bec6595edf3c02cf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:43:9c:16:c3:37:2d:95:0a:6b:3d:d3:48: 9e:b6:48:4c:10:58:c0:cf:ba:7c:ea:df:d7:fe:b5: d6:f2:2b:59:7d:58:5e:a4:71:8f:1f:25:42:24:fa: ca:7b:4c:71:d6:c3:ae:01:81:bf:6f:52:f7:36:f6: cf:8e:66:72:e2:e4:9e:c5:ae:17:f6:f6:3f:7e:3f: 0d:2a:b4:54:7e:83:9d:5d:31:c6:f5:5e:7f:66:24: fa:ce:f9:e0:b7:0b:16:2c:28:da:45:f1:2a:54:fd: fe:c4:85:0a:32:d7:6a:8f:d9:01:54:4c:01:77:f7: d5:8b:4a:d8:6e:06:6f:98:69:b5:79:28:be:2c:62: 6a:2c:d3:8a:a3:f5:98:41:62:74:6a:0f:87:56:ab: a8:2c:f3:25:ea:f7:ed:c4:b5:f4:14:c4:3a:d2:48: 4b:91:27:30:48:e5:04:5c:84:ad:2f:9f:d2:07:ad: 11:18:3b:21:9c:91:ce:9b:2f:d6:3f:6f:ff:73:5c: a4:cf:7d:74:c5:8b:e2:1f:5e:eb:ab:d3:64:43:59: 42:89:f3:42:a8:9f:1c:62:17:ca:d0:62:fc:47:76: b0:6c:d2:30:81:70:63:07:80:a9:76:36:fa:b1:e4: b6:47:21:59:f0:41:cc:94:c9:8d:a7:27:aa:29:06: 76:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:80:51:CC:AB:15:5D:A1:03:FB:C1:AA:FE:45:2D:2F:F9:3F:D6:A8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b7fb0cb-c1d6-4de5-8905-47493ebddea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.166.0/23 Signature Algorithm: sha256WithRSAEncryption 81:a8:f2:4b:8a:0a:8e:00:45:53:f9:41:2b:a6:ac:8b:07:b1: 73:e7:2f:5c:89:0e:bf:60:3b:90:62:8c:ba:42:ca:6d:04:2f: ca:96:b6:02:2f:7b:50:53:03:67:b0:7e:05:92:5c:fe:b6:4d: 9d:d2:0d:2f:75:0f:b4:96:84:ae:a6:d7:71:87:ae:26:a1:6f: 2d:0e:19:0f:47:1d:64:8b:09:58:dc:95:d9:fd:75:a1:95:98: 8c:a7:b8:45:7c:31:59:bc:20:df:2a:86:38:af:37:db:0a:f5: d8:38:f4:af:a4:b8:b8:fa:a3:94:77:bb:49:e6:44:f4:5c:b7: 0b:4a:d7:31:c2:db:2c:87:09:12:97:d5:f2:5d:56:20:8b:95: e8:d6:3c:03:af:f5:98:29:b0:3a:4a:37:f1:93:a9:79:02:50: 2b:d5:66:b4:09:8f:b1:f5:af:59:b0:6f:dd:f6:8e:18:66:73: f2:fa:0d:de:2f:ff:ff:51:0e:02:c8:94:3e:e6:34:87:c0:3a: 41:25:e7:32:46:58:77:41:18:c9:b9:0a:d1:d6:a2:4a:eb:52: 87:a5:a1:6f:b0:31:dc:92:50:09:e5:cf:7b:47:3f:a3:57:a2: a8:a1:6f:89:74:49:2e:f0:81:8b:b8:65:ee:e5:9d:44:5d:82: a3:44:9a:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS+HNDKXeJX52uppR1xtoP0QytTUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjEzNjQ5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDdiMjU3MGM0MWYwMjQ1MDQ2NTVmZTdhMTJjODIzNzQw MTg4ODYwZDJkNTNjMTliZWM2NTk1ZWRmM2MwMmNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBvUOcFsM3LZUKaz3TSJ62SEwQWMDPunzq39f+tdbyK1l9 WF6kcY8fJUIk+sp7THHWw64Bgb9vUvc29s+OZnLi5J7Frhf29j9+Pw0qtFR+g51d Mcb1Xn9mJPrO+eC3CxYsKNpF8SpU/f7EhQoy12qP2QFUTAF399WLSthuBm+YabV5 KL4sYmos04qj9ZhBYnRqD4dWq6gs8yXq9+3EtfQUxDrSSEuRJzBI5QRchK0vn9IH rREYOyGckc6bL9Y/b/9zXKTPfXTFi+IfXuur02RDWUKJ80KonxxiF8rQYvxHdrBs 0jCBcGMHgKl2Nvqx5LZHIVnwQcyUyY2nJ6opBnb7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGIBRzKsVXaED+8Gq/kUtL/k/1qgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiN2ZiMGNiLWMxZDYtNGRlNS04OTA1LTQ3NDkzZWJkZGVhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDoaYwDQYJKoZIhvcNAQELBQADggEBAIGo8kuKCo4ARVP5QSumrIsHsXPn L1yJDr9gO5BijLpCym0EL8qWtgIve1BTA2ewfgWSXP62TZ3SDS91D7SWhK6m13GH riahby0OGQ9HHWSLCVjcldn9daGVmIynuEV8MVm8IN8qhjivN9sK9dg49K+kuLj6 o5R3u0nmRPRctwtK1zHC2yyHCRKX1fJdViCLlejWPAOv9ZgpsDpKN/GTqXkCUCvV ZrQJj7H1r1mwb932jhhmc/L6Dd4v//9RDgLIlD7mNIfAOkEl5zJGWHdBGMm5CtHW okrrUoeloW+wMdySUAnlz3tHP6NXoqihb4l0SS7wgYu4Ze7lnURdgqNEmmU= -----END CERTIFICATE-----Generated at Fri Oct 17 23:59:35 2025 by rpki-client