$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f66f441a-9efe-4d4f-8e44-cb58acc17ad7.roa File: f66f441a-9efe-4d4f-8e44-cb58acc17ad7.roa (raw, json) Hash identifier: u4OyhFcftwGjweZM+u0EYtSaDgzR6CbQK2Am3X2XIR0= Subject key identifier: 78:05:EA:37:54:2B:ED:F0:B1:36:27:00:F8:3B:84:EF:90:56:29:1C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4859A307F16159224D7BF4E59078608CB89AF56B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f66f441a-9efe-4d4f-8e44-cb58acc17ad7.roa Signing time: Thu 25 Sep 2025 22:29:52 +0000 ROA not before: Thu 25 Sep 2025 22:29:52 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:59:a3:07:f1:61:59:22:4d:7b:f4:e5:90:78:60:8c:b8:9a:f5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:29:52 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=1142b5282a37c9955412fea34b793bb1156435fd3461a2490181b6a423a33a5f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:87:2a:31:b8:46:08:41:ee:a1:10:2a:8c: c6:a2:c7:29:ce:66:d6:29:fb:b6:cd:d8:a1:6e:c1: 44:23:ff:93:b6:09:b7:d5:66:24:fc:d8:b9:f5:7f: d6:43:fb:19:6e:a2:ef:e9:4e:9c:bd:36:b5:93:3f: 5d:de:ab:78:2a:76:1a:0b:49:d0:4a:32:52:d6:c7: 0e:b0:c4:79:7e:da:a0:3f:f5:50:82:91:5d:88:03: eb:6e:2a:ba:35:2d:ac:5f:38:97:11:ca:58:0b:7e: c5:ef:59:75:77:c7:45:ba:d4:b0:5f:50:b4:1d:4a: d4:46:dc:9a:09:e9:cd:49:c6:50:eb:17:c9:e4:ea: 2c:44:dd:41:d6:89:36:29:bf:a8:25:e2:24:81:b3: b4:5e:89:1a:0b:3a:d8:5a:ad:55:54:0e:4a:3a:5f: 64:d0:00:69:bd:77:a9:4b:14:d2:76:ab:c2:83:3c: df:f8:d1:7b:ad:84:82:fb:94:98:de:ab:3e:c7:db: b1:65:01:d0:6d:42:a4:a3:10:ca:c2:0d:72:d0:ba: 29:47:d1:f7:09:76:f7:fd:72:83:9a:ea:1e:d1:d9: 53:7a:48:9d:08:c9:c5:71:ea:7a:e7:7f:1c:4e:f5: 55:00:9f:11:a8:b6:56:8e:4f:d2:b8:f6:11:1a:4f: 4a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:05:EA:37:54:2B:ED:F0:B1:36:27:00:F8:3B:84:EF:90:56:29:1C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f66f441a-9efe-4d4f-8e44-cb58acc17ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.104.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:02:bb:44:ca:66:24:34:bb:f8:59:fa:31:ce:0d:21:aa:2c: ca:7e:5f:84:89:87:8e:2a:d0:77:51:0a:05:06:7b:b4:06:15: 68:d1:8f:9e:21:dc:ee:de:19:9a:6d:b5:1f:84:ce:66:08:c3: 87:63:41:d3:11:ca:43:4f:78:3d:15:9d:15:46:c5:6a:49:da: 02:c7:0b:e9:51:f4:e8:e9:8b:b6:20:af:f4:19:17:b5:7d:d3: 82:ee:19:ae:f8:49:cf:6c:a8:cf:b5:c6:2f:b0:29:fa:ef:5c: a1:3b:64:50:15:ee:0b:bb:71:17:7b:30:f0:84:87:4b:15:71: fa:de:d1:d2:b5:c2:c6:a6:a3:f8:ca:82:db:26:03:86:b8:12: 0e:17:bb:92:6d:f3:f7:7c:3b:75:6c:96:75:d3:7c:2c:5d:16: a1:5a:85:07:ce:2a:70:0c:5b:d2:d1:4d:7a:32:43:8e:ca:3c: 33:32:a0:9a:9b:51:a8:f7:ff:8d:2f:eb:5f:4c:9e:3f:8d:82: fa:db:d1:55:4e:e1:32:37:01:5f:f0:3b:29:dd:58:e5:82:42: 56:03:ad:14:73:20:c0:3b:43:2c:c0:94:c6:72:56:a3:3f:b7: 16:6b:24:c9:94:a8:7f:41:62:c7:08:d8:c2:ce:16:67:2a:e5: 02:7b:88:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSFmjB/FhWSJNe/TlkHhgjLia9WswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIyOTUyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTQyYjUyODJhMzdjOTk1NTQxMmZlYTM0Yjc5M2JiMTE1 NjQzNWZkMzQ2MWEyNDkwMTgxYjZhNDIzYTMzYTVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRPIcqMbhGCEHuoRAqjMaixynOZtYp+7bN2KFuwUQj/5O2 CbfVZiT82Ln1f9ZD+xluou/pTpy9NrWTP13eq3gqdhoLSdBKMlLWxw6wxHl+2qA/ 9VCCkV2IA+tuKro1LaxfOJcRylgLfsXvWXV3x0W61LBfULQdStRG3JoJ6c1JxlDr F8nk6ixE3UHWiTYpv6gl4iSBs7ReiRoLOtharVVUDko6X2TQAGm9d6lLFNJ2q8KD PN/40XuthIL7lJjeqz7H27FlAdBtQqSjEMrCDXLQuilH0fcJdvf9coOa6h7R2VN6 SJ0IycVx6nrnfxxO9VUAnxGotlaOT9K49hEaT0ofAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeAXqN1Qr7fCxNicA+DuE75BWKRwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y2NmY0NDFhLTllZmUtNGQ0Zi04ZTQ0LWNiNThhY2MxN2FkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDp2gwDQYJKoZIhvcNAQELBQADggEBAD0Cu0TKZiQ0u/hZ+jHODSGqLMp+ X4SJh44q0HdRCgUGe7QGFWjRj54h3O7eGZpttR+EzmYIw4djQdMRykNPeD0VnRVG xWpJ2gLHC+lR9Ojpi7Ygr/QZF7V904LuGa74Sc9sqM+1xi+wKfrvXKE7ZFAV7gu7 cRd7MPCEh0sVcfre0dK1wsamo/jKgtsmA4a4Eg4Xu5Jt8/d8O3VslnXTfCxdFqFa hQfOKnAMW9LRTXoyQ47KPDMyoJqbUaj3/40v619Mnj+Ngvrb0VVO4TI3AV/wOynd WOWCQlYDrRRzIMA7QyzAlMZyVqM/txZrJMmUqH9BYscI2MLOFmcq5QJ7iPs= -----END CERTIFICATE-----Generated at Mon Oct 20 11:08:32 2025 by rpki-client