$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab2b3556-98e4-4eda-92f6-cf4ba774190a.roa File: ab2b3556-98e4-4eda-92f6-cf4ba774190a.roa (raw, json) Hash identifier: gAAwFOeOWib1q5zX7/j+0KLSDKVfezLu07i7pa+F2o0= Subject key identifier: EA:E4:D9:A6:67:C6:3A:F8:2F:C6:A1:5E:F2:9A:4F:16:02:0D:90:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 54A147BE36A5A413ABE6C74182CF85CD8C3A16DB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab2b3556-98e4-4eda-92f6-cf4ba774190a.roa Signing time: Fri 26 Sep 2025 02:12:44 +0000 ROA not before: Fri 26 Sep 2025 02:12:44 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a1:47:be:36:a5:a4:13:ab:e6:c7:41:82:cf:85:cd:8c:3a:16:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:12:44 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=437d122b5fda4044f0189c52da2db8dabb5dff845576b93944a81b83fcc0df8e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:37:7b:7c:16:88:4f:f8:2b:b4:42:29:f3: 54:2b:5c:da:5e:b6:95:60:bf:01:e3:3e:9d:ba:56: 5a:00:0b:3b:95:58:1e:52:a0:99:10:d0:83:25:b9: 87:c0:3f:fe:1f:ce:29:3c:f2:e7:63:2b:c4:f5:b2: 50:6c:cf:36:8e:5c:bc:3e:e3:af:66:4a:c5:d5:9e: 2e:49:db:28:72:6d:11:ce:0f:6a:77:39:f1:37:de: ae:b3:49:41:9f:a7:2d:ac:c9:db:f8:2d:28:f2:de: 3d:fe:5f:49:0f:d1:a8:f5:74:c5:b5:10:1c:a8:cb: b5:eb:45:22:89:3b:0d:27:69:fa:af:67:bf:d0:27: 5e:5b:c0:5b:5e:b4:35:93:ea:62:21:da:a4:16:d6: 8d:3a:74:16:b6:54:ee:00:26:46:69:c5:87:e9:7f: c8:76:28:70:7a:89:83:ec:73:f7:66:70:66:9e:0c: 51:68:6a:1c:17:d6:44:50:f1:86:52:3c:ae:7a:74: bb:be:28:5f:59:17:b5:c2:9a:f6:38:a3:05:86:fc: 52:f3:ec:02:04:b4:92:10:06:e0:b9:a7:58:e3:02: 63:70:b0:b9:1a:de:94:77:3c:62:a3:0e:f3:e8:ff: 80:a4:7a:f1:95:1a:b8:d4:dc:5c:91:b1:fa:91:3f: 60:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E4:D9:A6:67:C6:3A:F8:2F:C6:A1:5E:F2:9A:4F:16:02:0D:90:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab2b3556-98e4-4eda-92f6-cf4ba774190a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.0.0/18 Signature Algorithm: sha256WithRSAEncryption 41:a0:3a:d9:a6:f0:81:d4:78:16:19:68:e2:b5:9b:bc:91:c3: 1c:e3:38:e0:f5:e9:bd:7e:b0:f5:78:1d:b0:d4:16:52:06:5c: a9:93:2e:21:3c:7a:c5:3a:9c:ea:a5:9c:e9:7a:a0:2c:e9:37: eb:84:b9:ff:65:8c:e7:6b:5e:0f:c5:da:e8:f7:a6:c0:24:07: 14:2d:d6:b6:0a:2c:f8:b8:81:f5:c9:47:7c:08:be:35:f4:3b: 34:92:5b:31:42:96:13:b7:1c:83:15:17:94:74:62:10:05:9b: 5d:80:df:6a:60:a2:10:32:30:6d:bb:29:9a:22:8d:f6:20:78: 0a:43:58:91:8e:cb:50:8b:ee:48:44:e5:96:c2:72:cf:50:00: 68:fb:ab:38:44:4e:f0:ef:21:45:c0:39:21:c4:60:05:22:92: ef:10:2a:c2:f8:3f:91:c0:be:26:0e:eb:22:e5:25:d0:c5:7a: d3:03:f0:13:80:9c:e8:57:df:6f:58:d7:66:06:00:25:07:72: 41:bf:49:94:e3:ed:1e:eb:bb:ef:65:65:ed:fc:97:f6:a4:b2: e0:fa:78:a0:86:5a:47:c7:9a:1e:2c:7f:2f:bd:b8:73:c5:87: f6:3f:ff:3d:2b:a0:4c:90:25:dd:af:87:08:1d:33:80:b2:b4: 15:40:65:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVKFHvjalpBOr5sdBgs+FzYw6FtswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIxMjQ0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzdkMTIyYjVmZGE0MDQ0ZjAxODljNTJkYTJkYjhkYWJi NWRmZjg0NTU3NmI5Mzk0NGE4MWI4M2ZjYzBkZjhlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC11Td7fBaIT/grtEIp81QrXNpetpVgvwHjPp26VloACzuV WB5SoJkQ0IMluYfAP/4fzik88udjK8T1slBszzaOXLw+469mSsXVni5J2yhybRHO D2p3OfE33q6zSUGfpy2sydv4LSjy3j3+X0kP0aj1dMW1EByoy7XrRSKJOw0nafqv Z7/QJ15bwFtetDWT6mIh2qQW1o06dBa2VO4AJkZpxYfpf8h2KHB6iYPsc/dmcGae DFFoahwX1kRQ8YZSPK56dLu+KF9ZF7XCmvY4owWG/FLz7AIEtJIQBuC5p1jjAmNw sLka3pR3PGKjDvPo/4CkevGVGrjU3FyRsfqRP2DVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6uTZpmfGOvgvxqFe8ppPFgINkMAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FiMmIzNTU2LTk4ZTQtNGVkYS05MmY2LWNmNGJhNzc0MTkwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYDpgAwDQYJKoZIhvcNAQELBQADggEBAEGgOtmm8IHUeBYZaOK1m7yRwxzj OOD16b1+sPV4HbDUFlIGXKmTLiE8esU6nOqlnOl6oCzpN+uEuf9ljOdrXg/F2uj3 psAkBxQt1rYKLPi4gfXJR3wIvjX0OzSSWzFClhO3HIMVF5R0YhAFm12A32pgohAy MG27KZoijfYgeApDWJGOy1CL7khE5ZbCcs9QAGj7qzhETvDvIUXAOSHEYAUiku8Q KsL4P5HAviYO6yLlJdDFetMD8BOAnOhX329Y12YGACUHckG/SZTj7R7ru+9lZe38 l/aksuD6eKCGWkfHmh4sfy+9uHPFh/Y//z0roEyQJd2vhwgdM4CytBVAZaY= -----END CERTIFICATE-----Generated at Fri Oct 17 22:01:50 2025 by rpki-client