$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e825849-b6a6-4a09-ac8b-1a727149490b.roa File: 9e825849-b6a6-4a09-ac8b-1a727149490b.roa (raw, json) Hash identifier: H/eg81N9HmYW2uTVC4DkhICU7H+eFnZxcWZnuhB4d7k= Subject key identifier: 85:72:13:4E:9A:F1:47:C9:80:F4:11:3B:C6:79:00:B5:D4:DD:EC:9D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 04E0E5ED8CE786906A9DE1682D44BEDB570789BB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e825849-b6a6-4a09-ac8b-1a727149490b.roa Signing time: Thu 25 Sep 2025 18:36:51 +0000 ROA not before: Thu 25 Sep 2025 18:36:51 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e0:e5:ed:8c:e7:86:90:6a:9d:e1:68:2d:44:be:db:57:07:89:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:36:51 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=1b3ff9c3666482d82ea463eed9493e2ded470fde682a657ce3d6699093cb6834, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:df:6f:35:4f:40:01:ec:de:44:d5:05:3c:7b: 33:53:74:46:a5:c2:95:ef:9a:54:ba:ba:c4:1f:a9: 1a:09:15:bc:62:cb:e6:b4:70:b5:dc:84:68:85:b1: 88:82:a6:10:36:4b:cf:15:28:4f:14:28:78:af:c0: b9:0f:48:0c:63:0b:69:d5:91:b8:f4:b0:9b:47:33: c8:0e:fb:d0:22:a0:e3:01:12:32:b6:15:ce:31:bf: d8:b5:3c:f4:08:cb:c7:ab:5c:c5:8c:b6:66:8e:88: 07:62:80:3c:19:aa:77:50:c6:9a:28:7c:a3:06:00: 8d:a2:81:a7:eb:2d:c3:1d:3e:cb:b5:3b:52:c2:77: a3:0c:fc:a0:0d:e0:ef:ee:ab:7a:a0:ac:49:45:43: 45:4d:8e:00:93:2e:d5:ff:ef:53:eb:44:01:02:a9: 15:ed:b3:95:f9:51:39:f0:3f:af:c3:7d:02:13:06: 07:a7:c3:17:76:8f:a3:76:a1:cb:d1:af:b1:f4:d1: 23:65:33:74:fb:a8:d2:f9:45:ce:bb:94:9e:65:6b: 05:2f:09:ec:73:62:a5:35:8a:83:f3:64:28:85:e0: dc:f3:6b:70:72:47:1a:b0:db:df:33:af:d6:fc:05: 63:d3:74:49:08:89:3b:61:39:d9:c9:e2:80:ca:d9: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:72:13:4E:9A:F1:47:C9:80:F4:11:3B:C6:79:00:B5:D4:DD:EC:9D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e825849-b6a6-4a09-ac8b-1a727149490b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.166.0/24 Signature Algorithm: sha256WithRSAEncryption 29:ee:41:b2:a5:a4:1d:0f:43:0c:21:36:c9:1e:33:ef:9b:89: 69:e7:12:5d:e6:fc:ce:ff:7d:02:37:0d:c4:56:c4:6a:a9:29: d6:1f:42:30:29:db:f1:f7:75:c9:b6:b2:67:b0:81:9d:70:a2: a0:e2:77:27:29:cc:8b:dd:a6:7d:20:0a:1e:9b:77:28:e4:8d: e9:3a:f0:3e:70:91:50:b9:f1:f3:9d:c1:f9:dc:6e:ab:7d:e6: 05:dc:f2:85:50:01:75:5d:86:25:ac:e4:5c:a6:1d:74:87:5d: ae:da:a0:83:b5:6c:31:14:7e:4e:68:da:39:e6:00:89:b5:5e: da:9a:0d:00:cf:7a:82:4a:b9:a2:89:27:fb:a6:88:f9:97:2a: 30:33:ed:7f:4f:90:7b:63:48:da:13:86:d7:10:31:23:46:f2: a8:80:38:1b:f5:65:21:50:55:37:f9:5c:5c:e4:be:99:66:1f: 5c:bf:98:a2:6d:a7:ab:a0:ad:75:de:2b:6b:b9:fc:1a:81:97: 44:bd:9a:41:8f:51:0e:05:ee:44:a0:a9:ff:d0:e8:42:8b:ce: 44:87:e7:5e:6c:61:62:28:8d:0a:2a:70:4e:1c:6f:18:97:6b: bf:52:ce:b7:5a:b9:52:a8:4a:f3:1f:52:bf:ae:2e:aa:5e:c1: b5:33:91:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBODl7YznhpBqneFoLUS+21cHibswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgzNjUxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjNmZjljMzY2NjQ4MmQ4MmVhNDYzZWVkOTQ5M2UyZGVk NDcwZmRlNjgyYTY1N2NlM2Q2Njk5MDkzY2I2ODM0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDP3281T0AB7N5E1QU8ezNTdEalwpXvmlS6usQfqRoJFbxi y+a0cLXchGiFsYiCphA2S88VKE8UKHivwLkPSAxjC2nVkbj0sJtHM8gO+9AioOMB EjK2Fc4xv9i1PPQIy8erXMWMtmaOiAdigDwZqndQxpoofKMGAI2igafrLcMdPsu1 O1LCd6MM/KAN4O/uq3qgrElFQ0VNjgCTLtX/71PrRAECqRXts5X5UTnwP6/DfQIT Bgenwxd2j6N2ocvRr7H00SNlM3T7qNL5Rc67lJ5lawUvCexzYqU1ioPzZCiF4Nzz a3ByRxqw298zr9b8BWPTdEkIiTthOdnJ4oDK2dRTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhXITTprxR8mA9BE7xnkAtdTd7J0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzllODI1ODQ5LWI2YTYtNGEwOS1hYzhiLTFhNzI3MTQ5NDkwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpqYwDQYJKoZIhvcNAQELBQADggEBACnuQbKlpB0PQwwhNskeM++biWnn El3m/M7/fQI3DcRWxGqpKdYfQjAp2/H3dcm2smewgZ1woqDidycpzIvdpn0gCh6b dyjkjek68D5wkVC58fOdwfncbqt95gXc8oVQAXVdhiWs5FymHXSHXa7aoIO1bDEU fk5o2jnmAIm1XtqaDQDPeoJKuaKJJ/umiPmXKjAz7X9PkHtjSNoThtcQMSNG8qiA OBv1ZSFQVTf5XFzkvplmH1y/mKJtp6ugrXXeK2u5/BqBl0S9mkGPUQ4F7kSgqf/Q 6EKLzkSH515sYWIojQoqcE4cbxiXa79SzrdauVKoSvMfUr+uLqpewbUzkaM= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:09 2025 by rpki-client