$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6cc00f4-08f3-4cdb-af88-e7a94fb84979.roa File: e6cc00f4-08f3-4cdb-af88-e7a94fb84979.roa (raw, json) Hash identifier: JWT1Rnu95nKhyn90RTp+iS1NjqLc/rassQ8FsHNud00= Subject key identifier: 4A:22:94:AB:3E:E7:2B:E3:3E:FB:78:57:D2:98:DB:62:BC:50:8F:70 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5BFF719C4E8E5DD038896ECC9719F54264993C62 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6cc00f4-08f3-4cdb-af88-e7a94fb84979.roa Signing time: Mon 20 Oct 2025 14:03:32 +0000 ROA not before: Mon 20 Oct 2025 14:03:32 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ff:71:9c:4e:8e:5d:d0:38:89:6e:cc:97:19:f5:42:64:99:3c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 14:03:32 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=ba0169e7197044c5ffbe1f496e9bd76ada9613190a16ccc3dc2aa88d27a9a16a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:94:bd:03:fc:b3:18:28:21:e9:e2:84:f1:04: 45:2e:95:c9:a2:4e:41:7e:53:08:22:df:4d:72:62: 50:72:01:f3:72:af:4e:ed:71:a0:60:9f:bb:a7:f4: 3d:b2:f5:b2:76:b0:2f:c5:dd:91:84:74:96:e0:ee: d0:f9:06:7b:87:93:6c:ca:d8:e6:51:ae:d9:8e:f1: 67:98:39:f3:b2:5a:07:53:d3:74:6a:8f:fc:5c:98: 58:c0:62:c3:52:2d:c2:b1:0e:23:47:42:1d:01:92: 2f:9f:05:de:03:5c:eb:69:72:c6:5f:27:02:b8:3b: 88:7f:ac:0d:ad:86:6e:74:bc:db:1c:eb:ce:9f:02: d8:6f:41:de:e4:38:00:63:8c:53:13:7a:74:a4:1d: a5:27:8c:1c:57:fc:89:bf:91:61:17:94:7b:8f:04: 89:cb:bc:55:23:08:99:1d:cb:90:2f:56:9e:a6:b5: 6e:15:86:5a:26:0a:d9:2b:02:83:0c:94:32:18:f0: f1:ac:7a:8b:b4:76:80:2f:3a:44:2b:34:f2:bb:38: b3:12:6d:48:32:da:28:f5:e8:c9:67:f4:57:a7:72: 03:34:54:56:0f:56:a6:37:db:d2:57:66:10:c0:23: 50:a5:a8:e2:43:d9:7c:ef:26:6b:ed:c9:f7:3b:7f: 1c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:22:94:AB:3E:E7:2B:E3:3E:FB:78:57:D2:98:DB:62:BC:50:8F:70 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6cc00f4-08f3-4cdb-af88-e7a94fb84979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.128.0/23 Signature Algorithm: sha256WithRSAEncryption 25:06:69:cf:63:9b:05:08:1f:9d:81:ad:a3:17:0d:bf:51:dd: 74:a8:99:2e:26:19:29:9d:fd:11:86:b6:fa:e8:01:9d:1f:75: f4:38:9c:96:1c:00:d6:a3:3e:b8:c8:7f:6d:29:c0:bd:9f:b0: 5e:9b:db:d3:b4:ae:86:7e:67:ef:d1:31:40:ec:6e:3d:40:4e: 8a:2a:82:a1:16:c0:8e:6c:d1:b5:0f:04:c3:db:9b:e7:d1:19: 54:7c:46:d9:66:f5:43:ff:ac:73:d0:51:97:aa:03:c7:3e:a7: 5f:fd:46:3f:f9:fc:ad:51:da:81:39:4f:81:50:3c:81:80:f3: ad:9c:72:2c:ac:bb:05:24:88:4c:ff:5b:d3:38:f0:e0:a2:1d: fc:21:16:d1:d0:7e:b4:23:a6:a6:02:be:c3:81:70:d5:41:d9: 5b:5f:ad:ec:4b:7b:97:aa:e5:df:c5:16:88:95:c6:39:4e:24: cc:67:cf:04:96:b5:b6:ca:6e:e6:50:26:28:2a:66:1b:c8:a5: 10:6f:84:12:77:42:af:45:d0:e0:db:a1:fe:b4:74:d5:d3:89: 15:99:89:fd:c8:2e:40:d3:55:01:74:57:e9:28:d6:c5:eb:5b: ae:7f:dc:fe:f1:75:05:12:ce:20:30:16:04:39:d1:4d:90:08: 08:67:36:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW/9xnE6OXdA4iW7Mlxn1QmSZPGIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMTQwMzMyWhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTAxNjllNzE5NzA0NGM1ZmZiZTFmNDk2ZTliZDc2YWRh OTYxMzE5MGExNmNjYzNkYzJhYTg4ZDI3YTlhMTZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjlL0D/LMYKCHp4oTxBEUulcmiTkF+Uwgi301yYlByAfNy r07tcaBgn7un9D2y9bJ2sC/F3ZGEdJbg7tD5BnuHk2zK2OZRrtmO8WeYOfOyWgdT 03Rqj/xcmFjAYsNSLcKxDiNHQh0Bki+fBd4DXOtpcsZfJwK4O4h/rA2thm50vNsc 686fAthvQd7kOABjjFMTenSkHaUnjBxX/Im/kWEXlHuPBInLvFUjCJkdy5AvVp6m tW4VhlomCtkrAoMMlDIY8PGseou0doAvOkQrNPK7OLMSbUgy2ij16Mln9FencgM0 VFYPVqY329JXZhDAI1ClqOJD2XzvJmvtyfc7fxzvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSiKUqz7nK+M++3hX0pjbYrxQj3AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U2Y2MwMGY0LTA4ZjMtNGNkYi1hZjg4LWU3YTk0ZmI4NDk3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDpIAwDQYJKoZIhvcNAQELBQADggEBACUGac9jmwUIH52BraMXDb9R3XSo mS4mGSmd/RGGtvroAZ0fdfQ4nJYcANajPrjIf20pwL2fsF6b29O0roZ+Z+/RMUDs bj1ATooqgqEWwI5s0bUPBMPbm+fRGVR8Rtlm9UP/rHPQUZeqA8c+p1/9Rj/5/K1R 2oE5T4FQPIGA862cciysuwUkiEz/W9M48OCiHfwhFtHQfrQjpqYCvsOBcNVB2Vtf rexLe5eq5d/FFoiVxjlOJMxnzwSWtbbKbuZQJigqZhvIpRBvhBJ3Qq9F0ODbof60 dNXTiRWZif3ILkDTVQF0V+ko1sXrW65/3P7xdQUSziAwFgQ50U2QCAhnNi8= -----END CERTIFICATE-----Generated at Mon Oct 20 18:12:30 2025 by rpki-client