$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a28eac2-2e7e-40aa-8bf4-d996ea6b285f.roa File: 8a28eac2-2e7e-40aa-8bf4-d996ea6b285f.roa (raw, json) Hash identifier: CHsrKQvxML2SGAy8AthAmCfpjetmaq6TDp/f3JND0fY= Subject key identifier: 78:DA:63:08:D5:01:94:88:58:36:00:5E:BB:FA:98:58:11:92:5D:0D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08D6BD671E20D4B1AE34A5C0C1358054FD50A1F6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a28eac2-2e7e-40aa-8bf4-d996ea6b285f.roa Signing time: Fri 26 Sep 2025 00:27:46 +0000 ROA not before: Fri 26 Sep 2025 00:27:46 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d6:bd:67:1e:20:d4:b1:ae:34:a5:c0:c1:35:80:54:fd:50:a1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:27:46 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=d7d3dcdf1d523ad2f3d617c7d1564e09e568623a867ef5c3ca1ce3b654cd4567, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fe:08:36:26:e7:6b:d0:ad:bd:aa:70:b9:4d: 97:6b:cb:8e:fb:0f:08:56:a9:96:b1:ed:45:82:a2: e8:45:87:55:36:8a:ee:e2:8a:88:09:4a:f1:f5:ad: 29:99:9a:02:c2:d4:83:1b:10:0d:6b:ac:eb:e7:37: e9:3b:65:ad:66:24:9d:e9:40:12:1b:8e:78:b9:9d: b9:61:06:23:8a:45:58:c5:06:99:a2:15:b3:ff:a8: b8:a2:9b:4c:3f:46:89:8a:30:3d:60:14:d9:80:67: 85:a5:d4:44:04:4c:83:45:e6:be:79:c2:84:a2:cb: 1e:c6:ee:a6:c8:96:a9:7b:14:92:22:94:08:5e:b4: 33:7e:e8:d2:e0:64:8c:fc:7f:35:5a:37:d0:9e:15: dc:1c:97:c5:61:fd:89:7a:bf:89:f6:47:72:83:db: b7:9c:2a:c4:32:ae:ab:53:0b:9d:be:48:41:95:c0: 52:88:a1:52:b3:de:33:44:b4:57:87:af:e8:1f:ed: c4:a3:cd:8a:4d:20:f6:17:c7:a3:d9:41:ce:18:d6: 0f:9e:6e:1f:70:55:81:37:6f:96:e8:74:5f:f2:25: e0:ef:39:cb:ff:3d:a6:b0:6f:6c:6f:be:c0:cf:72: 7b:6e:43:7e:00:69:ca:05:f3:49:80:55:c4:ef:2a: 9b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DA:63:08:D5:01:94:88:58:36:00:5E:BB:FA:98:58:11:92:5D:0D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a28eac2-2e7e-40aa-8bf4-d996ea6b285f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.28.0/22 Signature Algorithm: sha256WithRSAEncryption 03:cc:ed:a3:1d:b7:87:34:5f:04:4c:91:aa:91:5f:1c:16:9a: b3:90:c3:22:9c:3e:41:46:da:59:8b:c1:14:92:0d:e6:67:91: 3a:a6:be:f0:8a:16:63:03:61:d0:44:db:49:92:ef:f3:a8:f5: 1f:c8:03:ce:7f:48:40:c6:92:61:55:18:af:20:33:bf:92:ec: ff:47:22:32:f9:77:bc:2a:69:83:aa:29:ba:c0:7a:ef:90:3b: 65:b2:21:4e:fd:b3:79:72:a5:e8:c3:cd:04:d5:8d:59:84:b3: 13:54:f6:be:9b:e8:da:63:6f:85:28:84:03:33:b0:bf:c0:90: dd:b9:6a:3e:47:73:d4:2d:03:dd:80:3f:d9:53:9f:67:a4:95: 27:79:50:ee:3e:81:e7:5b:f2:5c:23:d3:43:3c:17:6a:84:81: 6b:ac:55:0e:93:92:45:16:d7:a8:65:17:f8:ef:7d:8c:2c:a0: 51:12:08:55:80:1e:53:22:03:ff:f4:07:e6:8c:27:9d:07:eb: d3:ac:32:81:21:a7:f0:b7:87:18:94:e4:4e:69:a8:3f:24:a0: 16:b2:38:c5:9e:c2:6c:11:d7:0d:19:4b:54:ef:d8:f0:12:f5: db:a5:55:03:43:08:31:c9:aa:87:31:e5:6f:81:1d:14:6e:9c: 03:39:17:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCNa9Zx4g1LGuNKXAwTWAVP1QofYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDAyNzQ2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkN2QzZGNkZjFkNTIzYWQyZjNkNjE3YzdkMTU2NGUwOWU1 Njg2MjNhODY3ZWY1YzNjYTFjZTNiNjU0Y2Q0NTY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDq/gg2Judr0K29qnC5TZdry477DwhWqZax7UWCouhFh1U2 iu7iiogJSvH1rSmZmgLC1IMbEA1rrOvnN+k7Za1mJJ3pQBIbjni5nblhBiOKRVjF BpmiFbP/qLiim0w/RomKMD1gFNmAZ4Wl1EQETINF5r55woSiyx7G7qbIlql7FJIi lAhetDN+6NLgZIz8fzVaN9CeFdwcl8Vh/Yl6v4n2R3KD27ecKsQyrqtTC52+SEGV wFKIoVKz3jNEtFeHr+gf7cSjzYpNIPYXx6PZQc4Y1g+ebh9wVYE3b5bodF/yJeDv Ocv/Paawb2xvvsDPcntuQ34AacoF80mAVcTvKpuVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeNpjCNUBlIhYNgBeu/qYWBGSXQ0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhMjhlYWMyLTJlN2UtNDBhYS04YmY0LWQ5OTZlYTZiMjg1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDpxwwDQYJKoZIhvcNAQELBQADggEBAAPM7aMdt4c0XwRMkaqRXxwWmrOQ wyKcPkFG2lmLwRSSDeZnkTqmvvCKFmMDYdBE20mS7/Oo9R/IA85/SEDGkmFVGK8g M7+S7P9HIjL5d7wqaYOqKbrAeu+QO2WyIU79s3lypejDzQTVjVmEsxNU9r6b6Npj b4UohAMzsL/AkN25aj5Hc9QtA92AP9lTn2eklSd5UO4+gedb8lwj00M8F2qEgWus VQ6TkkUW16hlF/jvfYwsoFESCFWAHlMiA//0B+aMJ50H69OsMoEhp/C3hxiU5E5p qD8koBayOMWewmwR1w0ZS1Tv2PAS9dulVQNDCDHJqocx5W+BHRRunAM5F9k= -----END CERTIFICATE-----Generated at Fri Oct 17 23:45:42 2025 by rpki-client