$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa061916-da7f-4b04-86c4-d267f7a6a3cc.roa File: fa061916-da7f-4b04-86c4-d267f7a6a3cc.roa (raw, json) Hash identifier: 2yWcP3Syc/DRwO3WoCHxopa4o31kn1+XLqsOwaTzeJk= Subject key identifier: D7:61:9C:84:C9:4C:E6:69:C6:DF:B2:27:F7:F4:3F:EC:F4:ED:1B:43 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1FE76FE46F439EBF2A34F9673EB411BB87BC7395 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa061916-da7f-4b04-86c4-d267f7a6a3cc.roa Signing time: Fri 26 Sep 2025 01:24:23 +0000 ROA not before: Fri 26 Sep 2025 01:24:23 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e7:6f:e4:6f:43:9e:bf:2a:34:f9:67:3e:b4:11:bb:87:bc:73:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:24:23 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=d9d0d27b93980f9b4963f4731fb898649025a0f7bcb55050a0f35112ad6c8081, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:f8:01:7d:37:08:1c:1b:6a:37:5a:1d:25: 9d:d0:c2:13:52:73:e4:cd:7d:9b:99:ab:38:5b:c6: a2:0e:1b:84:4d:85:83:93:2a:c6:75:07:49:86:8b: 2b:b1:7d:05:13:fc:e5:eb:a2:da:9c:57:2e:ee:b9: 97:cc:58:07:aa:b4:f3:fb:04:bb:1e:9d:2f:6c:0f: 23:5e:9e:8f:c4:86:ea:04:10:f2:e6:c7:1a:75:59: d0:94:fc:dd:b9:62:61:94:a4:8a:d4:ce:4e:3b:41: 70:51:dc:33:a3:08:4c:37:33:a0:43:87:11:fd:a8: 68:20:40:33:1d:7a:8d:53:04:9a:0d:91:4c:31:32: 44:09:e8:ac:a2:82:29:36:79:c0:82:51:aa:93:87: 95:6b:f1:db:33:50:ac:40:41:67:e4:16:73:18:73: ff:ff:87:7c:33:64:40:30:57:ff:6f:b8:a1:ad:e5: fc:b2:0e:58:89:a4:96:f0:9b:e5:d6:f5:e4:a6:aa: d4:5d:d4:fd:b5:c7:33:2c:88:4d:ea:e7:b4:59:ca: 7a:70:97:6e:dc:64:79:fc:4b:9d:78:e2:10:04:9f: 1c:61:cf:6b:d9:cc:ca:6f:00:8f:fa:c5:8b:c1:b3: 89:bd:ad:68:3e:db:5f:d7:77:8b:dd:f9:b8:5e:4d: 37:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:61:9C:84:C9:4C:E6:69:C6:DF:B2:27:F7:F4:3F:EC:F4:ED:1B:43 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa061916-da7f-4b04-86c4-d267f7a6a3cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.200.0/21 Signature Algorithm: sha256WithRSAEncryption 11:63:87:80:44:e3:67:c1:a8:1b:0b:4f:e6:9f:fb:e8:8d:8a: 74:bf:ff:e8:00:5d:31:44:12:23:7e:3d:b5:57:04:04:30:3a: 84:5b:3b:b7:70:81:c2:0b:42:d7:79:98:91:4f:e9:68:3d:2e: 7c:35:99:d8:3d:cb:18:d0:02:94:ee:2c:de:a1:ab:15:ce:f3: 13:2a:05:5e:38:7e:28:05:8b:e9:ab:38:91:f4:d7:d4:e2:20: 92:4e:d2:9c:87:f0:80:38:75:91:3b:27:89:fb:bc:99:e0:e2: 3d:4c:27:0c:78:5c:64:1d:c0:21:28:a6:a3:9e:77:a2:10:fb: c7:ae:11:14:7a:83:2f:fc:75:70:3b:6e:d6:75:00:17:66:e4: b5:9b:03:bf:46:eb:da:d6:95:a6:b9:b2:08:f0:e5:9c:2d:5e: 0f:d8:c9:3f:13:2f:63:03:ea:f7:b0:ae:63:25:d9:30:a2:67: 40:4c:18:3e:92:78:8f:65:28:09:a3:ad:e7:f6:a5:44:a8:48: f9:eb:67:8b:01:4a:4a:20:55:a5:81:82:10:8f:8c:3f:47:eb: d7:44:4f:46:0f:b5:ea:1a:1b:89:cc:4d:d0:a3:ce:4d:15:14: 8c:c7:da:41:73:e6:88:bd:35:18:02:20:ef:d4:33:e4:fc:b4: 84:e4:2d:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH+dv5G9Dnr8qNPlnPrQRu4e8c5UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEyNDIzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWQwZDI3YjkzOTgwZjliNDk2M2Y0NzMxZmI4OTg2NDkw MjVhMGY3YmNiNTUwNTBhMGYzNTExMmFkNmM4MDgxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIBPgBfTcIHBtqN1odJZ3QwhNSc+TNfZuZqzhbxqIOG4RN hYOTKsZ1B0mGiyuxfQUT/OXrotqcVy7uuZfMWAeqtPP7BLsenS9sDyNeno/EhuoE EPLmxxp1WdCU/N25YmGUpIrUzk47QXBR3DOjCEw3M6BDhxH9qGggQDMdeo1TBJoN kUwxMkQJ6Kyigik2ecCCUaqTh5Vr8dszUKxAQWfkFnMYc///h3wzZEAwV/9vuKGt 5fyyDliJpJbwm+XW9eSmqtRd1P21xzMsiE3q57RZynpwl27cZHn8S5144hAEnxxh z2vZzMpvAI/6xYvBs4m9rWg+21/Xd4vd+bheTTe1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU12GchMlM5mnG37In9/Q/7PTtG0MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZhMDYxOTE2LWRhN2YtNGIwNC04NmM0LWQyNjdmN2E2YTNjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDp8gwDQYJKoZIhvcNAQELBQADggEBABFjh4BE42fBqBsLT+af++iNinS/ /+gAXTFEEiN+PbVXBAQwOoRbO7dwgcILQtd5mJFP6Wg9Lnw1mdg9yxjQApTuLN6h qxXO8xMqBV44figFi+mrOJH019TiIJJO0pyH8IA4dZE7J4n7vJng4j1MJwx4XGQd wCEopqOed6IQ+8euERR6gy/8dXA7btZ1ABdm5LWbA79G69rWlaa5sgjw5ZwtXg/Y yT8TL2MD6vewrmMl2TCiZ0BMGD6SeI9lKAmjref2pUSoSPnrZ4sBSkogVaWBghCP jD9H69dET0YPteoaG4nMTdCjzk0VFIzH2kFz5oi9NRgCIO/UM+T8tITkLUw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:47 2025 by rpki-client