$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0133086-4af6-4ecc-936c-8b07b3b17296.roa File: c0133086-4af6-4ecc-936c-8b07b3b17296.roa (raw, json) Hash identifier: HJk9od+JzU9kJNdwcJfvJ0MOcxCMvF8/gNsxcDj8TbY= Subject key identifier: 72:43:D8:6F:CD:98:21:D2:08:8F:23:ED:64:72:B4:C8:B3:86:6F:4B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 670AA549669CFAFAA61BE08C4676C8DDBB9723E2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0133086-4af6-4ecc-936c-8b07b3b17296.roa Signing time: Thu 25 Sep 2025 17:57:25 +0000 ROA not before: Thu 25 Sep 2025 17:57:25 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0a:a5:49:66:9c:fa:fa:a6:1b:e0:8c:46:76:c8:dd:bb:97:23:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:57:25 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=591c4a0bfb17ac12ee600f43432aa725bf967f12401187bca968f19702b641ee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:c8:1a:d5:60:c4:34:fe:20:b7:89:54:25: bf:40:1b:f9:6a:c1:a5:27:62:5b:18:d8:8d:93:87: 56:b7:df:90:58:1a:2b:6b:dc:81:94:73:60:45:e6: 9b:4d:a7:d7:a1:3c:4c:a6:38:29:cd:1a:ef:20:56: 78:2a:a1:38:24:0d:68:ae:ce:66:53:f5:c8:37:58: 46:ac:e5:6a:84:da:47:5a:3f:37:d4:7e:51:1d:73: ca:b9:1c:be:b6:6c:22:f4:33:1d:19:20:bb:81:31: e8:87:65:bb:27:4a:3a:19:d4:75:75:be:1d:4e:97: 40:2a:bc:f0:9c:4a:b5:8d:43:ad:dd:5f:8f:72:95: b9:7e:2b:d5:a8:6a:fc:4f:10:19:2d:90:87:b1:9d: 87:c0:68:cb:38:4f:97:6d:4b:58:0f:0f:53:c2:1f: 89:a3:e2:e8:05:cf:6b:25:49:4c:36:d8:a6:2b:bf: 20:43:7d:40:36:5a:1e:59:55:c6:ed:27:cd:8c:ce: aa:6e:d4:90:7d:c9:43:8a:71:f9:67:b6:53:0d:70: 46:13:2f:ee:2c:c8:11:bc:83:57:d6:6e:e5:c2:0f: 01:9a:b4:f8:d1:59:40:60:0b:a5:83:f7:8f:20:74: 1f:10:e6:ef:cb:34:5a:0f:76:d9:99:bc:79:3d:f4: e1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:43:D8:6F:CD:98:21:D2:08:8F:23:ED:64:72:B4:C8:B3:86:6F:4B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0133086-4af6-4ecc-936c-8b07b3b17296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.181.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:10:31:68:5a:a4:4f:0c:45:ce:7f:33:3a:b1:ea:4b:f2:60: dc:fe:3c:16:f9:74:28:60:5d:6c:2a:bd:42:b1:c3:f5:92:47: 86:51:77:c3:29:ba:1a:24:1c:94:63:2c:4a:18:fb:de:29:cf: f2:9a:26:35:cd:39:ec:c0:d8:a9:71:8d:6c:85:e3:63:60:d1: 1a:36:cc:05:7c:e5:b8:fa:85:8b:de:5e:a5:75:51:b0:ab:63: 83:3d:28:6d:6b:d0:9c:7b:31:ae:ad:ec:22:e3:d5:a6:7f:16: eb:9b:7c:f8:ec:3e:0f:c7:ad:44:e0:9a:4b:df:65:68:be:5c: 52:dd:17:f6:0d:ba:9a:0e:ab:01:ef:6b:b0:cf:f9:a8:82:85: bf:7a:6d:82:f3:b9:a6:f9:2a:00:2f:fb:eb:e5:b5:38:37:a1: 94:30:65:e9:a7:c4:5f:02:46:65:ca:88:77:b7:b1:f2:c1:62: 0b:ae:f5:e8:a0:ba:10:4f:04:4f:fe:5f:ba:7a:1b:66:3c:f6: 08:d1:b3:6c:00:1a:fa:a2:a2:a5:44:4e:5a:74:50:5f:60:be: 8c:8a:46:58:b2:b0:07:79:25:f5:03:93:72:a3:e9:11:af:bc: 91:5b:21:b7:28:d1:66:a5:b0:c5:77:25:1d:7b:09:3c:76:b2: 19:2f:c5:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZwqlSWac+vqmG+CMRnbI3buXI+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTc1NzI1WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTFjNGEwYmZiMTdhYzEyZWU2MDBmNDM0MzJhYTcyNWJm OTY3ZjEyNDAxMTg3YmNhOTY4ZjE5NzAyYjY0MWVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmQMga1WDENP4gt4lUJb9AG/lqwaUnYlsY2I2Th1a335BY Gitr3IGUc2BF5ptNp9ehPEymOCnNGu8gVngqoTgkDWiuzmZT9cg3WEas5WqE2kda PzfUflEdc8q5HL62bCL0Mx0ZILuBMeiHZbsnSjoZ1HV1vh1Ol0AqvPCcSrWNQ63d X49ylbl+K9WoavxPEBktkIexnYfAaMs4T5dtS1gPD1PCH4mj4ugFz2slSUw22KYr vyBDfUA2Wh5ZVcbtJ82Mzqpu1JB9yUOKcflntlMNcEYTL+4syBG8g1fWbuXCDwGa tPjRWUBgC6WD948gdB8Q5u/LNFoPdtmZvHk99OHrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUckPYb82YIdIIjyPtZHK0yLOGb0swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MwMTMzMDg2LTRhZjYtNGVjYy05MzZjLThiMDdiM2IxNzI5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpLUwDQYJKoZIhvcNAQELBQADggEBAEsQMWhapE8MRc5/Mzqx6kvyYNz+ PBb5dChgXWwqvUKxw/WSR4ZRd8MpuhokHJRjLEoY+94pz/KaJjXNOezA2KlxjWyF 42Ng0Ro2zAV85bj6hYveXqV1UbCrY4M9KG1r0Jx7Ma6t7CLj1aZ/FuubfPjsPg/H rUTgmkvfZWi+XFLdF/YNupoOqwHva7DP+aiChb96bYLzuab5KgAv++vltTg3oZQw ZemnxF8CRmXKiHe3sfLBYguu9eiguhBPBE/+X7p6G2Y89gjRs2wAGvqioqVETlp0 UF9gvoyKRliysAd5JfUDk3Kj6RGvvJFbIbco0WalsMV3JR17CTx2shkvxYk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:17:19 2025 by rpki-client