$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/161dc567-744d-4c70-a287-495b5e3f0c7b.roa File: 161dc567-744d-4c70-a287-495b5e3f0c7b.roa (raw, json) Hash identifier: 6gd6lc0fjQEgdCXFoJCvEE7vD5UScq3gaYfUlpKdO5A= Subject key identifier: 22:63:A9:9C:7A:08:E0:5B:19:C8:DF:5E:EA:17:56:82:BA:20:72:20 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31DA78B7F66F934C02AECD7D554FBA39D3F0CEDD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/161dc567-744d-4c70-a287-495b5e3f0c7b.roa Signing time: Tue 21 Oct 2025 02:51:30 +0000 ROA not before: Tue 21 Oct 2025 02:51:30 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:da:78:b7:f6:6f:93:4c:02:ae:cd:7d:55:4f:ba:39:d3:f0:ce:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 02:51:30 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=323a57daef4988ed24a29fb0c619efaab80d899d75ece107d8db2596e5df02dc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:49:38:cb:3f:a0:4a:4d:29:ec:65:0f:a2: b5:8e:b0:25:b9:82:00:ef:c1:26:2c:c2:43:b4:63: bc:39:3b:e7:8d:d6:c5:b1:9b:91:c7:cb:25:b9:5b: cd:d1:ef:a2:c7:a0:15:66:4c:17:e8:a8:34:62:cf: 3b:db:d2:1f:16:68:c2:50:ab:75:46:34:23:4e:b8: b5:82:a7:02:9b:96:91:88:ed:0f:3f:b6:bc:af:94: 80:65:82:6c:81:61:5d:f4:88:d5:85:b0:5e:c0:0a: e1:cd:0b:49:cf:27:98:88:61:59:30:e5:9b:a9:9b: 4f:89:d2:d4:39:1b:d0:a6:8d:8f:1a:93:41:c5:54: fc:dc:72:b7:d3:e6:cd:5f:9e:e5:1a:28:ff:14:97: 60:0f:bf:df:b8:10:d1:db:c9:76:88:6d:46:39:28: 15:b3:2b:a5:50:c9:16:cb:c6:44:32:8b:db:e8:ca: 33:62:4f:63:52:ad:97:84:f0:b4:dc:db:04:0e:f6: dc:21:7a:3c:4e:67:4d:8c:18:19:de:ab:26:89:49: 09:8f:79:a0:c4:17:09:93:99:65:6f:5e:47:85:9f: ce:eb:0b:2e:37:ca:a1:29:e0:e7:22:08:54:cd:cb: a5:eb:6a:ed:af:82:ec:fc:0c:71:e0:6e:ca:d5:57: 76:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:63:A9:9C:7A:08:E0:5B:19:C8:DF:5E:EA:17:56:82:BA:20:72:20 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/161dc567-744d-4c70-a287-495b5e3f0c7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.16.0/20 Signature Algorithm: sha256WithRSAEncryption 65:bc:4c:0c:55:7f:a8:7e:01:68:ae:96:e6:b6:61:2b:31:39: 87:46:cb:51:1a:4c:a9:45:e7:6b:54:27:3b:fd:20:b0:fa:f5: b8:98:89:a5:f2:d9:f2:cf:b0:fb:d4:09:f9:58:f3:03:5f:65: 46:88:b8:23:0f:d8:7f:c9:44:b3:7a:7a:d7:0f:c9:ce:30:26: 7d:3d:9e:f5:4c:da:e4:eb:a7:b3:bf:d2:9c:27:a1:63:7d:31: ec:d7:d7:97:b9:a4:44:6f:37:55:26:1f:2b:2b:55:a0:0e:82: 21:1e:5e:cf:ae:2b:e1:06:76:3a:31:bc:a9:ac:d0:3e:cb:b3: 95:50:37:94:ab:26:09:a6:32:f9:65:8f:39:ce:e6:77:fb:af: 9d:04:30:06:d2:6b:47:68:3b:d1:ec:31:76:c7:a5:bc:d7:89: d3:31:9a:06:c8:5c:c7:4f:ad:8b:7b:9d:bc:6b:4f:33:af:77: d6:55:c3:31:50:e1:3a:f5:8d:c4:78:db:6d:1f:c2:29:83:0c: 0f:fb:bd:68:23:b0:75:06:4e:6b:93:65:01:bb:49:57:b5:a9: 11:c3:4c:b7:a6:c5:f7:99:a0:91:c8:b6:e4:5b:88:a5:6a:33: 5e:5b:d5:5b:28:8d:06:14:0d:d9:75:39:c0:3e:c8:b5:90:6e: b4:63:1a:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMdp4t/Zvk0wCrs19VU+6OdPwzt0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDI1MTMwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjNhNTdkYWVmNDk4OGVkMjRhMjlmYjBjNjE5ZWZhYWI4 MGQ4OTlkNzVlY2UxMDdkOGRiMjU5NmU1ZGYwMmRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBRUk4yz+gSk0p7GUPorWOsCW5ggDvwSYswkO0Y7w5O+eN 1sWxm5HHyyW5W83R76LHoBVmTBfoqDRizzvb0h8WaMJQq3VGNCNOuLWCpwKblpGI 7Q8/tryvlIBlgmyBYV30iNWFsF7ACuHNC0nPJ5iIYVkw5Zupm0+J0tQ5G9CmjY8a k0HFVPzccrfT5s1fnuUaKP8Ul2APv9+4ENHbyXaIbUY5KBWzK6VQyRbLxkQyi9vo yjNiT2NSrZeE8LTc2wQO9twhejxOZ02MGBneqyaJSQmPeaDEFwmTmWVvXkeFn87r Cy43yqEp4OciCFTNy6Xrau2vguz8DHHgbsrVV3a7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUImOpnHoI4FsZyN9e6hdWgrogciAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2MWRjNTY3LTc0NGQtNGM3MC1hMjg3LTQ5NWI1ZTNmMGM3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDpxAwDQYJKoZIhvcNAQELBQADggEBAGW8TAxVf6h+AWiulua2YSsxOYdG y1EaTKlF52tUJzv9ILD69biYiaXy2fLPsPvUCflY8wNfZUaIuCMP2H/JRLN6etcP yc4wJn09nvVM2uTrp7O/0pwnoWN9MezX15e5pERvN1UmHysrVaAOgiEeXs+uK+EG djoxvKms0D7Ls5VQN5SrJgmmMvlljznO5nf7r50EMAbSa0doO9HsMXbHpbzXidMx mgbIXMdPrYt7nbxrTzOvd9ZVwzFQ4Tr1jcR4220fwimDDA/7vWgjsHUGTmuTZQG7 SVe1qRHDTLemxfeZoJHItuRbiKVqM15b1VsojQYUDdl1OcA+yLWQbrRjGlk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:45 2025 by rpki-client