$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b49ae371-617a-4590-992c-8bf6803bf7f2.roa File: b49ae371-617a-4590-992c-8bf6803bf7f2.roa (raw, json) Hash identifier: ajrVJ3BfEFDC1upadJ4uOrULywkNa2N1QQssjKdEzHY= Subject key identifier: 75:5F:F8:90:91:08:03:2A:AD:D0:AF:89:1F:13:3B:57:C9:5E:F6:B7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 69015C62759C77C4BE143D11CB4B87D9FF9D2DAB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b49ae371-617a-4590-992c-8bf6803bf7f2.roa Signing time: Thu 25 Sep 2025 22:24:12 +0000 ROA not before: Thu 25 Sep 2025 22:24:12 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:01:5c:62:75:9c:77:c4:be:14:3d:11:cb:4b:87:d9:ff:9d:2d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:24:12 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=9a65928825b00a02cdf3601969669d3dfa6f4fbdad5755851030ef4dc09a6bd4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:81:c2:b9:bf:ba:72:88:6f:2a:82:1e:0c:7d: c5:98:ad:53:de:bf:06:df:35:db:f9:05:85:10:2b: 32:b9:7c:e2:c7:f3:40:ba:92:33:00:c3:76:46:38: d2:b1:3a:2c:6e:0b:81:32:55:52:ee:10:7f:5b:1a: c0:1c:87:ed:5f:8e:17:14:b1:2e:d0:78:7c:11:bc: ff:45:b5:31:64:0a:ae:66:bc:c4:21:e3:2f:db:81: c7:09:1d:66:93:33:6a:9f:ec:ce:c0:18:aa:00:0d: 8d:b1:7c:df:ca:60:7a:8c:a7:83:0a:e3:47:a3:37: f9:ed:55:11:a9:a3:34:d8:64:51:f4:68:ad:f4:d9: 82:cf:57:b8:1d:50:06:a2:95:e2:d7:7b:c9:69:2e: e5:5c:21:6b:70:48:35:37:f0:f3:24:56:b5:7c:64: 6f:65:b6:ca:df:fd:e5:4d:a6:37:98:ab:ac:79:43: 48:8b:0b:79:8b:9c:32:b6:cd:43:8a:35:4e:5d:92: 67:a5:6e:3c:59:10:42:d3:84:e6:3b:b4:92:82:24: 97:4a:ed:e5:91:94:71:b9:53:ac:77:e7:34:0b:52: 19:28:0a:03:24:cc:61:f8:58:d8:61:9e:0e:42:c3: bc:75:c7:63:96:a1:6c:75:25:72:80:ce:60:65:0b: 6a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5F:F8:90:91:08:03:2A:AD:D0:AF:89:1F:13:3B:57:C9:5E:F6:B7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b49ae371-617a-4590-992c-8bf6803bf7f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.150.0/23 Signature Algorithm: sha256WithRSAEncryption 29:05:95:37:09:64:57:94:8f:45:fa:c1:25:c4:d8:a0:3f:d7: 04:fb:62:a7:3a:8a:08:60:5c:c5:ac:2d:a4:40:c7:c9:15:d3: 3a:91:89:5e:8b:81:1a:f5:d8:f0:b0:a8:ed:76:47:ef:f1:dd: 87:db:7e:81:91:d4:ee:bc:db:b2:c4:66:01:82:b8:34:85:25: 79:c0:e5:33:6b:a2:b1:fd:79:4d:0a:09:e2:eb:c0:d4:ee:33: c9:c4:d3:fa:bb:02:10:8c:d8:1d:4f:24:14:b8:c6:cc:6b:28: 78:e2:27:2d:da:e3:34:85:6b:d3:5c:9e:17:3b:11:fa:fc:c5: 1c:41:34:09:f8:d4:7a:3a:6a:11:6e:db:68:74:95:3f:ad:b4: 9d:9f:84:60:96:17:08:ca:87:03:30:57:a2:14:a0:04:d4:52: a7:b2:26:80:c7:bb:31:1e:08:c9:95:8f:63:5f:82:b2:90:4a: b5:d4:f8:b3:98:e0:9e:69:5c:b1:de:16:22:81:32:d4:8e:9a: 07:4b:ae:f5:10:dc:3e:bb:de:c3:c7:e5:94:dc:a2:16:58:c0: 6f:a9:7e:1d:87:4e:0e:c2:52:cd:93:93:23:a6:f2:80:0f:e7: 41:75:0c:03:d4:2d:e1:61:c5:87:73:9e:94:55:60:12:d2:3a: d6:54:83:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaQFcYnWcd8S+FD0Ry0uH2f+dLaswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIyNDEyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTY1OTI4ODI1YjAwYTAyY2RmMzYwMTk2OTY2OWQzZGZh NmY0ZmJkYWQ1NzU1ODUxMDMwZWY0ZGMwOWE2YmQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIgcK5v7pyiG8qgh4MfcWYrVPevwbfNdv5BYUQKzK5fOLH 80C6kjMAw3ZGONKxOixuC4EyVVLuEH9bGsAch+1fjhcUsS7QeHwRvP9FtTFkCq5m vMQh4y/bgccJHWaTM2qf7M7AGKoADY2xfN/KYHqMp4MK40ejN/ntVRGpozTYZFH0 aK302YLPV7gdUAaileLXe8lpLuVcIWtwSDU38PMkVrV8ZG9ltsrf/eVNpjeYq6x5 Q0iLC3mLnDK2zUOKNU5dkmelbjxZEELThOY7tJKCJJdK7eWRlHG5U6x35zQLUhko CgMkzGH4WNhhng5Cw7x1x2OWoWx1JXKAzmBlC2q5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdV/4kJEIAyqt0K+JHxM7V8le9rcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I0OWFlMzcxLTYxN2EtNDU5MC05OTJjLThiZjY4MDNiZjdmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDppYwDQYJKoZIhvcNAQELBQADggEBACkFlTcJZFeUj0X6wSXE2KA/1wT7 Yqc6ighgXMWsLaRAx8kV0zqRiV6LgRr12PCwqO12R+/x3YfbfoGR1O6827LEZgGC uDSFJXnA5TNrorH9eU0KCeLrwNTuM8nE0/q7AhCM2B1PJBS4xsxrKHjiJy3a4zSF a9Ncnhc7Efr8xRxBNAn41Ho6ahFu22h0lT+ttJ2fhGCWFwjKhwMwV6IUoATUUqey JoDHuzEeCMmVj2NfgrKQSrXU+LOY4J5pXLHeFiKBMtSOmgdLrvUQ3D673sPH5ZTc ohZYwG+pfh2HTg7CUs2TkyOm8oAP50F1DAPULeFhxYdznpRVYBLSOtZUg3g= -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:52 2025 by rpki-client