$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee1bc662-a83f-4bd2-92e9-f1ad008172af.roa File: ee1bc662-a83f-4bd2-92e9-f1ad008172af.roa (raw, json) Hash identifier: 7Eno9mQbpXWzKHOPhGc0Mweg/F0MAfyXqdAD/ltl7KA= Subject key identifier: 3A:E5:11:B7:34:7B:11:2E:0A:09:DF:92:18:72:FC:81:16:3F:2E:33 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20BF1D9BD87737FB929C4BF252262A6FD86EFE1F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee1bc662-a83f-4bd2-92e9-f1ad008172af.roa Signing time: Thu 25 Sep 2025 23:37:16 +0000 ROA not before: Thu 25 Sep 2025 23:37:16 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bf:1d:9b:d8:77:37:fb:92:9c:4b:f2:52:26:2a:6f:d8:6e:fe:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:37:16 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=f78bcb6f6e68c4582de929468513e55e6e7f053db1a3941b485e90fc7a04f1f7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:3b:cb:55:8f:d4:2f:a6:20:26:04:3b:8d: 92:07:c7:66:43:85:d4:4b:e5:13:d5:71:9b:3c:4f: 46:ed:9d:5b:10:ca:19:dc:28:af:c2:cd:1e:47:2d: c9:58:1d:27:3c:20:ae:8e:85:af:64:d4:35:cf:f2: 72:93:34:26:81:9f:37:0d:ea:1d:ff:a6:c5:d6:c6: a9:d9:9d:f5:e0:6c:8f:04:32:c8:c1:67:4f:58:0d: df:f5:3b:81:ad:e3:a9:5f:b2:db:a0:0e:c9:96:55: 32:b3:01:d1:98:1c:e5:9e:9d:97:57:fa:26:f5:99: d7:f3:54:d6:a0:7e:bf:ed:1c:7d:1d:34:e5:ac:4d: 62:aa:2a:d4:f6:27:27:14:ea:0d:84:48:33:2e:6b: 3b:41:7e:88:ed:c0:43:7f:94:2c:ee:ce:be:49:7c: b2:6d:4a:df:4c:b3:a4:1e:30:ea:3b:42:61:2f:ef: 36:3a:f5:b9:fb:33:c0:da:ac:d5:20:da:b5:c4:b9: 2f:a2:37:a6:58:d2:53:52:15:4c:a7:5e:cc:8f:9f: 4f:0d:30:72:b0:03:85:05:87:e7:37:1c:28:86:9d: e6:02:09:6b:99:b2:11:41:f0:87:ee:10:05:72:df: 6d:8d:3a:77:e1:da:38:6e:db:be:f7:da:d6:a2:4f: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E5:11:B7:34:7B:11:2E:0A:09:DF:92:18:72:FC:81:16:3F:2E:33 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee1bc662-a83f-4bd2-92e9-f1ad008172af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.220.0/23 Signature Algorithm: sha256WithRSAEncryption 16:3b:c9:94:70:19:67:47:96:7b:a4:b3:8e:42:40:3a:e5:5a: 50:67:4d:1e:52:08:bd:e1:d5:85:5e:a8:a8:4f:45:31:45:6c: 5a:a6:d7:5a:fa:d4:3e:e2:34:e1:1e:26:79:79:2e:97:85:29: 2d:c5:cc:c1:24:de:d1:c3:d7:df:c1:eb:1e:ba:50:9e:79:ea: 2b:92:6c:c0:ce:36:57:b7:a3:73:0e:05:74:91:1f:2d:9c:b8: 79:60:8f:44:6b:83:e3:db:96:7b:fc:95:e0:d4:de:23:c5:93: cb:78:7b:dc:d3:ec:1b:2a:0b:c7:4e:8f:7f:68:47:75:07:2e: 15:cd:7b:93:e6:97:a0:a6:19:2c:4d:cb:2f:5c:64:20:e8:b8: ca:07:27:b6:45:db:9c:36:11:5c:50:13:7f:85:a1:c8:a2:8b: 19:28:a0:0f:a1:78:92:1a:f0:b7:3f:27:37:88:17:41:3d:cc: c1:93:84:f6:fc:22:80:58:24:1f:05:0b:a9:21:ae:2c:5c:f3: b5:c6:7a:48:b0:e0:c8:bf:88:4f:e5:b3:34:89:ee:21:48:13: f7:15:6b:1d:5d:39:65:d0:0b:f3:6e:b7:c8:38:b3:77:e5:a1: a7:bf:06:ad:42:5b:50:fc:ac:9d:75:50:db:f7:0f:25:c7:a1: cb:f2:d7:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIL8dm9h3N/uSnEvyUiYqb9hu/h8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMzNzE2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzhiY2I2ZjZlNjhjNDU4MmRlOTI5NDY4NTEzZTU1ZTZl N2YwNTNkYjFhMzk0MWI0ODVlOTBmYzdhMDRmMWY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyejvLVY/UL6YgJgQ7jZIHx2ZDhdRL5RPVcZs8T0btnVsQ yhncKK/CzR5HLclYHSc8IK6Oha9k1DXP8nKTNCaBnzcN6h3/psXWxqnZnfXgbI8E MsjBZ09YDd/1O4Gt46lfstugDsmWVTKzAdGYHOWenZdX+ib1mdfzVNagfr/tHH0d NOWsTWKqKtT2JycU6g2ESDMuaztBfojtwEN/lCzuzr5JfLJtSt9Ms6QeMOo7QmEv 7zY69bn7M8DarNUg2rXEuS+iN6ZY0lNSFUynXsyPn08NMHKwA4UFh+c3HCiGneYC CWuZshFB8IfuEAVy322NOnfh2jhu27732taiT/NjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOuURtzR7ES4KCd+SGHL8gRY/LjMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VlMWJjNjYyLWE4M2YtNGJkMi05MmU5LWYxYWQwMDgxNzJhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrtwwDQYJKoZIhvcNAQELBQADggEBABY7yZRwGWdHlnuks45CQDrlWlBn TR5SCL3h1YVeqKhPRTFFbFqm11r61D7iNOEeJnl5LpeFKS3FzMEk3tHD19/B6x66 UJ556iuSbMDONle3o3MOBXSRHy2cuHlgj0Rrg+Pblnv8leDU3iPFk8t4e9zT7Bsq C8dOj39oR3UHLhXNe5Pml6CmGSxNyy9cZCDouMoHJ7ZF25w2EVxQE3+Fociiixko oA+heJIa8Lc/JzeIF0E9zMGThPb8IoBYJB8FC6khrixc87XGekiw4Mi/iE/lszSJ 7iFIE/cVax1dOWXQC/Nut8g4s3floae/Bq1CW1D8rJ11UNv3DyXHocvy12I= -----END CERTIFICATE-----Generated at Mon Oct 20 11:08:26 2025 by rpki-client