$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6f69d0c-6ab5-441b-a274-1b31e1f3f6f2.roa File: e6f69d0c-6ab5-441b-a274-1b31e1f3f6f2.roa (raw, json) Hash identifier: CbpUPwOqE4SHUqkrWDrzN2BitYU1AmUglHPsJIunGjY= Subject key identifier: 5A:B8:D1:02:BB:06:65:51:E6:91:4F:ED:27:35:21:0D:0E:93:56:84 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3ABA9FFEC579F8562E188B7CCABE00640C55EED2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6f69d0c-6ab5-441b-a274-1b31e1f3f6f2.roa Signing time: Thu 25 Sep 2025 18:48:17 +0000 ROA not before: Thu 25 Sep 2025 18:48:17 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ba:9f:fe:c5:79:f8:56:2e:18:8b:7c:ca:be:00:64:0c:55:ee:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:48:17 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=eddf9c1bd2c7c93b023fee261285f2c3d065e8b59941bcc2da0da4d0fc1c2c62, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:91:26:cd:fa:26:3e:06:c0:37:d3:8c:8d:25: d4:d1:7d:de:51:69:fe:21:56:45:fc:b3:56:82:50: 80:18:25:91:88:a3:9b:cb:53:10:28:58:45:86:ab: 87:29:1b:69:30:96:b6:aa:f2:30:4e:a7:96:d6:54: 49:4d:e2:be:1b:fa:03:d7:f2:e4:52:b3:f8:57:86: 8c:d7:43:05:4a:a5:02:01:5d:54:6c:e8:24:3d:88: 9a:12:9c:bd:2e:a9:17:8b:24:a6:6c:bc:e5:df:6c: b5:ab:04:1b:ac:d4:37:58:18:38:d2:a6:3c:1a:64: 1c:af:e3:f2:5b:82:36:e9:33:96:3b:4f:11:c1:4a: 67:4d:27:ec:6e:1d:d5:5f:aa:f8:56:01:29:15:0e: 1f:bd:59:bb:20:d1:17:61:06:c7:cb:dd:30:ee:21: 26:5d:a5:68:91:0b:37:da:77:74:44:39:aa:fb:2a: 38:72:75:5d:a0:cc:d1:21:9d:ea:39:7d:68:a4:2d: d1:09:f5:9c:9b:60:97:63:83:1f:47:ac:f6:e6:56: 3e:46:9a:75:b9:f7:ac:1d:8e:43:b3:7a:26:5f:12: 29:4b:8a:66:59:8e:b9:3e:b9:e7:e2:93:7c:ea:0a: 7d:27:c8:bb:a8:77:98:f4:7d:01:af:37:21:88:f8: 77:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B8:D1:02:BB:06:65:51:E6:91:4F:ED:27:35:21:0D:0E:93:56:84 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6f69d0c-6ab5-441b-a274-1b31e1f3f6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.10.0/24 Signature Algorithm: sha256WithRSAEncryption ab:66:5d:2b:34:96:0a:9d:bd:97:20:7f:94:5f:75:1d:3f:0b: 03:68:25:0a:31:06:ad:a0:d0:a6:cf:7b:8f:fa:e8:5f:da:bb: 1a:74:15:2d:7e:99:7f:11:75:39:b9:39:52:0d:86:1a:20:8f: 1a:3e:5a:6d:a9:97:67:e7:f3:18:3c:38:a6:57:68:e7:86:25: 3b:4e:b4:ab:3a:87:2c:ec:96:73:be:d9:b1:39:7b:2a:79:75: ac:fd:39:70:1e:97:13:d8:61:ac:e5:e5:3e:c0:13:80:4c:7a: 41:29:a2:88:46:17:f9:d9:4b:fe:29:7f:2e:11:18:45:cb:28: bb:31:ed:3e:68:32:ed:0e:f4:49:6f:f8:dc:14:7f:32:77:8b: 84:c5:05:9c:40:52:4a:89:54:83:de:07:79:03:d1:f1:81:95: ea:7c:f3:cc:96:4c:51:3d:02:d9:18:a1:cc:49:79:95:97:8d: 07:8a:6d:32:34:cc:fd:0f:a4:14:5f:f2:56:48:2c:16:93:74: 2e:13:09:15:b3:64:b4:8c:cc:29:af:3e:5d:d5:84:46:fd:77: 97:90:3b:4e:08:86:80:71:f8:29:66:0a:9f:18:50:d6:d4:55: a2:a6:6c:f0:8b:7a:d3:7c:52:22:58:09:04:d3:42:f5:50:43: 98:ba:de:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOrqf/sV5+FYuGIt8yr4AZAxV7tIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTg0ODE3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZGRmOWMxYmQyYzdjOTNiMDIzZmVlMjYxMjg1ZjJjM2Qw NjVlOGI1OTk0MWJjYzJkYTBkYTRkMGZjMWMyYzYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjkSbN+iY+BsA304yNJdTRfd5Raf4hVkX8s1aCUIAYJZGI o5vLUxAoWEWGq4cpG2kwlraq8jBOp5bWVElN4r4b+gPX8uRSs/hXhozXQwVKpQIB XVRs6CQ9iJoSnL0uqReLJKZsvOXfbLWrBBus1DdYGDjSpjwaZByv4/JbgjbpM5Y7 TxHBSmdNJ+xuHdVfqvhWASkVDh+9Wbsg0RdhBsfL3TDuISZdpWiRCzfad3REOar7 KjhydV2gzNEhneo5fWikLdEJ9ZybYJdjgx9HrPbmVj5GmnW596wdjkOzeiZfEilL imZZjrk+uefik3zqCn0nyLuod5j0fQGvNyGI+HcvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWrjRArsGZVHmkU/tJzUhDQ6TVoQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U2ZjY5ZDBjLTZhYjUtNDQxYi1hMjc0LTFiMzFlMWYzZjZmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpwowDQYJKoZIhvcNAQELBQADggEBAKtmXSs0lgqdvZcgf5RfdR0/CwNo JQoxBq2g0KbPe4/66F/auxp0FS1+mX8RdTm5OVINhhogjxo+Wm2pl2fn8xg8OKZX aOeGJTtOtKs6hyzslnO+2bE5eyp5daz9OXAelxPYYazl5T7AE4BMekEpoohGF/nZ S/4pfy4RGEXLKLsx7T5oMu0O9Elv+NwUfzJ3i4TFBZxAUkqJVIPeB3kD0fGBlep8 88yWTFE9AtkYocxJeZWXjQeKbTI0zP0PpBRf8lZILBaTdC4TCRWzZLSMzCmvPl3V hEb9d5eQO04IhoBx+ClmCp8YUNbUVaKmbPCLetN8UiJYCQTTQvVQQ5i63m4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:21:47 2025 by rpki-client