$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbaac659-7cd3-4c74-873b-0b08e228cdd6.roa File: dbaac659-7cd3-4c74-873b-0b08e228cdd6.roa (raw, json) Hash identifier: GQ6SzgkqlxuH2IAi0PR1wk16ejd10Vs4WTV/lqYVzTA= Subject key identifier: 04:50:E5:64:80:77:EA:CA:C6:AE:48:BE:80:97:D2:92:12:B2:09:54 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 424BFF3D74287E5D38025434E4BF4D8C36FCAB7A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbaac659-7cd3-4c74-873b-0b08e228cdd6.roa Signing time: Thu 25 Sep 2025 16:57:50 +0000 ROA not before: Thu 25 Sep 2025 16:57:50 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4b:ff:3d:74:28:7e:5d:38:02:54:34:e4:bf:4d:8c:36:fc:ab:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 16:57:50 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=b5e28081b1fccc46aea67762f9193cd4eedab9c314dedac914929cecbfca4be2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:50:01:50:ec:9b:c5:ac:3e:86:d9:5b:46: 81:65:2f:2b:1d:2d:ee:c3:4c:0a:b1:f6:02:e0:80: 48:e8:c0:2e:db:08:38:c5:58:4c:7e:00:01:9c:e8: fb:08:fe:8f:b3:1b:d6:52:3b:83:8a:58:a6:7b:90: 9e:0e:e0:49:8f:04:66:26:82:42:36:ba:85:14:38: 47:49:e2:9b:4c:ba:1d:54:9a:2e:77:45:c8:99:1d: 10:5b:22:3b:69:94:a4:10:62:2d:64:e8:f7:5a:69: bd:5b:8a:d3:81:2b:fe:f0:7d:76:44:ef:c0:d6:49: c7:89:f5:c4:b4:e2:86:5c:a7:ba:d4:d9:38:63:79: f3:44:a9:44:e1:cf:72:ae:13:85:7e:83:27:0a:a9: 18:c2:8f:f8:f2:b1:3c:60:b8:4e:da:9d:d5:56:e7: 76:47:58:2e:3c:03:b8:5a:7b:bd:bf:17:24:d4:5c: 3a:e3:bc:1d:e0:15:77:2e:7a:d6:94:06:50:a1:ea: 12:e0:8c:fa:1b:3d:85:f4:5d:12:24:3e:ed:c8:75: 63:95:bf:e4:94:79:c3:dc:1a:1b:f4:c4:0b:35:f7: 26:47:4c:76:17:49:ed:fd:2f:36:37:55:1b:ae:82: 0f:f1:f2:cc:66:e9:0c:af:cf:f8:9a:25:45:3e:6d: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:50:E5:64:80:77:EA:CA:C6:AE:48:BE:80:97:D2:92:12:B2:09:54 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbaac659-7cd3-4c74-873b-0b08e228cdd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.151.0/24 Signature Algorithm: sha256WithRSAEncryption 73:0b:70:30:21:96:03:dd:7f:f1:03:a4:0d:91:13:ac:da:93: f4:a6:21:99:bf:de:dd:13:82:ae:b2:50:1f:76:02:6e:dd:3f: 5b:aa:79:03:e9:13:92:13:a3:88:0b:6f:4d:f4:09:9e:06:c5: f3:d0:9f:a1:52:20:de:88:91:f4:63:50:ac:12:ca:e3:77:9a: ca:e8:25:c0:9f:1a:55:58:9f:cd:a4:3b:de:2b:04:c1:91:64: d3:4c:67:01:56:12:77:6f:2f:fa:12:1c:a1:44:22:5c:3c:9e: f7:78:08:8a:fb:f7:39:18:db:38:ef:05:de:91:52:cd:0b:38: 47:50:7a:d5:79:6d:75:3a:c5:39:d0:6c:fd:b4:56:d6:5c:a2: 56:db:65:a8:bd:34:29:bb:b5:78:0a:14:e6:08:c6:e7:db:8d: f2:87:b7:90:0b:5a:fa:d5:d1:16:77:ab:04:15:b6:81:e3:90: 5b:d3:e3:b3:3d:df:95:8a:04:b7:76:04:89:9d:4b:7e:d5:35: 2f:32:e8:ed:06:29:0f:60:f1:8c:32:38:47:f1:82:ce:0d:ae: d1:e7:b7:f7:2b:f9:6b:90:36:df:d8:35:47:cf:ac:2c:7a:65: f5:ff:00:12:09:d5:ee:d0:28:a2:fb:95:fa:a6:66:c1:72:28: b4:bb:db:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQkv/PXQofl04AlQ05L9NjDb8q3owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTY1NzUwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNWUyODA4MWIxZmNjYzQ2YWVhNjc3NjJmOTE5M2NkNGVl ZGFiOWMzMTRkZWRhYzkxNDkyOWNlY2JmY2E0YmUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLxFABUOybxaw+htlbRoFlLysdLe7DTAqx9gLggEjowC7b CDjFWEx+AAGc6PsI/o+zG9ZSO4OKWKZ7kJ4O4EmPBGYmgkI2uoUUOEdJ4ptMuh1U mi53RciZHRBbIjtplKQQYi1k6Pdaab1bitOBK/7wfXZE78DWSceJ9cS04oZcp7rU 2ThjefNEqUThz3KuE4V+gycKqRjCj/jysTxguE7andVW53ZHWC48A7hae72/FyTU XDrjvB3gFXcuetaUBlCh6hLgjPobPYX0XRIkPu3IdWOVv+SUecPcGhv0xAs19yZH THYXSe39LzY3VRuugg/x8sxm6Qyvz/iaJUU+bRKTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBFDlZIB36srGrki+gJfSkhKyCVQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RiYWFjNjU5LTdjZDMtNGM3NC04NzNiLTBiMDhlMjI4Y2RkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoZcwDQYJKoZIhvcNAQELBQADggEBAHMLcDAhlgPdf/EDpA2RE6zak/Sm IZm/3t0Tgq6yUB92Am7dP1uqeQPpE5ITo4gLb030CZ4GxfPQn6FSIN6IkfRjUKwS yuN3msroJcCfGlVYn82kO94rBMGRZNNMZwFWEndvL/oSHKFEIlw8nvd4CIr79zkY 2zjvBd6RUs0LOEdQetV5bXU6xTnQbP20VtZcolbbZai9NCm7tXgKFOYIxufbjfKH t5ALWvrV0RZ3qwQVtoHjkFvT47M935WKBLd2BImdS37VNS8y6O0GKQ9g8YwyOEfx gs4NrtHnt/cr+WuQNt/YNUfPrCx6ZfX/ABIJ1e7QKKL7lfqmZsFyKLS72xU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:22 2025 by rpki-client