$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f3e01c0-4651-4521-b637-b4778476d177.roa File: 2f3e01c0-4651-4521-b637-b4778476d177.roa (raw, json) Hash identifier: kej/Hhu30F7JBwDba9Q8Z3jf3KZnkiP8DCLtI3lIpFM= Subject key identifier: 39:FE:D1:5A:06:38:77:59:21:1C:45:F3:6F:0A:F8:0F:C9:7C:17:04 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 766FF8F12435C47FB569B86905CC43308F97671D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f3e01c0-4651-4521-b637-b4778476d177.roa Signing time: Fri 26 Sep 2025 00:27:20 +0000 ROA not before: Fri 26 Sep 2025 00:27:20 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6f:f8:f1:24:35:c4:7f:b5:69:b8:69:05:cc:43:30:8f:97:67:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:27:20 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=9b148f3e8e70daa88e9511b8c79e9cd1c72dfde8f2b7ad93d66a1c46428c3461, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9d:94:39:71:66:67:2b:02:58:5b:69:c8:db: cb:2b:bd:33:ec:da:ea:69:29:b0:d1:95:92:66:42: d1:c5:02:de:d9:90:1a:a4:14:6b:54:f3:07:00:d4: bb:3e:88:44:07:70:ba:2c:a3:3e:6a:b4:56:69:f8: 8d:ad:8d:17:06:26:40:6f:f2:a5:6b:7c:cb:fc:ef: d8:b5:98:03:dc:a8:87:19:31:14:dd:e9:3e:ce:e1: e8:8c:31:10:ab:22:bd:3a:34:8d:b3:72:85:c0:68: 53:01:7c:1c:42:22:e4:83:ba:f3:0b:ca:61:ea:16: e0:9c:b0:35:b4:e2:e5:ff:77:c5:4f:fe:a5:3d:51: 5c:42:22:b3:62:28:c1:e7:4f:ed:7b:74:99:70:e7: 52:84:1e:12:cd:08:d2:02:43:85:c6:fe:a4:7f:22: 0e:1a:d9:3e:e8:65:f8:78:11:a0:55:1e:0e:c1:54: c6:5f:fd:5c:ec:52:0f:06:c3:f2:f9:fc:bc:41:59: 47:4c:79:69:78:0e:8d:13:36:0f:7c:21:e1:df:f6: 6a:2a:91:3c:f9:c0:d3:19:66:4a:23:ee:db:fe:30: 75:6b:3f:0a:76:12:ae:91:c1:47:91:97:c3:70:3c: 7a:6a:b1:39:d6:9a:a1:30:bd:95:9f:07:c8:92:5c: 9e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FE:D1:5A:06:38:77:59:21:1C:45:F3:6F:0A:F8:0F:C9:7C:17:04 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f3e01c0-4651-4521-b637-b4778476d177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.164.0/22 Signature Algorithm: sha256WithRSAEncryption b2:ca:5e:45:bd:00:23:ac:44:9c:38:bd:4c:89:f3:06:4b:ad: df:3f:e0:f2:55:e6:f7:0e:65:7f:87:72:76:8b:44:70:ed:98: ca:7c:f6:68:d8:0c:b4:c8:f8:b5:41:8c:d4:c5:c3:78:4e:83: 96:9a:bf:6a:20:89:96:8a:cd:5e:ae:71:c7:e3:57:b2:a6:bc: 6a:45:eb:d3:c5:a3:e5:5b:a3:33:bf:86:f5:ed:33:21:c2:cd: fa:06:b8:4a:dc:11:cf:c8:2d:70:e1:10:b5:ef:5d:7f:3f:6a: 10:83:22:a2:3d:08:7c:b2:33:df:73:a6:3d:d6:20:fb:8d:cb: d3:28:f2:ec:bd:25:b8:d3:28:8e:2a:55:06:02:ba:6b:44:23: 73:bc:f4:44:be:4e:cf:5f:aa:0d:85:39:dc:3a:a1:71:0c:80: fd:f5:4b:1b:f6:0c:ef:d8:6a:1c:55:df:81:09:d3:a5:0c:5c: 8b:53:43:10:90:05:65:0c:df:19:68:a5:2d:44:7b:2c:63:cf: a4:1d:60:fe:a3:69:6a:d0:77:f5:a5:4b:32:c7:c3:75:3e:47: 33:ee:0e:d5:03:b8:13:25:31:dd:b0:b1:85:31:cc:80:47:dd: c9:5d:33:bf:38:de:cb:b1:a2:70:12:f7:c6:62:d4:f6:c6:c0: e5:4f:f1:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdm/48SQ1xH+1abhpBcxDMI+XZx0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDAyNzIwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjE0OGYzZThlNzBkYWE4OGU5NTExYjhjNzllOWNkMWM3 MmRmZGU4ZjJiN2FkOTNkNjZhMWM0NjQyOGMzNDYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOnZQ5cWZnKwJYW2nI28srvTPs2uppKbDRlZJmQtHFAt7Z kBqkFGtU8wcA1Ls+iEQHcLosoz5qtFZp+I2tjRcGJkBv8qVrfMv879i1mAPcqIcZ MRTd6T7O4eiMMRCrIr06NI2zcoXAaFMBfBxCIuSDuvMLymHqFuCcsDW04uX/d8VP /qU9UVxCIrNiKMHnT+17dJlw51KEHhLNCNICQ4XG/qR/Ig4a2T7oZfh4EaBVHg7B VMZf/VzsUg8Gw/L5/LxBWUdMeWl4Do0TNg98IeHf9moqkTz5wNMZZkoj7tv+MHVr Pwp2Eq6RwUeRl8NwPHpqsTnWmqEwvZWfB8iSXJ4lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOf7RWgY4d1khHEXzbwr4D8l8FwQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJmM2UwMWMwLTQ2NTEtNDUyMS1iNjM3LWI0Nzc4NDc2ZDE3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDp6QwDQYJKoZIhvcNAQELBQADggEBALLKXkW9ACOsRJw4vUyJ8wZLrd8/ 4PJV5vcOZX+HcnaLRHDtmMp89mjYDLTI+LVBjNTFw3hOg5aav2ogiZaKzV6uccfj V7KmvGpF69PFo+VbozO/hvXtMyHCzfoGuErcEc/ILXDhELXvXX8/ahCDIqI9CHyy M99zpj3WIPuNy9Mo8uy9JbjTKI4qVQYCumtEI3O89ES+Ts9fqg2FOdw6oXEMgP31 Sxv2DO/YahxV34EJ06UMXItTQxCQBWUM3xlopS1Eeyxjz6QdYP6jaWrQd/WlSzLH w3U+RzPuDtUDuBMlMd2wsYUxzIBH3cldM7843suxonAS98Zi1PbGwOVP8YU= -----END CERTIFICATE-----Generated at Sat Oct 18 02:37:54 2025 by rpki-client