$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21552fbc-c687-4265-9066-b1b5b53dd74f.roa File: 21552fbc-c687-4265-9066-b1b5b53dd74f.roa (raw, json) Hash identifier: +A1o2Fe+3Usw5eKhR6qaJ+pnbs8KPwK2ULLjR4WltgY= Subject key identifier: BC:B2:D3:69:DC:5C:C6:CC:0B:42:A8:F8:5A:FC:4D:EF:41:D4:0F:44 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 14E4C2FFEAE84CB477D9EE847994BAC0C2147E46 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21552fbc-c687-4265-9066-b1b5b53dd74f.roa Signing time: Fri 26 Sep 2025 00:27:15 +0000 ROA not before: Fri 26 Sep 2025 00:27:15 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e4:c2:ff:ea:e8:4c:b4:77:d9:ee:84:79:94:ba:c0:c2:14:7e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:27:15 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=3362983b657ae383d2fdd5043afffc30ccc8eda59b85245dedf643ed18f15005, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:9a:9d:01:61:f9:d1:ef:34:77:e3:03:17: f4:39:f8:76:42:25:89:a2:c4:fd:c6:17:e4:3f:89: 55:8e:d1:15:c9:e5:7b:ce:a5:ae:6e:2c:5b:39:2c: fc:05:85:9f:29:03:3f:17:db:0f:dd:7d:0f:62:3b: 47:f0:0c:5a:c8:7f:e7:e8:5c:3a:38:a4:f4:38:e2: 8f:a6:88:a2:ec:a9:94:fc:12:00:82:f4:b6:1b:d1: a8:f3:15:92:d7:cb:a1:bd:11:0d:88:04:b8:74:23: ff:1c:b6:8e:f3:cb:9a:ce:08:39:5f:71:57:ac:51: 8f:91:88:df:20:b9:9e:1a:89:2c:f7:e1:42:a3:d7: fc:61:c9:e3:a3:43:e7:dc:0f:2e:d4:b5:ba:45:a8: a2:2d:3b:65:14:52:f4:69:d3:67:a8:58:ac:83:20: 5b:32:97:5f:98:f3:38:96:3f:22:ab:36:0c:06:f7: e0:b0:ff:86:71:94:98:af:2c:b2:9b:06:27:45:41: cc:cd:f7:ad:60:a9:66:7b:60:ee:16:3a:4b:25:ea: 9a:fa:31:42:99:4d:5f:40:cf:c4:88:d6:1c:79:46: 5b:5e:a1:db:b6:d9:4e:7c:c6:c1:f0:11:5e:4a:bd: af:3d:e1:19:d6:67:ee:39:b4:81:f3:b0:03:34:83: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B2:D3:69:DC:5C:C6:CC:0B:42:A8:F8:5A:FC:4D:EF:41:D4:0F:44 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21552fbc-c687-4265-9066-b1b5b53dd74f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.152.0/22 Signature Algorithm: sha256WithRSAEncryption 87:c9:a5:82:00:01:a5:df:04:77:bb:17:27:61:58:36:a8:8f: 56:1a:f7:38:88:3c:cc:48:52:6c:a9:ae:b7:21:2f:b4:b1:51: 53:fc:ae:0c:90:07:2b:52:40:ca:6a:f3:80:d3:ab:d5:f8:fb: 14:fc:c0:5b:db:59:0f:cd:40:de:b3:ca:05:6e:48:a7:75:a3: 7d:3f:97:65:d1:8e:4d:8d:28:c1:c8:c6:7c:b7:67:9c:d3:75: 31:90:49:23:57:16:9a:62:af:d4:95:a2:16:f8:f7:c6:2b:00: a4:c7:3f:73:13:db:b2:05:e9:8c:2a:bb:7c:6e:f1:db:2b:5b: b0:52:c9:fd:31:87:63:fb:82:c6:9a:c9:da:89:be:75:87:25: 55:b6:2d:e9:b5:87:33:ce:2f:51:38:aa:67:4c:11:1f:2f:2b: db:99:53:c5:14:a4:12:3b:00:c2:93:f1:8d:3f:d4:ce:16:40: 70:49:79:22:4e:35:50:82:09:56:3f:5b:b8:05:6a:d6:46:b0: 7e:b3:4b:71:13:8b:0a:c7:bf:e0:5f:d5:42:ef:e7:75:fd:f1: db:5d:cf:87:ca:c9:91:8c:25:45:41:16:69:f9:df:59:6e:0f: a2:ae:83:06:0d:19:52:05:97:40:ab:23:a5:42:7d:be:a3:21: 29:81:6c:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFOTC/+roTLR32e6EeZS6wMIUfkYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDAyNzE1WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzYyOTgzYjY1N2FlMzgzZDJmZGQ1MDQzYWZmZmMzMGNj YzhlZGE1OWI4NTI0NWRlZGY2NDNlZDE4ZjE1MDA1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF25qdAWH50e80d+MDF/Q5+HZCJYmixP3GF+Q/iVWO0RXJ 5XvOpa5uLFs5LPwFhZ8pAz8X2w/dfQ9iO0fwDFrIf+foXDo4pPQ44o+miKLsqZT8 EgCC9LYb0ajzFZLXy6G9EQ2IBLh0I/8cto7zy5rOCDlfcVesUY+RiN8guZ4aiSz3 4UKj1/xhyeOjQ+fcDy7UtbpFqKItO2UUUvRp02eoWKyDIFsyl1+Y8ziWPyKrNgwG 9+Cw/4ZxlJivLLKbBidFQczN961gqWZ7YO4WOksl6pr6MUKZTV9Az8SI1hx5Rlte odu22U58xsHwEV5Kva894RnWZ+45tIHzsAM0g/ipAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvLLTadxcxswLQqj4WvxN70HUD0QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxNTUyZmJjLWM2ODctNDI2NS05MDY2LWIxYjViNTNkZDc0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDp5gwDQYJKoZIhvcNAQELBQADggEBAIfJpYIAAaXfBHe7FydhWDaoj1Ya 9ziIPMxIUmyprrchL7SxUVP8rgyQBytSQMpq84DTq9X4+xT8wFvbWQ/NQN6zygVu SKd1o30/l2XRjk2NKMHIxny3Z5zTdTGQSSNXFppir9SVohb498YrAKTHP3MT27IF 6Ywqu3xu8dsrW7BSyf0xh2P7gsaaydqJvnWHJVW2Lem1hzPOL1E4qmdMER8vK9uZ U8UUpBI7AMKT8Y0/1M4WQHBJeSJONVCCCVY/W7gFatZGsH6zS3ETiwrHv+Bf1ULv 53X98dtdz4fKyZGMJUVBFmn531luD6KugwYNGVIFl0CrI6VCfb6jISmBbIM= -----END CERTIFICATE-----Generated at Sat Oct 18 02:38:00 2025 by rpki-client