$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9acf5199-1cec-4892-a54d-e5a11328259e.roa File: 9acf5199-1cec-4892-a54d-e5a11328259e.roa (raw, json) Hash identifier: o/QkFg4pilVNrvKquy9f1DL7nfVSTnUqZIjiq/gxTnE= Subject key identifier: 33:6C:2F:8B:F1:0F:06:5D:F4:C4:83:B9:DF:C5:F8:14:A1:F1:5A:81 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D88C0F1CC90DB27A772D77AFAD485C9958ADC41 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9acf5199-1cec-4892-a54d-e5a11328259e.roa Signing time: Thu 25 Sep 2025 21:24:31 +0000 ROA not before: Thu 25 Sep 2025 21:24:31 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:88:c0:f1:cc:90:db:27:a7:72:d7:7a:fa:d4:85:c9:95:8a:dc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 21:24:31 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=5eb9cb13a6ab057e91dd1fe067ed6bdeb574d36c6b2e018985d50f9fac2dc9e3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:de:79:11:78:eb:e4:68:b1:48:d5:77:6a:c0: 08:64:df:42:98:d1:ee:98:a1:d6:cc:d8:a9:94:1c: 6c:c2:5e:fa:72:08:99:62:41:71:83:ca:47:14:2a: db:3c:05:1a:1d:c7:5c:ad:64:e9:25:b7:a3:2d:4d: 81:f8:ad:e4:19:c1:14:3c:d4:6b:07:b4:c7:e3:a3: 20:09:7a:d3:e2:dc:f3:b8:30:5e:7a:5c:0a:02:ba: be:6a:67:c7:cc:fa:e3:1c:6d:9d:3e:bc:a2:f3:c2: 02:fd:49:d9:26:c4:9c:7e:a6:cf:20:e4:60:31:da: 6e:6c:2a:11:f6:e7:d7:d5:1a:20:94:64:02:75:95: b1:f0:d9:91:e4:89:3d:93:5c:19:e5:19:b3:04:39: 1d:e1:96:fb:c0:b1:ce:90:67:fa:17:9c:c4:a2:c8: e9:90:7e:4f:d8:9a:9f:e3:46:ce:21:45:11:29:0a: 5f:ad:d4:0d:65:a6:93:f4:a3:f4:81:18:cb:6a:b9: 86:5d:0b:4b:09:16:e8:1d:96:27:06:6b:fd:44:1a: c1:2c:ee:f9:5a:db:13:45:56:01:e4:fe:58:9c:5f: 19:4a:ea:26:9c:b8:02:60:4f:1c:42:08:63:c3:de: 91:c4:af:54:12:32:ef:5c:29:04:02:06:46:ab:db: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6C:2F:8B:F1:0F:06:5D:F4:C4:83:B9:DF:C5:F8:14:A1:F1:5A:81 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9acf5199-1cec-4892-a54d-e5a11328259e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.134.0/23 Signature Algorithm: sha256WithRSAEncryption 39:80:e1:b8:33:0c:50:c4:23:93:dd:2a:f3:da:75:ac:ff:a9: f4:4f:70:f5:ef:65:0c:e9:39:6f:a6:e5:fb:2e:97:5f:f0:99: 5e:e5:2e:06:ff:01:7c:5b:ff:0c:c8:4e:e1:60:58:33:2b:64: da:53:f0:ee:6e:c9:a6:c7:d9:a0:31:06:41:b8:8b:95:f2:5f: e7:4c:cc:0f:22:5f:4e:61:f5:47:81:c5:8b:65:dd:68:68:d3: ea:a4:9b:73:71:b9:a6:1c:17:49:89:49:18:4a:9f:a5:c9:e4: 15:bd:b5:f6:76:af:cf:85:10:e4:42:43:6d:f4:9d:42:c4:f7: 22:11:4c:b9:47:17:55:a1:65:b1:b2:64:ea:7d:47:88:e2:f8: b5:09:8d:e7:1b:a9:0a:9a:a3:30:27:3a:75:f4:64:ff:30:21: df:eb:2e:d1:61:e1:2d:95:68:57:e3:2c:38:cc:87:ed:62:f5: 2d:73:45:44:62:f9:2a:61:e1:e4:fb:36:27:70:f8:77:32:5d: 93:88:2d:6d:0e:73:cd:9e:d4:b1:2c:40:6c:96:a5:25:97:65: 3f:ff:30:38:0c:03:5e:6d:d4:36:f7:eb:af:59:69:bb:df:39: b9:91:3f:c1:be:33:f7:be:18:18:5b:f5:f6:33:bc:7a:47:ff: f8:f7:01:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPYjA8cyQ2yenctd6+tSFyZWK3EEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjEyNDMxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZWI5Y2IxM2E2YWIwNTdlOTFkZDFmZTA2N2VkNmJkZWI1 NzRkMzZjNmIyZTAxODk4NWQ1MGY5ZmFjMmRjOWUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl3nkReOvkaLFI1XdqwAhk30KY0e6YodbM2KmUHGzCXvpy CJliQXGDykcUKts8BRodx1ytZOklt6MtTYH4reQZwRQ81GsHtMfjoyAJetPi3PO4 MF56XAoCur5qZ8fM+uMcbZ0+vKLzwgL9SdkmxJx+ps8g5GAx2m5sKhH259fVGiCU ZAJ1lbHw2ZHkiT2TXBnlGbMEOR3hlvvAsc6QZ/oXnMSiyOmQfk/Ymp/jRs4hRREp Cl+t1A1lppP0o/SBGMtquYZdC0sJFugdlicGa/1EGsEs7vla2xNFVgHk/licXxlK 6iacuAJgTxxCCGPD3pHEr1QSMu9cKQQCBkar27YXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM2wvi/EPBl30xIO538X4FKHxWoEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhY2Y1MTk5LTFjZWMtNDg5Mi1hNTRkLWU1YTExMzI4MjU5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDoIYwDQYJKoZIhvcNAQELBQADggEBADmA4bgzDFDEI5PdKvPadaz/qfRP cPXvZQzpOW+m5fsul1/wmV7lLgb/AXxb/wzITuFgWDMrZNpT8O5uyabH2aAxBkG4 i5XyX+dMzA8iX05h9UeBxYtl3Who0+qkm3NxuaYcF0mJSRhKn6XJ5BW9tfZ2r8+F EORCQ230nULE9yIRTLlHF1WhZbGyZOp9R4ji+LUJjecbqQqaozAnOnX0ZP8wId/r LtFh4S2VaFfjLDjMh+1i9S1zRURi+Sph4eT7Nidw+HcyXZOILW0Oc82e1LEsQGyW pSWXZT//MDgMA15t1Db3669ZabvfObmRP8G+M/e+GBhb9fYzvHpH//j3AXg= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:47 2025 by rpki-client