$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/927def54-5d69-4279-b79d-2279c28f7d84.roa File: 927def54-5d69-4279-b79d-2279c28f7d84.roa (raw, json) Hash identifier: vJr8pyO5h7pailOK2xWGp4/GKoufyTkRkwnWc6c+BXI= Subject key identifier: F3:D5:22:08:E9:F4:25:E6:1F:22:74:45:38:E7:03:22:F8:AC:94:03 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7B2E1D70BFB8273F20377C9E2865599C8EA76098 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/927def54-5d69-4279-b79d-2279c28f7d84.roa Signing time: Thu 25 Sep 2025 22:42:09 +0000 ROA not before: Thu 25 Sep 2025 22:42:09 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:2e:1d:70:bf:b8:27:3f:20:37:7c:9e:28:65:59:9c:8e:a7:60:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:42:09 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=caad87087d33a1bb36e50c037a4e58183d82ca5e3247afc2de690c778808d1ba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f3:a1:00:a3:9a:7b:63:6b:d1:ae:53:4e:46: 84:5e:bf:1a:2f:c6:f7:8c:ce:69:36:55:67:a8:ef: 1b:30:55:63:09:bc:f0:44:ea:55:7e:19:43:7c:7c: db:85:bc:e6:30:0e:00:8f:5c:f9:67:5d:e6:c0:a1: d0:10:26:e8:32:5c:08:e0:aa:5f:ac:11:29:f5:4d: 0f:61:f0:d4:b3:1c:bf:e2:13:0d:f7:c3:b0:6e:dc: 13:98:a6:91:ad:c7:aa:b3:4a:46:72:16:e1:c5:37: 55:17:ee:95:af:21:a1:e3:8b:42:38:ad:b8:4e:d6: 79:ca:6c:ea:52:26:d1:32:83:be:32:e9:4e:30:18: ef:3c:27:b6:89:98:05:e3:f5:c9:7d:ba:88:f7:01: de:8e:44:97:0c:76:54:26:20:13:4b:45:0e:6d:f4: 83:13:1d:72:cd:55:9f:a5:a3:34:6a:6c:71:07:63: f6:79:de:b3:ee:7a:af:6e:00:51:1e:f6:11:c3:7d: fa:0a:d0:74:61:2f:1a:ee:49:42:6a:b6:4d:ce:d7: 4e:30:7f:d7:7b:02:5f:2c:7c:76:22:c5:3a:91:f3: 25:2d:fa:83:43:d2:0f:9c:a3:57:6e:9a:b7:e2:6a: 52:bf:c0:7f:a3:1e:74:23:0a:14:30:f8:50:83:ea: 69:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D5:22:08:E9:F4:25:E6:1F:22:74:45:38:E7:03:22:F8:AC:94:03 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/927def54-5d69-4279-b79d-2279c28f7d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.166.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:e0:b2:90:20:c1:4b:78:e0:92:b0:09:08:72:17:e5:aa:23: 49:7e:55:af:bf:13:37:77:c3:e4:a2:71:e7:6d:51:52:7d:04: b4:de:e7:4d:7e:16:91:23:5e:f4:a6:53:e8:67:43:18:74:f5: 34:c0:5c:f9:1e:b2:80:33:f1:ad:be:9a:6b:95:83:a9:01:98: 29:63:32:1c:e7:47:32:5a:cc:dc:c7:07:f4:0d:6a:b5:ea:f4: 4c:14:9a:3c:3b:de:a2:93:1f:2e:c4:29:2f:cc:1d:57:58:b1: 0b:2d:a4:ad:a0:3c:9a:0b:2a:d8:b8:03:53:b8:b8:0b:dc:5d: 22:cd:ca:37:24:93:02:83:bc:0a:10:48:43:a9:41:ce:52:8f: a7:83:b2:2f:34:ca:7f:4f:28:90:24:9e:dc:94:14:8d:c4:5e: f0:52:58:af:00:eb:ab:3a:07:c7:a0:46:0f:88:8d:4e:8a:78: db:f7:1e:f2:04:be:a8:c3:0c:87:43:25:c2:21:31:2e:5d:45: 11:0c:2e:d7:4c:f7:26:e5:6f:94:ea:99:32:06:79:74:4f:1a: d1:34:35:d8:07:ca:b1:2f:2a:72:bf:75:50:4f:45:e4:81:ae: 2a:65:f9:27:f5:4e:c1:1d:35:97:f4:6d:6b:f0:9c:df:2e:b9: 84:f3:0e:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUey4dcL+4Jz8gN3yeKGVZnI6nYJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjI0MjA5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYWFkODcwODdkMzNhMWJiMzZlNTBjMDM3YTRlNTgxODNk ODJjYTVlMzI0N2FmYzJkZTY5MGM3Nzg4MDhkMWJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC886EAo5p7Y2vRrlNORoRevxovxveMzmk2VWeo7xswVWMJ vPBE6lV+GUN8fNuFvOYwDgCPXPlnXebAodAQJugyXAjgql+sESn1TQ9h8NSzHL/i Ew33w7Bu3BOYppGtx6qzSkZyFuHFN1UX7pWvIaHji0I4rbhO1nnKbOpSJtEyg74y 6U4wGO88J7aJmAXj9cl9uoj3Ad6ORJcMdlQmIBNLRQ5t9IMTHXLNVZ+lozRqbHEH Y/Z53rPueq9uAFEe9hHDffoK0HRhLxruSUJqtk3O104wf9d7Al8sfHYixTqR8yUt +oND0g+co1dumrfialK/wH+jHnQjChQw+FCD6mn1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU89UiCOn0JeYfInRFOOcDIvislAMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkyN2RlZjU0LTVkNjktNDI3OS1iNzlkLTIyNzljMjhmN2Q4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqKYwDQYJKoZIhvcNAQELBQADggEBAErgspAgwUt44JKwCQhyF+WqI0l+ Va+/Ezd3w+SicedtUVJ9BLTe501+FpEjXvSmU+hnQxh09TTAXPkesoAz8a2+mmuV g6kBmCljMhznRzJazNzHB/QNarXq9EwUmjw73qKTHy7EKS/MHVdYsQstpK2gPJoL Kti4A1O4uAvcXSLNyjckkwKDvAoQSEOpQc5Sj6eDsi80yn9PKJAkntyUFI3EXvBS WK8A66s6B8egRg+IjU6KeNv3HvIEvqjDDIdDJcIhMS5dRREMLtdM9yblb5TqmTIG eXRPGtE0NdgHyrEvKnK/dVBPReSBripl+Sf1TsEdNZf0bWvwnN8uuYTzDlg= -----END CERTIFICATE-----Generated at Fri Oct 17 23:56:27 2025 by rpki-client