$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12c8b169-3026-4fa6-9e35-04ee2e54e2a6.roa File: 12c8b169-3026-4fa6-9e35-04ee2e54e2a6.roa (raw, json) Hash identifier: c8HbVOMrFCxJITvFh6cuLMhbr9jVCU9tSb3rLIcjeb0= Subject key identifier: 2D:0E:6D:A0:14:56:4E:C7:43:9E:48:82:90:80:9B:8A:37:9D:D1:13 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0FDCD2BAC0AEB989468FE077111FC5F3995CA961 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12c8b169-3026-4fa6-9e35-04ee2e54e2a6.roa Signing time: Thu 25 Sep 2025 19:06:56 +0000 ROA not before: Thu 25 Sep 2025 19:06:56 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:dc:d2:ba:c0:ae:b9:89:46:8f:e0:77:11:1f:c5:f3:99:5c:a9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:06:56 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=0da64bbad207dd7582fb3b50e309208a86ef345576ebd99e28dfbf0a42b1ab23, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:62:66:b7:cc:af:35:b5:db:e5:2d:8c:bb: 3e:73:b0:e1:7f:af:61:1a:9c:c1:c1:b3:85:24:75: 2d:50:35:b7:2a:31:ec:38:3c:76:be:4c:4e:d8:86: eb:07:9f:64:6b:f3:87:b6:93:0c:39:ce:fa:0f:2e: f4:4e:22:19:49:99:83:13:89:27:ae:7c:ae:68:14: b6:83:5f:9f:76:3e:5b:fd:8c:4e:30:99:72:19:47: b7:87:f0:6c:c5:4a:cd:1d:d9:86:f9:44:70:53:b5: 5a:d7:9b:eb:76:1c:aa:3d:9a:f7:ca:22:f3:31:25: 94:8a:89:25:ec:cf:8c:b6:6a:cc:63:05:33:61:95: c1:ca:b6:93:7a:b6:a1:4f:3a:2d:e1:6d:c2:2d:1f: b7:0d:d9:88:56:57:ae:dc:54:22:74:77:62:81:eb: 6f:fa:c2:25:78:3d:25:08:77:61:8e:f8:72:2a:f8: 13:02:de:e7:e8:1b:d0:e8:4a:d9:27:95:e3:27:a2: d6:22:70:86:32:c2:9b:0a:e4:46:3f:54:4e:f6:70: 5b:2d:0f:4d:ca:16:0b:4e:f0:cf:67:f8:b1:ae:a3: b5:cc:10:12:34:96:17:c4:44:26:6c:17:65:ca:84: e2:e2:45:7f:19:80:dd:4e:be:ba:24:da:c1:a1:27: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0E:6D:A0:14:56:4E:C7:43:9E:48:82:90:80:9B:8A:37:9D:D1:13 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12c8b169-3026-4fa6-9e35-04ee2e54e2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.84.0/24 Signature Algorithm: sha256WithRSAEncryption 50:01:65:9b:03:1c:75:86:5c:1f:2b:98:2c:56:05:58:24:59: fe:b3:98:47:65:82:41:07:65:96:19:a2:c7:b2:21:78:7c:48: d3:74:27:ba:b1:20:c6:30:a1:1e:70:ab:1f:5f:15:4d:9b:8e: d8:a3:e0:62:5d:71:c2:a0:47:5b:c0:6c:38:1c:0f:f6:ce:d5: d3:56:a0:a8:2c:4b:90:77:cf:62:e5:74:aa:42:92:47:bf:0c: 5d:96:f5:3e:92:03:c4:75:38:23:e7:28:f8:1c:40:d1:0a:89: 42:16:13:54:fc:fd:a7:e9:bb:6e:a5:b4:4a:44:38:63:99:80: 13:8b:2c:29:95:e1:a6:cc:36:4b:ef:5f:92:c1:c8:ac:c9:ae: 51:74:7d:5c:28:88:dd:2a:7a:ad:4e:59:ca:e6:b9:8b:cc:53: 2a:c8:61:38:bc:c8:d7:5c:a2:15:e6:8e:f0:d6:0c:3d:4d:9e: d5:07:0f:6f:c6:54:4e:0a:d2:09:9d:d0:26:7f:65:13:b5:b1: f1:0d:bc:99:63:63:f7:bf:ba:a1:f2:0b:18:6c:01:72:4d:da: 10:65:d5:b6:ea:0e:41:de:41:f3:77:c9:91:ef:cf:4b:66:9c: b2:52:e6:26:3b:73:ca:c2:e0:63:2a:19:20:7d:cc:eb:83:0c: 31:4c:40:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD9zSusCuuYlGj+B3ER/F85lcqWEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkwNjU2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGE2NGJiYWQyMDdkZDc1ODJmYjNiNTBlMzA5MjA4YTg2 ZWYzNDU1NzZlYmQ5OWUyOGRmYmYwYTQyYjFhYjIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbUWJmt8yvNbXb5S2Muz5zsOF/r2EanMHBs4UkdS1QNbcq Mew4PHa+TE7YhusHn2Rr84e2kww5zvoPLvROIhlJmYMTiSeufK5oFLaDX592Plv9 jE4wmXIZR7eH8GzFSs0d2Yb5RHBTtVrXm+t2HKo9mvfKIvMxJZSKiSXsz4y2asxj BTNhlcHKtpN6tqFPOi3hbcItH7cN2YhWV67cVCJ0d2KB62/6wiV4PSUId2GO+HIq +BMC3ufoG9DoStknleMnotYicIYywpsK5EY/VE72cFstD03KFgtO8M9n+LGuo7XM EBI0lhfERCZsF2XKhOLiRX8ZgN1Ovrok2sGhJyd/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULQ5toBRWTsdDnkiCkICbijed0RMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEyYzhiMTY5LTMwMjYtNGZhNi05ZTM1LTA0ZWUyZTU0ZTJhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADp1QwDQYJKoZIhvcNAQELBQADggEBAFABZZsDHHWGXB8rmCxWBVgkWf6z mEdlgkEHZZYZoseyIXh8SNN0J7qxIMYwoR5wqx9fFU2bjtij4GJdccKgR1vAbDgc D/bO1dNWoKgsS5B3z2LldKpCkke/DF2W9T6SA8R1OCPnKPgcQNEKiUIWE1T8/afp u26ltEpEOGOZgBOLLCmV4abMNkvvX5LByKzJrlF0fVwoiN0qeq1OWcrmuYvMUyrI YTi8yNdcohXmjvDWDD1NntUHD2/GVE4K0gmd0CZ/ZRO1sfENvJljY/e/uqHyCxhs AXJN2hBl1bbqDkHeQfN3yZHvz0tmnLJS5iY7c8rC4GMqGSB9zOuDDDFMQIw= -----END CERTIFICATE-----Generated at Sat Oct 18 05:14:31 2025 by rpki-client