$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f484eea-9176-47aa-b188-2d97d6705756.roa File: 9f484eea-9176-47aa-b188-2d97d6705756.roa (raw, json) Hash identifier: Q9nGex7+g5dPTN7dExNUDlcb2IM35czbLjk0i2XsUSQ= Subject key identifier: 0D:01:0C:BC:02:4C:B8:2F:23:EC:2D:B8:99:A1:8C:DE:2F:6F:A0:2C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2C2C58233DB67DD8DEEDCE1996F9FE92B424114B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f484eea-9176-47aa-b188-2d97d6705756.roa Signing time: Thu 25 Sep 2025 22:02:47 +0000 ROA not before: Thu 25 Sep 2025 22:02:47 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2c:58:23:3d:b6:7d:d8:de:ed:ce:19:96:f9:fe:92:b4:24:11:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:02:47 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=3c99720f1402d57e294bbe97af4a00ae0862eb230c2478bd347c69cff5434e66, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:50:7a:11:53:5a:a2:19:58:fa:85:c3:ed: 54:76:60:f9:c2:79:8a:db:86:14:35:5e:03:61:52: 4f:87:da:1e:d2:81:c5:70:4d:af:60:09:ec:88:26: 43:f5:0a:52:28:58:6e:db:38:e0:e9:dc:91:61:40: 50:fa:7e:3c:05:b7:f5:4b:fa:14:40:21:0a:51:4d: 9a:01:77:a2:ec:c6:61:09:80:f7:56:94:24:f6:3e: 5e:18:0a:ab:07:31:a1:d7:c2:0d:a8:b3:61:f9:18: 6e:07:66:ea:30:13:bc:58:d8:47:99:e5:77:c3:50: d0:ac:ef:8f:c7:7f:bf:97:4f:d1:dc:92:fd:4e:7f: 8c:e4:6b:4a:f4:c2:0d:eb:9a:ca:ab:e7:e5:34:c1: c1:08:d9:21:b4:f3:58:c6:33:35:07:ea:70:59:06: 1d:e0:6e:d5:f2:1b:44:e8:f7:52:61:52:a4:a6:2f: 00:d5:b3:ec:60:47:d4:d2:97:b9:7f:fa:3b:92:8b: 57:b3:8c:b7:a1:3f:dc:e7:3c:1f:e8:5f:64:6f:b2: 74:79:20:a1:97:e0:00:ce:c0:3b:f0:9d:2d:98:89: ff:d0:ea:aa:a9:74:53:49:a5:e5:1d:72:36:30:9c: 33:6e:ce:4a:dd:76:bf:e5:0c:1a:7a:73:ab:f5:62: 47:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:01:0C:BC:02:4C:B8:2F:23:EC:2D:B8:99:A1:8C:DE:2F:6F:A0:2C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f484eea-9176-47aa-b188-2d97d6705756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.170.0/23 Signature Algorithm: sha256WithRSAEncryption 81:03:90:cd:07:72:15:07:85:c7:9a:c1:c5:71:2d:88:1c:47: db:f3:84:3e:fa:94:f0:11:84:28:fa:8f:8f:fa:82:de:23:dc: 6f:c8:dc:6f:61:b0:fa:ef:f6:50:76:a1:d6:21:a5:0f:27:2b: a6:4b:68:2a:6d:e2:1d:bf:7f:14:f2:f9:80:cb:60:c1:40:d7: 7e:47:d7:a1:7b:5a:a3:d7:9c:29:eb:69:64:1a:f8:c6:0d:89: 51:b5:30:1c:47:73:14:bb:21:a5:78:63:ac:93:20:10:d2:54: aa:9f:54:4c:bc:ad:f1:96:77:56:bd:7b:69:fc:6f:af:17:15: 22:46:60:f7:d7:42:a9:29:d3:2c:f0:77:a3:bc:fb:02:4d:ab: 26:7a:97:83:0c:c2:b6:98:35:1b:f9:1e:f5:54:2e:bc:31:33: ed:0a:ea:9f:13:a9:8a:1a:a9:a7:78:a4:da:a7:c6:11:c3:0b: bc:61:68:c6:7e:37:63:cb:29:1d:bf:a3:1f:e3:b8:b4:a1:5e: 45:ff:a7:d7:8c:15:85:67:a8:08:af:ef:d2:c0:93:c9:1c:e2: 16:8e:17:25:3b:cd:5a:30:c7:13:e1:56:f9:67:05:bb:d3:62: cc:2c:31:65:74:c3:7b:0b:d9:50:6e:fe:8c:ca:54:2b:0b:1b: 99:85:ad:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULCxYIz22fdje7c4Zlvn+krQkEUswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIwMjQ3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzk5NzIwZjE0MDJkNTdlMjk0YmJlOTdhZjRhMDBhZTA4 NjJlYjIzMGMyNDc4YmQzNDdjNjljZmY1NDM0ZTY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4WVB6EVNaohlY+oXD7VR2YPnCeYrbhhQ1XgNhUk+H2h7S gcVwTa9gCeyIJkP1ClIoWG7bOODp3JFhQFD6fjwFt/VL+hRAIQpRTZoBd6LsxmEJ gPdWlCT2Pl4YCqsHMaHXwg2os2H5GG4HZuowE7xY2EeZ5XfDUNCs74/Hf7+XT9Hc kv1Of4zka0r0wg3rmsqr5+U0wcEI2SG081jGMzUH6nBZBh3gbtXyG0To91JhUqSm LwDVs+xgR9TSl7l/+juSi1ezjLehP9znPB/oX2RvsnR5IKGX4ADOwDvwnS2Yif/Q 6qqpdFNJpeUdcjYwnDNuzkrddr/lDBp6c6v1YkePAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDQEMvAJMuC8j7C24maGM3i9voCwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlmNDg0ZWVhLTkxNzYtNDdhYS1iMTg4LTJkOTdkNjcwNTc1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDpKowDQYJKoZIhvcNAQELBQADggEBAIEDkM0HchUHhceawcVxLYgcR9vz hD76lPARhCj6j4/6gt4j3G/I3G9hsPrv9lB2odYhpQ8nK6ZLaCpt4h2/fxTy+YDL YMFA135H16F7WqPXnCnraWQa+MYNiVG1MBxHcxS7IaV4Y6yTIBDSVKqfVEy8rfGW d1a9e2n8b68XFSJGYPfXQqkp0yzwd6O8+wJNqyZ6l4MMwraYNRv5HvVULrwxM+0K 6p8TqYoaqad4pNqnxhHDC7xhaMZ+N2PLKR2/ox/juLShXkX/p9eMFYVnqAiv79LA k8kc4haOFyU7zVowxxPhVvlnBbvTYswsMWV0w3sL2VBu/ozKVCsLG5mFrQI= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:11 2025 by rpki-client