$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9940b8d1-f45d-48c3-9b0e-4ab929f61066.roa File: 9940b8d1-f45d-48c3-9b0e-4ab929f61066.roa (raw, json) Hash identifier: D+3mEkqCKPoHghL0szKapgP6GdxyyJ0hehqUpx1t32w= Subject key identifier: 47:E2:B6:0A:F8:FF:8F:AF:F2:FF:67:89:CC:F1:9E:8C:3E:59:F9:09 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 38A126093761E278B62916EF8F9B5AE2665CCE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9940b8d1-f45d-48c3-9b0e-4ab929f61066.roa Signing time: Thu 25 Sep 2025 22:39:22 +0000 ROA not before: Thu 25 Sep 2025 22:39:22 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a1:26:09:37:61:e2:78:b6:29:16:ef:8f:9b:5a:e2:66:5c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:39:22 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=91b044f761668f91db89bb05edf5cc64733f267412c680f402c61bd0f7ee25fe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c4:7e:26:e7:2f:a2:94:0c:99:35:16:9c:7a: 2c:6d:0c:c1:a1:9d:42:c2:7e:01:c2:a2:7d:86:c8: ba:3d:e9:6c:5a:42:22:a1:a6:6a:3f:66:b8:ce:a8: d8:c0:7d:0d:9d:97:ae:43:42:84:2f:c3:92:84:03: cf:94:ab:6e:50:5f:f2:9f:0d:8e:ad:db:ab:bf:a1: 6e:9a:e4:9a:3c:98:59:e2:93:4f:80:fd:81:6b:65: ca:3e:14:3b:41:16:03:59:32:e6:d8:64:05:09:b1: 77:75:23:88:c3:68:54:26:1d:3d:b2:b4:41:e1:42: fa:ad:cd:97:87:a1:4e:75:da:98:89:1b:f7:ec:4e: 16:34:c5:db:96:ac:70:a2:fb:d9:27:e3:80:ba:52: ca:8a:71:88:e7:25:15:44:e3:19:c7:56:89:2e:75: 75:9a:14:98:62:23:79:25:36:81:33:65:2d:82:d2: c0:87:a7:20:18:f4:e2:72:4c:86:81:ff:c3:77:22: 26:9c:3b:59:17:18:ce:5b:2e:64:24:c9:52:b3:a4: 0e:09:9a:94:86:08:5d:36:a3:34:b6:7b:5d:19:2d: 3f:41:cd:36:d6:7e:83:3f:32:86:5b:2b:87:88:05: d8:64:4f:9c:8b:53:0a:46:e5:69:16:52:da:77:b0: 6d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E2:B6:0A:F8:FF:8F:AF:F2:FF:67:89:CC:F1:9E:8C:3E:59:F9:09 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9940b8d1-f45d-48c3-9b0e-4ab929f61066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.86.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:b3:f4:cf:8e:70:60:44:c2:76:0a:7b:41:64:11:0e:21:be: a5:3a:eb:8b:43:b9:73:b6:f2:96:4b:79:9c:c5:d1:0c:4f:f3: 9e:83:9e:59:3e:be:01:63:90:31:4a:2c:e9:f3:3f:33:02:c6: 54:9b:08:cc:02:c7:45:34:c3:b9:d0:2e:88:bc:2f:97:4b:a9: 3d:73:c9:c1:3c:cf:e7:29:9b:06:0a:8f:6c:6e:09:2a:64:63: 5e:84:04:4d:0a:80:a6:9c:d9:22:50:ee:d5:01:b5:76:95:12: 37:96:66:90:53:e9:25:f1:74:71:0a:f5:0f:e6:b5:ae:7b:6f: 9d:2d:fc:80:35:d0:09:7e:0a:a8:7c:65:65:70:2d:57:b6:4f: ba:33:0c:a6:bc:fd:ee:e5:ee:69:b2:ae:dd:5f:e9:f7:32:21: f7:c7:af:f0:be:db:85:ca:94:f9:47:23:6b:31:af:f1:83:a8: 2a:0d:91:42:7c:2c:6b:84:7a:46:94:f8:5d:13:a1:4f:5b:5f: 90:08:1f:96:c5:0a:46:66:6b:25:91:62:d9:9a:60:43:aa:43: 99:3b:1e:ac:34:bd:25:2c:dd:ec:8c:94:ea:f2:c2:fd:5b:a4: fa:86:0a:f5:c7:9f:87:5e:46:c6:c8:06:ef:2a:56:2b:9b:9a: 47:f2:5f:09 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITOKEmCTdh4ni2KRbvj5ta4mZczjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjUyMjM5MjJaFw0yNTEwMzAyMzU5NTla MHoxSTBHBgNVBAUTQDkxYjA0NGY3NjE2NjhmOTFkYjg5YmIwNWVkZjVjYzY0NzMz ZjI2NzQxMmM2ODBmNDAyYzYxYmQwZjdlZTI1ZmUxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJnEfibnL6KUDJk1Fpx6LG0MwaGdQsJ+AcKifYbIuj3pbFpC IqGmaj9muM6o2MB9DZ2XrkNChC/DkoQDz5SrblBf8p8Njq3bq7+hbprkmjyYWeKT T4D9gWtlyj4UO0EWA1ky5thkBQmxd3UjiMNoVCYdPbK0QeFC+q3Nl4ehTnXamIkb 9+xOFjTF25ascKL72SfjgLpSyopxiOclFUTjGcdWiS51dZoUmGIjeSU2gTNlLYLS wIenIBj04nJMhoH/w3ciJpw7WRcYzlsuZCTJUrOkDgmalIYIXTajNLZ7XRktP0HN NtZ+gz8yhlsrh4gF2GRPnItTCkblaRZS2newbdMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRH4rYK+P+Pr/L/Z4nM8Z6MPln5CTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvOTk0MGI4ZDEtZjQ1ZC00OGMzLTliMGUtNGFiOTI5ZjYxMDY2LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAQOnVjANBgkqhkiG9w0BAQsFAAOCAQEAXrP0z45wYETCdgp7QWQRDiG+pTrr i0O5c7bylkt5nMXRDE/znoOeWT6+AWOQMUos6fM/MwLGVJsIzALHRTTDudAuiLwv l0upPXPJwTzP5ymbBgqPbG4JKmRjXoQETQqAppzZIlDu1QG1dpUSN5ZmkFPpJfF0 cQr1D+a1rntvnS38gDXQCX4KqHxlZXAtV7ZPujMMprz97uXuabKu3V/p9zIh98ev 8L7bhcqU+UcjazGv8YOoKg2RQnwsa4R6RpT4XROhT1tfkAgflsUKRmZrJZFi2Zpg Q6pDmTserDS9JSzd7IyU6vLC/Vuk+oYK9cefh15GxsgG7ypWK5uaR/JfCQ== -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:20 2025 by rpki-client