$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae77fd5b-d93e-4226-b0fb-52da8bc4436c.roa File: ae77fd5b-d93e-4226-b0fb-52da8bc4436c.roa (raw, json) Hash identifier: RVyaf574c2R+0larF5wjJPArmz+ZK3jDFxb3OL/DLYQ= Subject key identifier: 1E:A1:BF:0C:8B:EA:E0:63:AF:A0:88:49:98:00:81:78:52:78:F1:48 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1A2EF01D755D7A86CAC08F14D001879F0CB07C24 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae77fd5b-d93e-4226-b0fb-52da8bc4436c.roa Signing time: Thu 25 Sep 2025 19:00:26 +0000 ROA not before: Thu 25 Sep 2025 19:00:26 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2e:f0:1d:75:5d:7a:86:ca:c0:8f:14:d0:01:87:9f:0c:b0:7c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:00:26 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=1515f9b0bea5ba3c2e0a3bf5a324e9011c7d449a581b81e945453482874d3fdf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:5d:7c:f9:5e:9d:2a:c7:95:70:d4:8d:72: 65:3e:ff:aa:f0:09:c1:e9:88:60:15:53:2b:f2:64: c1:bc:bf:f9:8e:3a:4a:db:bc:da:5a:08:58:40:70: 43:b8:9f:cc:ed:21:2d:ac:f5:26:38:aa:f1:60:8f: f7:f0:cb:3f:61:1f:a0:bb:d3:2d:af:6e:cb:21:22: 9a:95:e9:c1:ca:49:c4:4c:f4:db:af:b9:d6:53:53: f1:99:d3:02:23:94:00:ae:33:12:0b:3c:8b:f7:16: e5:29:0e:1c:15:de:fc:3d:51:0c:a4:02:61:76:67: 71:ae:5b:35:ca:f1:79:5b:30:42:76:b5:99:1b:4c: fe:a3:2e:7c:9d:5d:de:10:83:2b:14:e0:d5:4d:53: c9:49:dc:eb:14:b0:29:14:60:08:25:f4:20:19:4f: 12:c6:03:9e:48:86:3d:99:40:f6:46:f0:aa:cc:52: f5:e9:0a:40:f7:12:17:1d:ea:ee:94:36:f9:18:90: ca:5a:be:00:eb:60:9e:1b:66:31:10:45:ba:e7:c5: 77:e0:dd:30:5b:f5:13:e4:c2:40:68:1a:ba:2f:f0: 24:54:f8:3c:8f:c3:d1:ed:31:a1:fe:56:8f:dd:e4: 16:25:f3:e2:bf:bc:31:93:64:31:98:8b:3c:a9:cd: 4a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A1:BF:0C:8B:EA:E0:63:AF:A0:88:49:98:00:81:78:52:78:F1:48 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae77fd5b-d93e-4226-b0fb-52da8bc4436c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.28.0/24 Signature Algorithm: sha256WithRSAEncryption 60:0c:b8:31:49:f8:dd:17:a3:d5:dc:dc:98:7c:24:89:35:2f: 84:61:70:28:74:e1:0b:16:0c:f5:47:d8:23:65:09:7f:ec:73: 1c:21:c3:f1:8b:5b:06:f5:f2:95:92:17:08:cf:70:e8:e4:c9: 63:b5:3b:b6:73:44:ba:54:f1:1b:45:be:02:6a:6e:63:45:24: 13:16:60:6e:f2:14:68:75:b4:3b:7f:cc:42:4d:bd:60:ec:8c: 3e:d2:86:a6:db:71:31:de:42:a0:a7:ba:67:9a:a7:0e:ea:20: 74:f6:2b:78:91:e5:97:90:1d:81:25:91:2f:a0:32:76:20:85: 07:8a:de:ba:7a:a2:14:79:13:c6:74:1e:14:93:be:ca:03:a3: 84:79:ca:1f:61:5b:5a:01:6c:00:ed:25:5c:e6:6f:a3:a3:3f: 2b:ef:59:41:9e:02:6f:42:9c:25:b0:48:0f:2e:66:b0:47:7e: 02:c0:2a:3b:69:8e:d7:dd:8d:45:b2:47:3e:0e:bc:03:c6:67: 66:79:1b:d1:d8:5d:2e:44:8a:1b:e6:39:6b:68:76:e6:2e:db: 33:f9:c1:2e:36:33:42:ec:ed:78:4c:a4:ff:c0:c4:81:9b:d2: d1:04:04:27:11:61:70:09:89:00:52:c3:4e:8e:05:7f:79:2e: b5:00:59:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGi7wHXVdeobKwI8U0AGHnwywfCQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkwMDI2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTE1ZjliMGJlYTViYTNjMmUwYTNiZjVhMzI0ZTkwMTFj N2Q0NDlhNTgxYjgxZTk0NTQ1MzQ4Mjg3NGQzZmRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwAl18+V6dKseVcNSNcmU+/6rwCcHpiGAVUyvyZMG8v/mO OkrbvNpaCFhAcEO4n8ztIS2s9SY4qvFgj/fwyz9hH6C70y2vbsshIpqV6cHKScRM 9NuvudZTU/GZ0wIjlACuMxILPIv3FuUpDhwV3vw9UQykAmF2Z3GuWzXK8XlbMEJ2 tZkbTP6jLnydXd4QgysU4NVNU8lJ3OsUsCkUYAgl9CAZTxLGA55Ihj2ZQPZG8KrM UvXpCkD3Ehcd6u6UNvkYkMpavgDrYJ4bZjEQRbrnxXfg3TBb9RPkwkBoGrov8CRU +DyPw9HtMaH+Vo/d5BYl8+K/vDGTZDGYizypzUrPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHqG/DIvq4GOvoIhJmACBeFJ48UgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FlNzdmZDViLWQ5M2UtNDIyNi1iMGZiLTUyZGE4YmM0NDM2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpxwwDQYJKoZIhvcNAQELBQADggEBAGAMuDFJ+N0Xo9Xc3Jh8JIk1L4Rh cCh04QsWDPVH2CNlCX/scxwhw/GLWwb18pWSFwjPcOjkyWO1O7ZzRLpU8RtFvgJq bmNFJBMWYG7yFGh1tDt/zEJNvWDsjD7ShqbbcTHeQqCnumeapw7qIHT2K3iR5ZeQ HYElkS+gMnYghQeK3rp6ohR5E8Z0HhSTvsoDo4R5yh9hW1oBbADtJVzmb6OjPyvv WUGeAm9CnCWwSA8uZrBHfgLAKjtpjtfdjUWyRz4OvAPGZ2Z5G9HYXS5EihvmOWto duYu2zP5wS42M0Ls7XhMpP/AxIGb0tEEBCcRYXAJiQBSw06OBX95LrUAWZE= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:35 2025 by rpki-client