$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b3ea2ea-d28d-4131-a983-f70708024dc4.roa File: 7b3ea2ea-d28d-4131-a983-f70708024dc4.roa (raw, json) Hash identifier: AaC7XXhSHYcUgE67LIRKR4xvbnjiQQMoFAKeSZisnwc= Subject key identifier: D2:9F:A8:54:EC:73:72:D1:58:3E:67:0E:22:12:E0:F7:1E:AF:9D:54 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A3EEADB24935D155EA82BACA67B7AFA28E0E92B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b3ea2ea-d28d-4131-a983-f70708024dc4.roa Signing time: Thu 25 Sep 2025 21:37:07 +0000 ROA not before: Thu 25 Sep 2025 21:37:07 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3e:ea:db:24:93:5d:15:5e:a8:2b:ac:a6:7b:7a:fa:28:e0:e9:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 21:37:07 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=0b16d4dc3d8b5eac2ef5eaac7218fca40edc7d87977bae43b277b07913e54c4f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:ad:a8:a2:8e:4f:b4:4c:c1:2d:00:55:62: 6b:12:21:ee:47:ee:71:b5:aa:65:bb:5c:ed:5e:c0: 9d:01:9a:8c:df:09:84:cf:86:e4:3e:a2:78:9f:d7: cd:0f:c0:6b:98:24:c2:df:90:2a:f5:12:da:33:ac: 2d:d7:b8:09:c6:98:70:44:77:8a:45:dc:8b:77:2c: 61:13:6b:48:bf:37:4f:b8:da:c3:db:c9:1f:10:79: ec:ef:b2:34:6c:8f:aa:de:d9:f2:19:69:52:13:28: 83:a8:42:84:b1:6b:2c:24:b3:75:a6:09:0c:65:f8: 75:5c:7e:05:fd:d9:53:ec:34:65:8e:8a:d9:54:6e: be:ae:d5:55:7e:12:2e:d1:72:3b:19:2b:5a:80:5d: ee:8b:2d:6c:e7:6c:63:bf:0c:9f:de:13:95:00:d2: 33:bd:e3:49:81:42:87:99:7d:cd:26:83:47:42:11: bc:84:9b:d3:50:31:8f:63:3a:4f:2a:98:e1:10:36: c7:f5:55:d9:4c:dd:d7:10:ad:c0:de:e6:35:ad:b9: 22:27:51:93:c1:03:6e:64:69:cd:c8:c4:cb:16:ca: 14:d6:da:59:47:d4:42:e7:d4:8c:94:90:2a:74:c4: df:72:f2:7c:06:c3:04:09:a2:80:f3:bf:6b:7d:a7: 60:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9F:A8:54:EC:73:72:D1:58:3E:67:0E:22:12:E0:F7:1E:AF:9D:54 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b3ea2ea-d28d-4131-a983-f70708024dc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.194.0/23 Signature Algorithm: sha256WithRSAEncryption a2:11:e9:5b:8c:3b:f3:e6:52:a3:1f:f2:18:10:5a:94:78:30: 91:dc:d0:ce:49:17:81:ad:95:04:34:46:d3:28:54:ac:24:7f: 05:a2:c8:13:e6:98:89:7a:a5:e4:9c:7f:b3:64:9d:39:44:75: be:06:35:05:66:a3:4f:ee:6a:2f:4e:59:35:be:53:d2:a8:2b: 71:18:fa:d9:97:99:9a:0f:f8:be:47:42:9d:d6:f0:91:80:31: 51:43:19:43:41:88:e1:93:87:d9:fc:04:37:b6:6f:e1:1b:ed: 1d:b9:a9:9e:5e:2d:63:7b:f6:7d:f6:0f:d9:55:6b:84:37:e1: c4:b3:aa:3e:f3:85:45:d9:29:7a:a0:4e:31:3a:ad:1d:53:64: 1f:52:ae:fc:82:b6:d9:86:ea:17:fd:75:79:22:47:05:13:90: 17:8c:27:6d:2c:3b:06:57:e5:98:83:f5:9c:ff:71:a2:8e:6f: a6:8d:e2:a8:9e:ee:da:1e:eb:c8:e1:54:48:fe:90:73:43:b4: b2:fc:6b:e2:f9:1b:31:38:11:0d:53:11:c8:10:51:b2:ea:90: bc:e9:a6:83:01:6e:da:0f:ff:cb:06:d7:02:72:c4:c5:25:9c: 72:aa:87:60:3c:90:d9:4b:99:20:07:35:e7:85:4f:9e:fd:d8: 80:4e:5d:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKj7q2ySTXRVeqCuspnt6+ijg6SswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjEzNzA3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjE2ZDRkYzNkOGI1ZWFjMmVmNWVhYWM3MjE4ZmNhNDBl ZGM3ZDg3OTc3YmFlNDNiMjc3YjA3OTEzZTU0YzRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfv62ooo5PtEzBLQBVYmsSIe5H7nG1qmW7XO1ewJ0Bmozf CYTPhuQ+onif180PwGuYJMLfkCr1EtozrC3XuAnGmHBEd4pF3It3LGETa0i/N0+4 2sPbyR8QeezvsjRsj6re2fIZaVITKIOoQoSxaywks3WmCQxl+HVcfgX92VPsNGWO itlUbr6u1VV+Ei7RcjsZK1qAXe6LLWznbGO/DJ/eE5UA0jO940mBQoeZfc0mg0dC EbyEm9NQMY9jOk8qmOEQNsf1VdlM3dcQrcDe5jWtuSInUZPBA25kac3IxMsWyhTW 2llH1ELn1IyUkCp0xN9y8nwGwwQJooDzv2t9p2BNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0p+oVOxzctFYPmcOIhLg9x6vnVQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdiM2VhMmVhLWQyOGQtNDEzMS1hOTgzLWY3MDcwODAyNGRjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDocIwDQYJKoZIhvcNAQELBQADggEBAKIR6VuMO/PmUqMf8hgQWpR4MJHc 0M5JF4GtlQQ0RtMoVKwkfwWiyBPmmIl6peScf7NknTlEdb4GNQVmo0/uai9OWTW+ U9KoK3EY+tmXmZoP+L5HQp3W8JGAMVFDGUNBiOGTh9n8BDe2b+Eb7R25qZ5eLWN7 9n32D9lVa4Q34cSzqj7zhUXZKXqgTjE6rR1TZB9SrvyCttmG6hf9dXkiRwUTkBeM J20sOwZX5ZiD9Zz/caKOb6aN4qie7toe68jhVEj+kHNDtLL8a+L5GzE4EQ1TEcgQ UbLqkLzppoMBbtoP/8sG1wJyxMUlnHKqh2A8kNlLmSAHNeeFT5792IBOXaQ= -----END CERTIFICATE-----Generated at Fri Oct 17 23:46:24 2025 by rpki-client