$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ee76b71-af27-4e90-a36a-cf8324847056.roa File: 4ee76b71-af27-4e90-a36a-cf8324847056.roa (raw, json) Hash identifier: aa6mNEF0DTUQJwYwKMtlfnS6vD8VYnINYKh/fyxxPgg= Subject key identifier: 1F:D6:D9:11:0A:F7:4A:7B:3D:1C:C6:ED:89:40:00:1B:61:C6:A9:BD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 36541929E01491108AAF4C6B9B44909BF72F4357 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ee76b71-af27-4e90-a36a-cf8324847056.roa Signing time: Mon 20 Oct 2025 08:00:12 +0000 ROA not before: Mon 20 Oct 2025 08:00:12 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:54:19:29:e0:14:91:10:8a:af:4c:6b:9b:44:90:9b:f7:2f:43:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 08:00:12 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=596195293539a85aa8afc88fa3c21478fdce9eab8e6e4387cb0f565acb7f6bcc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1d:31:d4:f2:e0:b6:3f:48:90:f3:46:16:5f: 04:d3:7d:a1:d4:b3:2e:eb:90:8b:0d:b1:37:65:2d: ec:8b:64:15:3a:a3:8e:b6:fa:62:86:70:9d:a8:62: 1a:38:cb:76:66:95:4d:a5:9b:fd:bd:75:28:52:46: dd:33:18:04:63:bd:f7:04:6c:bf:65:62:ea:2c:09: 67:c6:dc:b4:4b:92:f2:03:a6:b1:94:29:71:76:db: a3:0b:cf:3c:1e:07:ee:9f:3e:b3:6a:85:ed:ac:1b: d3:e2:07:a1:1e:10:f3:1a:c0:e0:ea:42:7e:b8:e6: a4:9d:0f:98:9f:ef:e6:fb:1b:8e:16:7f:71:76:16: 06:c9:38:f6:6e:bc:2e:24:d1:1a:70:96:7a:17:50: 93:35:93:25:f1:28:83:1f:8e:6c:df:5f:32:01:04: 47:e8:66:16:03:73:43:46:1e:ef:51:bd:8f:2b:85: f9:97:dc:62:c0:a2:a2:14:b9:88:31:61:1f:0b:5c: f1:b9:49:e0:8d:86:92:35:5b:dd:ed:e0:56:49:63: 93:9c:ab:1f:8d:99:aa:e6:97:2f:a2:30:f8:6b:14: 46:22:63:51:b6:50:95:99:19:f8:e1:34:06:58:e8: c1:eb:b8:c6:a4:7d:87:17:09:8d:92:1f:ab:a7:bc: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D6:D9:11:0A:F7:4A:7B:3D:1C:C6:ED:89:40:00:1B:61:C6:A9:BD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ee76b71-af27-4e90-a36a-cf8324847056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.229.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:e7:d5:28:ae:c7:63:86:1e:bd:59:03:d0:ff:37:c9:a1:db: bc:e2:b8:51:49:25:ab:38:f2:e8:68:49:2d:67:a0:52:02:ed: 39:bb:94:68:59:77:2c:b8:86:de:2a:bb:91:e9:36:c8:ad:8f: 68:fb:e3:d6:ac:66:b0:a9:a8:d3:0c:bf:12:47:09:dd:43:3d: c8:7a:53:b3:4e:53:c9:a8:ad:a5:af:f7:43:26:47:ce:45:2c: 72:f5:bd:b2:50:53:fa:dc:61:06:77:95:8c:af:b4:84:e6:b5: a0:38:96:97:87:e1:b4:52:73:92:fe:36:96:91:f4:2e:52:49: fc:1f:8d:7a:e3:51:4c:f1:ee:12:3f:d1:e4:c0:1f:e7:71:ce: 1a:ae:2d:ca:8c:12:90:46:ef:4a:0f:8a:ef:51:4b:55:6c:cb: fc:5b:db:42:7f:46:28:19:8c:3a:af:7b:07:0e:75:44:22:97: 99:eb:69:0c:d4:2a:a5:b5:31:b1:de:78:96:48:79:4d:82:37: d9:e1:b4:06:45:10:ef:44:91:f1:a0:57:d5:83:1c:33:20:e5: d2:c6:47:3a:52:f5:81:3f:fd:2d:83:79:cb:83:b2:16:91:40: e2:26:ea:55:09:7a:91:a7:1b:04:08:cd:59:b9:ac:8b:2b:86: d5:a8:ff:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNlQZKeAUkRCKr0xrm0SQm/cvQ1cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMDgwMDEyWhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTYxOTUyOTM1MzlhODVhYThhZmM4OGZhM2MyMTQ3OGZk Y2U5ZWFiOGU2ZTQzODdjYjBmNTY1YWNiN2Y2YmNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUHTHU8uC2P0iQ80YWXwTTfaHUsy7rkIsNsTdlLeyLZBU6 o462+mKGcJ2oYho4y3ZmlU2lm/29dShSRt0zGARjvfcEbL9lYuosCWfG3LRLkvID prGUKXF226MLzzweB+6fPrNqhe2sG9PiB6EeEPMawODqQn645qSdD5if7+b7G44W f3F2FgbJOPZuvC4k0RpwlnoXUJM1kyXxKIMfjmzfXzIBBEfoZhYDc0NGHu9RvY8r hfmX3GLAoqIUuYgxYR8LXPG5SeCNhpI1W93t4FZJY5Ocqx+Nmarmly+iMPhrFEYi Y1G2UJWZGfjhNAZY6MHruMakfYcXCY2SH6unvH7pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH9bZEQr3Sns9HMbtiUAAG2HGqb0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRlZTc2YjcxLWFmMjctNGU5MC1hMzZhLWNmODMyNDg0NzA1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpuUwDQYJKoZIhvcNAQELBQADggEBACzn1Siux2OGHr1ZA9D/N8mh27zi uFFJJas48uhoSS1noFIC7Tm7lGhZdyy4ht4qu5HpNsitj2j749asZrCpqNMMvxJH Cd1DPch6U7NOU8moraWv90MmR85FLHL1vbJQU/rcYQZ3lYyvtITmtaA4lpeH4bRS c5L+NpaR9C5SSfwfjXrjUUzx7hI/0eTAH+dxzhquLcqMEpBG70oPiu9RS1Vsy/xb 20J/RigZjDqvewcOdUQil5nraQzUKqW1MbHeeJZIeU2CN9nhtAZFEO9EkfGgV9WD HDMg5dLGRzpS9YE//S2DecuDshaRQOIm6lUJepGnGwQIzVm5rIsrhtWo/+4= -----END CERTIFICATE-----Generated at Mon Oct 20 15:45:05 2025 by rpki-client