$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbf444a7-0c14-4273-b298-5023152b60ff.roa File: dbf444a7-0c14-4273-b298-5023152b60ff.roa (raw, json) Hash identifier: UHQixY8uG7dM7IPso4fRDXMRn8RAb0u7VB8lQfjI0/8= Subject key identifier: 7F:8D:1C:4D:F9:28:7B:B5:71:26:40:A7:31:31:1D:60:97:E8:B9:ED Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2C2FC71B9F68B8BA5BA00B44AC27CE8F551E214D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbf444a7-0c14-4273-b298-5023152b60ff.roa Signing time: Thu 25 Sep 2025 19:06:58 +0000 ROA not before: Thu 25 Sep 2025 19:06:58 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2f:c7:1b:9f:68:b8:ba:5b:a0:0b:44:ac:27:ce:8f:55:1e:21:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:06:58 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=f02f033e4870ee0e4afd2489641def13e5931db0030b0dcefa93b9b5b0f0daae, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:45:2e:eb:64:d4:32:72:80:00:10:65:06:ed: 94:f5:6d:14:d9:41:1a:1b:42:a3:f5:08:36:16:f7: d6:ea:b4:6e:43:70:2c:de:6c:7d:c6:e7:8b:03:d2: 7a:f6:ba:1c:f9:44:42:f5:09:e7:9b:02:1b:84:46: c3:fd:74:6e:33:31:6c:e9:2a:65:f9:1a:cc:bb:62: d5:fe:0f:a5:76:1c:57:11:d2:ab:a3:92:e1:1f:61: 33:81:35:4f:60:bf:37:e5:2e:4a:d2:b6:17:ec:a5: d3:03:8f:cd:ca:fb:bb:72:95:68:58:9b:7d:a4:a5: 68:f4:05:c2:ca:8a:06:44:66:10:91:4f:40:e0:69: 19:dc:e9:03:03:8b:a9:2d:1d:cd:59:03:d0:f8:a7: fc:51:aa:03:ef:4c:fa:61:18:98:8d:0d:d2:72:13: 34:3e:e7:6f:0e:6b:a9:38:e0:c0:fb:ab:d0:d7:e6: 6f:ae:eb:3f:a7:1a:b7:76:1b:91:8a:33:c7:72:2b: 9b:b9:c2:e5:45:b2:ff:b0:87:43:22:83:26:bd:92: 8b:f9:f9:3a:70:90:3f:90:42:a6:31:e6:6d:b0:41: 2e:5e:9d:25:be:dc:43:d7:49:52:58:98:66:6e:0b: 28:e0:a8:f1:33:07:07:ef:9c:90:6a:a8:01:3a:63: 7c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8D:1C:4D:F9:28:7B:B5:71:26:40:A7:31:31:1D:60:97:E8:B9:ED X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbf444a7-0c14-4273-b298-5023152b60ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.87.0/24 Signature Algorithm: sha256WithRSAEncryption 33:8e:23:9d:47:35:91:e5:c2:41:9e:b4:b6:e7:2a:f0:97:87: be:d9:ec:47:54:b9:1b:25:66:10:63:cb:cb:50:50:d3:a2:8d: 00:17:8a:61:e5:d2:f1:86:ed:f3:60:48:8e:b3:32:0d:2a:d3: 80:c4:5b:6c:7c:82:a0:6e:11:ce:31:ea:42:ec:bf:02:5e:c4: b2:23:15:8e:15:4b:f3:ce:7e:64:1b:e2:d4:6b:d9:5a:ee:bd: 2b:1a:b3:77:c9:c1:4b:05:28:69:f1:ed:ae:70:80:f5:86:4e: 2a:75:94:34:c8:42:69:b5:50:74:42:87:4c:0b:d6:4e:88:21: 2c:78:03:ac:8c:41:46:88:16:9d:ac:e3:f4:56:45:a7:3a:2d: 92:d5:7b:1a:71:da:4a:94:b3:33:39:7d:8f:1f:f1:33:53:58: ad:2f:a3:c9:84:92:c6:1d:f6:07:43:51:61:d0:10:21:bb:ce: e7:e6:04:dd:f7:4e:99:2d:41:f1:7e:a8:38:f3:5a:cf:86:e9: 78:27:46:3c:49:66:c2:c5:31:fc:9e:2e:a0:54:9d:39:fa:48: 8f:f5:2f:0d:c8:75:1f:71:84:83:9a:28:92:72:f1:a4:33:3c: 01:1f:3f:e0:54:c0:b3:73:e4:34:30:82:10:9e:93:c1:61:20: 9d:dc:fd:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULC/HG59ouLpboAtErCfOj1UeIU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkwNjU4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDJmMDMzZTQ4NzBlZTBlNGFmZDI0ODk2NDFkZWYxM2U1 OTMxZGIwMDMwYjBkY2VmYTkzYjliNWIwZjBkYWFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVRS7rZNQycoAAEGUG7ZT1bRTZQRobQqP1CDYW99bqtG5D cCzebH3G54sD0nr2uhz5REL1CeebAhuERsP9dG4zMWzpKmX5Gsy7YtX+D6V2HFcR 0qujkuEfYTOBNU9gvzflLkrSthfspdMDj83K+7tylWhYm32kpWj0BcLKigZEZhCR T0DgaRnc6QMDi6ktHc1ZA9D4p/xRqgPvTPphGJiNDdJyEzQ+528Oa6k44MD7q9DX 5m+u6z+nGrd2G5GKM8dyK5u5wuVFsv+wh0Migya9kov5+TpwkD+QQqYx5m2wQS5e nSW+3EPXSVJYmGZuCyjgqPEzBwfvnJBqqAE6Y3xDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf40cTfkoe7VxJkCnMTEdYJfoue0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RiZjQ0NGE3LTBjMTQtNDI3My1iMjk4LTUwMjMxNTJiNjBmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADp1cwDQYJKoZIhvcNAQELBQADggEBADOOI51HNZHlwkGetLbnKvCXh77Z 7EdUuRslZhBjy8tQUNOijQAXimHl0vGG7fNgSI6zMg0q04DEW2x8gqBuEc4x6kLs vwJexLIjFY4VS/POfmQb4tRr2VruvSsas3fJwUsFKGnx7a5wgPWGTip1lDTIQmm1 UHRCh0wL1k6IISx4A6yMQUaIFp2s4/RWRac6LZLVexpx2kqUszM5fY8f8TNTWK0v o8mEksYd9gdDUWHQECG7zufmBN33TpktQfF+qDjzWs+G6XgnRjxJZsLFMfyeLqBU nTn6SI/1Lw3IdR9xhIOaKJJy8aQzPAEfP+BUwLNz5DQwghCek8FhIJ3c/dk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:11:35 2025 by rpki-client