$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb84fb30-076a-4e53-aedd-b79ff3720fff.roa File: bb84fb30-076a-4e53-aedd-b79ff3720fff.roa (raw, json) Hash identifier: awyjw61djGUAFvTpe3lq4E21rldpCUvFrl7Zm8LCLtw= Subject key identifier: C5:CC:93:F9:88:1D:61:5E:60:EB:75:9B:2C:54:92:F8:0E:FB:09:4E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 294F612392E796E8D7CD1AE6964C69A095521905 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb84fb30-076a-4e53-aedd-b79ff3720fff.roa Signing time: Thu 25 Sep 2025 18:29:40 +0000 ROA not before: Thu 25 Sep 2025 18:29:40 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4f:61:23:92:e7:96:e8:d7:cd:1a:e6:96:4c:69:a0:95:52:19:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:29:40 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=030e680dcc16b92a9438c1c7226e19e85139b485ace61c8e49d396a4da2a4c33, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:b6:72:d2:7f:59:ee:bf:30:2b:9e:40:74: b9:15:50:ef:6d:38:06:70:69:12:cd:8a:3a:02:c0: be:15:b0:e4:60:f2:86:3e:7b:07:2f:56:e3:cb:ed: fd:bb:a9:fe:45:b5:eb:b4:f1:8b:4c:e7:1e:2a:37: d1:ce:c5:b8:16:24:fb:aa:a5:2a:e1:d7:48:33:7c: 13:41:f3:7c:62:54:7a:c8:71:54:eb:2f:65:44:0c: 6a:69:ae:92:34:18:10:4e:fe:b9:e0:d3:e3:4d:af: 7c:c3:88:5a:15:e3:83:3e:0f:20:3a:b6:70:69:27: 33:a2:98:ac:91:a4:0f:03:54:9f:ff:9f:8a:41:05: aa:9d:e5:6f:53:85:9e:b7:6e:94:a6:84:93:13:2f: 61:86:7d:3a:29:e0:65:8e:6f:0f:49:df:1a:b8:f4: 13:63:e1:63:84:71:e7:61:4c:ba:26:2c:27:88:0b: 79:e6:bd:21:1e:73:ef:ed:cd:e2:ff:ae:ac:26:27: ab:db:0a:e3:34:66:14:41:87:81:88:44:ec:c4:60: 79:24:95:3d:b8:ae:f4:4a:67:a7:a6:2b:f4:07:40: 44:47:b9:d5:48:02:7b:da:8e:ba:c5:74:51:cc:3a: 7e:47:7f:1e:24:5d:d9:b0:91:69:44:1d:0d:86:34: c9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CC:93:F9:88:1D:61:5E:60:EB:75:9B:2C:54:92:F8:0E:FB:09:4E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb84fb30-076a-4e53-aedd-b79ff3720fff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.109.0/24 Signature Algorithm: sha256WithRSAEncryption 17:ef:4e:52:15:06:14:71:30:55:ea:d3:a5:ca:21:e6:93:c3: 37:7e:04:3a:ab:75:1b:be:95:98:d8:7c:a2:32:2d:04:47:98: 40:ed:db:05:22:1b:d5:fc:95:6b:27:69:d4:f0:04:e9:bb:fd: 2f:1b:29:84:c2:86:e3:bb:63:3f:a8:3d:c5:95:75:0c:b5:0d: 55:74:ac:50:a5:0b:7c:86:48:70:de:10:62:2c:02:44:2c:c2: ea:2f:5f:c6:4b:db:c4:18:0a:f9:c5:3c:a5:b2:e9:da:f7:c2: 5e:87:30:54:0d:31:52:25:7b:54:98:26:46:8d:4c:e2:48:e9: 85:c4:ae:d7:07:ec:af:1f:ed:5e:b7:83:36:c0:ff:c2:62:21: e2:8c:01:79:86:09:d4:67:9f:53:19:df:8b:47:b0:84:26:ff: 83:0c:34:f6:a1:60:cb:8e:ac:77:8d:ae:7e:c7:1a:0f:20:ea: a9:0c:69:9b:4c:7d:a5:4b:26:01:24:cd:7e:0a:85:d5:5a:8e: ed:71:8b:46:ed:c6:95:0e:32:ed:83:ec:c3:91:b3:e1:e7:82: 28:a5:f7:ce:58:0f:3c:34:b9:0a:57:b7:d8:b2:da:8a:4a:a6: 27:28:11:6f:27:63:ef:af:e7:f1:41:ec:04:8f:a3:d7:30:5a: 9a:7c:7c:da -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKU9hI5LnlujXzRrmlkxpoJVSGQUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgyOTQwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzBlNjgwZGNjMTZiOTJhOTQzOGMxYzcyMjZlMTllODUx MzliNDg1YWNlNjFjOGU0OWQzOTZhNGRhMmE0YzMzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmv7Zy0n9Z7r8wK55AdLkVUO9tOAZwaRLNijoCwL4VsORg 8oY+ewcvVuPL7f27qf5Fteu08YtM5x4qN9HOxbgWJPuqpSrh10gzfBNB83xiVHrI cVTrL2VEDGpprpI0GBBO/rng0+NNr3zDiFoV44M+DyA6tnBpJzOimKyRpA8DVJ// n4pBBaqd5W9ThZ63bpSmhJMTL2GGfTop4GWObw9J3xq49BNj4WOEcedhTLomLCeI C3nmvSEec+/tzeL/rqwmJ6vbCuM0ZhRBh4GIROzEYHkklT24rvRKZ6emK/QHQERH udVIAnvajrrFdFHMOn5Hfx4kXdmwkWlEHQ2GNMkLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxcyT+YgdYV5g63WbLFSS+A77CU4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JiODRmYjMwLTA3NmEtNGU1My1hZWRkLWI3OWZmMzcyMGZmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpm0wDQYJKoZIhvcNAQELBQADggEBABfvTlIVBhRxMFXq06XKIeaTwzd+ BDqrdRu+lZjYfKIyLQRHmEDt2wUiG9X8lWsnadTwBOm7/S8bKYTChuO7Yz+oPcWV dQy1DVV0rFClC3yGSHDeEGIsAkQswuovX8ZL28QYCvnFPKWy6dr3wl6HMFQNMVIl e1SYJkaNTOJI6YXErtcH7K8f7V63gzbA/8JiIeKMAXmGCdRnn1MZ34tHsIQm/4MM NPahYMuOrHeNrn7HGg8g6qkMaZtMfaVLJgEkzX4KhdVaju1xi0btxpUOMu2D7MOR s+Hngiil985YDzw0uQpXt9iy2opKpicoEW8nY++v5/FB7ASPo9cwWpp8fNo= -----END CERTIFICATE-----Generated at Mon Oct 20 05:16:41 2025 by rpki-client