$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a2f9e0d-dbd7-44d4-9366-ef7e3e69629d.roa File: 9a2f9e0d-dbd7-44d4-9366-ef7e3e69629d.roa (raw, json) Hash identifier: XS65HndRAjeIf+aeukGBkJro1DGHgF69UT6+nxqnOwk= Subject key identifier: E6:05:65:A8:34:01:0D:30:1C:9A:A4:43:B2:45:82:71:C6:D2:CF:D3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0CAEC287A278C553AC56FD31CFAB1E2422F35373 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a2f9e0d-dbd7-44d4-9366-ef7e3e69629d.roa Signing time: Thu 25 Sep 2025 18:32:13 +0000 ROA not before: Thu 25 Sep 2025 18:32:13 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ae:c2:87:a2:78:c5:53:ac:56:fd:31:cf:ab:1e:24:22:f3:53:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:32:13 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=e342edc9e9168cebf7d331e274bfc4f7d4705a41962702e789bf44a2aa1ced19, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:52:3b:e8:29:33:45:e1:6a:b2:c1:7e:e6: 7e:36:47:ab:5e:48:4f:e8:cd:0b:1d:e2:85:5d:bb: 33:e8:8b:ba:74:f6:71:49:79:37:44:e8:14:4c:55: 6d:9a:e1:00:c9:b2:ac:63:6b:fa:68:73:03:d8:ed: d9:34:94:d1:9a:ca:89:72:fb:dc:0a:83:af:3b:10: ae:1c:34:de:38:57:85:d8:66:15:b4:6e:90:51:df: ac:54:4a:5a:78:2b:43:7b:0d:57:a5:bc:7a:6b:bb: 86:3b:c5:80:e2:18:04:60:71:ca:e8:67:89:cf:4c: 6a:4e:3c:d2:d0:07:d0:ac:5a:96:0f:03:3e:40:e7: 06:11:4e:c4:6c:da:08:c8:33:35:8b:77:c6:ab:20: 68:dc:cc:d8:0c:cf:96:6d:90:c9:73:41:61:30:13: f7:37:cc:95:ba:c3:11:00:6d:5e:fa:75:e6:08:fa: 7f:9f:34:d2:0e:5d:81:b8:9f:ca:c7:c8:87:80:37: 60:6f:56:58:30:cc:df:1f:66:7e:b2:f8:06:d2:e8: dc:c4:97:e7:b6:d5:1c:6e:37:55:60:3e:fe:65:a5: 39:c6:fc:af:58:f6:e3:cf:d9:b5:27:09:d4:85:28: 8e:64:65:bd:82:e7:36:2a:e2:25:07:e6:c8:4d:0f: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:05:65:A8:34:01:0D:30:1C:9A:A4:43:B2:45:82:71:C6:D2:CF:D3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a2f9e0d-dbd7-44d4-9366-ef7e3e69629d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.137.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:08:b0:5d:e3:f4:ee:52:fc:85:e8:b3:a7:90:2b:43:c0:97: 13:b3:37:93:7c:3a:e0:1a:a6:a2:36:fd:c0:39:1f:e4:b7:11: 01:76:57:4f:fc:55:ae:18:93:fa:3d:32:76:07:47:3d:d4:1d: 88:d9:ec:da:c2:4f:28:1b:44:68:ba:a5:65:62:21:5c:16:ba: 37:c8:18:67:76:9b:53:96:a2:51:15:94:78:de:1c:98:12:85: 17:60:9b:7f:ee:66:2a:fe:65:f7:0d:5c:b8:5a:06:6b:1a:35: b5:31:31:4a:76:be:48:f8:a5:f7:4a:a7:f9:00:4f:45:6d:3c: 19:72:9d:9d:bf:7a:d1:12:3e:fb:bc:c8:df:b5:51:5d:c0:a3: f4:d6:25:ae:8e:6d:30:21:4e:04:0c:73:cd:45:38:23:ee:f5: a4:56:80:43:93:9c:a5:f2:e1:87:fd:a0:7b:7c:85:1e:80:2b: 58:cc:fd:8a:00:b3:52:bd:2f:de:48:2a:dc:a8:92:af:23:1c: 85:8d:17:e3:ba:f4:9a:3c:b7:27:14:ca:5b:4a:38:2d:5b:10: 6b:c1:0a:b4:64:b8:a7:01:9c:0e:90:4f:1e:e7:21:bb:ab:82: 44:d3:0f:86:d6:91:d7:77:0c:10:5a:13:48:eb:c5:9f:4d:d1: 9d:71:1b:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDK7Ch6J4xVOsVv0xz6seJCLzU3MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgzMjEzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzQyZWRjOWU5MTY4Y2ViZjdkMzMxZTI3NGJmYzRmN2Q0 NzA1YTQxOTYyNzAyZTc4OWJmNDRhMmFhMWNlZDE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFQlI76CkzReFqssF+5n42R6teSE/ozQsd4oVduzPoi7p0 9nFJeTdE6BRMVW2a4QDJsqxja/pocwPY7dk0lNGayoly+9wKg687EK4cNN44V4XY ZhW0bpBR36xUSlp4K0N7DVelvHpru4Y7xYDiGARgccroZ4nPTGpOPNLQB9CsWpYP Az5A5wYRTsRs2gjIMzWLd8arIGjczNgMz5ZtkMlzQWEwE/c3zJW6wxEAbV76deYI +n+fNNIOXYG4n8rHyIeAN2BvVlgwzN8fZn6y+AbS6NzEl+e21RxuN1VgPv5lpTnG /K9Y9uPP2bUnCdSFKI5kZb2C5zYq4iUH5shNDwC5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5gVlqDQBDTAcmqRDskWCccbSz9MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhMmY5ZTBkLWRiZDctNDRkNC05MzY2LWVmN2UzZTY5NjI5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpokwDQYJKoZIhvcNAQELBQADggEBAA4IsF3j9O5S/IXos6eQK0PAlxOz N5N8OuAapqI2/cA5H+S3EQF2V0/8Va4Yk/o9MnYHRz3UHYjZ7NrCTygbRGi6pWVi IVwWujfIGGd2m1OWolEVlHjeHJgShRdgm3/uZir+ZfcNXLhaBmsaNbUxMUp2vkj4 pfdKp/kAT0VtPBlynZ2/etESPvu8yN+1UV3Ao/TWJa6ObTAhTgQMc81FOCPu9aRW gEOTnKXy4Yf9oHt8hR6AK1jM/YoAs1K9L95IKtyokq8jHIWNF+O69Jo8tycUyltK OC1bEGvBCrRkuKcBnA6QTx7nIburgkTTD4bWkdd3DBBaE0jrxZ9N0Z1xG+s= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:42 2025 by rpki-client