$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b80e48c0-9640-48af-baef-1e0819a25e66.roa File: b80e48c0-9640-48af-baef-1e0819a25e66.roa (raw, json) Hash identifier: Pw0C7Te7ZpBLYQ3iiJuPP4eOsHHhuXPyQ66PDu8MIEU= Subject key identifier: 63:6C:BE:80:8B:FD:43:6E:F1:DF:52:FA:A2:C6:71:B9:C1:EA:31:B5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5E7025852CFE4A6BC1FFC736D68108CED7DA5BD2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b80e48c0-9640-48af-baef-1e0819a25e66.roa Signing time: Thu 25 Sep 2025 19:00:00 +0000 ROA not before: Thu 25 Sep 2025 19:00:00 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:70:25:85:2c:fe:4a:6b:c1:ff:c7:36:d6:81:08:ce:d7:da:5b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:00:00 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=92815e1b90a2b4290742c70f2e7b9856dbe661e5f11bbcaaae38eee97866c8bf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:77:ef:18:b6:56:91:98:dc:24:dc:5f:ae: 93:ac:f4:8e:ae:f4:1b:87:93:d4:2d:e6:cf:12:ca: a1:c8:73:91:1f:95:f2:c5:25:77:5a:3f:33:49:df: 45:bf:4d:4d:6d:99:c9:4e:42:27:f1:4c:bd:60:a3: c1:0f:82:12:7c:ee:e8:09:c0:94:8d:d4:b4:38:e4: 2e:74:c2:ca:be:bb:a5:a9:b8:ae:84:74:0c:83:31: e6:ca:55:a1:b1:56:1c:e6:ce:da:73:b7:b3:6e:88: fe:8b:fc:9f:b4:a8:88:38:0b:db:87:00:ba:4a:45: 8d:1e:15:92:39:96:9a:fd:89:4c:fd:b8:45:6e:73: 1d:ef:4d:84:cd:64:1b:42:fd:17:88:8f:c8:c0:14: 5f:2b:29:3d:5e:b0:51:17:4b:d4:a0:c9:88:21:61: 39:17:1d:60:28:7f:74:de:7c:1e:fa:e3:dc:c4:7c: 64:fb:2f:08:e1:6b:5b:4f:41:0e:55:a8:a1:92:0c: 59:63:f3:25:71:b7:a5:16:92:18:3e:4c:29:1a:c3: ce:85:a5:80:a9:f1:0a:bb:8e:5d:0e:e0:66:ab:31: 08:9a:a0:ea:d5:6f:7f:13:06:39:a7:ea:f6:18:fd: e9:fa:12:38:a3:f0:4e:15:24:34:04:37:37:20:5f: 16:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6C:BE:80:8B:FD:43:6E:F1:DF:52:FA:A2:C6:71:B9:C1:EA:31:B5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b80e48c0-9640-48af-baef-1e0819a25e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.231.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:7e:c8:a9:c9:b8:86:1e:bf:de:ca:b1:4e:88:58:9d:f0:d2: 3c:ca:d6:f3:bd:64:b7:22:95:50:25:e7:21:80:db:77:bd:ce: 69:89:b5:74:f8:4e:11:56:76:20:b5:51:95:79:f2:7d:e3:7c: f8:56:2e:c2:47:af:c7:00:ff:89:f7:75:99:c7:b5:6f:78:ce: 7a:52:a0:da:aa:98:ef:77:67:5a:ff:b4:6e:f1:89:f7:0d:fc: 77:04:df:c2:a0:83:2f:16:06:6a:e5:40:53:db:37:8d:cf:b1: a9:f3:39:b3:3c:04:dd:6f:c3:ce:87:ab:39:11:46:3d:4c:52: cb:ec:d9:1b:8e:fb:af:89:44:dd:01:2a:7c:18:a1:3a:b6:19: bd:1d:a7:90:62:ef:8a:f5:15:80:33:5e:48:77:2f:c8:97:69: ee:c7:06:2b:03:90:46:c3:75:ad:ed:2a:25:22:96:ec:4a:58: ed:0a:46:ad:e8:a0:4e:bc:1b:33:df:5b:5a:13:1c:9f:1e:ba: 56:25:90:fd:17:c6:4c:87:bf:c6:f4:74:95:9d:9d:4c:78:b6: de:4b:ff:f1:6b:85:0d:45:0f:12:31:8b:3e:61:84:49:35:9b: 3a:08:88:5c:b3:c0:f5:e9:b8:c9:2c:ba:06:40:4c:50:29:8c: 15:fb:38:46 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXnAlhSz+SmvB/8c21oEIztfaW9IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkwMDAwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjgxNWUxYjkwYTJiNDI5MDc0MmM3MGYyZTdiOTg1NmRi ZTY2MWU1ZjExYmJjYWFhZTM4ZWVlOTc4NjZjOGJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9nHfvGLZWkZjcJNxfrpOs9I6u9BuHk9Qt5s8SyqHIc5Ef lfLFJXdaPzNJ30W/TU1tmclOQifxTL1go8EPghJ87ugJwJSN1LQ45C50wsq+u6Wp uK6EdAyDMebKVaGxVhzmztpzt7NuiP6L/J+0qIg4C9uHALpKRY0eFZI5lpr9iUz9 uEVucx3vTYTNZBtC/ReIj8jAFF8rKT1esFEXS9SgyYghYTkXHWAof3TefB7649zE fGT7Lwjha1tPQQ5VqKGSDFlj8yVxt6UWkhg+TCkaw86FpYCp8Qq7jl0O4GarMQia oOrVb38TBjmn6vYY/en6Ejij8E4VJDQENzcgXxYHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY2y+gIv9Q27x31L6osZxucHqMbUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I4MGU0OGMwLTk2NDAtNDhhZi1iYWVmLTFlMDgxOWEyNWU2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADp+cwDQYJKoZIhvcNAQELBQADggEBAIp+yKnJuIYev97KsU6IWJ3w0jzK 1vO9ZLcilVAl5yGA23e9zmmJtXT4ThFWdiC1UZV58n3jfPhWLsJHr8cA/4n3dZnH tW94znpSoNqqmO93Z1r/tG7xifcN/HcE38Kggy8WBmrlQFPbN43PsanzObM8BN1v w86HqzkRRj1MUsvs2RuO+6+JRN0BKnwYoTq2Gb0dp5Bi74r1FYAzXkh3L8iXae7H BisDkEbDda3tKiUiluxKWO0KRq3ooE68GzPfW1oTHJ8eulYlkP0XxkyHv8b0dJWd nUx4tt5L//FrhQ1FDxIxiz5hhEk1mzoIiFyzwPXpuMksugZATFApjBX7OEY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:57:39 2025 by rpki-client