$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ffa230d6-d99e-4331-aa74-1e73f052ba62.roa File: ffa230d6-d99e-4331-aa74-1e73f052ba62.roa (raw, json) Hash identifier: FJFSw8h81CEz7ppDELURj3Y6Q8GDAQS8N7BFUfhnDnw= Subject key identifier: ED:8D:4C:64:E2:A8:0D:24:15:65:C1:98:64:2E:CF:89:DF:0B:D9:73 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 26101B68342B97C75F3ED24D57959BE0C9CBF0F0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ffa230d6-d99e-4331-aa74-1e73f052ba62.roa Signing time: Thu 25 Sep 2025 17:57:05 +0000 ROA not before: Thu 25 Sep 2025 17:57:05 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:10:1b:68:34:2b:97:c7:5f:3e:d2:4d:57:95:9b:e0:c9:cb:f0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:57:05 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=11831d17ff9b1874c55779d2966a78fb2ac4618328980a1927b1bc9dc924b117, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:e0:f2:69:90:b3:41:60:3c:ef:2a:8e:fd: 3a:d9:ef:d4:aa:a4:79:b1:a6:51:1a:5f:1e:11:27: fc:46:71:99:c4:b6:3f:5c:bb:4a:db:3d:b3:f3:d9: 88:0d:0b:33:14:3a:42:fd:2a:9b:21:de:33:92:e7: e1:0d:eb:37:eb:fb:95:93:8a:2f:49:a4:fb:a9:cc: b4:ce:75:9d:6a:4a:59:14:d4:59:d5:56:49:7a:ea: c7:5f:a9:99:f8:dd:56:a3:38:ce:b8:9f:66:70:e0: 13:2b:8e:a6:6f:47:ca:58:a5:a4:5c:96:6b:df:88: 46:71:4f:c1:3c:85:6b:30:8c:5a:66:26:7f:30:54: 5e:23:c2:28:6c:a5:93:43:d8:b9:b5:7c:14:0e:18: d9:56:d5:ba:11:f5:64:c5:a0:da:f4:f6:c1:a0:2b: 13:0b:f4:81:50:fe:b4:ef:02:71:9d:a1:2c:b8:9c: cb:c0:d6:62:cd:22:31:c3:ce:85:70:cb:01:f5:f1: c2:27:2a:75:c3:92:ac:f2:fd:ca:c9:18:93:2a:20: db:00:a2:78:5c:64:f1:54:ab:6a:8d:ea:a1:f0:ea: 35:2a:9c:30:4c:af:bf:a1:cd:19:23:ea:c2:3c:48: a4:47:3b:ca:cc:31:9a:d9:cf:50:34:d4:17:1c:f4: 14:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8D:4C:64:E2:A8:0D:24:15:65:C1:98:64:2E:CF:89:DF:0B:D9:73 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ffa230d6-d99e-4331-aa74-1e73f052ba62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.163.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:74:70:5a:9a:3b:2d:36:ec:84:40:69:9e:32:ee:1d:be:ab: 94:37:36:e1:a9:8e:62:cf:f6:9d:59:fd:95:c6:95:03:1e:06: 67:f0:87:24:de:b9:6a:19:9d:49:f1:e5:c4:95:08:d8:35:af: cf:54:45:e7:2f:d3:8b:60:a2:a1:59:a5:7d:b2:83:f3:40:ce: 2d:eb:44:c3:47:29:bc:1c:3d:16:5f:43:58:01:0f:7b:c4:28: 28:3e:28:29:f3:6a:72:a1:66:cf:7c:60:33:a3:76:57:07:e4: b2:dd:da:f5:93:f4:18:81:86:5e:a0:e4:ec:cd:ac:0a:15:ac: 0d:0c:c4:62:3a:2f:6c:d4:2a:2a:a3:c3:40:9b:d7:a5:42:7b: 4d:57:52:8f:43:51:59:62:c3:7a:31:71:30:72:09:6f:02:5f: 7f:c2:e1:ae:d2:92:d6:62:1e:b3:7c:8b:64:2b:84:ed:66:a5: d9:5b:47:51:8a:2c:23:ef:cd:5f:87:74:e8:6e:96:62:d0:78: 46:1b:5b:83:b7:75:46:9e:55:74:84:40:87:01:6b:cc:eb:15: ae:a4:f6:04:ea:2b:45:29:58:4d:93:99:95:ac:07:8f:99:ff: 1d:7e:c6:ae:75:f7:b5:ec:aa:8e:22:e3:a4:eb:bd:ee:db:23: ed:48:bb:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJhAbaDQrl8dfPtJNV5Wb4MnL8PAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTc1NzA1WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTgzMWQxN2ZmOWIxODc0YzU1Nzc5ZDI5NjZhNzhmYjJh YzQ2MTgzMjg5ODBhMTkyN2IxYmM5ZGM5MjRiMTE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSaeDyaZCzQWA87yqO/TrZ79SqpHmxplEaXx4RJ/xGcZnE tj9cu0rbPbPz2YgNCzMUOkL9Kpsh3jOS5+EN6zfr+5WTii9JpPupzLTOdZ1qSlkU 1FnVVkl66sdfqZn43VajOM64n2Zw4BMrjqZvR8pYpaRclmvfiEZxT8E8hWswjFpm Jn8wVF4jwihspZND2Lm1fBQOGNlW1boR9WTFoNr09sGgKxML9IFQ/rTvAnGdoSy4 nMvA1mLNIjHDzoVwywH18cInKnXDkqzy/crJGJMqINsAonhcZPFUq2qN6qHw6jUq nDBMr7+hzRkj6sI8SKRHO8rMMZrZz1A01Bcc9BSlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7Y1MZOKoDSQVZcGYZC7Pid8L2XMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZmYTIzMGQ2LWQ5OWUtNDMzMS1hYTc0LTFlNzNmMDUyYmE2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpKMwDQYJKoZIhvcNAQELBQADggEBAD10cFqaOy027IRAaZ4y7h2+q5Q3 NuGpjmLP9p1Z/ZXGlQMeBmfwhyTeuWoZnUnx5cSVCNg1r89URecv04tgoqFZpX2y g/NAzi3rRMNHKbwcPRZfQ1gBD3vEKCg+KCnzanKhZs98YDOjdlcH5LLd2vWT9BiB hl6g5OzNrAoVrA0MxGI6L2zUKiqjw0Cb16VCe01XUo9DUVliw3oxcTByCW8CX3/C 4a7SktZiHrN8i2QrhO1mpdlbR1GKLCPvzV+HdOhulmLQeEYbW4O3dUaeVXSEQIcB a8zrFa6k9gTqK0UpWE2TmZWsB4+Z/x1+xq5197Xsqo4i46Trve7bI+1Iu68= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:30 2025 by rpki-client