$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4408448e-52f0-4240-a471-b1175e2b4378.roa File: 4408448e-52f0-4240-a471-b1175e2b4378.roa (raw, json) Hash identifier: 1Th/C1cw/B6x9G/mzfyUqgZfmUhMwm0nY6JUyoZS8oc= Subject key identifier: E3:59:03:33:B9:2F:9C:5D:FD:49:E0:E6:70:E3:FC:4E:56:5A:5B:E1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 360597A421B7655A27B87AD8F4EE8B769EF98A01 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4408448e-52f0-4240-a471-b1175e2b4378.roa Signing time: Thu 25 Sep 2025 19:03:16 +0000 ROA not before: Thu 25 Sep 2025 19:03:16 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:05:97:a4:21:b7:65:5a:27:b8:7a:d8:f4:ee:8b:76:9e:f9:8a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:03:16 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=4be7c2407a8a7a2b16f2de13032b525d8095849443aaedc63400300df005414e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:91:d4:44:59:97:f6:d9:b2:c3:04:c1:91:d3: a9:dc:cf:96:01:03:13:e4:29:23:b7:4f:93:fa:be: 40:8a:1a:3d:a4:74:66:e8:b6:1d:09:fb:98:12:f2: e9:2c:aa:84:bd:c2:14:18:c2:f6:20:ff:b2:96:65: fe:99:5b:97:b1:3f:a0:66:81:da:c2:a7:d8:c5:26: bb:e4:e9:82:77:52:ea:3b:fe:18:97:30:94:f0:d0: ee:e2:ab:f0:ba:4d:a7:c8:ce:ee:60:cc:ee:a7:2f: 1f:e4:a7:bc:f2:ae:11:a2:f1:a7:65:6e:ae:63:5e: 2c:ab:fa:e7:31:b7:c8:b6:5f:f9:69:11:01:7c:0f: e6:06:7e:dd:d9:a1:6e:e6:8e:77:40:13:39:f7:3a: a0:7e:11:aa:83:be:f4:e0:f9:a6:e6:45:01:e0:5b: a9:f6:9f:5c:31:aa:ee:b8:09:95:a7:dd:91:f5:e6: 12:ff:fe:ab:fa:1f:41:9b:6c:45:87:a6:76:9f:b0: 30:80:40:f0:9b:c5:74:95:5f:d5:82:79:8f:5b:a7: d7:8b:75:e9:e1:68:54:6c:66:f8:95:53:9c:4f:67: 9e:46:54:37:2c:d3:ac:af:ec:71:5e:93:1a:6d:5a: 02:8f:8c:06:a7:16:a6:fc:c1:d0:66:06:9f:80:7a: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:59:03:33:B9:2F:9C:5D:FD:49:E0:E6:70:E3:FC:4E:56:5A:5B:E1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4408448e-52f0-4240-a471-b1175e2b4378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.66.0/24 Signature Algorithm: sha256WithRSAEncryption a2:2f:77:05:23:80:6f:e5:07:d3:58:0c:d5:0a:89:4d:0b:be: 96:11:ed:1e:10:eb:03:56:93:75:86:65:1c:6a:8f:88:81:22: 08:9e:36:ff:b8:a8:f7:25:dc:bd:c8:41:1b:b6:4c:5e:ad:31: f5:19:10:db:b1:f8:cf:2d:f6:63:34:b3:2f:5c:88:34:8f:26: ef:65:fa:94:a5:c5:77:a5:b6:72:13:92:46:ae:ae:e5:be:01: 33:fd:ed:4e:9e:7f:5a:ca:dc:d5:fe:89:0b:21:f1:30:4d:52: d1:b3:22:e7:7d:e0:90:68:2e:a4:e7:5d:83:1b:d9:55:e6:8a: 93:f2:5d:78:56:3a:96:af:7a:9d:82:09:79:44:32:ad:81:b9: cb:2c:86:5e:0e:df:e9:97:db:b6:f0:97:4e:dc:30:b0:7b:0f: 07:86:2e:a1:ba:83:a4:70:f1:53:b6:7c:f9:45:a0:4f:92:eb: 78:65:dc:17:9c:f7:24:fe:a3:22:2b:ab:73:69:f4:73:9a:2b: 86:50:69:4d:e0:cc:5d:35:33:67:66:b0:cd:48:36:7f:0e:72: 2d:5c:b4:bd:0d:7b:5b:82:f6:95:f7:07:99:1c:6c:b5:21:47: a3:06:cf:5b:90:d9:01:8e:bd:d9:6c:2c:89:cb:66:56:82:72: 5e:1d:4c:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNgWXpCG3ZVonuHrY9O6Ldp75igEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkwMzE2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YmU3YzI0MDdhOGE3YTJiMTZmMmRlMTMwMzJiNTI1ZDgw OTU4NDk0NDNhYWVkYzYzNDAwMzAwZGYwMDU0MTRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXkdREWZf22bLDBMGR06ncz5YBAxPkKSO3T5P6vkCKGj2k dGboth0J+5gS8uksqoS9whQYwvYg/7KWZf6ZW5exP6BmgdrCp9jFJrvk6YJ3Uuo7 /hiXMJTw0O7iq/C6TafIzu5gzO6nLx/kp7zyrhGi8adlbq5jXiyr+ucxt8i2X/lp EQF8D+YGft3ZoW7mjndAEzn3OqB+EaqDvvTg+abmRQHgW6n2n1wxqu64CZWn3ZH1 5hL//qv6H0GbbEWHpnafsDCAQPCbxXSVX9WCeY9bp9eLdenhaFRsZviVU5xPZ55G VDcs06yv7HFekxptWgKPjAanFqb8wdBmBp+AeuBTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU41kDM7kvnF39SeDmcOP8TlZaW+EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ0MDg0NDhlLTUyZjAtNDI0MC1hNDcxLWIxMTc1ZTJiNDM3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADp0IwDQYJKoZIhvcNAQELBQADggEBAKIvdwUjgG/lB9NYDNUKiU0LvpYR 7R4Q6wNWk3WGZRxqj4iBIgieNv+4qPcl3L3IQRu2TF6tMfUZENux+M8t9mM0sy9c iDSPJu9l+pSlxXeltnITkkauruW+ATP97U6ef1rK3NX+iQsh8TBNUtGzIud94JBo LqTnXYMb2VXmipPyXXhWOpavep2CCXlEMq2Bucsshl4O3+mX27bwl07cMLB7DweG LqG6g6Rw8VO2fPlFoE+S63hl3Bec9yT+oyIrq3Np9HOaK4ZQaU3gzF01M2dmsM1I Nn8Oci1ctL0Ne1uC9pX3B5kcbLUhR6MGz1uQ2QGOvdlsLInLZlaCcl4dTCI= -----END CERTIFICATE-----Generated at Sat Oct 18 05:12:20 2025 by rpki-client