$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef76f063-c545-4948-9cfb-5cc264f41458.roa File: ef76f063-c545-4948-9cfb-5cc264f41458.roa (raw, json) Hash identifier: QwUKfnos4IxUdvv/DW1+wKsWVOB6T1D4IeRx36qFlOU= Subject key identifier: FC:48:16:AF:F7:B7:B9:5A:EC:70:CA:DC:B1:08:26:DC:DC:44:A5:EC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5E452C90461433DB6A41B25B26881EC05BBA3587 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef76f063-c545-4948-9cfb-5cc264f41458.roa Signing time: Thu 25 Sep 2025 18:48:17 +0000 ROA not before: Thu 25 Sep 2025 18:48:17 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:45:2c:90:46:14:33:db:6a:41:b2:5b:26:88:1e:c0:5b:ba:35:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:48:17 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=ed063895e0310977995970717cd57b9ad847ecc573546d48f4fb3ccdb6d4861e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d8:44:0d:ec:8b:d2:4d:8e:7b:37:23:8a:b5: 7a:20:44:65:b6:12:6f:4d:0c:6d:a2:d8:c2:ad:65: 7f:07:ab:c3:a5:16:a7:5c:9d:e7:8c:f8:30:ec:8f: f4:19:3b:cc:13:83:ec:2a:48:d9:34:80:d5:1f:d0: dc:cb:8f:9f:24:fb:24:45:a2:4a:4f:b2:17:a1:ec: d6:bf:a1:0a:d0:30:7c:3d:4f:93:26:f1:2f:7c:c7: 89:1a:df:81:fe:29:b1:e3:b6:fc:9b:17:61:16:d9: c8:72:a9:d9:18:4b:1d:df:6a:87:6b:fd:aa:86:bc: 90:36:fb:27:b5:0e:53:18:24:f5:f9:71:c8:7a:fb: ca:a4:b4:60:46:66:48:21:8a:a1:72:b6:63:26:6b: 59:c5:7b:7f:f0:6a:70:e5:df:27:ed:08:59:76:0e: c8:91:f2:5b:f6:50:e1:53:99:37:78:c3:92:70:00: be:54:4e:be:9d:40:70:f8:43:2c:4f:3a:e3:ad:22: 81:7b:09:f9:b1:09:1f:2e:a8:3f:7e:f4:d0:d1:75: 1b:39:f9:83:5b:f5:51:af:c0:82:2e:d9:e1:f5:3e: 6c:9b:e3:0b:0e:37:c3:c6:f3:1b:54:5f:bc:7e:4e: 73:16:16:98:13:2d:09:73:25:b7:ab:fd:a2:9c:67: a5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:48:16:AF:F7:B7:B9:5A:EC:70:CA:DC:B1:08:26:DC:DC:44:A5:EC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef76f063-c545-4948-9cfb-5cc264f41458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.100.0/24 Signature Algorithm: sha256WithRSAEncryption 78:48:51:2e:59:4e:4b:a8:26:a1:8c:c9:b3:46:22:94:44:7b: 12:52:61:4b:a5:66:c6:ee:ea:14:25:27:cd:ce:b9:c2:3a:84: 89:df:1a:f7:4f:1c:d4:66:3c:08:ca:c7:8c:0f:f5:b5:fb:6b: ab:89:02:33:36:d3:2b:32:3b:5b:7b:c7:50:8c:29:87:f9:c5: 1e:26:39:a2:a5:e7:b7:1e:18:87:c5:dc:dc:73:fc:b9:81:df: 52:8c:a3:c4:7a:36:a5:0c:85:e6:0c:ad:98:12:e6:d1:10:21: 8d:77:cb:cc:97:38:88:71:92:42:f4:11:7b:13:9b:3a:e5:a6: 09:db:bf:66:c4:c9:2e:03:17:2d:b3:6a:74:4c:7a:4c:1d:e8: b5:b6:2a:a2:3c:fa:30:f4:a3:01:63:e2:e6:94:c1:a4:83:e9: ae:e2:40:0c:13:f0:bb:1d:33:dd:98:b2:a7:8a:ed:b9:b1:51: a7:ee:c4:a0:d9:01:2a:90:52:7f:72:7f:c1:a7:c7:c7:18:50: 43:da:16:07:1b:a0:9f:67:cf:0e:cd:c7:d4:0c:d5:db:e8:00: 8d:1a:4e:38:38:35:1a:f0:aa:08:6c:30:ee:7f:f7:12:48:fc: fd:13:fc:e3:71:a9:d1:df:30:5e:24:9a:fe:2a:83:14:26:cb: c4:ca:05:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXkUskEYUM9tqQbJbJogewFu6NYcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTg0ODE3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDA2Mzg5NWUwMzEwOTc3OTk1OTcwNzE3Y2Q1N2I5YWQ4 NDdlY2M1NzM1NDZkNDhmNGZiM2NjZGI2ZDQ4NjFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDU2EQN7IvSTY57NyOKtXogRGW2Em9NDG2i2MKtZX8Hq8Ol FqdcneeM+DDsj/QZO8wTg+wqSNk0gNUf0NzLj58k+yRFokpPsheh7Na/oQrQMHw9 T5Mm8S98x4ka34H+KbHjtvybF2EW2chyqdkYSx3faodr/aqGvJA2+ye1DlMYJPX5 cch6+8qktGBGZkghiqFytmMma1nFe3/wanDl3yftCFl2DsiR8lv2UOFTmTd4w5Jw AL5UTr6dQHD4QyxPOuOtIoF7CfmxCR8uqD9+9NDRdRs5+YNb9VGvwIIu2eH1Pmyb 4wsON8PG8xtUX7x+TnMWFpgTLQlzJber/aKcZ6X5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/EgWr/e3uVrscMrcsQgm3NxEpewwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmNzZmMDYzLWM1NDUtNDk0OC05Y2ZiLTVjYzI2NGY0MTQ1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADp2QwDQYJKoZIhvcNAQELBQADggEBAHhIUS5ZTkuoJqGMybNGIpREexJS YUulZsbu6hQlJ83OucI6hInfGvdPHNRmPAjKx4wP9bX7a6uJAjM20ysyO1t7x1CM KYf5xR4mOaKl57ceGIfF3Nxz/LmB31KMo8R6NqUMheYMrZgS5tEQIY13y8yXOIhx kkL0EXsTmzrlpgnbv2bEyS4DFy2zanRMekwd6LW2KqI8+jD0owFj4uaUwaSD6a7i QAwT8LsdM92YsqeK7bmxUafuxKDZASqQUn9yf8Gnx8cYUEPaFgcboJ9nzw7Nx9QM 1dvoAI0aTjg4NRrwqghsMO5/9xJI/P0T/ONxqdHfMF4kmv4qgxQmy8TKBUQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:42:03 2025 by rpki-client