$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2665462-0f9d-4d19-a935-b5118115a25b.roa File: a2665462-0f9d-4d19-a935-b5118115a25b.roa (raw, json) Hash identifier: jR/SpJZjMZP05jbYQFmu9Bl8dghTSJPfMeGD8DGVxtg= Subject key identifier: B5:13:B8:21:D2:AA:70:3F:C1:6B:B5:5F:B0:E4:DF:46:8F:79:BF:DA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0B7E4D686831337E66B0756D0C075F189F3C3C21 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2665462-0f9d-4d19-a935-b5118115a25b.roa Signing time: Fri 26 Sep 2025 00:21:49 +0000 ROA not before: Fri 26 Sep 2025 00:21:49 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7e:4d:68:68:31:33:7e:66:b0:75:6d:0c:07:5f:18:9f:3c:3c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:21:49 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=d6028e7ce328b8d3181397ed861b1625a4fc75669df91428c3573747cfcf2ae3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:5a:2d:55:01:e9:10:5e:f4:ac:87:4c:af: 5a:71:2a:d8:c6:71:df:d1:a3:25:5a:f9:40:16:a3: 44:22:19:b2:8a:ae:99:82:28:86:a8:1e:53:e7:d0: 41:b8:ae:a3:aa:3e:78:66:30:40:9e:98:18:88:d3: af:04:26:33:c0:68:b9:94:43:50:e4:85:1e:5c:34: 26:3f:3e:25:74:b4:9b:3a:e1:f7:73:39:f8:95:38: 90:e1:e6:98:1a:da:e0:32:9c:bc:5a:34:a8:6e:85: 67:a1:6b:51:ac:bd:fb:64:14:77:e9:72:8e:12:5f: 0b:41:d1:a3:c1:a3:fb:64:a0:a0:39:46:01:ea:ca: 3f:ba:9e:08:b6:63:41:7f:8f:a8:94:20:5d:42:e4: f6:65:f6:60:48:2d:23:9f:f8:20:cf:3c:d7:a4:5f: 4d:8e:7d:38:13:c0:52:2a:a0:67:43:8c:2e:42:3f: 78:6d:36:ce:48:31:f4:be:b3:8f:76:e9:ec:b3:83: ff:70:93:cf:8f:26:03:df:fe:61:ae:55:af:bd:16: e9:3e:27:15:dd:9c:30:0b:3a:14:25:69:c8:5e:a0: 22:52:e9:12:c6:a8:0e:55:b3:f9:f4:41:9d:6c:ee: 7b:76:5a:91:fe:53:72:78:ab:20:b4:b4:3b:87:70: 0e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:13:B8:21:D2:AA:70:3F:C1:6B:B5:5F:B0:E4:DF:46:8F:79:BF:DA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2665462-0f9d-4d19-a935-b5118115a25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.104.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:ed:da:2c:77:b2:72:90:3d:35:cf:1a:9a:23:83:15:95:b1: 49:ce:cb:cb:b8:f0:99:ce:e7:41:7b:23:e4:f2:7a:99:12:79: 8a:92:15:89:0f:06:7e:72:18:d4:6b:28:f9:72:f1:94:bf:53: d5:2e:33:96:1c:1f:8f:e5:03:99:09:bd:07:3f:0a:78:49:73: 54:fd:41:39:67:0f:4a:89:b8:c0:50:62:18:4f:72:5e:c4:0a: 59:b4:33:70:27:aa:c4:8c:5c:56:33:22:9e:0e:15:bd:e2:cc: 58:b8:95:16:68:fc:af:5b:3b:e3:0e:65:e1:5d:fd:f3:ed:6a: 0c:67:45:a3:b2:8a:23:ad:5c:1e:62:5f:62:25:97:8a:f7:ed: 21:7f:70:d9:0f:7c:ba:fe:eb:1f:3d:53:dd:05:49:45:32:fd: 3e:9b:dc:c1:51:9c:10:17:bf:38:53:0c:fc:58:15:8b:18:2f: e5:ef:59:f6:b9:23:4b:2d:79:e2:48:a2:22:74:a1:ed:d1:00: 92:f3:a8:12:56:bf:a4:f8:fa:9e:cf:90:88:5b:77:6a:68:c8: a3:dc:63:b8:71:77:7b:2c:8d:50:d6:f4:d2:1c:6c:5a:c4:b3: 8a:ea:50:f2:d0:90:77:e3:19:41:6f:16:74:07:54:db:75:e7: 1a:1d:ef:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC35NaGgxM35msHVtDAdfGJ88PCEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDAyMTQ5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjAyOGU3Y2UzMjhiOGQzMTgxMzk3ZWQ4NjFiMTYyNWE0 ZmM3NTY2OWRmOTE0MjhjMzU3Mzc0N2NmY2YyYWUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/G1otVQHpEF70rIdMr1pxKtjGcd/RoyVa+UAWo0QiGbKK rpmCKIaoHlPn0EG4rqOqPnhmMECemBiI068EJjPAaLmUQ1DkhR5cNCY/PiV0tJs6 4fdzOfiVOJDh5pga2uAynLxaNKhuhWeha1GsvftkFHfpco4SXwtB0aPBo/tkoKA5 RgHqyj+6ngi2Y0F/j6iUIF1C5PZl9mBILSOf+CDPPNekX02OfTgTwFIqoGdDjC5C P3htNs5IMfS+s4926eyzg/9wk8+PJgPf/mGuVa+9Fuk+JxXdnDALOhQlacheoCJS 6RLGqA5Vs/n0QZ1s7nt2WpH+U3J4qyC0tDuHcA79AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtRO4IdKqcD/Ba7VfsOTfRo95v9owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyNjY1NDYyLTBmOWQtNGQxOS1hOTM1LWI1MTE4MTE1YTI1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDpmgwDQYJKoZIhvcNAQELBQADggEBAD/t2ix3snKQPTXPGpojgxWVsUnO y8u48JnO50F7I+TyepkSeYqSFYkPBn5yGNRrKPly8ZS/U9UuM5YcH4/lA5kJvQc/ CnhJc1T9QTlnD0qJuMBQYhhPcl7EClm0M3AnqsSMXFYzIp4OFb3izFi4lRZo/K9b O+MOZeFd/fPtagxnRaOyiiOtXB5iX2Ill4r37SF/cNkPfLr+6x89U90FSUUy/T6b 3MFRnBAXvzhTDPxYFYsYL+XvWfa5I0steeJIoiJ0oe3RAJLzqBJWv6T4+p7PkIhb d2poyKPcY7hxd3ssjVDW9NIcbFrEs4rqUPLQkHfjGUFvFnQHVNt15xod78w= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:00 2025 by rpki-client