$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a28e898a-97f4-494e-b260-205ab110d800.roa File: a28e898a-97f4-494e-b260-205ab110d800.roa (raw, json) Hash identifier: i5/5EHc4QSAqkFfzIN/8JAFj/GFD6buFp3FHEhzx96Y= Subject key identifier: A8:66:6E:8F:9B:31:4D:08:43:5E:3B:C3:4A:DB:17:C1:D4:C7:49:1A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33FCFBE0F7B75013F0301F6F4D5923A3798E156B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a28e898a-97f4-494e-b260-205ab110d800.roa Signing time: Thu 25 Sep 2025 17:54:18 +0000 ROA not before: Thu 25 Sep 2025 17:54:18 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fc:fb:e0:f7:b7:50:13:f0:30:1f:6f:4d:59:23:a3:79:8e:15:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:54:18 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=744d5c9a9f2367670a675462f7cc3c7d2183aa6ced14ae5d0d2c17956311c6b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:87:2d:71:2e:12:b6:08:79:d4:0f:ae:f2: 74:b4:4f:93:f2:93:63:64:8e:a8:c3:7f:06:a7:f8: 64:44:12:bf:50:d6:0f:7d:58:0a:f5:06:fe:a5:a3: b5:f9:99:1a:fa:f6:8d:aa:75:b4:5a:fc:69:61:aa: 65:96:e6:33:94:89:52:91:a1:1d:ca:d8:75:82:18: ba:2c:3c:c6:96:19:5e:a4:c6:f9:2a:ce:b2:22:ee: e0:94:ab:8f:82:0d:6a:fc:1b:d2:64:f6:e6:3f:ba: 93:bf:3d:e3:70:1b:66:48:f1:6d:73:f6:d1:cb:1c: 6f:34:89:a8:c6:59:24:b1:cf:fa:e6:bb:5c:09:7e: f3:32:c9:a2:d3:aa:22:63:94:11:bf:9f:3a:b3:07: b6:8e:d3:ce:51:e8:6a:6d:77:57:ca:e6:e5:f9:2b: 08:92:0b:1e:c3:5c:15:3c:2f:df:b4:69:38:f2:e1: f4:f3:f5:4c:d1:01:a3:12:6e:46:04:32:86:c4:2a: 22:d0:ad:58:b4:a0:99:b3:a2:e7:bc:1a:2c:19:0a: ec:53:22:bb:c2:d7:61:0b:56:4c:c5:8d:2b:e6:ff: a6:2e:cf:b0:cb:41:95:2b:2e:07:73:b0:c7:78:9f: ac:68:bc:40:a1:8e:54:ff:8d:9a:76:4c:aa:6e:08: 47:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:66:6E:8F:9B:31:4D:08:43:5E:3B:C3:4A:DB:17:C1:D4:C7:49:1A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a28e898a-97f4-494e-b260-205ab110d800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.129.0/24 Signature Algorithm: sha256WithRSAEncryption a6:f7:6c:9c:70:eb:e1:d2:1b:57:f4:68:87:ee:90:fb:4c:bc: 9a:62:af:77:1f:35:4c:05:1e:f8:1f:48:03:bb:4e:29:63:27: 95:d9:61:ec:87:2d:73:5c:bc:88:c0:02:87:99:65:60:a6:98: 8e:3b:ec:4e:0f:ca:5c:9a:1a:c6:b7:fa:1d:38:ea:78:b0:3c: ff:3a:b7:fe:4f:09:4b:41:15:2e:b5:ec:f7:fc:1d:02:ed:29: 13:62:33:f3:a0:53:9d:e2:ee:08:a9:0e:28:e1:a0:8c:1c:c8: fd:92:8c:91:1f:6c:b4:bf:e7:52:1c:d0:e8:b2:7b:35:08:74: ff:ad:f9:ff:61:45:20:55:82:ef:0c:6b:bf:31:1f:2d:45:28: b2:a8:78:d9:39:21:bd:34:c1:a0:e3:03:c6:01:55:83:0d:65: 1f:b2:da:bd:ba:b0:cd:44:3b:03:41:71:e5:cb:26:ab:60:ee: fd:61:7f:07:aa:d2:16:af:73:c7:b7:ad:95:b9:d9:aa:ff:4a: 5d:93:3c:31:9b:85:8c:da:43:24:4d:e8:b6:79:2e:e6:23:dd: ff:8b:03:3a:5e:ef:72:23:b1:66:58:04:5a:5d:d1:3f:50:76: 05:68:b7:7f:1d:cf:1a:81:69:9b:7a:7d:10:52:40:0a:05:5f: 6b:52:06:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM/z74Pe3UBPwMB9vTVkjo3mOFWswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTc1NDE4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDRkNWM5YTlmMjM2NzY3MGE2NzU0NjJmN2NjM2M3ZDIx ODNhYTZjZWQxNGFlNWQwZDJjMTc5NTYzMTFjNmIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLMIctcS4Stgh51A+u8nS0T5Pyk2NkjqjDfwan+GREEr9Q 1g99WAr1Bv6lo7X5mRr69o2qdbRa/GlhqmWW5jOUiVKRoR3K2HWCGLosPMaWGV6k xvkqzrIi7uCUq4+CDWr8G9Jk9uY/upO/PeNwG2ZI8W1z9tHLHG80iajGWSSxz/rm u1wJfvMyyaLTqiJjlBG/nzqzB7aO085R6Gptd1fK5uX5KwiSCx7DXBU8L9+0aTjy 4fTz9UzRAaMSbkYEMobEKiLQrVi0oJmzoue8GiwZCuxTIrvC12ELVkzFjSvm/6Yu z7DLQZUrLgdzsMd4n6xovEChjlT/jZp2TKpuCEcDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqGZuj5sxTQhDXjvDStsXwdTHSRowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyOGU4OThhLTk3ZjQtNDk0ZS1iMjYwLTIwNWFiMTEwZDgwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpIEwDQYJKoZIhvcNAQELBQADggEBAKb3bJxw6+HSG1f0aIfukPtMvJpi r3cfNUwFHvgfSAO7TiljJ5XZYeyHLXNcvIjAAoeZZWCmmI477E4PylyaGsa3+h04 6niwPP86t/5PCUtBFS617Pf8HQLtKRNiM/OgU53i7gipDijhoIwcyP2SjJEfbLS/ 51Ic0OiyezUIdP+t+f9hRSBVgu8Ma78xHy1FKLKoeNk5Ib00waDjA8YBVYMNZR+y 2r26sM1EOwNBceXLJqtg7v1hfweq0havc8e3rZW52ar/Sl2TPDGbhYzaQyRN6LZ5 LuYj3f+LAzpe73IjsWZYBFpd0T9QdgVot38dzxqBaZt6fRBSQAoFX2tSBuQ= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:53 2025 by rpki-client