$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8e99437-090a-458b-8b68-e6bd78141064.roa File: a8e99437-090a-458b-8b68-e6bd78141064.roa (raw, json) Hash identifier: KoEiQGP9udZ+fPUxZw2FB0eg5oEnZd9QePCP95RVb/A= Subject key identifier: 14:77:57:F8:88:8B:41:19:8D:31:40:8E:AD:71:24:C5:DD:2B:A3:7C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1408D062C6BCE3C402B9519A806047078DEC8A60 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8e99437-090a-458b-8b68-e6bd78141064.roa Signing time: Thu 25 Sep 2025 23:57:06 +0000 ROA not before: Thu 25 Sep 2025 23:57:06 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:08:d0:62:c6:bc:e3:c4:02:b9:51:9a:80:60:47:07:8d:ec:8a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:57:06 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=de36dc49437fbc7cddd058fff166ebf0fd2136ab68004696de4f3b54df1b3ac8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:d2:22:21:24:f4:72:f4:a0:8e:eb:dd:b6: 85:d4:f5:a4:72:4a:da:f7:31:37:b0:b8:ec:7e:8c: 90:c2:b5:bb:ee:7d:82:34:b6:8e:02:42:a1:e2:2a: 03:b2:f1:d1:90:3e:be:2a:1e:f7:64:d3:e2:2c:89: bd:af:f0:dd:08:87:41:57:23:e8:8f:2c:ed:20:e6: 4b:2d:d4:eb:31:94:f8:f1:5e:c6:ab:50:20:fd:75: d6:35:78:1d:3e:24:e7:8e:17:a5:17:dc:7e:4f:fd: 95:c9:74:c1:e7:44:ea:f8:ff:59:4b:f3:72:48:cf: 78:c6:73:43:07:1d:ed:aa:24:0d:99:6e:a3:95:e9: 4a:43:df:8e:e5:45:26:2f:63:12:5a:b5:8b:22:5b: 08:04:31:10:48:b4:41:fd:41:5a:e4:d8:0f:55:12: fe:66:70:21:74:01:5d:dd:3e:8c:e6:f2:62:fc:a4: 66:5f:95:c8:19:42:44:7c:26:2f:81:00:d8:91:3e: cd:5b:54:b9:14:2e:f8:ee:4c:2b:ed:65:f4:cc:9a: 39:dd:62:91:30:9a:9d:22:40:83:d0:0e:c1:49:6c: df:ae:70:db:ac:22:42:56:4c:3e:7e:48:6a:93:23: f4:c1:4e:c1:3c:a7:de:2b:4c:0c:f1:dc:b9:ae:cf: 85:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:77:57:F8:88:8B:41:19:8D:31:40:8E:AD:71:24:C5:DD:2B:A3:7C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8e99437-090a-458b-8b68-e6bd78141064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.80.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:a2:c4:28:a9:e4:af:cc:5b:16:96:b7:d9:8d:65:57:5c:51: 65:99:9e:8c:6e:e6:2d:6d:cc:fb:86:80:65:cf:06:15:ac:1a: 47:b4:66:83:0f:92:58:ce:7f:1b:f5:bc:24:2d:52:4b:8f:e6: 16:e3:56:8e:21:dd:3e:91:c0:f8:3c:3e:d3:f1:36:75:5d:0d: 3d:79:e5:06:1e:05:45:0d:a4:b4:9c:0d:aa:2a:16:51:cc:a1: eb:c8:86:66:0e:e8:a7:5f:8a:6d:45:9b:cd:c2:8f:e7:33:a4: a0:d9:9f:de:d1:af:b3:ba:68:f1:92:51:fc:65:5f:03:0b:9d: 7f:5f:2a:e1:38:e1:87:5b:b5:0a:8f:7c:cb:ea:ac:b6:f0:3c: 00:85:fb:8a:cd:e0:cd:5a:99:eb:74:71:12:01:db:7c:29:6e: 81:40:c7:9e:75:35:4b:17:1f:2e:bf:ec:2e:ae:76:5d:cf:86: 58:d8:f3:42:40:3c:29:26:84:4a:95:7c:bf:09:99:b3:d9:04: d7:2e:e0:4a:6d:e3:ee:af:ef:32:c3:e6:6f:3e:f4:56:64:bf: f6:b7:63:35:23:c9:08:72:03:1f:af:9c:a6:b6:2a:d3:9b:81: 06:8d:e2:a4:8a:c1:e9:d2:f1:83:a7:84:4d:f4:0e:32:24:a1: 21:2e:65:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFAjQYsa848QCuVGagGBHB43simAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjM1NzA2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTM2ZGM0OTQzN2ZiYzdjZGRkMDU4ZmZmMTY2ZWJmMGZk MjEzNmFiNjgwMDQ2OTZkZTRmM2I1NGRmMWIzYWM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDELdIiIST0cvSgjuvdtoXU9aRyStr3MTewuOx+jJDCtbvu fYI0to4CQqHiKgOy8dGQPr4qHvdk0+Isib2v8N0Ih0FXI+iPLO0g5kst1OsxlPjx XsarUCD9ddY1eB0+JOeOF6UX3H5P/ZXJdMHnROr4/1lL83JIz3jGc0MHHe2qJA2Z bqOV6UpD347lRSYvYxJatYsiWwgEMRBItEH9QVrk2A9VEv5mcCF0AV3dPozm8mL8 pGZflcgZQkR8Ji+BANiRPs1bVLkULvjuTCvtZfTMmjndYpEwmp0iQIPQDsFJbN+u cNusIkJWTD5+SGqTI/TBTsE8p94rTAzx3Lmuz4UfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFHdX+IiLQRmNMUCOrXEkxd0ro3wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E4ZTk5NDM3LTA5MGEtNDU4Yi04YjY4LWU2YmQ3ODE0MTA2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDoFAwDQYJKoZIhvcNAQELBQADggEBAA6ixCip5K/MWxaWt9mNZVdcUWWZ noxu5i1tzPuGgGXPBhWsGke0ZoMPkljOfxv1vCQtUkuP5hbjVo4h3T6RwPg8PtPx NnVdDT155QYeBUUNpLScDaoqFlHMoevIhmYO6Kdfim1Fm83Cj+czpKDZn97Rr7O6 aPGSUfxlXwMLnX9fKuE44YdbtQqPfMvqrLbwPACF+4rN4M1amet0cRIB23wpboFA x551NUsXHy6/7C6udl3PhljY80JAPCkmhEqVfL8JmbPZBNcu4Ept4+6v7zLD5m8+ 9FZkv/a3YzUjyQhyAx+vnKa2KtObgQaN4qSKwenS8YOnhE30DjIkoSEuZQo= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:15 2025 by rpki-client