$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20afc85b-1bdd-4116-8a51-9704c6bebe84.roa File: 20afc85b-1bdd-4116-8a51-9704c6bebe84.roa (raw, json) Hash identifier: L3FXnqyZVchZS2dg/wR8ijjYIOaELI+09T64toCJG+s= Subject key identifier: 4A:60:E6:77:5F:F0:FF:E0:34:AA:52:B0:CE:E1:BB:F3:3E:0D:D7:41 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72E41760577983A9915A5F640F1A0123C6664E92 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20afc85b-1bdd-4116-8a51-9704c6bebe84.roa Signing time: Thu 25 Sep 2025 18:29:44 +0000 ROA not before: Thu 25 Sep 2025 18:29:44 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e4:17:60:57:79:83:a9:91:5a:5f:64:0f:1a:01:23:c6:66:4e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:29:44 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=0cadebcfff52dbcf9325d785dd4c36303cfcade22dd3b4e215886d938e3d36e7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:5f:27:8e:9b:d2:ea:45:75:31:7a:ce:26: 28:7d:7f:04:be:5f:4c:07:ee:33:5c:87:e4:c7:94: b5:27:1a:c7:91:fa:c0:ad:b1:be:7f:c9:10:a8:03: f1:d6:2c:36:f5:fb:6f:f7:b8:e8:0f:14:c8:64:7b: 74:c5:83:f9:3c:f1:71:91:4e:e4:07:88:a0:d4:b0: 4a:8e:7a:66:24:75:91:f4:85:2b:2b:06:a3:78:a8: db:4f:13:25:c2:9d:52:c9:2b:8b:79:f1:23:7d:cd: 39:7e:d1:28:ae:8a:91:06:50:fc:99:e3:5b:c4:4b: 58:e9:ca:77:fa:eb:a9:42:a2:31:8c:2e:71:4e:01: 6b:f4:84:a4:ce:99:81:15:35:fc:67:26:9c:05:af: 4e:58:d5:4d:bb:4c:9a:89:38:a2:f8:03:e1:5b:3e: f7:00:03:22:4b:c4:41:7f:b8:f7:92:87:68:0f:15: de:e3:1b:ca:c3:1f:3e:d0:55:eb:9f:99:e9:61:8b: f7:db:a2:0f:1a:46:2e:20:a6:9c:61:27:c8:e1:a9: 52:32:b2:96:70:02:8e:9f:42:7b:cf:f4:bb:02:1c: dd:7d:04:33:8b:af:28:14:89:0b:25:b8:29:20:5a: 7b:5e:db:57:86:c1:41:63:84:41:89:7b:00:bd:d8: b0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:60:E6:77:5F:F0:FF:E0:34:AA:52:B0:CE:E1:BB:F3:3E:0D:D7:41 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20afc85b-1bdd-4116-8a51-9704c6bebe84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.111.0/24 Signature Algorithm: sha256WithRSAEncryption 17:06:d2:c9:46:73:d1:35:c7:61:55:e6:84:d1:b4:69:b1:a2: 98:bf:00:11:9d:cb:ca:de:a5:ca:0e:73:77:69:17:11:5d:79: fc:96:30:b2:d6:22:8f:01:74:9d:36:62:1a:d0:d9:18:45:58: 69:d2:3c:89:6d:c2:54:80:33:15:7c:58:a7:63:0c:7e:9d:24: 41:c6:0e:b5:b1:87:9a:9f:de:15:d0:3f:fb:6b:d9:84:e5:5c: aa:c6:cf:fe:ce:43:b9:ba:9d:8e:79:54:26:6a:10:7b:1b:55: 48:3f:14:a0:40:eb:5e:36:8d:de:07:3d:dc:30:8a:81:a0:16: b1:9f:ef:d4:25:a0:46:a1:3c:3c:50:82:b0:8a:94:cc:6e:e9: a1:df:2e:a4:9a:cf:15:b5:40:ba:50:9d:d7:2c:42:da:b7:28: fd:74:a6:0c:65:55:0a:32:23:53:ca:af:a3:67:8d:1b:08:a2: 83:e4:7f:fb:08:a5:1b:d5:bf:7f:79:48:74:33:5a:a0:2c:b3: 30:ba:02:61:5e:55:16:e7:25:4d:45:87:1e:20:a8:6d:73:8f: 53:06:c4:f5:76:8d:4d:62:83:b9:81:b0:43:5f:97:89:d0:23: 0e:0b:c1:6f:86:ab:46:e0:23:b4:41:d0:b8:30:e2:5e:e6:1a: 78:ec:4d:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcuQXYFd5g6mRWl9kDxoBI8ZmTpIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgyOTQ0WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2FkZWJjZmZmNTJkYmNmOTMyNWQ3ODVkZDRjMzYzMDNj ZmNhZGUyMmRkM2I0ZTIxNTg4NmQ5MzhlM2QzNmU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvRF8njpvS6kV1MXrOJih9fwS+X0wH7jNch+THlLUnGseR +sCtsb5/yRCoA/HWLDb1+2/3uOgPFMhke3TFg/k88XGRTuQHiKDUsEqOemYkdZH0 hSsrBqN4qNtPEyXCnVLJK4t58SN9zTl+0SiuipEGUPyZ41vES1jpynf666lCojGM LnFOAWv0hKTOmYEVNfxnJpwFr05Y1U27TJqJOKL4A+FbPvcAAyJLxEF/uPeSh2gP Fd7jG8rDHz7QVeufmelhi/fbog8aRi4gppxhJ8jhqVIyspZwAo6fQnvP9LsCHN19 BDOLrygUiQsluCkgWnte21eGwUFjhEGJewC92LCnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSmDmd1/w/+A0qlKwzuG78z4N10EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIwYWZjODViLTFiZGQtNDExNi04YTUxLTk3MDRjNmJlYmU4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpm8wDQYJKoZIhvcNAQELBQADggEBABcG0slGc9E1x2FV5oTRtGmxopi/ ABGdy8repcoOc3dpFxFdefyWMLLWIo8BdJ02YhrQ2RhFWGnSPIltwlSAMxV8WKdj DH6dJEHGDrWxh5qf3hXQP/tr2YTlXKrGz/7OQ7m6nY55VCZqEHsbVUg/FKBA6142 jd4HPdwwioGgFrGf79QloEahPDxQgrCKlMxu6aHfLqSazxW1QLpQndcsQtq3KP10 pgxlVQoyI1PKr6NnjRsIooPkf/sIpRvVv395SHQzWqAsszC6AmFeVRbnJU1Fhx4g qG1zj1MGxPV2jU1ig7mBsENfl4nQIw4LwW+Gq0bgI7RB0Lgw4l7mGnjsTXg= -----END CERTIFICATE-----Generated at Sat Oct 18 05:08:49 2025 by rpki-client