$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/505dd510-c95e-44f2-92b9-8e3049ee1297.roa File: 505dd510-c95e-44f2-92b9-8e3049ee1297.roa (raw, json) Hash identifier: nOkfYrwvbFV7HihY79Iiad1H3EuQgE5B065X8XWNZMI= Subject key identifier: C5:29:23:0D:BA:B1:27:24:C7:9F:14:BB:FE:04:6F:09:F1:63:19:D9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 783ABC4270443E02FFC07F2F3B98A695C79B8895 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/505dd510-c95e-44f2-92b9-8e3049ee1297.roa Signing time: Fri 26 Sep 2025 00:22:01 +0000 ROA not before: Fri 26 Sep 2025 00:22:01 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:3a:bc:42:70:44:3e:02:ff:c0:7f:2f:3b:98:a6:95:c7:9b:88:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:22:01 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=802f407a365f734a839ebdec879ebbc2c081f6320890d6f80fc764439eda32f0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:e1:38:74:2c:24:24:7d:38:c9:d4:f5:64: 92:50:3c:01:9b:6b:be:b6:69:c8:da:71:37:aa:ae: 90:1d:ea:5e:b2:fb:d3:3a:eb:62:40:d2:23:98:7e: a0:79:90:8d:ff:f4:72:6c:f9:2c:0e:a2:f4:6a:57: 3b:cc:a6:67:37:be:a3:e0:fa:d4:e2:0f:41:f5:6f: 91:7a:0f:c4:e8:aa:fb:ee:13:44:a2:99:c4:02:1a: 22:4f:72:ac:5b:5f:7f:f8:8b:61:22:1f:81:bd:5f: c0:f4:22:50:1d:b3:07:22:58:15:49:81:d1:59:09: 0c:39:50:d8:f0:8a:14:f6:e3:8f:b6:05:91:6e:2f: 25:05:34:9b:14:8e:1d:df:1a:9a:94:52:b9:fe:7c: c7:f9:55:c5:fb:93:0c:fd:a6:18:b9:48:bd:97:52: 17:c2:9e:79:36:aa:0d:59:c1:1d:06:22:6c:0d:e0: 15:ed:8c:c1:32:7c:c0:0d:6b:94:d6:af:c5:fe:3e: db:ed:8e:6b:81:2e:ed:1e:5c:f9:d7:63:6b:57:6f: b2:26:74:21:65:fd:af:07:a9:d8:aa:d3:62:40:48: 69:4b:dd:85:64:e6:a8:78:93:ab:8a:c5:4a:9e:36: f1:a5:fc:d1:af:8f:ef:56:82:e9:ae:be:44:b1:65: e4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:29:23:0D:BA:B1:27:24:C7:9F:14:BB:FE:04:6F:09:F1:63:19:D9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/505dd510-c95e-44f2-92b9-8e3049ee1297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.144.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:70:5d:e0:9f:a1:9f:d3:0c:e5:ad:de:82:af:9c:f2:b6:7b: 7e:dd:3e:4f:6b:ed:8e:b2:16:cc:32:8b:c8:71:ce:bf:1b:f0: dc:6a:5d:cc:e4:7b:a5:84:bb:eb:15:c9:84:bd:f8:27:1c:3e: 96:27:82:58:51:48:19:69:4a:25:6b:c5:6e:ce:bc:b2:cc:e3: b8:ff:f0:ea:14:4e:1d:4b:0f:0a:b1:58:9e:d4:15:67:91:14: f6:9b:7b:72:90:a1:36:7a:25:4a:22:cd:6d:f9:27:9b:44:3e: f0:1b:2c:0f:bd:4c:86:e1:43:3d:bf:8c:a5:8a:95:74:ee:47: ca:27:20:2d:24:34:5d:f5:9a:7e:1e:d3:f5:2a:c7:66:b4:65: 8f:af:24:73:16:d5:03:dc:c6:20:91:e6:9d:95:54:9b:13:05: 25:e7:22:cd:fd:b0:69:9a:b6:9e:84:aa:9c:89:d7:35:0e:98: 9b:cf:74:98:f3:a8:57:16:43:fc:10:63:1c:14:f5:88:14:d4: 42:36:0b:db:29:92:85:a8:7f:9b:fb:59:f9:f1:50:2a:6d:4c: cb:f5:8e:58:dd:d8:3f:03:5a:bd:2d:25:3e:e2:b0:f3:df:a0: 23:96:a3:5f:61:41:bd:a4:fe:67:c6:81:2d:6d:67:2f:4d:1a: f7:b9:99:d8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeDq8QnBEPgL/wH8vO5imlcebiJUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDAyMjAxWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDJmNDA3YTM2NWY3MzRhODM5ZWJkZWM4NzllYmJjMmMw ODFmNjMyMDg5MGQ2ZjgwZmM3NjQ0MzllZGEzMmYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXv+E4dCwkJH04ydT1ZJJQPAGba762acjacTeqrpAd6l6y +9M662JA0iOYfqB5kI3/9HJs+SwOovRqVzvMpmc3vqPg+tTiD0H1b5F6D8Toqvvu E0SimcQCGiJPcqxbX3/4i2EiH4G9X8D0IlAdswciWBVJgdFZCQw5UNjwihT244+2 BZFuLyUFNJsUjh3fGpqUUrn+fMf5VcX7kwz9phi5SL2XUhfCnnk2qg1ZwR0GImwN 4BXtjMEyfMANa5TWr8X+PtvtjmuBLu0eXPnXY2tXb7ImdCFl/a8Hqdiq02JASGlL 3YVk5qh4k6uKxUqeNvGl/NGvj+9WgumuvkSxZeQzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxSkjDbqxJyTHnxS7/gRvCfFjGdkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUwNWRkNTEwLWM5NWUtNDRmMi05MmI5LThlMzA0OWVlMTI5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDppAwDQYJKoZIhvcNAQELBQADggEBAJpwXeCfoZ/TDOWt3oKvnPK2e37d Pk9r7Y6yFswyi8hxzr8b8NxqXczke6WEu+sVyYS9+CccPpYnglhRSBlpSiVrxW7O vLLM47j/8OoUTh1LDwqxWJ7UFWeRFPabe3KQoTZ6JUoizW35J5tEPvAbLA+9TIbh Qz2/jKWKlXTuR8onIC0kNF31mn4e0/Uqx2a0ZY+vJHMW1QPcxiCR5p2VVJsTBSXn Is39sGmatp6EqpyJ1zUOmJvPdJjzqFcWQ/wQYxwU9YgU1EI2C9spkoWof5v7Wfnx UCptTMv1jljd2D8DWr0tJT7isPPfoCOWo19hQb2k/mfGgS1tZy9NGve5mdg= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:18 2025 by rpki-client