$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/881eb0a5-0617-4db3-95d6-44001df4c4ea.roa File: 881eb0a5-0617-4db3-95d6-44001df4c4ea.roa (raw, json) Hash identifier: FVjudoiY3iyjRDXSybxK7iXViB+JncIF2KWgzRHHQeg= Subject key identifier: 63:0C:C2:7D:09:08:5A:57:A1:91:36:8A:3B:FA:6E:13:F9:8F:92:FB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1AF133947C76BE82CB20F9B18D0CD38DE3557CB2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/881eb0a5-0617-4db3-95d6-44001df4c4ea.roa Signing time: Thu 25 Sep 2025 17:41:38 +0000 ROA not before: Thu 25 Sep 2025 17:41:38 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.163.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f1:33:94:7c:76:be:82:cb:20:f9:b1:8d:0c:d3:8d:e3:55:7c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:41:38 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=80e22532ae7df7d223917fe9dfef651aba278f6a8931afa16046c3ba976370f5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:16:52:05:9b:61:b9:c9:c5:ff:18:a0:20: 43:84:74:35:3d:48:cd:00:f0:f2:28:39:d4:d7:ba: e8:05:dd:02:a6:4e:d8:c1:01:6e:66:5e:a7:68:4f: bc:1b:c5:d9:b5:9c:93:ec:be:4b:00:4a:38:8f:32: 3a:ba:eb:b9:2e:ff:25:d1:70:ed:02:e4:4c:f6:87: 9f:e1:3c:19:08:2c:b0:b7:d3:18:61:14:25:44:a8: d1:ef:72:f2:35:c4:5d:ff:e3:80:cf:32:2a:a0:58: 4f:07:ff:bc:0d:9a:24:21:7e:64:f9:a5:a7:6e:4b: db:3c:f5:bb:a0:ee:57:99:30:8e:d1:2c:d9:09:4e: 90:bb:38:97:1a:53:20:61:9b:fc:b4:ec:68:fd:9c: ef:d1:04:92:1a:40:56:ef:ea:33:09:a8:d6:29:b9: 8f:f0:10:8c:50:25:82:cf:3c:32:cf:d7:5b:ae:b7: cc:c8:2d:6d:b0:e9:a8:f7:c8:9a:46:0b:5f:05:f9: ea:2b:d1:d6:41:42:f6:2d:df:5c:10:01:94:68:f9: c8:ec:10:b0:47:9b:78:42:c0:47:e0:b7:7c:15:1a: 47:49:5c:ec:64:18:45:a7:f6:a5:07:82:9d:39:a2: bf:06:d1:31:44:ca:21:fe:de:3c:d9:61:0e:65:b5: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0C:C2:7D:09:08:5A:57:A1:91:36:8A:3B:FA:6E:13:F9:8F:92:FB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/881eb0a5-0617-4db3-95d6-44001df4c4ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.163.220.0/24 Signature Algorithm: sha256WithRSAEncryption b2:cc:9f:ee:6c:df:81:2e:86:9b:27:37:d2:91:dc:31:b6:f1: 16:16:e8:c2:04:52:70:45:b9:77:38:39:d1:b9:b7:23:1f:f2: 58:24:1d:86:a5:f0:ae:40:b4:81:ab:56:62:8a:c7:a5:41:f3: db:21:f7:5f:88:86:6c:9f:bc:fc:c1:42:2b:47:93:d0:b6:1c: 44:80:c9:22:c6:0f:9f:8b:0c:8a:03:48:28:71:bf:5a:33:42: 33:55:5b:9f:1f:a8:1b:8c:02:78:66:92:7b:36:cb:7a:1a:09: c1:0d:cd:09:ee:48:19:06:1f:e6:30:74:9c:06:5f:19:a5:e9: b9:22:97:40:02:8e:af:ed:9b:be:a3:29:c1:da:ba:08:75:e0: c1:56:6b:b8:ac:27:20:35:0d:db:f9:1f:a2:59:19:e5:42:2d: 01:a7:45:2d:3f:ea:f1:41:8c:b9:38:72:79:e2:4e:0e:53:07: de:69:93:70:e5:ea:67:ad:a5:17:54:91:bb:49:c8:95:be:6d: d6:e2:a0:c7:f9:77:0f:6b:19:2a:23:fd:25:5f:f5:92:51:73: 2e:51:f0:71:ca:c8:42:5c:74:7b:4f:1d:2b:53:50:95:f4:8f: 9e:45:4b:dd:cc:69:b7:53:97:c7:da:0a:72:d2:64:a4:d7:de: f3:68:fb:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGvEzlHx2voLLIPmxjQzTjeNVfLIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTc0MTM4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MGUyMjUzMmFlN2RmN2QyMjM5MTdmZTlkZmVmNjUxYWJh Mjc4ZjZhODkzMWFmYTE2MDQ2YzNiYTk3NjM3MGY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAYRZSBZthucnF/xigIEOEdDU9SM0A8PIoOdTXuugF3QKm TtjBAW5mXqdoT7wbxdm1nJPsvksASjiPMjq667ku/yXRcO0C5Ez2h5/hPBkILLC3 0xhhFCVEqNHvcvI1xF3/44DPMiqgWE8H/7wNmiQhfmT5paduS9s89bug7leZMI7R LNkJTpC7OJcaUyBhm/y07Gj9nO/RBJIaQFbv6jMJqNYpuY/wEIxQJYLPPDLP11uu t8zILW2w6aj3yJpGC18F+eor0dZBQvYt31wQAZRo+cjsELBHm3hCwEfgt3wVGkdJ XOxkGEWn9qUHgp05or8G0TFEyiH+3jzZYQ5ltSePAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYwzCfQkIWlehkTaKO/puE/mPkvswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg4MWViMGE1LTA2MTctNGRiMy05NWQ2LTQ0MDAxZGY0YzRlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADo9wwDQYJKoZIhvcNAQELBQADggEBALLMn+5s34EuhpsnN9KR3DG28RYW 6MIEUnBFuXc4OdG5tyMf8lgkHYal8K5AtIGrVmKKx6VB89sh91+IhmyfvPzBQitH k9C2HESAySLGD5+LDIoDSChxv1ozQjNVW58fqBuMAnhmkns2y3oaCcENzQnuSBkG H+YwdJwGXxml6bkil0ACjq/tm76jKcHaugh14MFWa7isJyA1Ddv5H6JZGeVCLQGn RS0/6vFBjLk4cnniTg5TB95pk3Dl6metpRdUkbtJyJW+bdbioMf5dw9rGSoj/SVf 9ZJRcy5R8HHKyEJcdHtPHStTUJX0j55FS93MabdTl8faCnLSZKTX3vNo+0o= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:25 2025 by rpki-client