$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16494d55-532f-4b63-9d2d-244fea863b7b.roa File: 16494d55-532f-4b63-9d2d-244fea863b7b.roa (raw, json) Hash identifier: B/gIzWdiBVbr395e8tl14Q9FUorYsm/kvQh4Rg1Q554= Subject key identifier: EA:92:91:7A:56:E1:F0:B8:EA:BF:C7:92:9F:27:55:33:1D:C9:38:0E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0F1C5DEF084A5235693765181E26AD525893C048 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16494d55-532f-4b63-9d2d-244fea863b7b.roa Signing time: Fri 26 Sep 2025 00:29:56 +0000 ROA not before: Fri 26 Sep 2025 00:29:56 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:1c:5d:ef:08:4a:52:35:69:37:65:18:1e:26:ad:52:58:93:c0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:29:56 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=2972d1492a0b31e236ddc904be5664349d16bdefab162edaf8561d772c455b1c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e1:a8:2f:bc:9d:15:9a:c5:db:ec:1d:e0:9a: 15:e2:70:9d:74:d3:c0:ad:b2:26:10:22:48:6b:c8: bd:d4:16:1c:e7:48:3a:b8:05:35:a7:0d:e6:41:f3: 92:cb:ed:ef:9d:ea:64:04:29:f6:20:44:7b:92:ac: c3:63:ef:05:0b:55:06:a9:f3:75:df:88:98:00:ab: 80:52:6b:18:d2:22:b1:86:76:0a:73:86:53:ba:4e: 90:a3:2f:48:7b:a5:a1:d7:da:09:7f:52:74:66:dd: df:8a:6b:81:ec:57:c3:aa:ef:47:25:4c:03:81:f2: f4:9f:61:1b:e8:8f:c7:00:45:d5:d8:50:91:90:97: 97:30:2a:38:31:85:6a:c1:ae:0a:d1:39:34:eb:da: 22:d7:f1:5f:ce:a4:43:27:90:47:eb:aa:3c:f9:f2: 65:89:cd:e0:e2:65:5f:68:93:33:08:cf:96:23:4c: d8:15:7a:4c:49:92:e9:4a:c7:98:2b:18:06:50:e6: 12:6b:3c:19:9a:79:d3:ed:c5:d3:28:4b:e9:3a:85: 35:4e:f5:12:b5:8f:a9:dc:4f:41:8f:de:66:04:66: d7:c6:20:bf:fb:de:9d:c7:91:a5:00:58:4d:50:a7: 08:db:8e:f2:c8:b3:74:0d:d5:8a:df:5f:5b:77:ba: 63:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:92:91:7A:56:E1:F0:B8:EA:BF:C7:92:9F:27:55:33:1D:C9:38:0E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16494d55-532f-4b63-9d2d-244fea863b7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.72.0/22 Signature Algorithm: sha256WithRSAEncryption 73:eb:b0:97:1b:5d:e2:e9:7c:60:77:7f:bb:fc:34:4e:a3:89: 6e:4b:13:4a:05:04:03:7f:2c:82:28:e8:09:49:77:81:72:ea: 0d:3d:ca:3c:5b:18:be:55:66:24:a9:cd:10:56:22:67:e4:a3: cb:71:a8:9b:d2:9a:ea:8c:4d:b3:7e:28:b9:e4:ae:e6:48:4a: ce:a7:f0:09:74:95:97:41:09:98:d4:5a:9e:e3:82:84:7b:0d: cb:82:5a:3d:9e:cc:23:b3:4d:36:75:5e:11:24:28:50:a2:b8: 0b:91:21:77:59:0e:d1:be:67:48:71:b3:1e:d5:37:f4:25:b8: 1a:ea:8e:6c:1b:66:9f:b3:e7:7b:96:a2:76:a8:e3:e6:0e:4e: fe:5e:6d:ea:54:80:cb:c7:71:c6:53:34:8b:f0:ee:d2:90:0b: 53:b3:5a:70:ca:81:84:2f:24:8a:36:ef:d7:34:f4:9e:db:d6: 49:bb:2f:50:48:f3:84:e2:1d:3d:ee:9b:3e:bd:34:e9:cc:c0: 2f:b7:3b:62:83:61:ae:4d:b4:55:b6:87:9e:be:af:27:a3:61: 24:0a:63:65:10:f3:18:b2:58:ca:c4:36:2c:82:a6:37:5f:83: 84:10:36:8d:d9:89:4b:5c:12:d8:d4:60:4c:c0:8a:20:47:74: 6f:8b:4f:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDxxd7whKUjVpN2UYHiatUliTwEgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDAyOTU2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTcyZDE0OTJhMGIzMWUyMzZkZGM5MDRiZTU2NjQzNDlk MTZiZGVmYWIxNjJlZGFmODU2MWQ3NzJjNDU1YjFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDt4agvvJ0VmsXb7B3gmhXicJ1008CtsiYQIkhryL3UFhzn SDq4BTWnDeZB85LL7e+d6mQEKfYgRHuSrMNj7wULVQap83XfiJgAq4BSaxjSIrGG dgpzhlO6TpCjL0h7paHX2gl/UnRm3d+Ka4HsV8Oq70clTAOB8vSfYRvoj8cARdXY UJGQl5cwKjgxhWrBrgrROTTr2iLX8V/OpEMnkEfrqjz58mWJzeDiZV9okzMIz5Yj TNgVekxJkulKx5grGAZQ5hJrPBmaedPtxdMoS+k6hTVO9RK1j6ncT0GP3mYEZtfG IL/73p3HkaUAWE1QpwjbjvLIs3QN1YrfX1t3umP5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6pKRelbh8Ljqv8eSnydVMx3JOA4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2NDk0ZDU1LTUzMmYtNGI2My05ZDJkLTI0NGZlYTg2M2I3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDp0gwDQYJKoZIhvcNAQELBQADggEBAHPrsJcbXeLpfGB3f7v8NE6jiW5L E0oFBAN/LIIo6AlJd4Fy6g09yjxbGL5VZiSpzRBWImfko8txqJvSmuqMTbN+KLnk ruZISs6n8Al0lZdBCZjUWp7jgoR7DcuCWj2ezCOzTTZ1XhEkKFCiuAuRIXdZDtG+ Z0hxsx7VN/QluBrqjmwbZp+z53uWonao4+YOTv5ebepUgMvHccZTNIvw7tKQC1Oz WnDKgYQvJIo279c09J7b1km7L1BI84TiHT3umz69NOnMwC+3O2KDYa5NtFW2h56+ ryejYSQKY2UQ8xiyWMrENiyCpjdfg4QQNo3ZiUtcEtjUYEzAiiBHdG+LT7s= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:07 2025 by rpki-client