$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f8f9c41-cc62-411e-8569-f3e454609165.roa File: 0f8f9c41-cc62-411e-8569-f3e454609165.roa (raw, json) Hash identifier: mCF8XYYyXt98VK//3a709P7Q5F4FW1XzyJEWW5blHh8= Subject key identifier: 21:90:D3:76:A6:C3:BD:2F:17:1F:5C:40:94:1A:7B:2E:89:3E:52:52 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 28C5A5715D54FB4554AEBD9A0139C30449C68338 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f8f9c41-cc62-411e-8569-f3e454609165.roa Signing time: Thu 25 Sep 2025 18:57:06 +0000 ROA not before: Thu 25 Sep 2025 18:57:06 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c5:a5:71:5d:54:fb:45:54:ae:bd:9a:01:39:c3:04:49:c6:83:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:57:06 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=f76f9a237fdd78dd1bce6375a1092a764c35e3ed10885ad2ff65d678f8ce8607, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:7d:ae:9a:fb:d1:b4:da:12:85:16:fd:1f: 19:bf:df:e0:de:91:85:1b:04:f3:9a:0a:98:42:a3: c7:19:82:9e:71:cb:f4:b3:13:12:a2:e3:2d:21:25: a3:cf:ba:05:79:5f:8d:f5:c3:9e:bf:2d:1b:15:7f: 38:82:4f:75:43:56:53:f1:61:d9:7a:7e:6c:10:c8: cb:d2:ba:e2:39:19:df:37:68:db:32:8a:70:91:6c: a8:a8:d7:c7:7c:28:b4:8f:5d:ff:3c:95:31:69:f8: 19:68:4e:bd:7b:2a:09:15:2e:31:a4:7a:99:50:ce: 19:58:38:02:ea:71:ed:2a:4a:83:e5:47:72:4e:fb: cd:18:4e:13:e1:43:e5:19:74:ff:6f:1f:d5:a0:ba: 36:08:dd:91:a3:98:1d:7f:e6:07:7c:90:43:4e:26: 59:4a:03:ef:f5:00:65:71:1e:fb:98:c0:06:a1:14: fa:a3:00:2b:a4:76:04:ef:5a:b4:39:c9:ca:8c:2b: 5d:fc:56:bf:a9:9d:2b:cb:e4:3f:08:99:bd:15:9c: 8a:f0:72:af:3e:79:c2:d8:2a:f0:49:f9:33:df:bc: d5:b4:da:7f:00:7f:73:d5:6f:21:f6:f5:d9:50:46: fb:07:93:74:69:f6:7c:c5:7d:e8:79:67:fe:aa:4f: a6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:90:D3:76:A6:C3:BD:2F:17:1F:5C:40:94:1A:7B:2E:89:3E:52:52 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f8f9c41-cc62-411e-8569-f3e454609165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.184.0/24 Signature Algorithm: sha256WithRSAEncryption 80:f2:9c:bd:d5:bb:0d:9e:d3:49:74:bc:f0:65:1c:02:80:5f: df:19:b3:43:96:74:db:ac:f1:90:48:c1:b0:39:1f:e7:50:51: 2c:0e:15:d9:51:83:1e:d1:b3:ca:48:fd:09:04:f3:85:90:c1: 31:bb:32:13:01:83:ff:52:3f:71:49:02:ae:c4:b5:bb:56:fe: e6:a1:4a:4c:49:f6:ee:3f:07:47:de:bf:ff:be:b4:74:72:48: 0d:be:11:cc:db:b0:f2:3b:ce:22:15:4c:d5:02:d2:73:69:4b: a9:45:62:04:2d:7b:cb:9c:23:e4:e0:61:13:f3:f7:51:36:69: 45:42:d3:7d:1c:0b:91:d8:20:7e:db:93:fc:d3:7e:37:de:1d: 4c:8a:6b:1d:0d:0c:76:ee:d2:f7:ba:8a:e8:e1:10:15:44:54: 07:1f:7e:0e:b7:a2:1e:b6:39:dd:9d:64:54:12:3e:94:38:43: 11:90:ce:43:6f:00:31:5c:22:00:a1:a9:4c:72:d5:f0:e1:a2: f0:6a:a2:62:80:88:26:b7:c1:08:98:fd:17:c6:22:45:60:cc: 30:9d:fd:a8:30:40:aa:cc:dc:96:36:9a:47:fd:fa:02:3d:d6: 2f:a4:e4:a4:8b:c5:ef:08:37:28:1b:51:0d:51:5e:96:db:39: 71:cf:b7:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKMWlcV1U+0VUrr2aATnDBEnGgzgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTg1NzA2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzZmOWEyMzdmZGQ3OGRkMWJjZTYzNzVhMTA5MmE3NjRj MzVlM2VkMTA4ODVhZDJmZjY1ZDY3OGY4Y2U4NjA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtv32umvvRtNoShRb9Hxm/3+DekYUbBPOaCphCo8cZgp5x y/SzExKi4y0hJaPPugV5X431w56/LRsVfziCT3VDVlPxYdl6fmwQyMvSuuI5Gd83 aNsyinCRbKio18d8KLSPXf88lTFp+BloTr17KgkVLjGkeplQzhlYOALqce0qSoPl R3JO+80YThPhQ+UZdP9vH9WgujYI3ZGjmB1/5gd8kENOJllKA+/1AGVxHvuYwAah FPqjACukdgTvWrQ5ycqMK138Vr+pnSvL5D8Imb0VnIrwcq8+ecLYKvBJ+TPfvNW0 2n8Af3PVbyH29dlQRvsHk3Rp9nzFfeh5Z/6qT6bXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIZDTdqbDvS8XH1xAlBp7Lok+UlIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBmOGY5YzQxLWNjNjItNDExZS04NTY5LWYzZTQ1NDYwOTE2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADp7gwDQYJKoZIhvcNAQELBQADggEBAIDynL3Vuw2e00l0vPBlHAKAX98Z s0OWdNus8ZBIwbA5H+dQUSwOFdlRgx7Rs8pI/QkE84WQwTG7MhMBg/9SP3FJAq7E tbtW/uahSkxJ9u4/B0fev/++tHRySA2+EczbsPI7ziIVTNUC0nNpS6lFYgQte8uc I+TgYRPz91E2aUVC030cC5HYIH7bk/zTfjfeHUyKax0NDHbu0ve6iujhEBVEVAcf fg63oh62Od2dZFQSPpQ4QxGQzkNvADFcIgChqUxy1fDhovBqomKAiCa3wQiY/RfG IkVgzDCd/agwQKrM3JY2mkf9+gI91i+k5KSLxe8INygbUQ1RXpbbOXHPt/A= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:16 2025 by rpki-client