$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9aca1030-f1b5-4354-bfa6-9ff70e155fb6.roa File: 9aca1030-f1b5-4354-bfa6-9ff70e155fb6.roa (raw, json) Hash identifier: nbC2YI6ARyfvatOqCANFXuT99fOo6CZWMU58qYRxP0Y= Subject key identifier: 49:79:CC:48:90:2D:4F:80:0E:42:8A:94:74:64:D4:EC:4E:63:09:60 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40F6A29935F8794B975D1E71EAE31A95F35A542A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9aca1030-f1b5-4354-bfa6-9ff70e155fb6.roa Signing time: Thu 25 Sep 2025 18:32:29 +0000 ROA not before: Thu 25 Sep 2025 18:32:29 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f6:a2:99:35:f8:79:4b:97:5d:1e:71:ea:e3:1a:95:f3:5a:54:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:32:29 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=0082584b76b9c9c1bcfb2c2881b7ad0a8a93f036f4b7a3a6f85c9209ab4ad842, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:f5:5c:86:c9:5c:6f:62:c0:a1:6b:ee:51: a4:09:70:af:af:72:9d:d7:bc:6a:18:7e:19:b0:64: 45:14:47:a0:e2:a9:fc:e7:a8:40:0a:6c:6e:59:7b: 96:43:ef:df:0b:1d:9a:58:01:94:ea:90:3f:97:68: fb:49:8a:d3:0c:a5:68:38:95:02:b3:9a:bf:d7:aa: 11:6a:92:b8:9a:db:72:62:1c:a2:ca:67:37:13:16: cf:67:43:f8:e5:6a:8e:3d:04:53:15:18:3f:5a:63: 32:43:cb:11:56:14:16:95:94:12:c4:c6:00:72:f9: fc:75:cc:4c:f8:78:ce:80:86:02:fe:2e:6e:d1:11: 71:c3:84:10:08:d5:63:c0:5c:26:f6:73:86:fc:6e: e9:bd:13:7d:55:f1:9a:05:f3:d9:37:65:82:a4:99: 99:21:97:fe:fa:98:db:05:3c:1c:b7:3a:68:e2:ae: 0b:e0:5d:e7:d9:06:4f:d8:06:38:c6:32:1f:94:28: 2e:59:6e:5c:ac:28:da:89:7e:f0:c2:f4:9f:37:fc: 48:52:30:ec:b4:97:61:35:c2:b4:cb:6e:a6:4d:98: f4:25:8a:6e:2e:5b:b9:59:63:d6:47:01:0f:93:4a: c8:99:6b:98:ed:9b:69:0c:b7:1f:a0:33:e2:03:8c: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:79:CC:48:90:2D:4F:80:0E:42:8A:94:74:64:D4:EC:4E:63:09:60 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9aca1030-f1b5-4354-bfa6-9ff70e155fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.151.0/24 Signature Algorithm: sha256WithRSAEncryption 37:18:55:2f:a9:16:03:65:eb:97:04:cb:e9:6d:5c:54:5d:25: 5c:28:48:9b:1d:bf:b9:93:78:94:a7:76:f4:ad:c4:25:ae:80: d7:08:71:77:8c:cb:16:15:02:67:c0:ab:05:9e:6b:a2:0d:d0: ee:e5:92:52:c1:63:cd:13:19:9a:a6:38:b7:8e:59:3a:98:53: 46:d4:a1:fb:0b:e4:25:3a:3b:f3:6f:ea:5a:6a:14:9d:d7:23: 71:94:7e:75:f1:2c:cc:70:81:bc:d3:c8:d4:5b:c6:41:20:39: 91:95:7c:e7:86:86:51:d0:0a:60:7d:3c:ae:9a:61:80:7e:c2: ae:82:8f:14:36:44:9b:6c:e5:2a:93:85:02:0f:8c:72:0f:99: bc:91:6c:61:47:6d:25:e5:12:26:d9:ee:e8:dc:5e:ea:b2:02: 3c:82:49:db:94:a4:40:b3:f5:60:f5:ea:d2:72:0b:2e:7b:31: 41:79:2f:4a:e3:c5:d1:9e:3d:e9:6a:06:14:62:60:e9:c2:20: 1d:0f:cf:54:26:c8:aa:1f:bc:17:b9:c1:20:20:4f:c2:82:d5: 65:36:1d:89:86:83:ea:ba:36:07:26:37:fa:6d:c3:bd:fb:44: c6:35:3b:4a:a3:59:c7:e6:20:98:76:f0:09:28:09:7e:41:c7: 3c:c3:54:64 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQPaimTX4eUuXXR5x6uMalfNaVCowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgzMjI5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDgyNTg0Yjc2YjljOWMxYmNmYjJjMjg4MWI3YWQwYThh OTNmMDM2ZjRiN2EzYTZmODVjOTIwOWFiNGFkODQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiMPVchslcb2LAoWvuUaQJcK+vcp3XvGoYfhmwZEUUR6Di qfznqEAKbG5Ze5ZD798LHZpYAZTqkD+XaPtJitMMpWg4lQKzmr/XqhFqkria23Ji HKLKZzcTFs9nQ/jlao49BFMVGD9aYzJDyxFWFBaVlBLExgBy+fx1zEz4eM6AhgL+ Lm7REXHDhBAI1WPAXCb2c4b8bum9E31V8ZoF89k3ZYKkmZkhl/76mNsFPBy3Omji rgvgXefZBk/YBjjGMh+UKC5ZblysKNqJfvDC9J83/EhSMOy0l2E1wrTLbqZNmPQl im4uW7lZY9ZHAQ+TSsiZa5jtm2kMtx+gM+IDjOcZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSXnMSJAtT4AOQoqUdGTU7E5jCWAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhY2ExMDMwLWYxYjUtNDM1NC1iZmE2LTlmZjcwZTE1NWZiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADppcwDQYJKoZIhvcNAQELBQADggEBADcYVS+pFgNl65cEy+ltXFRdJVwo SJsdv7mTeJSndvStxCWugNcIcXeMyxYVAmfAqwWea6IN0O7lklLBY80TGZqmOLeO WTqYU0bUofsL5CU6O/Nv6lpqFJ3XI3GUfnXxLMxwgbzTyNRbxkEgOZGVfOeGhlHQ CmB9PK6aYYB+wq6CjxQ2RJts5SqThQIPjHIPmbyRbGFHbSXlEibZ7ujcXuqyAjyC SduUpECz9WD16tJyCy57MUF5L0rjxdGePelqBhRiYOnCIB0Pz1QmyKofvBe5wSAg T8KC1WU2HYmGg+q6NgcmN/ptw737RMY1O0qjWcfmIJh28AkoCX5BxzzDVGQ= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:17 2025 by rpki-client