$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ee43bd0-f46b-4015-942e-21e88aecb11d.roa File: 8ee43bd0-f46b-4015-942e-21e88aecb11d.roa (raw, json) Hash identifier: pfY2iQbm0CcZkOVEl9ZfFn4wItOmcQ377/Pn6P/jTQ0= Subject key identifier: 98:20:54:79:C4:B5:E0:BC:82:20:DE:A9:ED:CA:3B:20:D1:9E:E4:BA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 105AC4EDFAD86063BB339FB12DE07E7CA0F4087B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ee43bd0-f46b-4015-942e-21e88aecb11d.roa Signing time: Mon 20 Oct 2025 17:11:18 +0000 ROA not before: Mon 20 Oct 2025 17:11:18 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5a:c4:ed:fa:d8:60:63:bb:33:9f:b1:2d:e0:7e:7c:a0:f4:08:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 17:11:18 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=d36f6fce41a30ffe90c6e333898f1330e0a9842c09e516c525f90f5105ea01c8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:15:ff:80:2e:43:87:cb:55:88:4c:f4:00:c0: c8:8c:7d:96:e1:4b:15:e8:c6:5d:fb:47:0d:a9:6a: 15:d9:bf:23:3c:b7:e2:d0:14:ab:c9:10:fe:35:0e: 27:27:65:c3:27:25:ee:72:9e:a9:00:bc:57:9d:ff: 2e:9a:5d:80:b6:b6:09:a1:30:bf:b5:9d:72:b2:a1: d1:8b:8c:8f:7b:d8:a1:31:dd:7d:04:03:4f:30:79: 56:8f:c3:e2:79:58:39:fa:a3:08:52:3c:07:a7:2a: d1:b8:a9:ad:94:06:1f:bd:6c:6d:e4:e3:9e:51:a0: 33:f6:26:07:52:c8:94:37:8e:cd:6d:fd:6a:07:7b: 93:e3:d4:f9:7f:e3:14:29:6a:78:49:98:9a:36:09: ba:fc:4c:cc:f9:1d:8a:73:ab:b7:55:33:45:2e:49: ea:ab:3e:7c:b4:fb:78:66:a9:13:33:1e:0c:68:c9: de:a3:fd:ad:e8:0d:97:61:4a:40:72:51:06:50:de: 9c:4b:39:48:be:14:52:72:c3:0c:19:82:6a:69:29: 59:ef:64:3b:d6:25:13:7a:c9:d1:2b:5f:36:15:d5: 04:66:d8:e9:0c:a6:a3:68:db:6d:01:e5:22:37:73: 80:3a:a6:ec:64:dd:56:4a:68:9e:13:85:ce:03:8c: ac:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:20:54:79:C4:B5:E0:BC:82:20:DE:A9:ED:CA:3B:20:D1:9E:E4:BA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ee43bd0-f46b-4015-942e-21e88aecb11d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.124.0/24 Signature Algorithm: sha256WithRSAEncryption 94:cf:79:d9:bc:ab:59:2a:4b:c7:64:4f:a9:ce:ae:8a:bf:e2: 4b:bd:17:b6:84:ad:2f:7d:29:48:30:7d:4b:86:2b:31:4c:7a: 1e:86:9d:69:4d:a2:35:d7:f0:40:2c:b9:6a:9d:c2:93:93:f9: 54:61:ce:32:83:e2:77:f9:92:21:42:6a:70:07:ed:81:d8:3b: 6c:a8:60:89:e1:46:d7:09:66:d5:c9:8e:55:84:7e:52:66:6e: 28:b0:41:25:51:3b:08:14:e6:82:db:0f:51:1a:d7:11:37:57: 69:00:93:97:fa:93:e3:a6:8a:33:aa:a7:88:12:f9:af:6d:7e: b6:95:3a:d7:86:a5:09:0f:68:ba:8c:e4:e3:8d:97:15:5c:8d: 1e:30:9b:8b:ab:80:26:fd:90:6b:fd:0a:33:63:6d:d1:28:fb: c3:ff:e3:fb:78:e2:40:c4:bd:a1:0d:76:d6:16:d4:32:fe:31: a8:b8:5d:aa:b2:3b:76:2c:70:8a:5f:b7:43:ad:04:ba:a5:33: 46:42:3d:02:19:f1:b1:00:92:e0:07:97:1b:4e:f8:a3:a2:e7: 02:74:31:ab:4a:6e:c1:c0:0f:25:93:d5:14:4a:1a:d3:f9:3e: 0c:b8:2a:b6:fd:c3:7c:81:ef:5c:62:fc:15:85:cf:ed:50:63: fc:df:a6:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEFrE7frYYGO7M5+xLeB+fKD0CHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMTcxMTE4WhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzZmNmZjZTQxYTMwZmZlOTBjNmUzMzM4OThmMTMzMGUw YTk4NDJjMDllNTE2YzUyNWY5MGY1MTA1ZWEwMWM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUFf+ALkOHy1WITPQAwMiMfZbhSxXoxl37Rw2pahXZvyM8 t+LQFKvJEP41DicnZcMnJe5ynqkAvFed/y6aXYC2tgmhML+1nXKyodGLjI972KEx 3X0EA08weVaPw+J5WDn6owhSPAenKtG4qa2UBh+9bG3k455RoDP2JgdSyJQ3js1t /WoHe5Pj1Pl/4xQpanhJmJo2Cbr8TMz5HYpzq7dVM0UuSeqrPny0+3hmqRMzHgxo yd6j/a3oDZdhSkByUQZQ3pxLOUi+FFJywwwZgmppKVnvZDvWJRN6ydErXzYV1QRm 2OkMpqNo220B5SI3c4A6puxk3VZKaJ4Thc4DjKzRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmCBUecS14LyCIN6p7co7INGe5LowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhlZTQzYmQwLWY0NmItNDAxNS05NDJlLTIxZTg4YWVjYjExZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrHwwDQYJKoZIhvcNAQELBQADggEBAJTPedm8q1kqS8dkT6nOroq/4ku9 F7aErS99KUgwfUuGKzFMeh6GnWlNojXX8EAsuWqdwpOT+VRhzjKD4nf5kiFCanAH 7YHYO2yoYInhRtcJZtXJjlWEflJmbiiwQSVROwgU5oLbD1Ea1xE3V2kAk5f6k+Om ijOqp4gS+a9tfraVOteGpQkPaLqM5OONlxVcjR4wm4urgCb9kGv9CjNjbdEo+8P/ 4/t44kDEvaENdtYW1DL+Mai4XaqyO3YscIpft0OtBLqlM0ZCPQIZ8bEAkuAHlxtO +KOi5wJ0MatKbsHADyWT1RRKGtP5Pgy4Krb9w3yB71xi/BWFz+1QY/zfptI= -----END CERTIFICATE-----Generated at Mon Oct 20 20:26:54 2025 by rpki-client