$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c79c92ef-429d-47f1-9430-f08ccc9b637b.roa File: c79c92ef-429d-47f1-9430-f08ccc9b637b.roa (raw, json) Hash identifier: ySDLCCV4NAA7F6IEmOSzgRhWhMEltXkygGBNaOAqY8s= Subject key identifier: 71:97:DF:86:CA:02:39:B8:02:37:3E:43:B6:54:B8:83:92:9D:5C:18 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3A9852B2584BD42A89AA5D396292EB7242EB0EDC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c79c92ef-429d-47f1-9430-f08ccc9b637b.roa Signing time: Thu 25 Sep 2025 18:02:17 +0000 ROA not before: Thu 25 Sep 2025 18:02:17 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:98:52:b2:58:4b:d4:2a:89:aa:5d:39:62:92:eb:72:42:eb:0e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:02:17 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=f9d58c003e89d7f10e5de34a7fbff2e65ab23f37ef0dce0012fbb61633929c3b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:22:2a:27:a5:c7:11:ea:5e:79:68:a4:cf:b1: e5:a9:79:a8:d5:f7:8c:b8:5b:8d:68:b0:d2:3b:0a: f2:6c:aa:8b:f9:6f:44:bc:8d:db:d8:0f:08:94:ca: 26:e1:70:0f:81:ce:d0:2a:eb:f0:bd:31:59:5e:31: 8a:79:d7:d9:7a:cc:31:4c:b9:48:88:f9:13:28:cf: 01:13:cb:b9:a1:27:02:c6:86:bc:83:ef:c0:e0:be: 97:d8:65:2b:30:83:47:4f:01:83:ea:3c:d4:51:46: 70:f6:99:8a:43:52:a9:b7:ab:f0:46:c5:73:d1:a7: 50:79:49:63:ea:f4:72:f1:1c:1e:24:fb:5f:31:03: ad:06:5c:46:7b:84:a8:05:a7:fb:10:4a:23:bc:7a: fa:03:b0:18:e7:94:72:8e:3c:78:00:3e:b7:81:43: 4e:3b:a5:02:e7:a8:f7:8f:fa:97:c7:83:9a:eb:51: 89:a5:ba:56:e2:89:a9:09:55:40:3b:7b:a4:ef:e4: 4c:ba:7b:d2:bd:72:a4:7b:0b:80:74:d3:ad:eb:ba: 69:49:d5:e4:d3:3b:24:7c:4d:1c:a0:e5:e8:c3:ea: 6c:6e:19:c5:59:d7:d7:5d:7c:8a:3e:30:66:85:09: a7:72:9f:ce:95:62:eb:7d:a9:0b:5a:e9:7a:b3:4f: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:97:DF:86:CA:02:39:B8:02:37:3E:43:B6:54:B8:83:92:9D:5C:18 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c79c92ef-429d-47f1-9430-f08ccc9b637b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.224.0/24 Signature Algorithm: sha256WithRSAEncryption 20:94:ba:24:7f:91:e3:ed:aa:a5:68:81:c3:eb:fc:2d:86:59: 13:eb:4c:df:63:0e:14:54:42:89:e1:79:28:9c:85:e2:c8:1e: d3:eb:5a:46:95:3b:b8:5d:98:90:aa:c5:3e:66:13:0e:2f:27: 3f:93:3c:20:28:97:29:5f:2e:41:e3:36:86:66:85:ab:e0:d8: 72:a9:5c:d2:ac:60:a4:66:e0:96:a8:7f:86:61:7c:57:ee:86: 66:6e:1a:a9:ec:6e:a5:af:0c:0a:c6:0b:c9:f5:ae:aa:58:02: 33:d1:89:35:df:c8:a6:00:a7:e0:63:23:16:56:b8:8f:49:ab: 7d:29:bd:fc:92:48:e2:a9:72:91:73:6a:f0:d8:e4:db:cc:34: b4:3d:0c:64:ae:80:70:00:f6:99:5d:3f:67:33:98:c6:70:4f: ee:e3:5e:a3:5a:94:ed:29:94:fd:6a:fb:12:c4:5e:5d:87:da: 7e:da:45:ab:63:6a:83:99:25:75:fc:d9:0d:3b:fa:d6:9c:ca: ab:56:94:85:69:59:a6:ac:42:32:26:1a:d6:47:27:66:bc:58: f1:bf:6c:0f:05:b8:bb:bb:2f:5c:d9:6a:39:99:9b:a0:98:e2: 99:01:16:b3:b6:ad:2c:f9:aa:1d:67:dc:6e:c7:48:e3:1b:a5: 16:97:79:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOphSslhL1CqJql05YpLrckLrDtwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgwMjE3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOWQ1OGMwMDNlODlkN2YxMGU1ZGUzNGE3ZmJmZjJlNjVh YjIzZjM3ZWYwZGNlMDAxMmZiYjYxNjMzOTI5YzNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvIionpccR6l55aKTPseWpeajV94y4W41osNI7CvJsqov5 b0S8jdvYDwiUyibhcA+BztAq6/C9MVleMYp519l6zDFMuUiI+RMozwETy7mhJwLG hryD78DgvpfYZSswg0dPAYPqPNRRRnD2mYpDUqm3q/BGxXPRp1B5SWPq9HLxHB4k +18xA60GXEZ7hKgFp/sQSiO8evoDsBjnlHKOPHgAPreBQ047pQLnqPeP+pfHg5rr UYmlulbiiakJVUA7e6Tv5Ey6e9K9cqR7C4B0063rumlJ1eTTOyR8TRyg5ejD6mxu GcVZ19ddfIo+MGaFCadyn86VYut9qQta6XqzT4WvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcZffhsoCObgCNz5DtlS4g5KdXBgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M3OWM5MmVmLTQyOWQtNDdmMS05NDMwLWYwOGNjYzliNjM3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpOAwDQYJKoZIhvcNAQELBQADggEBACCUuiR/kePtqqVogcPr/C2GWRPr TN9jDhRUQonheSicheLIHtPrWkaVO7hdmJCqxT5mEw4vJz+TPCAolylfLkHjNoZm havg2HKpXNKsYKRm4Jaof4ZhfFfuhmZuGqnsbqWvDArGC8n1rqpYAjPRiTXfyKYA p+BjIxZWuI9Jq30pvfySSOKpcpFzavDY5NvMNLQ9DGSugHAA9pldP2czmMZwT+7j XqNalO0plP1q+xLEXl2H2n7aRatjaoOZJXX82Q07+tacyqtWlIVpWaasQjImGtZH J2a8WPG/bA8FuLu7L1zZajmZm6CY4pkBFrO2rSz5qh1n3G7HSOMbpRaXedI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:30:13 2025 by rpki-client