$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/defc94a3-612a-411c-b982-df01b3fb81c4.roa File: defc94a3-612a-411c-b982-df01b3fb81c4.roa (raw, json) Hash identifier: th1qI6OVUchubGUqcOH/2B4twg9YwLRjCtIfM55Rd20= Subject key identifier: 19:29:75:AE:94:39:2E:6B:6A:EF:5E:D8:FD:2A:4B:5C:A1:BD:DD:2A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 57FF74DF0005F38AB324824EEDE3C93493AA853D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/defc94a3-612a-411c-b982-df01b3fb81c4.roa Signing time: Fri 26 Sep 2025 00:13:02 +0000 ROA not before: Fri 26 Sep 2025 00:13:02 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ff:74:df:00:05:f3:8a:b3:24:82:4e:ed:e3:c9:34:93:aa:85:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:13:02 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=84ff7c014435436709a08210904fbcb9651727a4fba7285b8bdedcc94d353dbc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:12:7d:c1:a2:cb:98:83:ac:19:eb:6b:ca: e0:03:97:6f:71:fd:7e:8a:da:be:03:b8:3f:14:64: 64:38:1c:2a:a6:5f:f9:fc:ab:6a:3d:3b:44:85:0d: b7:62:31:14:90:37:28:3b:54:fb:2b:f3:1d:11:4f: f2:c3:23:a3:93:80:17:b0:74:b7:3d:f8:dd:f3:4a: f7:42:fd:3f:9a:ed:95:54:6a:e6:c6:30:1b:b3:55: 46:24:00:29:18:d5:b5:8e:f1:b0:f4:a0:cd:d1:f7: ca:39:ac:7c:e1:42:7c:f7:1a:26:c0:2a:80:d8:08: 97:49:b9:5e:8a:9e:7b:bb:17:cb:f5:3e:ba:ae:d2: cd:48:a2:db:d0:0f:ea:df:6e:ff:e3:3c:34:61:9a: 24:6b:33:b1:58:41:4f:33:62:03:80:e7:8c:63:52: 9a:39:ce:7e:e0:12:93:4f:3a:f9:b3:96:8f:23:0b: cc:6b:0c:a1:12:c8:21:11:54:52:58:9a:50:a6:15: 5f:af:42:25:97:a2:5c:f7:41:c5:40:5d:92:26:19: 5b:1e:b4:fd:7d:7d:43:58:03:7d:6f:fa:54:bf:71: bd:61:7c:da:28:df:1a:1f:87:f0:62:13:af:5f:d6: af:9f:c7:fc:05:5f:70:a8:1c:cd:1f:b1:60:a1:af: 8b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:29:75:AE:94:39:2E:6B:6A:EF:5E:D8:FD:2A:4B:5C:A1:BD:DD:2A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/defc94a3-612a-411c-b982-df01b3fb81c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.20.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:72:df:3b:b4:3a:99:47:0e:aa:21:f7:69:ef:12:bb:9f:0e: c2:39:54:9f:e2:51:7c:61:52:15:a2:34:c6:97:f9:09:1c:b1: 03:46:c5:3c:00:f9:c5:55:0b:a3:60:99:bb:00:49:06:18:24: 00:2b:12:21:d7:96:94:ec:a6:07:9c:24:fd:c2:2c:dd:7a:eb: 26:9f:6d:2b:ab:93:6d:0a:b2:f2:0b:60:a5:88:f4:3b:1b:ae: 6d:db:64:54:69:dc:c8:df:92:b8:55:41:db:b0:04:e9:b0:49: 1a:fd:83:29:0d:39:f4:1f:6d:7f:9f:a7:3f:5e:09:67:12:2b: 03:77:3b:47:ab:39:57:58:77:ef:50:01:59:ff:95:09:ee:3b: 99:7c:f5:2f:62:dc:f7:80:b1:2b:ee:8a:a7:ca:b4:b5:17:c4: a7:20:0c:75:3d:c2:9d:01:f9:74:0b:91:83:bf:bb:94:7d:ed: cc:01:35:20:53:65:d7:35:c0:57:4d:7a:8a:91:c2:a4:d6:27: ed:6a:30:80:78:48:2c:dd:82:12:04:b7:0e:2f:e6:64:22:d0: 1f:96:39:40:26:68:36:c8:4b:18:7e:45:66:3d:f4:b3:21:ab: aa:7a:5d:a0:56:85:f6:bb:7a:4b:61:e5:fd:7c:f7:e6:5f:5d: 26:73:ec:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV/903wAF84qzJIJO7ePJNJOqhT0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDAxMzAyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NGZmN2MwMTQ0MzU0MzY3MDlhMDgyMTA5MDRmYmNiOTY1 MTcyN2E0ZmJhNzI4NWI4YmRlZGNjOTRkMzUzZGJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGZhJ9waLLmIOsGetryuADl29x/X6K2r4DuD8UZGQ4HCqm X/n8q2o9O0SFDbdiMRSQNyg7VPsr8x0RT/LDI6OTgBewdLc9+N3zSvdC/T+a7ZVU aubGMBuzVUYkACkY1bWO8bD0oM3R98o5rHzhQnz3GibAKoDYCJdJuV6Knnu7F8v1 Prqu0s1IotvQD+rfbv/jPDRhmiRrM7FYQU8zYgOA54xjUpo5zn7gEpNPOvmzlo8j C8xrDKESyCERVFJYmlCmFV+vQiWXolz3QcVAXZImGVsetP19fUNYA31v+lS/cb1h fNoo3xofh/BiE69f1q+fx/wFX3CoHM0fsWChr4ttAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGSl1rpQ5Lmtq717Y/SpLXKG93SowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RlZmM5NGEzLTYxMmEtNDExYy1iOTgyLWRmMDFiM2ZiODFjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDpBQwDQYJKoZIhvcNAQELBQADggEBAExy3zu0OplHDqoh92nvErufDsI5 VJ/iUXxhUhWiNMaX+QkcsQNGxTwA+cVVC6NgmbsASQYYJAArEiHXlpTspgecJP3C LN166yafbSurk20KsvILYKWI9Dsbrm3bZFRp3MjfkrhVQduwBOmwSRr9gykNOfQf bX+fpz9eCWcSKwN3O0erOVdYd+9QAVn/lQnuO5l89S9i3PeAsSvuiqfKtLUXxKcg DHU9wp0B+XQLkYO/u5R97cwBNSBTZdc1wFdNeoqRwqTWJ+1qMIB4SCzdghIEtw4v 5mQi0B+WOUAmaDbISxh+RWY99LMhq6p6XaBWhfa7ekth5f189+ZfXSZz7CQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:12:45 2025 by rpki-client