$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f057ff9b-59fa-4dea-b404-d7e87e95c0ad.roa File: f057ff9b-59fa-4dea-b404-d7e87e95c0ad.roa (raw, json) Hash identifier: 5YK6PuYsKHoVTJyyptrhonUTOBZZy+etCVoIiPeEQXI= Subject key identifier: 79:18:07:26:0E:F7:E0:AC:0B:5D:5F:65:17:00:07:A7:6C:EC:CA:D1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4EF04F2F927A1674D944CC454A9A3DDA35BDD62B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f057ff9b-59fa-4dea-b404-d7e87e95c0ad.roa Signing time: Thu 25 Sep 2025 21:47:23 +0000 ROA not before: Thu 25 Sep 2025 21:47:23 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.162.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f0:4f:2f:92:7a:16:74:d9:44:cc:45:4a:9a:3d:da:35:bd:d6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 21:47:23 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=f646a880f5ea4a0db64c6eac95be9605fb6bb06b0c6b222cfb52af9ef5199088, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:ed:b3:5f:36:49:26:5d:4f:db:52:2d:7a: e8:36:9e:ca:88:d7:6a:93:cd:37:9c:a0:22:69:90: 1a:50:99:8a:18:ed:7d:5a:9a:bd:0d:7a:60:d7:f6: 51:35:b1:40:ac:2d:a2:43:e7:a7:44:76:d1:83:2e: 56:1b:23:8a:0e:44:03:27:61:90:0e:3a:34:72:16: 83:0c:da:6c:2e:0c:e1:90:03:15:b5:61:72:2f:58: 62:ec:07:d4:c4:c6:f4:6a:dc:28:90:6f:ae:24:89: 4f:c7:f2:cc:fc:e7:55:72:ff:40:29:77:68:61:a2: 3b:3b:fc:c6:35:df:d2:2e:87:d2:cf:36:26:e5:90: 94:0a:5e:0b:1c:4d:18:0e:80:0b:cb:ba:6e:4e:ea: 51:e5:b0:d4:8f:44:06:b3:aa:98:e3:5c:1e:6a:21: 7f:9b:96:d1:cc:5a:58:41:f3:f5:d2:fb:ba:6b:4a: 47:81:f2:1d:ca:03:fa:3d:e2:da:7d:c1:a0:da:b4: f0:d5:40:07:e0:84:39:90:9f:63:66:32:7b:5e:06: 0e:d5:2c:f1:5c:85:e4:76:39:db:15:0f:36:63:d9: d7:55:f2:a1:db:91:b6:c8:c4:b9:a5:d5:87:53:99: 01:b9:1e:fd:a7:d6:7e:5b:07:d7:41:90:7a:91:03: 96:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:18:07:26:0E:F7:E0:AC:0B:5D:5F:65:17:00:07:A7:6C:EC:CA:D1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f057ff9b-59fa-4dea-b404-d7e87e95c0ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.162.28.0/23 Signature Algorithm: sha256WithRSAEncryption 93:26:5f:a6:e8:f2:c6:0d:95:2e:6f:28:5e:d1:2b:a5:c2:0f: 5b:7c:80:b8:bf:50:98:64:fd:c4:3b:0a:68:de:1e:28:43:f3: 41:db:01:8e:fb:d0:33:27:27:52:c2:b8:49:8c:4d:73:f6:c6: bf:07:02:6d:fa:af:be:6c:8f:17:08:fa:00:a8:25:d1:bc:0d: 92:93:2c:82:a6:b7:0a:68:72:f3:fd:36:38:83:67:6d:63:70: 0a:83:83:f2:0a:5b:e4:a2:33:de:8b:94:0d:c8:44:3b:05:e7: f0:0e:a3:34:69:6e:23:57:1f:90:f3:7f:41:47:21:39:cf:78: 28:3f:59:15:b8:28:e2:5e:b4:fc:7f:42:fe:44:1f:3f:aa:69: c3:e3:07:3b:a2:47:a8:a7:3f:f3:b5:be:c6:9d:5c:21:ed:e7: b9:43:25:76:75:42:78:60:06:6e:d0:24:aa:33:d6:96:24:94: e0:d7:78:65:d0:9a:d5:30:2d:9d:ce:9b:7c:20:c9:c3:56:a8: e4:f1:f7:57:8a:04:0e:5c:ae:3b:aa:42:62:98:13:44:6b:59: 1e:95:60:8a:d7:44:02:61:f7:2c:cc:48:61:f4:80:d9:f5:1a: b5:81:7d:ea:d4:05:35:1e:5f:5a:04:50:ef:f6:ac:a0:7d:ef: 96:11:88:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTvBPL5J6FnTZRMxFSpo92jW91iswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjE0NzIzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjQ2YTg4MGY1ZWE0YTBkYjY0YzZlYWM5NWJlOTYwNWZi NmJiMDZiMGM2YjIyMmNmYjUyYWY5ZWY1MTk5MDg4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx9e2zXzZJJl1P21Iteug2nsqI12qTzTecoCJpkBpQmYoY 7X1amr0NemDX9lE1sUCsLaJD56dEdtGDLlYbI4oORAMnYZAOOjRyFoMM2mwuDOGQ AxW1YXIvWGLsB9TExvRq3CiQb64kiU/H8sz851Vy/0Apd2hhojs7/MY139Iuh9LP NiblkJQKXgscTRgOgAvLum5O6lHlsNSPRAazqpjjXB5qIX+bltHMWlhB8/XS+7pr SkeB8h3KA/o94tp9waDatPDVQAfghDmQn2NmMnteBg7VLPFcheR2OdsVDzZj2ddV 8qHbkbbIxLml1YdTmQG5Hv2n1n5bB9dBkHqRA5Y/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeRgHJg734KwLXV9lFwAHp2zsytEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YwNTdmZjliLTU5ZmEtNGRlYS1iNDA0LWQ3ZTg3ZTk1YzBhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDohwwDQYJKoZIhvcNAQELBQADggEBAJMmX6bo8sYNlS5vKF7RK6XCD1t8 gLi/UJhk/cQ7CmjeHihD80HbAY770DMnJ1LCuEmMTXP2xr8HAm36r75sjxcI+gCo JdG8DZKTLIKmtwpocvP9NjiDZ21jcAqDg/IKW+SiM96LlA3IRDsF5/AOozRpbiNX H5Dzf0FHITnPeCg/WRW4KOJetPx/Qv5EHz+qacPjBzuiR6inP/O1vsadXCHt57lD JXZ1QnhgBm7QJKoz1pYklODXeGXQmtUwLZ3Om3wgycNWqOTx91eKBA5crjuqQmKY E0RrWR6VYIrXRAJh9yzMSGH0gNn1GrWBferUBTUeX1oEUO/2rKB975YRiCU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:59:21 2025 by rpki-client