$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6650d50e-88f5-49c4-b187-1f493e4a7a73.roa File: 6650d50e-88f5-49c4-b187-1f493e4a7a73.roa (raw, json) Hash identifier: 1D1563pmthQUa9fXV8RAGiw6FdjNkld1q8wFIL/2F6c= Subject key identifier: 76:AA:AD:E0:CD:E1:EF:2E:9F:7B:FB:BD:ED:98:01:54:E2:3F:BF:DE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2B88C2142337F36F2AB644220D85E3BFA029639B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6650d50e-88f5-49c4-b187-1f493e4a7a73.roa Signing time: Thu 25 Sep 2025 22:51:24 +0000 ROA not before: Thu 25 Sep 2025 22:51:24 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:88:c2:14:23:37:f3:6f:2a:b6:44:22:0d:85:e3:bf:a0:29:63:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:51:24 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=e7865342a6bbe106bbcb4e2c0a9455e7ab14bbe607bdbee893a96ff7b5a206dc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:02:47:6c:45:c4:bb:d7:00:5d:1c:cc:26: d7:de:4c:9a:97:0d:20:17:fd:75:fa:31:e2:0a:15: 17:9e:72:32:64:64:27:d6:a6:53:fb:cd:59:af:8c: 22:05:c8:b4:22:c1:ea:e6:82:b9:94:20:80:d1:98: 76:57:85:30:77:11:8f:3e:4a:a0:76:0b:b2:7e:41: b2:3d:55:42:dd:fc:13:23:f5:af:17:0b:67:0b:b0: ed:fb:fb:fa:f1:06:68:75:9c:6f:d8:6b:9e:89:d8: 6e:a4:44:0d:ab:2a:62:37:ec:07:c8:4b:92:0c:41: 21:31:a0:d7:e0:86:8e:1d:78:cf:ff:72:b4:93:72: 00:92:f7:cb:91:38:ec:2d:bd:3f:81:0e:ec:36:e7: 5b:60:51:58:94:87:59:eb:4a:1d:7e:81:97:89:15: 0e:43:32:92:5d:1a:2b:85:c3:b1:f5:6d:3a:55:b1: d3:7a:2e:b6:56:9a:0e:d9:38:05:f7:b5:b0:07:ad: c4:e2:43:4c:69:ae:59:99:8a:ad:15:94:37:84:a4: e4:70:29:73:33:fd:9c:b3:4c:6b:e1:13:43:07:e7: bb:ea:00:c5:0a:5c:7a:6d:ba:01:b3:4d:7a:6b:43: 9c:71:2e:f4:1f:17:d8:a4:a5:a1:dd:c1:d4:c6:f8: 37:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AA:AD:E0:CD:E1:EF:2E:9F:7B:FB:BD:ED:98:01:54:E2:3F:BF:DE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6650d50e-88f5-49c4-b187-1f493e4a7a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.104.0/23 Signature Algorithm: sha256WithRSAEncryption 79:33:fb:99:2b:85:e3:78:91:61:cc:38:ae:22:aa:62:24:a3: c3:cd:2f:b1:d5:82:80:9b:22:ed:53:e7:cf:ea:d7:a8:39:00: 7a:2c:f2:bf:c2:4a:b6:0b:6f:e4:3a:f9:e2:f2:c8:6c:1c:68: ec:fc:c1:bb:90:be:cf:a3:fc:2a:c5:ef:8b:07:bd:e3:ed:4d: 6a:2b:8f:b2:a8:45:1e:0d:65:c6:02:3d:38:e2:de:ac:83:01: 0f:40:11:b8:18:92:ce:a8:3d:de:5b:79:cc:8d:ce:f8:e1:43: 9d:4e:fa:42:78:ba:29:43:e4:76:5c:ff:8c:e9:6b:dc:23:05: 11:d2:fd:d8:c3:80:7f:5d:ec:1b:07:2a:e8:f8:00:73:a5:fb: 47:8c:99:2c:0c:95:ea:e2:6b:b7:33:1d:e7:50:9d:44:99:12: 70:c6:23:f3:41:f6:d7:e6:eb:a7:e9:c1:b5:e3:6b:1f:39:a7: 7f:6d:31:f4:57:ff:d1:4c:5d:fb:24:7a:32:df:fa:27:fc:49: 88:ee:f4:cc:00:6b:30:0f:c8:fc:b0:0c:38:19:58:fa:e2:b5: 8c:6c:09:e8:b4:6e:a6:2a:1e:8b:d9:bd:a4:d3:0b:95:9a:fb: 15:58:30:ce:17:96:75:ad:51:db:d0:7e:f6:07:78:0c:7e:b1: a9:1b:e9:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK4jCFCM3828qtkQiDYXjv6ApY5swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjI1MTI0WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzg2NTM0MmE2YmJlMTA2YmJjYjRlMmMwYTk0NTVlN2Fi MTRiYmU2MDdiZGJlZTg5M2E5NmZmN2I1YTIwNmRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpLwJHbEXEu9cAXRzMJtfeTJqXDSAX/XX6MeIKFReecjJk ZCfWplP7zVmvjCIFyLQiwermgrmUIIDRmHZXhTB3EY8+SqB2C7J+QbI9VULd/BMj 9a8XC2cLsO37+/rxBmh1nG/Ya56J2G6kRA2rKmI37AfIS5IMQSExoNfgho4deM// crSTcgCS98uROOwtvT+BDuw251tgUViUh1nrSh1+gZeJFQ5DMpJdGiuFw7H1bTpV sdN6LrZWmg7ZOAX3tbAHrcTiQ0xprlmZiq0VlDeEpORwKXMz/ZyzTGvhE0MH57vq AMUKXHptugGzTXprQ5xxLvQfF9ikpaHdwdTG+DdhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdqqt4M3h7y6fe/u97ZgBVOI/v94wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY2NTBkNTBlLTg4ZjUtNDljNC1iMTg3LTFmNDkzZTRhN2E3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqWgwDQYJKoZIhvcNAQELBQADggEBAHkz+5krheN4kWHMOK4iqmIko8PN L7HVgoCbIu1T58/q16g5AHos8r/CSrYLb+Q6+eLyyGwcaOz8wbuQvs+j/CrF74sH vePtTWorj7KoRR4NZcYCPTji3qyDAQ9AEbgYks6oPd5becyNzvjhQ51O+kJ4uilD 5HZc/4zpa9wjBRHS/djDgH9d7BsHKuj4AHOl+0eMmSwMleria7czHedQnUSZEnDG I/NB9tfm66fpwbXjax85p39tMfRX/9FMXfskejLf+if8SYju9MwAazAPyPywDDgZ WPritYxsCei0bqYqHovZvaTTC5Wa+xVYMM4XlnWtUdvQfvYHeAx+sakb6Zw= -----END CERTIFICATE-----Generated at Fri Oct 17 23:47:40 2025 by rpki-client