$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d83fbae2-2438-4b9b-bfa2-d95f3fed161b.roa File: d83fbae2-2438-4b9b-bfa2-d95f3fed161b.roa (raw, json) Hash identifier: WK8/7RVdeNBhUOi0W+ViZI1PASVu2spyFNQPFhZmcEQ= Subject key identifier: 8F:9D:10:5A:1C:70:5E:92:B9:7F:BF:4C:08:B6:85:F0:3C:19:DD:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7F583FC664C158A6EC260E475FB00BE1BA0C6F27 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d83fbae2-2438-4b9b-bfa2-d95f3fed161b.roa Signing time: Thu 25 Sep 2025 17:56:55 +0000 ROA not before: Thu 25 Sep 2025 17:56:55 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:58:3f:c6:64:c1:58:a6:ec:26:0e:47:5f:b0:0b:e1:ba:0c:6f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:56:55 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=ce80dce5eb736215d36688d991d0103ced6d12f4b68fb95c326e72736ac4ddb1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:2c:69:99:40:7e:38:f3:7c:56:26:0f:a2: fa:94:d4:4b:f8:40:21:c3:28:3e:53:97:cb:33:f8: 93:3e:4d:95:58:9c:e5:83:fb:50:84:6b:af:b1:d0: d4:f1:a9:e2:d7:62:cf:b7:a2:d2:3a:cd:da:60:5f: 69:c8:98:12:aa:4b:d7:98:81:82:b6:46:4e:91:bc: 68:1e:15:ff:0d:97:1e:65:3d:64:1d:33:2c:48:cb: c4:5b:cf:01:f5:5f:71:a4:08:5b:46:08:97:a0:9d: 28:2f:1b:a3:24:2d:d9:d3:dc:ea:b2:fc:e5:26:cd: 74:84:68:93:b1:2c:be:63:22:14:1c:89:4d:06:a9: e4:c4:cc:f1:9a:65:44:3e:03:c9:f2:46:17:dd:40: 10:16:88:aa:67:c3:79:9e:35:ad:b5:e5:b5:42:aa: 00:42:17:64:16:46:38:50:2f:c6:f5:40:5a:a0:b0: 94:8f:24:79:e3:d4:bd:5e:8f:93:0f:dd:18:84:80: 65:ac:37:f1:c7:52:e9:3f:ee:8c:e8:7c:0d:de:48: f4:42:0b:1d:a6:39:15:e0:87:5b:75:9b:1d:6f:14: c9:09:d7:d0:23:53:83:20:08:46:2e:30:e4:37:a0: 44:c4:69:60:5a:82:4b:fa:89:3c:89:3f:e9:11:e5: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9D:10:5A:1C:70:5E:92:B9:7F:BF:4C:08:B6:85:F0:3C:19:DD:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d83fbae2-2438-4b9b-bfa2-d95f3fed161b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.156.0/24 Signature Algorithm: sha256WithRSAEncryption ae:4d:8a:92:48:b5:d4:de:c0:33:55:e1:54:93:e1:b4:2e:c5: 55:78:4b:88:95:0a:47:4f:c1:ea:51:f4:80:84:1c:8b:cd:a8: ad:47:54:91:9a:1d:ca:ee:01:fb:08:44:90:ee:d8:e4:50:18: 4c:a9:c7:98:64:25:dd:9d:90:78:8e:e8:3d:4f:5b:e1:da:ab: da:56:93:33:b0:6d:2e:2a:64:6f:36:48:0c:45:79:37:63:2f: b2:23:5f:28:e2:c3:87:f5:88:91:b4:09:0a:e5:7a:a6:08:56: 12:75:61:d3:a0:54:32:39:dc:69:ef:14:61:9b:8f:b9:4b:8a: be:f6:7f:38:1f:76:1b:55:9d:7b:32:8f:4e:e6:70:94:3b:19: 30:50:fa:8f:ef:5f:54:7e:03:49:90:be:90:a1:e8:ce:55:8a: 4c:78:4d:b5:14:7b:c2:f7:55:d1:df:3b:eb:05:a5:aa:52:06: ae:61:c2:b1:4e:18:11:fa:b2:c7:dd:99:3f:58:08:50:f9:25: c7:46:1d:8f:d1:de:94:ab:90:51:71:54:3e:b5:6b:a2:59:e5: 35:6d:13:1a:bb:e7:38:9a:ba:02:8b:68:bf:db:f9:f0:27:b5: 38:76:20:79:ef:7b:39:06:b6:40:28:6c:7b:03:e9:80:e2:1c: de:75:fe:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf1g/xmTBWKbsJg5HX7AL4boMbycwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTc1NjU1WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTgwZGNlNWViNzM2MjE1ZDM2Njg4ZDk5MWQwMTAzY2Vk NmQxMmY0YjY4ZmI5NWMzMjZlNzI3MzZhYzRkZGIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvNixpmUB+OPN8ViYPovqU1Ev4QCHDKD5Tl8sz+JM+TZVY nOWD+1CEa6+x0NTxqeLXYs+3otI6zdpgX2nImBKqS9eYgYK2Rk6RvGgeFf8Nlx5l PWQdMyxIy8RbzwH1X3GkCFtGCJegnSgvG6MkLdnT3Oqy/OUmzXSEaJOxLL5jIhQc iU0GqeTEzPGaZUQ+A8nyRhfdQBAWiKpnw3meNa215bVCqgBCF2QWRjhQL8b1QFqg sJSPJHnj1L1ej5MP3RiEgGWsN/HHUuk/7ozofA3eSPRCCx2mORXgh1t1mx1vFMkJ 19AjU4MgCEYuMOQ3oETEaWBagkv6iTyJP+kR5f0/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUj50QWhxwXpK5f79MCLaF8DwZ3aMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q4M2ZiYWUyLTI0MzgtNGI5Yi1iZmEyLWQ5NWYzZmVkMTYxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpJwwDQYJKoZIhvcNAQELBQADggEBAK5NipJItdTewDNV4VST4bQuxVV4 S4iVCkdPwepR9ICEHIvNqK1HVJGaHcruAfsIRJDu2ORQGEypx5hkJd2dkHiO6D1P W+Haq9pWkzOwbS4qZG82SAxFeTdjL7IjXyjiw4f1iJG0CQrleqYIVhJ1YdOgVDI5 3GnvFGGbj7lLir72fzgfdhtVnXsyj07mcJQ7GTBQ+o/vX1R+A0mQvpCh6M5Vikx4 TbUUe8L3VdHfO+sFpapSBq5hwrFOGBH6ssfdmT9YCFD5JcdGHY/R3pSrkFFxVD61 a6JZ5TVtExq75ziaugKLaL/b+fAntTh2IHnvezkGtkAobHsD6YDiHN51/rE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:10 2025 by rpki-client