$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0ff5b86-82ca-415d-8c36-95a0e60b638c.roa File: a0ff5b86-82ca-415d-8c36-95a0e60b638c.roa (raw, json) Hash identifier: l/SEyPIzTp0xOz+nLMu7FUqtfCy3N3RkiTjTDuXua1s= Subject key identifier: 6E:58:6B:70:4E:05:5F:47:63:80:E1:F9:14:66:B7:42:5B:7A:1B:13 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 27A8BAB069AEC9826574EAA5CEC01F468EA2A228 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0ff5b86-82ca-415d-8c36-95a0e60b638c.roa Signing time: Fri 26 Sep 2025 01:26:59 +0000 ROA not before: Fri 26 Sep 2025 01:26:59 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a8:ba:b0:69:ae:c9:82:65:74:ea:a5:ce:c0:1f:46:8e:a2:a2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:26:59 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=565f3cc0dd7be1cf8e17fa308400a8047a1b32febf3de47b63e31375ede9c37f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:4f:28:65:29:e8:dd:4a:d5:6f:f3:79:1d: 42:49:ef:ae:49:73:01:59:9b:1a:7a:f2:23:26:31: 61:7c:6b:24:4d:81:04:71:3c:ae:08:3f:98:4b:48: 0b:ea:a1:54:90:be:24:79:09:71:30:3c:75:93:8b: 78:00:83:78:b3:57:d3:6c:31:fd:5f:8b:d3:ed:30: 1e:8f:1f:66:fa:82:24:76:18:93:f7:e3:2d:23:2b: ee:56:b6:a1:99:a7:0f:a3:fd:e6:57:40:3b:f5:3e: 04:f1:73:74:c3:06:ee:ed:ec:9d:24:a6:bc:b2:3e: 78:0b:9b:32:ea:6f:df:8d:4f:3f:d8:1b:b9:df:c5: ed:d1:4c:14:63:0c:8b:ef:c3:a9:e6:98:b9:1d:69: 50:08:ea:22:91:22:5a:0f:3c:aa:5a:e0:4c:04:3d: ef:7b:c9:20:f6:a1:7f:e9:01:01:88:c6:ee:da:48: 13:c3:5c:28:d1:af:9d:a1:fd:ec:44:35:af:20:bd: 8d:8c:6a:2f:ba:af:25:a1:c0:dc:c4:c3:0c:20:b2: 03:b2:ab:1a:cf:30:d4:dc:f8:2b:17:28:3d:7f:98: 1b:90:ef:e8:d6:73:b6:78:5f:3c:53:d7:10:fb:de: d9:6c:10:49:7c:27:09:45:27:d0:65:c3:49:d3:2a: 30:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:58:6B:70:4E:05:5F:47:63:80:E1:F9:14:66:B7:42:5B:7A:1B:13 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0ff5b86-82ca-415d-8c36-95a0e60b638c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.176.0/21 Signature Algorithm: sha256WithRSAEncryption 10:ca:c1:7e:7b:3b:e8:4b:91:4e:95:97:1c:9e:db:99:13:47: 7d:96:65:32:94:da:32:2c:9f:78:2d:57:21:c5:19:d8:f7:3c: 1f:cb:1b:56:cd:09:a6:6a:22:71:00:b6:84:28:0b:ea:0a:d7: 11:8d:d1:f2:c8:5e:ef:92:70:c0:52:51:e1:5c:7f:77:3f:a2: c4:6b:62:a7:0d:f0:f9:f2:eb:9d:6f:8c:0b:82:49:5b:68:1d: fd:a3:2f:b7:8e:08:16:20:06:03:df:06:d9:e1:1a:52:4d:97: cd:a2:52:24:0b:c1:70:83:a1:97:9b:22:ec:28:bd:a2:7a:97: fc:53:6d:a2:06:3b:8c:87:91:e9:44:75:b3:a8:9a:63:13:4d: 75:ec:48:29:f7:d7:5d:9a:c8:19:2b:2d:af:26:51:06:c8:f2: d2:2f:5f:e9:65:a0:0e:62:51:2b:b2:4c:d3:48:4c:da:d6:6f: bd:b1:ac:bc:a2:01:76:f0:cf:93:46:e2:44:4b:68:3c:e1:6c: 8e:bd:32:cc:c6:7f:c6:2a:f3:54:8d:ff:a9:4f:0d:1c:e9:72: e7:14:e6:be:3e:2f:4e:9a:f0:1e:40:de:3a:59:90:39:51:a9: 13:5d:b9:06:3c:50:28:4f:0d:00:c2:f8:46:13:da:ec:b8:3e: ea:d4:22:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ6i6sGmuyYJldOqlzsAfRo6ioigwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEyNjU5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjVmM2NjMGRkN2JlMWNmOGUxN2ZhMzA4NDAwYTgwNDdh MWIzMmZlYmYzZGU0N2I2M2UzMTM3NWVkZTljMzdmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ8E8oZSno3UrVb/N5HUJJ765JcwFZmxp68iMmMWF8ayRN gQRxPK4IP5hLSAvqoVSQviR5CXEwPHWTi3gAg3izV9NsMf1fi9PtMB6PH2b6giR2 GJP34y0jK+5WtqGZpw+j/eZXQDv1PgTxc3TDBu7t7J0kpryyPngLmzLqb9+NTz/Y G7nfxe3RTBRjDIvvw6nmmLkdaVAI6iKRIloPPKpa4EwEPe97ySD2oX/pAQGIxu7a SBPDXCjRr52h/exENa8gvY2Mai+6ryWhwNzEwwwgsgOyqxrPMNTc+CsXKD1/mBuQ 7+jWc7Z4XzxT1xD73tlsEEl8JwlFJ9Blw0nTKjBbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUblhrcE4FX0djgOH5FGa3Qlt6GxMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EwZmY1Yjg2LTgyY2EtNDE1ZC04YzM2LTk1YTBlNjBiNjM4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDqLAwDQYJKoZIhvcNAQELBQADggEBABDKwX57O+hLkU6Vlxye25kTR32W ZTKU2jIsn3gtVyHFGdj3PB/LG1bNCaZqInEAtoQoC+oK1xGN0fLIXu+ScMBSUeFc f3c/osRrYqcN8Pny651vjAuCSVtoHf2jL7eOCBYgBgPfBtnhGlJNl82iUiQLwXCD oZebIuwovaJ6l/xTbaIGO4yHkelEdbOommMTTXXsSCn3112ayBkrLa8mUQbI8tIv X+lloA5iUSuyTNNITNrWb72xrLyiAXbwz5NG4kRLaDzhbI69MszGf8Yq81SN/6lP DRzpcucU5r4+L06a8B5A3jpZkDlRqRNduQY8UChPDQDC+EYT2uy4PurUIso= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:45 2025 by rpki-client