$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe003141-7d8d-4c68-a793-6a9f59869f20.roa File: fe003141-7d8d-4c68-a793-6a9f59869f20.roa (raw, json) Hash identifier: +695UyPfkMZbyfS53g8LPXnUXSQhyvmTZjvqKI/UFt8= Subject key identifier: 3D:1E:57:20:4C:1B:FC:20:B0:07:0F:41:6F:A2:5A:D9:48:0E:35:68 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 83CB6437A1E1DD29BB7885DD9832165A0B2D21 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe003141-7d8d-4c68-a793-6a9f59869f20.roa Signing time: Tue 28 Oct 2025 17:21:54 +0000 ROA not before: Tue 28 Oct 2025 17:21:54 +0000 ROA not after: Tue 02 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83:cb:64:37:a1:e1:dd:29:bb:78:85:dd:98:32:16:5a:0b:2d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 28 17:21:54 2025 GMT Not After : Dec 2 23:59:59 2025 GMT Subject: serialNumber=936e243706bb0b4ab34eff68db11563ff2cd94f1c2f9c5d178f705491d041be4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e1:d2:ea:2d:fc:e6:b1:11:c3:29:c2:b1:a9: a9:32:d5:94:a3:be:f8:e6:a5:54:4d:de:aa:8f:a7: f1:13:b8:92:aa:f5:d1:59:5a:1a:09:51:01:02:45: e4:1d:a7:64:01:31:e2:d6:81:e3:bf:78:a8:97:29: 68:bc:82:52:c9:0e:ce:2e:36:cb:58:1c:11:89:0b: 4b:89:4a:7c:c2:5e:66:4d:9a:08:79:3f:09:ea:c0: a0:57:a0:46:cb:48:ae:3d:fa:20:c0:12:39:9a:de: b0:57:21:d3:35:45:41:cf:57:3a:60:d2:90:6a:50: 23:87:c5:a3:9e:d2:e9:bc:52:6a:da:c8:f3:ad:8f: a2:2b:6f:29:34:86:f7:17:0a:54:28:61:db:3c:3d: 26:04:6e:19:44:cc:7e:dc:df:81:54:03:7e:f5:a8: 43:28:f5:45:6d:04:b5:b3:12:5f:6e:f4:b1:d8:f6: e2:78:71:1a:8c:3a:cc:9c:ab:c7:3a:2b:e2:a7:a1: 16:b1:08:24:58:4d:33:b7:ce:8e:a1:e9:c7:1f:c4: 0c:4f:a9:be:fd:42:9c:98:dd:aa:2d:ab:ca:48:e4: d3:e1:eb:4e:e4:56:7a:ad:fe:c1:2d:94:66:90:dd: 4c:45:71:3a:51:0c:d6:8d:c1:de:cb:bb:11:7f:8f: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1E:57:20:4C:1B:FC:20:B0:07:0F:41:6F:A2:5A:D9:48:0E:35:68 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe003141-7d8d-4c68-a793-6a9f59869f20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.0.0/16 Signature Algorithm: sha256WithRSAEncryption 74:c5:85:7a:0e:3b:51:2a:da:a1:36:d7:b4:8c:8b:26:e1:0f: de:81:ee:e0:5e:36:c4:a2:ef:be:04:d3:ae:10:e6:b8:f2:37: 85:0d:17:2b:91:e0:bb:29:60:f8:75:dc:8a:d9:ef:5f:c4:52: c0:3a:36:ee:a1:bf:07:da:ec:70:84:e3:ba:3f:15:c9:b0:03: f8:de:69:37:d7:5a:c6:03:4b:27:49:44:63:ee:29:8c:8f:29: 68:4a:7f:47:47:3b:6c:70:17:06:0d:6f:81:4c:10:ca:1c:30: 39:a1:ba:63:48:c8:ef:1e:08:84:5d:3e:ea:61:a5:3a:e6:f6: 27:77:88:cd:ac:3b:a3:e2:45:64:e5:b2:c0:44:06:db:b3:51: a0:59:18:e4:39:6c:e5:06:0f:5b:5e:40:75:c3:dc:09:93:bb: e3:74:8e:6b:86:aa:c5:e8:8d:8c:2a:e5:ed:ba:2b:45:e7:6f: d5:d5:79:49:40:2c:67:39:cc:c1:41:19:a8:14:31:41:1f:e2: b9:40:2d:dc:f6:d5:06:37:c5:7c:2f:3e:6f:fc:ab:b4:5b:73: 18:81:97:34:84:59:8c:e5:d8:41:1e:6a:49:c8:83:bc:33:ca: 29:b9:4a:6c:d6:8a:ec:c1:0a:f9:e9:6c:f4:a2:bd:d0:df:76: 72:54:2c:1d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAIPLZDeh4d0pu3iF3ZgyFloLLSEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDI4MTcyMTU0WhcNMjUxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzZlMjQzNzA2YmIwYjRhYjM0ZWZmNjhkYjExNTYzZmYy Y2Q5NGYxYzJmOWM1ZDE3OGY3MDU0OTFkMDQxYmU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDg4dLqLfzmsRHDKcKxqaky1ZSjvvjmpVRN3qqPp/ETuJKq 9dFZWhoJUQECReQdp2QBMeLWgeO/eKiXKWi8glLJDs4uNstYHBGJC0uJSnzCXmZN mgh5PwnqwKBXoEbLSK49+iDAEjma3rBXIdM1RUHPVzpg0pBqUCOHxaOe0um8Umra yPOtj6Irbyk0hvcXClQoYds8PSYEbhlEzH7c34FUA371qEMo9UVtBLWzEl9u9LHY 9uJ4cRqMOsycq8c6K+KnoRaxCCRYTTO3zo6h6ccfxAxPqb79QpyY3aotq8pI5NPh 607kVnqt/sEtlGaQ3UxFcTpRDNaNwd7LuxF/j/oVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUPR5XIEwb/CCwBw9Bb6Ja2UgONWgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZlMDAzMTQxLTdkOGQtNGM2OC1hNzkzLTZhOWY1OTg2OWYyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwADpTANBgkqhkiG9w0BAQsFAAOCAQEAdMWFeg47USraoTbXtIyLJuEP3oHu 4F42xKLvvgTTrhDmuPI3hQ0XK5Hguylg+HXcitnvX8RSwDo27qG/B9rscITjuj8V ybAD+N5pN9daxgNLJ0lEY+4pjI8paEp/R0c7bHAXBg1vgUwQyhwwOaG6Y0jI7x4I hF0+6mGlOub2J3eIzaw7o+JFZOWywEQG27NRoFkY5Dls5QYPW15AdcPcCZO743SO a4aqxeiNjCrl7borRedv1dV5SUAsZznMwUEZqBQxQR/iuUAt3PbVBjfFfC8+b/yr tFtzGIGXNIRZjOXYQR5qSciDvDPKKblKbNaK7MEK+els9KK90N92clQsHQ== -----END CERTIFICATE-----Generated at Wed Nov 5 01:53:21 2025 by rpki-client