$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ceef9fb8-922c-4a63-9659-50b4838707e4.roa File: ceef9fb8-922c-4a63-9659-50b4838707e4.roa (raw, json) Hash identifier: zYEt5dq1QwTpwTuwNside97tlnCrsG6gfjupfI+TznI= Subject key identifier: CC:EA:1F:68:E7:9F:66:40:9F:B7:A5:D3:3F:3A:BA:0A:24:D5:94:95 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 480F6D571AB77C7E6D191966991F6DB0289F8A59 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ceef9fb8-922c-4a63-9659-50b4838707e4.roa Signing time: Fri 26 Sep 2025 01:54:29 +0000 ROA not before: Fri 26 Sep 2025 01:54:29 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0f:6d:57:1a:b7:7c:7e:6d:19:19:66:99:1f:6d:b0:28:9f:8a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:54:29 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=28b88f7958f4022ad237ce5069c7e651fbd255dd8e82c42958582cbcf7b919cd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:0d:e4:d5:bf:ad:ab:96:ab:c1:ce:fa:9a: d0:80:f4:16:92:38:da:2d:57:a4:2f:e5:62:a1:f9: 6b:ef:f9:ec:a7:42:c4:a3:82:52:b3:75:31:d7:0d: a5:30:ed:02:d7:96:48:66:cf:7c:db:ac:6f:03:08: d5:fc:0a:47:7a:9d:c1:eb:3d:3b:99:fd:d6:56:b5: 69:e9:ad:50:1b:5c:fa:01:20:cf:96:5f:a5:60:34: 4c:c6:78:ac:59:1f:ac:5c:e2:1f:9b:1f:2c:34:af: 47:6c:0f:87:65:fa:0e:cd:5d:b0:06:64:ae:2b:d4: fc:38:82:c1:38:b4:e3:9b:1c:89:d7:fc:3b:35:66: c1:38:31:a3:f0:1f:56:9d:11:49:9f:de:fd:23:47: 8b:89:9f:f4:f2:bc:f9:06:ec:4d:27:19:45:83:f5: c7:fe:f2:c9:96:da:f8:85:5e:8f:ec:63:17:c8:1f: 74:62:a6:8a:98:2a:c4:a0:9b:21:f2:ff:97:01:a0: ec:f3:d8:09:75:6c:8d:bb:e1:99:97:ae:45:fa:ed: 2a:12:5b:46:29:f5:c1:04:c5:0e:ab:36:58:ff:1e: e7:eb:0c:eb:5d:a7:8d:b9:bb:9f:f1:58:ad:14:86: 07:d8:2f:07:37:39:7b:84:18:0e:3e:02:73:64:b0: e1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EA:1F:68:E7:9F:66:40:9F:B7:A5:D3:3F:3A:BA:0A:24:D5:94:95 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ceef9fb8-922c-4a63-9659-50b4838707e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.0.0/20 Signature Algorithm: sha256WithRSAEncryption 1f:3d:a2:12:e5:9c:e1:ec:e8:29:4f:02:db:50:07:68:7b:f2: 77:61:70:6a:23:6d:03:d2:7f:0e:19:9d:1b:a0:39:8d:fc:f9: dc:bc:0a:48:44:87:2f:ae:08:33:01:f1:64:87:15:8c:37:6d: 2e:b7:7a:a0:dd:fc:d6:35:34:27:04:74:a0:fc:e2:61:33:d3: 8d:a8:67:e4:5d:ab:93:a0:57:ba:d5:d8:8a:34:14:7b:94:fa: 60:ce:d4:96:11:87:e7:51:dc:c8:68:fe:6e:ce:15:21:7e:23: ab:9b:55:74:15:36:fa:97:37:c9:b6:ef:da:3d:58:c5:8f:07: 01:60:e9:f4:72:20:ee:ca:8f:0a:72:70:b1:7b:fd:0b:99:62: 13:d8:42:79:64:8d:62:8a:4f:3c:55:7c:a4:2e:0c:eb:41:60: 10:fc:0a:b4:1b:da:40:69:40:f5:93:d4:b9:cf:9a:ee:91:a2: 99:78:5c:b1:07:3a:c7:9a:18:f8:6c:2c:6e:b2:4d:95:53:2c: 54:8f:ba:43:eb:5a:3d:e6:e7:e7:11:ea:58:e2:e9:e0:4a:55: 4c:fd:c9:d2:22:64:72:1b:e8:68:73:18:16:8c:35:39:5a:34: 8d:30:6c:aa:19:06:a9:a1:09:ee:cf:20:b3:8b:fc:00:69:a3: a0:0c:21:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSA9tVxq3fH5tGRlmmR9tsCifilkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDE1NDI5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOGI4OGY3OTU4ZjQwMjJhZDIzN2NlNTA2OWM3ZTY1MWZi ZDI1NWRkOGU4MmM0Mjk1ODU4MmNiY2Y3YjkxOWNkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDILA3k1b+tq5arwc76mtCA9BaSONotV6Qv5WKh+Wvv+eyn QsSjglKzdTHXDaUw7QLXlkhmz3zbrG8DCNX8Ckd6ncHrPTuZ/dZWtWnprVAbXPoB IM+WX6VgNEzGeKxZH6xc4h+bHyw0r0dsD4dl+g7NXbAGZK4r1Pw4gsE4tOObHInX /Ds1ZsE4MaPwH1adEUmf3v0jR4uJn/TyvPkG7E0nGUWD9cf+8smW2viFXo/sYxfI H3RipoqYKsSgmyHy/5cBoOzz2Al1bI274ZmXrkX67SoSW0Yp9cEExQ6rNlj/Hufr DOtdp425u5/xWK0UhgfYLwc3OXuEGA4+AnNksOEbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzOofaOefZkCft6XTPzq6CiTVlJUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NlZWY5ZmI4LTkyMmMtNGE2My05NjU5LTUwYjQ4Mzg3MDdlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDqgAwDQYJKoZIhvcNAQELBQADggEBAB89ohLlnOHs6ClPAttQB2h78ndh cGojbQPSfw4ZnRugOY38+dy8CkhEhy+uCDMB8WSHFYw3bS63eqDd/NY1NCcEdKD8 4mEz042oZ+Rdq5OgV7rV2Io0FHuU+mDO1JYRh+dR3Mho/m7OFSF+I6ubVXQVNvqX N8m279o9WMWPBwFg6fRyIO7KjwpycLF7/QuZYhPYQnlkjWKKTzxVfKQuDOtBYBD8 CrQb2kBpQPWT1LnPmu6Ropl4XLEHOseaGPhsLG6yTZVTLFSPukPrWj3m5+cR6lji 6eBKVUz9ydIiZHIb6GhzGBaMNTlaNI0wbKoZBqmhCe7PILOL/ABpo6AMIe0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:37 2025 by rpki-client