$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89012324-c94e-4a2d-acd9-6e35a4122ca7.roa File: 89012324-c94e-4a2d-acd9-6e35a4122ca7.roa (raw, json) Hash identifier: PgaaPEJ8BBln2nvdaAfuE0rB/3gXtJRg6whZwACuzVw= Subject key identifier: 52:C0:6E:BE:B4:26:8D:E7:66:6E:8A:46:0F:C5:E4:17:84:C2:1E:40 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3915B8437528CCC81D02E23317A29CE7FFF487EA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89012324-c94e-4a2d-acd9-6e35a4122ca7.roa Signing time: Thu 25 Sep 2025 19:30:27 +0000 ROA not before: Thu 25 Sep 2025 19:30:27 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:15:b8:43:75:28:cc:c8:1d:02:e2:33:17:a2:9c:e7:ff:f4:87:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:30:27 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=71792929c1e1d2cac987b3746728f4d5969936be7a7bcb55596fbf8ec1a02f08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:92:60:d3:e3:d0:42:29:38:ac:4b:e0:d0:15: 0c:cd:61:0f:39:1a:6e:21:17:0c:66:65:0f:57:52: 36:c4:8e:c8:36:8b:8a:2e:c3:a4:75:41:89:f9:ba: c0:7f:f2:22:a9:64:3c:a2:43:53:3f:73:51:da:ca: 6d:f1:bb:7b:0b:67:54:ae:4c:d5:c2:f1:02:f6:11: 20:82:e5:6c:bd:11:06:41:e7:e5:79:56:2c:d9:c5: 4b:25:d8:ea:96:70:3a:68:90:22:79:79:16:f0:22: e1:94:13:d1:81:b1:3a:e9:f5:67:18:e5:24:20:d7: c2:31:f7:04:4d:1e:9c:50:57:6a:e0:c6:7c:f5:19: 02:e1:cc:e2:3c:0f:9e:75:ea:9d:2c:f4:5c:3a:a0: c1:68:37:eb:bc:e4:29:b0:5e:25:dc:f4:ee:14:6b: 42:7c:d2:8a:33:32:f8:86:4a:75:b8:76:cd:88:16: 19:9b:72:12:73:e7:09:a4:56:a7:e0:00:5a:22:e3: d5:7d:10:5f:6f:a7:1a:ea:9b:c6:c1:e5:e4:58:d3: b8:70:9c:83:ef:10:a6:6e:41:6d:83:c0:48:02:20: 3a:1e:3b:4b:4f:94:8d:e6:08:de:f3:ed:fe:f7:c7: ea:29:1a:3f:7f:f1:ff:03:e2:89:5b:96:f6:28:c9: 74:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C0:6E:BE:B4:26:8D:E7:66:6E:8A:46:0F:C5:E4:17:84:C2:1E:40 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89012324-c94e-4a2d-acd9-6e35a4122ca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.160.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:97:28:4a:ed:22:85:4e:d3:5c:ed:71:ac:aa:4b:4b:e4:ae: af:8d:fc:af:7d:b2:9b:2d:3d:e9:93:19:85:37:96:c0:ee:ff: be:b3:f7:91:94:8a:2b:bd:f1:55:03:84:fe:5a:a8:18:ab:fc: fc:5f:72:e3:df:04:5e:a3:96:01:e5:d8:f4:20:d7:e9:a1:ac: 93:43:7f:b6:28:ee:74:6b:ef:36:39:a5:94:0c:47:fa:38:49: ff:8b:6e:45:49:43:83:bb:2a:ce:e8:99:88:f6:83:50:ae:b6: 13:a7:88:57:9a:b8:19:a8:f6:87:ee:21:84:8e:23:e1:b1:4b: 30:f0:c8:b6:01:ef:0f:0f:21:15:11:f4:ae:6f:e5:64:90:39: f4:d6:30:5a:a0:ca:b2:92:cc:a8:3f:b1:a4:da:37:4b:99:d2: af:1a:0f:a6:de:2b:23:51:6f:f4:6f:c8:3f:83:ca:da:65:60: 83:e5:fe:61:a4:c8:14:71:0c:29:8c:1e:84:2b:16:db:68:4c: 00:c4:c1:c2:de:4e:26:78:28:3d:2b:94:28:2f:7c:30:c5:83: 41:ba:a7:23:91:88:83:22:3a:3b:a7:5d:07:12:41:83:51:93: 55:60:43:db:44:f6:1a:c8:4e:0c:b5:59:de:58:db:2e:f6:f2: be:94:4f:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUORW4Q3UozMgdAuIzF6Kc5//0h+owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkzMDI3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTc5MjkyOWMxZTFkMmNhYzk4N2IzNzQ2NzI4ZjRkNTk2 OTkzNmJlN2E3YmNiNTU1OTZmYmY4ZWMxYTAyZjA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbkmDT49BCKTisS+DQFQzNYQ85Gm4hFwxmZQ9XUjbEjsg2 i4ouw6R1QYn5usB/8iKpZDyiQ1M/c1Haym3xu3sLZ1SuTNXC8QL2ESCC5Wy9EQZB 5+V5VizZxUsl2OqWcDpokCJ5eRbwIuGUE9GBsTrp9WcY5SQg18Ix9wRNHpxQV2rg xnz1GQLhzOI8D5516p0s9Fw6oMFoN+u85CmwXiXc9O4Ua0J80oozMviGSnW4ds2I FhmbchJz5wmkVqfgAFoi49V9EF9vpxrqm8bB5eRY07hwnIPvEKZuQW2DwEgCIDoe O0tPlI3mCN7z7f73x+opGj9/8f8D4olblvYoyXSbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUsBuvrQmjedmbopGD8XkF4TCHkAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg5MDEyMzI0LWM5NGUtNGEyZC1hY2Q5LTZlMzVhNDEyMmNhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqaAwDQYJKoZIhvcNAQELBQADggEBAAyXKErtIoVO01ztcayqS0vkrq+N /K99spstPemTGYU3lsDu/76z95GUiiu98VUDhP5aqBir/PxfcuPfBF6jlgHl2PQg 1+mhrJNDf7Yo7nRr7zY5pZQMR/o4Sf+LbkVJQ4O7Ks7omYj2g1CuthOniFeauBmo 9ofuIYSOI+GxSzDwyLYB7w8PIRUR9K5v5WSQOfTWMFqgyrKSzKg/saTaN0uZ0q8a D6beKyNRb/RvyD+DytplYIPl/mGkyBRxDCmMHoQrFttoTADEwcLeTiZ4KD0rlCgv fDDFg0G6pyORiIMiOjunXQcSQYNRk1VgQ9tE9hrITgy1Wd5Y2y728r6UT5Q= -----END CERTIFICATE-----Generated at Sat Oct 18 02:14:07 2025 by rpki-client