$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/422c56aa-cb34-4efc-b817-a158f08d0615.roa File: 422c56aa-cb34-4efc-b817-a158f08d0615.roa (raw, json) Hash identifier: hHk/GquNekE3GeJKhBAjiyr8BRjvUyO+xmo/jZITfwg= Subject key identifier: 50:00:00:A7:A3:71:6C:54:C7:D5:D0:C4:38:16:94:04:BA:E4:E1:0A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 21ECAE8908174690D9D3BA800FF99BDAB2B63402 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/422c56aa-cb34-4efc-b817-a158f08d0615.roa Signing time: Thu 25 Sep 2025 18:52:05 +0000 ROA not before: Thu 25 Sep 2025 18:52:05 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ec:ae:89:08:17:46:90:d9:d3:ba:80:0f:f9:9b:da:b2:b6:34:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:52:05 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=edadd044059b182555774def32b603b0d1b71b28d7500577c6d7b782a36e4010, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:00:1b:b6:9a:d6:03:f0:55:b6:c6:0c:24: de:11:65:45:cb:75:5e:ee:7b:18:20:da:17:9f:f5: 7e:32:08:21:98:34:0c:38:b6:d4:d0:3b:a5:d2:1a: b0:14:e9:53:70:7e:c1:6c:2b:fc:95:56:ca:f6:96: d5:9d:62:ef:d3:41:c5:4f:9d:8b:2a:67:f3:ae:22: 00:f1:56:e0:a9:2d:4b:07:81:14:ec:7f:b9:be:0d: 1b:96:b6:80:ee:6f:59:48:34:dd:ee:44:66:30:42: 43:32:42:c7:c7:f2:98:0b:59:62:5f:3c:e8:6c:3b: 69:de:af:32:c5:c5:0f:29:3f:fb:88:3d:fa:4d:6d: 55:8f:ce:8e:05:e9:43:be:ad:a9:56:df:51:3c:16: 66:41:f9:f1:be:aa:41:94:f6:c9:59:7b:1e:a7:78: f6:a5:13:e6:e0:ec:70:d0:18:c5:f1:11:ed:16:e8: 3f:18:94:94:12:6c:38:77:db:70:5e:0a:fa:63:c2: 7d:b5:da:39:b5:d3:d1:9b:bb:59:6c:d3:63:74:d6: ef:e6:6a:74:57:4d:13:95:05:68:19:dc:62:3a:da: 37:1f:bf:6a:aa:63:f5:8b:f9:fe:0c:72:ce:f9:c0: 5c:0e:35:83:69:41:dd:22:e9:6a:c9:9f:b5:b2:0c: a9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:00:00:A7:A3:71:6C:54:C7:D5:D0:C4:38:16:94:04:BA:E4:E1:0A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/422c56aa-cb34-4efc-b817-a158f08d0615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.127.0/24 Signature Algorithm: sha256WithRSAEncryption 78:9c:a2:f1:0d:b2:96:7a:7e:60:9d:47:d1:2c:6f:5a:5a:ac: 3d:95:a0:e0:53:c4:d2:34:b3:3f:d3:a6:10:3f:7c:f5:2c:4c: 67:37:22:f7:e2:5d:9c:7d:e0:30:50:eb:21:d6:1d:fc:be:89: ce:8d:8d:8d:bd:3c:6c:31:c4:99:6b:52:81:c6:f7:17:7a:c6: f2:7b:01:7c:11:63:26:bb:bc:f9:68:5d:37:ae:68:44:af:0f: cc:48:1e:dd:e5:53:e0:14:c4:b7:8e:c0:ca:ba:b7:02:87:00: bc:ca:93:97:ed:14:e8:79:cf:10:25:e1:4b:44:af:06:78:2f: 08:98:ca:72:c7:42:b8:ff:8b:bf:a4:3a:d4:bc:de:db:58:e3: 1f:1f:a6:13:e6:21:f2:2c:76:63:c4:68:8e:7a:19:7c:31:a8: 9d:ff:bd:51:23:17:2f:6e:0c:e5:4d:37:a4:7d:24:8a:df:cf: 35:8d:9b:32:ae:37:75:6b:12:32:cd:f3:81:4c:60:dd:16:3a: 3e:5a:9e:76:40:26:a1:bf:d7:14:c8:6d:12:9d:a3:4f:a9:89: 17:24:61:af:fd:7a:52:b4:53:35:ea:f7:8f:5a:bb:12:38:60: 66:61:e2:d5:0f:28:22:06:b0:52:b3:6e:53:36:6e:56:30:6d: b8:6c:e7:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIeyuiQgXRpDZ07qAD/mb2rK2NAIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTg1MjA1WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZGFkZDA0NDA1OWIxODI1NTU3NzRkZWYzMmI2MDNiMGQx YjcxYjI4ZDc1MDA1NzdjNmQ3Yjc4MmEzNmU0MDEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgBAAbtprWA/BVtsYMJN4RZUXLdV7uexgg2hef9X4yCCGY NAw4ttTQO6XSGrAU6VNwfsFsK/yVVsr2ltWdYu/TQcVPnYsqZ/OuIgDxVuCpLUsH gRTsf7m+DRuWtoDub1lINN3uRGYwQkMyQsfH8pgLWWJfPOhsO2nerzLFxQ8pP/uI PfpNbVWPzo4F6UO+ralW31E8FmZB+fG+qkGU9slZex6nePalE+bg7HDQGMXxEe0W 6D8YlJQSbDh323BeCvpjwn212jm109Gbu1ls02N01u/manRXTROVBWgZ3GI62jcf v2qqY/WL+f4Mcs75wFwONYNpQd0i6WrJn7WyDKknAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUAAAp6NxbFTH1dDEOBaUBLrk4QowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQyMmM1NmFhLWNiMzQtNGVmYy1iODE3LWExNThmMDhkMDYxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADp38wDQYJKoZIhvcNAQELBQADggEBAHicovENspZ6fmCdR9Esb1parD2V oOBTxNI0sz/TphA/fPUsTGc3IvfiXZx94DBQ6yHWHfy+ic6NjY29PGwxxJlrUoHG 9xd6xvJ7AXwRYya7vPloXTeuaESvD8xIHt3lU+AUxLeOwMq6twKHALzKk5ftFOh5 zxAl4UtErwZ4LwiYynLHQrj/i7+kOtS83ttY4x8fphPmIfIsdmPEaI56GXwxqJ3/ vVEjFy9uDOVNN6R9JIrfzzWNmzKuN3VrEjLN84FMYN0WOj5annZAJqG/1xTIbRKd o0+piRckYa/9elK0UzXq949auxI4YGZh4tUPKCIGsFKzblM2blYwbbhs57g= -----END CERTIFICATE-----Generated at Sat Oct 18 05:11:40 2025 by rpki-client