$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3dff18c7-faad-40b2-b599-6d7c2aa35997.roa File: 3dff18c7-faad-40b2-b599-6d7c2aa35997.roa (raw, json) Hash identifier: sgJj1gwbLWygh3WEWvz79wz83haY1EPeKe7MstGt2o0= Subject key identifier: 8D:AD:88:A3:AE:D2:EE:36:71:38:DA:F2:EE:02:0C:4E:EC:77:F9:DC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6B411DDC8967B7DDD2220973BE181916E8A865AA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3dff18c7-faad-40b2-b599-6d7c2aa35997.roa Signing time: Thu 25 Sep 2025 18:32:10 +0000 ROA not before: Thu 25 Sep 2025 18:32:10 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:41:1d:dc:89:67:b7:dd:d2:22:09:73:be:18:19:16:e8:a8:65:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:32:10 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=9713336c6402cbce0e9998a60a381624c0063db1a64c2d0253228f9dca79e8ea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a8:40:21:c4:1a:1d:5f:a0:ae:08:6b:55:3b: b6:a5:eb:0e:fe:f6:2d:56:e4:f7:26:86:c6:ce:12: b9:4f:58:f2:ec:49:f4:94:ad:cd:53:8d:ca:8b:46: a4:5e:fb:42:34:23:24:cc:d6:db:ef:62:e0:3d:94: be:44:e9:f3:4f:00:c7:0d:cb:f0:41:b5:7a:5b:76: 6a:7a:f5:e2:e2:e3:f6:08:08:02:33:48:98:00:9a: 85:64:0c:e1:0e:f9:f7:60:5e:70:ee:14:fb:10:0f: bd:1b:73:04:2d:8d:51:6c:62:0e:94:f8:16:0e:ce: 44:d2:54:91:68:f9:c4:09:48:d6:fa:44:4a:ba:be: b2:5a:a5:ea:18:df:d2:22:3c:cb:a0:35:57:c1:cf: 82:02:85:67:d1:73:e5:ef:f0:c7:f6:8a:66:c6:c2: 31:c1:d5:3f:e7:7e:52:0c:e7:f3:08:b6:65:e6:bb: b6:6c:8e:70:22:e8:20:81:00:67:82:31:6d:b9:17: e0:59:94:be:2f:0c:5a:c8:72:e3:81:62:4c:1c:ee: 30:e4:bb:42:2f:56:20:96:bb:94:76:f4:e8:4f:bb: e2:56:c6:73:f3:8f:7d:4a:23:5e:e5:e8:2d:d9:1a: d3:2e:c5:72:13:05:90:50:61:82:4c:ad:bc:d4:fb: 4c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AD:88:A3:AE:D2:EE:36:71:38:DA:F2:EE:02:0C:4E:EC:77:F9:DC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3dff18c7-faad-40b2-b599-6d7c2aa35997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.135.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:40:85:1c:2d:78:51:2a:1b:b7:9a:49:b7:39:03:4a:d0:6f: d2:50:4c:0f:5d:40:db:d4:9f:93:20:fc:23:32:c5:cd:cf:8a: e6:53:fd:51:be:cd:a3:f0:bf:73:c9:01:8d:53:17:b1:84:3f: 9f:69:3f:3a:22:d0:01:92:42:b3:88:c4:82:68:79:c4:2c:3a: e4:c0:0a:0e:46:35:f8:9f:88:ea:cc:93:17:4d:82:da:da:6d: 4e:e2:0e:77:9c:21:24:8e:4b:3d:93:d7:6b:09:37:b3:45:4e: b8:c1:96:4d:3e:35:f0:3c:8a:53:d7:78:b8:6c:fe:57:8b:27: 80:02:eb:d7:c5:dc:00:fb:bc:d9:b7:d5:50:8b:18:18:a3:f3: e8:34:23:6d:18:11:01:ad:65:f9:04:d8:8c:a3:69:02:49:7d: e3:0c:1f:60:c8:f8:a0:11:d7:8b:6f:ca:8d:21:a8:4e:c4:01: 55:4a:52:44:65:be:51:22:34:cc:da:0e:b2:51:3b:61:6b:13: 5c:0a:b4:c6:c9:8d:a9:dd:18:11:7e:90:a0:00:6e:0a:5c:9f: 08:df:af:ec:b7:2b:e8:18:8e:8d:62:13:3b:31:a6:83:0f:84: 7b:28:1c:f7:cf:ea:c5:d7:60:45:18:2b:71:3b:ce:ff:68:58: 30:90:dd:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa0Ed3Ilnt93SIglzvhgZFuioZaowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgzMjEwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzEzMzM2YzY0MDJjYmNlMGU5OTk4YTYwYTM4MTYyNGMw MDYzZGIxYTY0YzJkMDI1MzIyOGY5ZGNhNzllOGVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnqEAhxBodX6CuCGtVO7al6w7+9i1W5PcmhsbOErlPWPLs SfSUrc1TjcqLRqRe+0I0IyTM1tvvYuA9lL5E6fNPAMcNy/BBtXpbdmp69eLi4/YI CAIzSJgAmoVkDOEO+fdgXnDuFPsQD70bcwQtjVFsYg6U+BYOzkTSVJFo+cQJSNb6 REq6vrJapeoY39IiPMugNVfBz4IChWfRc+Xv8Mf2imbGwjHB1T/nflIM5/MItmXm u7ZsjnAi6CCBAGeCMW25F+BZlL4vDFrIcuOBYkwc7jDku0IvViCWu5R29OhPu+JW xnPzj31KI17l6C3ZGtMuxXITBZBQYYJMrbzU+0yXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUja2Io67S7jZxONry7gIMTux3+dwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNkZmYxOGM3LWZhYWQtNDBiMi1iNTk5LTZkN2MyYWEzNTk5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpocwDQYJKoZIhvcNAQELBQADggEBAE1AhRwteFEqG7eaSbc5A0rQb9JQ TA9dQNvUn5Mg/CMyxc3PiuZT/VG+zaPwv3PJAY1TF7GEP59pPzoi0AGSQrOIxIJo ecQsOuTACg5GNfifiOrMkxdNgtrabU7iDnecISSOSz2T12sJN7NFTrjBlk0+NfA8 ilPXeLhs/leLJ4AC69fF3AD7vNm31VCLGBij8+g0I20YEQGtZfkE2IyjaQJJfeMM H2DI+KAR14tvyo0hqE7EAVVKUkRlvlEiNMzaDrJRO2FrE1wKtMbJjandGBF+kKAA bgpcnwjfr+y3K+gYjo1iEzsxpoMPhHsoHPfP6sXXYEUYK3E7zv9oWDCQ3Vk= -----END CERTIFICATE-----Generated at Fri Oct 17 23:59:43 2025 by rpki-client