$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91c2cadd-fb46-48ca-819d-daa275034be8.roa File: 91c2cadd-fb46-48ca-819d-daa275034be8.roa (raw, json) Hash identifier: WmXX9YKlCOM1FOupVEpWX76QaGKymNwlDZ09HHahEu4= Subject key identifier: 3C:0B:51:72:07:C3:EF:93:AB:20:B0:A1:93:02:A5:F9:80:E6:6E:C8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 265265D1598E118454CA27311C1C4F21BB82AE25 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91c2cadd-fb46-48ca-819d-daa275034be8.roa Signing time: Fri 26 Sep 2025 01:14:51 +0000 ROA not before: Fri 26 Sep 2025 01:14:51 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:52:65:d1:59:8e:11:84:54:ca:27:31:1c:1c:4f:21:bb:82:ae:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:14:51 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=308d4155457bd54b406d24306280e53148b55789cd9a54b34d240eb56ca9260f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:ba:a8:79:5f:85:cb:bf:cc:ea:e3:a1:6d: 4a:c6:74:0f:86:79:f7:cf:9a:35:43:c4:b0:f1:03: 41:94:51:f0:fb:3e:28:39:c1:d0:d9:6e:b6:91:6f: 19:f1:04:15:65:26:04:d3:c1:8b:56:a8:48:cd:e6: 0d:d7:72:f8:17:a5:ea:a3:9a:17:a7:c1:73:17:46: 30:d3:cd:e4:23:4d:4f:9d:c8:6c:cd:61:b3:9a:7f: 8b:26:e1:19:9f:96:48:2f:c9:82:8e:13:bf:80:bc: 49:c3:49:80:f0:a1:3c:29:37:f9:39:8e:63:2f:78: 13:8f:a4:41:d2:a4:58:6e:d5:6e:c9:07:f4:15:f5: 8c:7e:fd:04:2f:43:49:2c:e7:22:b4:60:d8:5b:c2: d3:9f:28:22:33:22:56:79:f9:7f:c6:51:45:02:38: a8:7e:56:7f:96:a2:b7:1e:c8:de:f1:a7:65:bd:62: ae:ce:b1:98:1e:6b:9e:c8:1d:46:a5:5b:be:2c:a5: d8:8b:f6:24:67:f0:60:bf:dc:c9:72:ea:c3:10:d9: 62:41:f8:1a:c7:c1:c1:5c:2b:52:07:88:94:b7:69: 88:81:67:6f:55:51:98:b2:66:83:d4:a7:62:18:e3: ca:96:2f:4d:30:01:cd:3c:54:37:e0:eb:5d:37:58: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0B:51:72:07:C3:EF:93:AB:20:B0:A1:93:02:A5:F9:80:E6:6E:C8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91c2cadd-fb46-48ca-819d-daa275034be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.0.0/21 Signature Algorithm: sha256WithRSAEncryption 10:a2:4a:e6:b4:3d:42:98:06:99:ce:87:b9:de:df:35:83:d3: c8:28:f9:ee:97:e7:a0:bf:1e:91:3a:75:8e:77:cb:6f:6f:c1: ad:83:72:09:df:e8:59:b5:f1:10:8c:77:16:88:52:62:72:1d: a4:2b:5f:f1:e8:e0:7a:59:23:02:08:9d:63:c4:c8:15:75:f6: a7:bf:29:94:cd:7d:bd:f0:b0:55:c8:76:87:ab:7a:75:61:c1: 05:29:4f:81:f9:fd:eb:6f:16:7d:b9:44:6f:48:5e:30:f3:d7: 90:cf:df:6c:03:94:f5:7f:6d:59:e3:9a:f1:36:f2:64:de:ec: 19:41:7c:8f:a7:98:6e:79:d5:64:81:ba:3f:06:7a:4d:bf:aa: 61:61:b5:fe:41:dd:26:c7:d1:31:b5:0f:12:69:5a:1f:ae:d3: 70:40:ff:b9:b5:15:84:ab:f6:0c:46:d0:58:44:a8:6c:96:53: fe:d3:87:9c:c2:28:16:7b:b7:53:6f:2b:b0:b0:25:62:3b:7c: 11:c5:83:e4:ad:3e:50:4c:c9:09:99:93:89:89:95:dc:e1:b9: a8:90:0c:84:3f:fe:6b:fc:d4:04:8f:30:64:21:a8:ed:4f:39: 21:35:b0:00:75:5b:fe:2e:b3:8e:8b:77:47:54:44:13:17:32: 5d:d5:fc:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJlJl0VmOEYRUyicxHBxPIbuCriUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDExNDUxWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDhkNDE1NTQ1N2JkNTRiNDA2ZDI0MzA2MjgwZTUzMTQ4 YjU1Nzg5Y2Q5YTU0YjM0ZDI0MGViNTZjYTkyNjBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdv7qoeV+Fy7/M6uOhbUrGdA+GeffPmjVDxLDxA0GUUfD7 Pig5wdDZbraRbxnxBBVlJgTTwYtWqEjN5g3XcvgXpeqjmhenwXMXRjDTzeQjTU+d yGzNYbOaf4sm4RmflkgvyYKOE7+AvEnDSYDwoTwpN/k5jmMveBOPpEHSpFhu1W7J B/QV9Yx+/QQvQ0ks5yK0YNhbwtOfKCIzIlZ5+X/GUUUCOKh+Vn+WorceyN7xp2W9 Yq7OsZgea57IHUalW74spdiL9iRn8GC/3Mly6sMQ2WJB+BrHwcFcK1IHiJS3aYiB Z29VUZiyZoPUp2IY48qWL00wAc08VDfg6103WBQvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPAtRcgfD75OrILChkwKl+YDmbsgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkxYzJjYWRkLWZiNDYtNDhjYS04MTlkLWRhYTI3NTAzNGJlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDpAAwDQYJKoZIhvcNAQELBQADggEBABCiSua0PUKYBpnOh7ne3zWD08go +e6X56C/HpE6dY53y29vwa2Dcgnf6Fm18RCMdxaIUmJyHaQrX/Ho4HpZIwIInWPE yBV19qe/KZTNfb3wsFXIdoerenVhwQUpT4H5/etvFn25RG9IXjDz15DP32wDlPV/ bVnjmvE28mTe7BlBfI+nmG551WSBuj8Gek2/qmFhtf5B3SbH0TG1DxJpWh+u03BA /7m1FYSr9gxG0FhEqGyWU/7Th5zCKBZ7t1NvK7CwJWI7fBHFg+StPlBMyQmZk4mJ ldzhuaiQDIQ//mv81ASPMGQhqO1POSE1sAB1W/4us46Ld0dURBMXMl3V/MM= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:26 2025 by rpki-client