$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da486d51-f538-4a34-a7c5-1ad4b29e8e7d.roa File: da486d51-f538-4a34-a7c5-1ad4b29e8e7d.roa (raw, json) Hash identifier: QkSJ5YvhN07Ru3W54ZGVlqz+VvDSsTrbIyKYySz5LNI= Subject key identifier: 32:B5:EF:10:65:40:4D:C2:EF:C1:A4:E4:6C:1C:D2:83:77:27:90:BF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 269D1F4C689B3AF08B778532818CD6AAA0D7A7F7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da486d51-f538-4a34-a7c5-1ad4b29e8e7d.roa Signing time: Thu 25 Sep 2025 22:22:11 +0000 ROA not before: Thu 25 Sep 2025 22:22:11 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9d:1f:4c:68:9b:3a:f0:8b:77:85:32:81:8c:d6:aa:a0:d7:a7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:22:11 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=37983244b80835a41e329090ba481b404d935a604d75ea3f8c82aaf19f44f6fe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:74:4a:a3:bf:ef:c1:b1:50:63:03:d9:c0:81: 90:bb:4d:d2:8e:93:c2:ab:9a:dc:96:5a:93:20:88: ca:e5:8e:f0:aa:51:b0:6f:77:ef:e4:ce:d3:09:0f: cb:60:7a:e5:c8:fb:52:a0:a2:62:9b:bb:12:56:68: 3e:3d:6d:ad:0d:76:98:15:de:5a:7f:80:33:5f:6d: 81:f6:da:c4:29:4f:a8:3c:65:65:03:e1:51:cf:46: bf:4b:55:72:7f:cf:23:2b:53:45:6c:c6:aa:a4:19: d3:d7:6c:79:94:64:34:64:d2:0c:13:8f:ba:9f:be: 52:c6:f4:86:22:91:63:50:29:d9:46:eb:82:81:d6: 0e:a2:f4:f3:13:f8:ca:59:d4:a2:e9:aa:d2:8b:11: f9:5b:9d:00:6f:1f:eb:a2:e4:6b:13:c8:48:1e:cf: 4f:d4:ca:b2:7d:4d:29:58:3a:96:bb:b9:b6:75:55: a8:1c:96:3e:ff:c1:0b:d0:2a:db:6d:3d:dc:bb:ec: 4f:75:6c:21:1d:a3:f5:ef:51:89:76:e1:39:54:1f: 8c:c8:a3:33:a3:63:7b:08:66:47:fc:0b:a2:01:36: 2a:44:38:d0:48:97:8f:f4:6a:27:2e:31:cd:ed:2a: 9f:7d:30:4f:9a:cd:01:81:db:b1:20:f5:04:a8:c1: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B5:EF:10:65:40:4D:C2:EF:C1:A4:E4:6C:1C:D2:83:77:27:90:BF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da486d51-f538-4a34-a7c5-1ad4b29e8e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.128.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:35:1c:2b:66:3c:48:06:cf:6e:0b:2a:3d:bf:09:e8:8a:66: 28:3c:4f:95:e8:ef:b4:35:ba:e6:7a:59:a2:83:3b:1e:8b:72: 9b:aa:1d:0d:8f:6a:e4:76:c8:8f:9f:ed:1d:28:67:8d:65:a8: 15:73:88:5d:58:f9:92:8d:2b:33:80:9a:fa:5d:6f:08:94:93: e6:1a:09:ad:75:ca:13:6e:f0:d8:8a:ca:f0:52:87:86:6b:d5: 77:21:76:b1:bc:cd:26:2f:1f:ad:83:0e:01:77:08:3b:bf:81: e2:39:99:e8:0f:d3:60:a6:e7:dc:ee:07:46:0e:b1:7c:73:0a: 6e:1f:40:8d:9a:1c:e8:89:46:39:83:f0:e4:44:7e:de:0b:04: ba:2b:d3:4e:e0:4b:57:94:95:ae:0e:19:19:2a:5d:da:8d:78: 13:0c:e2:a8:77:d8:64:e7:26:e3:1f:eb:07:af:dc:6b:2b:79: de:72:53:62:a6:4f:d8:d0:9b:d5:83:8f:d3:4c:95:f6:7d:b5: de:9d:d8:bf:17:b6:51:b4:94:cd:70:ba:b4:fc:e9:c4:17:c2: 3c:03:e4:00:92:67:45:bd:31:8b:71:5d:b3:54:1c:b6:f3:fe: 98:a6:19:3b:d3:e6:9c:46:8a:3b:82:b3:66:47:2e:76:d3:11: 4d:0d:ca:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJp0fTGibOvCLd4UygYzWqqDXp/cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIyMjExWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNzk4MzI0NGI4MDgzNWE0MWUzMjkwOTBiYTQ4MWI0MDRk OTM1YTYwNGQ3NWVhM2Y4YzgyYWFmMTlmNDRmNmZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbdEqjv+/BsVBjA9nAgZC7TdKOk8KrmtyWWpMgiMrljvCq UbBvd+/kztMJD8tgeuXI+1KgomKbuxJWaD49ba0NdpgV3lp/gDNfbYH22sQpT6g8 ZWUD4VHPRr9LVXJ/zyMrU0VsxqqkGdPXbHmUZDRk0gwTj7qfvlLG9IYikWNQKdlG 64KB1g6i9PMT+MpZ1KLpqtKLEflbnQBvH+ui5GsTyEgez0/UyrJ9TSlYOpa7ubZ1 Vagclj7/wQvQKtttPdy77E91bCEdo/XvUYl24TlUH4zIozOjY3sIZkf8C6IBNipE ONBIl4/0aicuMc3tKp99ME+azQGB27Eg9QSowf4XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMrXvEGVATcLvwaTkbBzSg3cnkL8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RhNDg2ZDUxLWY1MzgtNGEzNC1hN2M1LTFhZDRiMjllOGU3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDpoAwDQYJKoZIhvcNAQELBQADggEBAAs1HCtmPEgGz24LKj2/CeiKZig8 T5Xo77Q1uuZ6WaKDOx6LcpuqHQ2PauR2yI+f7R0oZ41lqBVziF1Y+ZKNKzOAmvpd bwiUk+YaCa11yhNu8NiKyvBSh4Zr1XchdrG8zSYvH62DDgF3CDu/geI5megP02Cm 59zuB0YOsXxzCm4fQI2aHOiJRjmD8OREft4LBLor007gS1eUla4OGRkqXdqNeBMM 4qh32GTnJuMf6wev3Gsred5yU2KmT9jQm9WDj9NMlfZ9td6d2L8XtlG0lM1wurT8 6cQXwjwD5ACSZ0W9MYtxXbNUHLbz/pimGTvT5pxGijuCs2ZHLnbTEU0Nync= -----END CERTIFICATE-----Generated at Mon Oct 20 15:45:22 2025 by rpki-client