$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1c27ec9-5c48-47cc-b373-1c0042188ecb.roa File: a1c27ec9-5c48-47cc-b373-1c0042188ecb.roa (raw, json) Hash identifier: b/KUltkWdFM6HINZonWdFd5oFtKaQ5LDYwLmuf7ct34= Subject key identifier: 75:A0:F6:3D:42:5B:1E:7B:66:EF:91:29:BA:2D:93:EC:5C:D2:54:40 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0A6AF68F55C70E355F95BED8B7524D816CDB97A3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1c27ec9-5c48-47cc-b373-1c0042188ecb.roa Signing time: Thu 25 Sep 2025 22:22:01 +0000 ROA not before: Thu 25 Sep 2025 22:22:01 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:6a:f6:8f:55:c7:0e:35:5f:95:be:d8:b7:52:4d:81:6c:db:97:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:22:01 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=a344f8e70fec4d8c9f81497d9783b0545c06b9875cc14fc600b340a99faff785, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:26:13:b6:91:a4:d8:62:1e:2f:19:45:8a:79: 3b:d6:84:01:9d:c6:b4:d2:a7:ab:b2:b4:f3:55:3b: 3c:7f:76:fc:4d:80:2b:c2:2c:c0:41:a2:7a:cc:67: 62:7e:3b:de:48:9b:c7:d6:71:d1:d4:d3:3a:a4:2d: e3:86:ee:93:0f:31:a6:27:2b:e7:36:65:07:d9:7d: 41:06:a3:5e:ac:f3:7f:bf:b7:0b:b1:ec:d5:f6:2d: bb:50:43:9f:87:13:3a:8c:d1:1c:73:a4:b4:0c:70: ff:69:14:b7:02:d9:4b:da:09:32:d1:09:fd:eb:b2: ab:bc:c1:54:22:30:ef:ac:2a:5c:96:8e:f3:25:8c: 68:27:1c:9e:84:e3:3b:5c:37:1c:23:e9:f7:c9:c2: 75:d6:bc:73:43:50:5a:39:89:be:91:89:a5:62:46: 5f:39:16:34:06:6a:e7:32:14:00:dc:75:e9:e0:1c: 72:4c:86:8f:82:df:9f:a4:36:66:ee:56:a1:12:e7: 29:2d:70:e0:bf:bc:af:70:41:12:da:0b:27:4d:fb: 88:f0:d7:52:5d:82:3e:34:b2:3a:49:28:96:69:15: b0:3b:db:b0:4a:8d:62:c8:59:e1:85:b5:35:76:ce: 23:d9:b8:2f:18:ce:8a:c1:a7:1c:af:c6:84:c7:3b: 19:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A0:F6:3D:42:5B:1E:7B:66:EF:91:29:BA:2D:93:EC:5C:D2:54:40 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1c27ec9-5c48-47cc-b373-1c0042188ecb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.108.0/23 Signature Algorithm: sha256WithRSAEncryption 65:b0:a1:85:a3:59:31:4e:7a:63:f1:73:34:53:24:a1:ab:6e: c7:88:51:71:b5:2e:32:2e:68:09:08:62:13:02:c4:f8:ff:53: 69:5b:94:bc:d5:98:64:2a:6b:f6:f6:78:10:d3:d0:c4:86:d9: 4b:2b:b7:ff:e0:ce:47:d9:e7:51:c7:ff:e0:5e:80:e4:cd:5c: 58:fd:a9:cc:b7:18:44:6d:e2:79:ff:d9:b0:42:98:ad:1a:3e: af:e4:79:cc:95:fa:1e:23:e8:32:d7:5e:61:4f:fd:c1:80:5c: da:43:59:bf:10:87:5b:c4:bf:3b:e2:df:c8:7c:7f:20:15:01: 62:b8:9d:c1:3e:7f:49:ca:60:7d:2f:63:49:3b:e0:71:67:b2: fa:2c:3a:7c:41:ba:ee:3d:3a:a1:52:5d:6c:b1:fc:5e:99:18: e8:e2:7d:33:6d:42:ba:d2:5c:df:bd:02:15:39:05:29:94:ed: 19:7d:d5:79:28:9a:44:e5:14:a9:70:59:65:36:9f:88:8b:32: c9:9e:d4:a1:51:d1:7b:97:8a:51:20:5b:7c:a8:42:ea:44:b6: 35:c5:75:65:67:87:f2:e8:37:e7:9f:e9:66:d3:4b:83:5f:5a: 6d:b3:cb:74:cd:2c:07:c1:29:5d:a5:8a:74:1c:29:e5:51:e1: 4b:03:a9:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCmr2j1XHDjVflb7Yt1JNgWzbl6MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIyMjAxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzQ0ZjhlNzBmZWM0ZDhjOWY4MTQ5N2Q5NzgzYjA1NDVj MDZiOTg3NWNjMTRmYzYwMGIzNDBhOTlmYWZmNzg1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3JhO2kaTYYh4vGUWKeTvWhAGdxrTSp6uytPNVOzx/dvxN gCvCLMBBonrMZ2J+O95Im8fWcdHU0zqkLeOG7pMPMaYnK+c2ZQfZfUEGo16s83+/ twux7NX2LbtQQ5+HEzqM0RxzpLQMcP9pFLcC2UvaCTLRCf3rsqu8wVQiMO+sKlyW jvMljGgnHJ6E4ztcNxwj6ffJwnXWvHNDUFo5ib6RiaViRl85FjQGaucyFADcdeng HHJMho+C35+kNmbuVqES5yktcOC/vK9wQRLaCydN+4jw11Jdgj40sjpJKJZpFbA7 27BKjWLIWeGFtTV2ziPZuC8YzorBpxyvxoTHOxk7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdaD2PUJbHntm75Epui2T7FzSVEAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExYzI3ZWM5LTVjNDgtNDdjYy1iMzczLTFjMDA0MjE4OGVjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDpmwwDQYJKoZIhvcNAQELBQADggEBAGWwoYWjWTFOemPxczRTJKGrbseI UXG1LjIuaAkIYhMCxPj/U2lblLzVmGQqa/b2eBDT0MSG2Usrt//gzkfZ51HH/+Be gOTNXFj9qcy3GERt4nn/2bBCmK0aPq/kecyV+h4j6DLXXmFP/cGAXNpDWb8Qh1vE vzvi38h8fyAVAWK4ncE+f0nKYH0vY0k74HFnsvosOnxBuu49OqFSXWyx/F6ZGOji fTNtQrrSXN+9AhU5BSmU7Rl91XkomkTlFKlwWWU2n4iLMsme1KFR0XuXilEgW3yo QupEtjXFdWVnh/LoN+ef6WbTS4NfWm2zy3TNLAfBKV2linQcKeVR4UsDqRE= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:45 2025 by rpki-client