$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8ed28ce-4398-4b23-9538-ad76977825fd.roa File: a8ed28ce-4398-4b23-9538-ad76977825fd.roa (raw, json) Hash identifier: 8g1qRl1XcF2qcEOPKC96+uDu4f1pLh5h4RBvVwMtI40= Subject key identifier: 41:17:36:A4:01:5C:85:2A:5A:F6:AD:15:DC:F3:F6:CC:2F:47:56:7D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 11FFF69C898ABF2613C010C44B2139478624CAAC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8ed28ce-4398-4b23-9538-ad76977825fd.roa Signing time: Thu 25 Sep 2025 22:36:52 +0000 ROA not before: Thu 25 Sep 2025 22:36:52 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ff:f6:9c:89:8a:bf:26:13:c0:10:c4:4b:21:39:47:86:24:ca:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:36:52 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=f6e91afcc6952ba9def445dcadb8a53cdbb93355f92a34077b06d5a8e18e21d3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:27:86:0b:da:17:84:6d:ae:b9:10:54:0e:79: 0d:8a:62:57:a4:e0:c7:2d:79:06:18:8e:29:e8:e2: ee:59:dd:40:ef:b3:05:0a:17:c0:60:59:b9:5d:b1: 4c:2d:34:9b:79:f6:d9:ed:ea:a1:7c:11:d0:d4:36: 7d:d3:33:48:c8:32:62:16:dc:ec:a6:2d:a3:d3:af: 67:f9:be:7e:b0:fc:94:60:09:8c:8e:b2:ec:2c:07: 88:3e:c0:8c:4b:4f:bb:82:33:90:6d:32:bf:18:21: 3e:54:24:bc:ba:8f:8a:e9:57:8a:84:95:49:ef:9b: 4d:ee:18:04:1b:3c:bc:c0:6d:d8:98:99:ff:1a:35: 64:97:e2:e3:2e:42:ac:6b:5d:c6:16:7d:62:00:b6: 6b:01:38:1d:16:b9:10:e4:00:f3:ec:a9:ee:71:27: ad:45:95:98:b8:07:b4:d2:fd:57:98:0c:17:fe:35: 15:7b:93:93:2b:e3:42:1b:10:74:18:7d:bd:49:31: 33:11:19:0d:55:65:fd:ac:95:c0:74:58:e5:5a:43: 4c:0b:34:d6:75:26:d0:73:86:b6:ba:7c:d1:fb:63: 05:a3:38:a6:89:b2:d1:14:ea:ba:2e:02:e1:d4:0b: de:30:27:e1:74:ea:e6:50:34:7d:2b:8e:ba:2e:cc: 3b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:17:36:A4:01:5C:85:2A:5A:F6:AD:15:DC:F3:F6:CC:2F:47:56:7D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8ed28ce-4398-4b23-9538-ad76977825fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.248.0/23 Signature Algorithm: sha256WithRSAEncryption ab:11:0d:e4:d2:0e:d1:d3:09:5f:ef:29:6f:74:57:8d:9f:b4: 26:f9:7a:8c:a0:78:29:14:3e:81:ce:05:60:84:c0:c4:a2:96: 07:d9:2b:c9:cc:9e:08:fd:37:04:d5:36:d5:df:8b:02:43:1a: d7:07:43:ad:3c:95:c7:b0:3d:06:84:fe:b5:c5:18:43:5c:5c: 0b:99:b9:86:4e:09:b5:b1:d5:99:4d:83:ef:09:5f:3a:09:a7: 60:52:dc:74:12:c8:11:4f:68:c7:94:3b:24:c7:b9:ae:d1:00: 01:aa:ef:c3:2b:26:9c:30:41:a8:05:5d:81:6e:58:6a:d1:4a: aa:9f:3b:a5:05:e4:be:95:dd:ce:32:79:72:88:6e:5a:1b:ca: 15:87:a0:03:f0:19:18:7e:06:cf:ce:93:1d:15:97:6c:91:66: 31:ec:34:ca:1f:74:b4:ca:e7:14:f7:e7:bd:a1:b5:86:3d:75: 36:02:cc:b8:98:36:c5:7e:cf:c6:7f:05:21:41:fa:21:b5:f9: 6d:60:b6:33:a4:0a:62:55:5e:ed:7c:6a:bf:9b:15:84:4e:d4: 87:a0:d5:82:f1:3a:a8:2c:41:39:a1:a6:2f:48:72:ab:38:86: 99:97:85:2a:a8:82:ad:86:0e:2d:f7:ef:0c:c9:58:54:2d:01: 5e:36:75:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEf/2nImKvyYTwBDESyE5R4YkyqwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIzNjUyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmU5MWFmY2M2OTUyYmE5ZGVmNDQ1ZGNhZGI4YTUzY2Ri YjkzMzU1ZjkyYTM0MDc3YjA2ZDVhOGUxOGUyMWQzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvJ4YL2heEba65EFQOeQ2KYlek4McteQYYjino4u5Z3UDv swUKF8BgWbldsUwtNJt59tnt6qF8EdDUNn3TM0jIMmIW3OymLaPTr2f5vn6w/JRg CYyOsuwsB4g+wIxLT7uCM5BtMr8YIT5UJLy6j4rpV4qElUnvm03uGAQbPLzAbdiY mf8aNWSX4uMuQqxrXcYWfWIAtmsBOB0WuRDkAPPsqe5xJ61FlZi4B7TS/VeYDBf+ NRV7k5Mr40IbEHQYfb1JMTMRGQ1VZf2slcB0WOVaQ0wLNNZ1JtBzhra6fNH7YwWj OKaJstEU6rouAuHUC94wJ+F06uZQNH0rjrouzDsRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQRc2pAFchSpa9q0V3PP2zC9HVn0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E4ZWQyOGNlLTQzOTgtNGIyMy05NTM4LWFkNzY5Nzc4MjVmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDp/gwDQYJKoZIhvcNAQELBQADggEBAKsRDeTSDtHTCV/vKW90V42ftCb5 eoygeCkUPoHOBWCEwMSilgfZK8nMngj9NwTVNtXfiwJDGtcHQ608lcewPQaE/rXF GENcXAuZuYZOCbWx1ZlNg+8JXzoJp2BS3HQSyBFPaMeUOyTHua7RAAGq78MrJpww QagFXYFuWGrRSqqfO6UF5L6V3c4yeXKIblobyhWHoAPwGRh+Bs/Okx0Vl2yRZjHs NMofdLTK5xT3572htYY9dTYCzLiYNsV+z8Z/BSFB+iG1+W1gtjOkCmJVXu18ar+b FYRO1Ieg1YLxOqgsQTmhpi9Icqs4hpmXhSqogq2GDi337wzJWFQtAV42dbw= -----END CERTIFICATE-----Generated at Fri Oct 17 23:51:54 2025 by rpki-client