$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02bb7130-f8d1-4532-b8c4-898d0e8f4255.roa File: 02bb7130-f8d1-4532-b8c4-898d0e8f4255.roa (raw, json) Hash identifier: u6nPhtcb1LDpDxm+pYp11z8XxIYXtwN2yQ2R85pKh30= Subject key identifier: 29:5C:33:BE:71:29:5A:3D:6D:21:BE:BE:29:10:30:6A:17:31:2D:55 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72B403811516BEE9992DD92ED89C05305EDBAEDE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02bb7130-f8d1-4532-b8c4-898d0e8f4255.roa Signing time: Thu 25 Sep 2025 20:40:09 +0000 ROA not before: Thu 25 Sep 2025 20:40:09 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b4:03:81:15:16:be:e9:99:2d:d9:2e:d8:9c:05:30:5e:db:ae:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:40:09 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=efdd1fd88ce68c23c35c3a1c38da05ab1554fd3f520bf94bfe3734f06100e68e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b8:cb:d4:c1:0f:7f:6b:58:4e:ab:dd:fd:8b: 21:4f:b5:ad:ca:b1:5b:59:e2:57:2f:a1:dd:7b:a3: 59:da:da:cb:f7:4c:29:76:dc:35:7d:ba:e9:4d:b4: 41:71:08:ed:17:3a:fe:86:f7:5b:e7:f6:13:5e:4f: a9:55:4d:a0:2b:af:d6:77:99:9a:71:1f:2c:5e:c9: 57:51:7a:a5:9c:40:ca:35:c1:e1:6c:0d:8d:ba:8f: 4d:be:67:09:9d:fd:ee:14:86:58:82:ae:e0:0f:32: 4f:09:ac:73:57:49:3b:9b:b8:a4:71:06:ab:63:20: fa:a0:fb:14:03:64:46:50:52:58:e1:bd:d3:6b:45: 02:06:3b:07:f1:09:46:45:f8:c7:c2:d1:28:0b:e9: 9b:9c:a9:2e:aa:96:7b:c5:77:7a:db:83:40:e3:da: 4f:92:7b:ea:a1:40:56:7b:dd:7a:3d:27:48:1f:3c: 28:06:79:22:f3:e2:e5:1c:a8:89:a2:f8:2b:bc:8e: 2a:52:db:ca:32:9c:d6:32:f9:b5:09:34:6a:07:4d: 12:13:7c:85:7e:57:96:f2:f8:77:5e:2f:d2:86:7f: c6:e2:27:46:5c:87:a2:69:fa:fc:ec:6e:2e:09:42: cb:b4:2f:b2:d1:5a:aa:8b:d8:5b:12:b6:96:c8:8e: e5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5C:33:BE:71:29:5A:3D:6D:21:BE:BE:29:10:30:6A:17:31:2D:55 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02bb7130-f8d1-4532-b8c4-898d0e8f4255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.247.0/24 Signature Algorithm: sha256WithRSAEncryption 74:a2:cb:0e:5d:48:1c:7a:7e:f7:37:55:7e:7f:c8:c9:dd:70: 75:e8:41:87:bc:04:23:23:4a:2c:75:4d:26:1f:c8:89:42:7e: dd:71:d2:45:42:c4:ab:a2:2c:00:63:19:14:b9:ed:0b:c3:ad: b9:20:4e:85:04:b6:e6:d1:98:fa:12:ca:84:48:03:c6:77:10: 00:5f:7b:d9:6a:14:5f:b8:82:35:c5:35:c0:c4:71:2b:b2:d9: 70:f8:1e:92:50:52:0d:ad:83:99:e1:b5:ee:92:38:26:d0:5e: b1:91:e3:ae:85:eb:b8:ff:fa:35:ab:97:73:2a:bc:42:ae:bf: 62:aa:40:56:0f:21:39:46:00:39:8c:69:f8:13:e3:e9:0d:04: ff:e0:cf:a7:7c:b3:d7:74:df:e2:f6:63:5e:4f:e4:f0:9c:85: 82:4f:e5:a4:1b:de:c4:50:90:3e:c1:46:cd:e9:e4:47:77:d7: d2:13:41:cb:2d:a6:0e:33:a1:32:6c:51:51:de:e6:3a:40:26: 24:f1:eb:10:75:12:6e:16:89:31:cb:0c:21:72:d9:1f:0d:0f: 39:8f:ba:f9:a0:c1:48:7a:45:c2:3b:b8:d3:52:05:b8:8d:73: 07:f2:27:b6:d8:ea:c7:0c:5f:3c:21:a1:72:ac:38:e4:ac:e8: dd:94:65:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcrQDgRUWvumZLdku2JwFMF7brt4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjA0MDA5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmRkMWZkODhjZTY4YzIzYzM1YzNhMWMzOGRhMDVhYjE1 NTRmZDNmNTIwYmY5NGJmZTM3MzRmMDYxMDBlNjhlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxuMvUwQ9/a1hOq939iyFPta3KsVtZ4lcvod17o1na2sv3 TCl23DV9uulNtEFxCO0XOv6G91vn9hNeT6lVTaArr9Z3mZpxHyxeyVdReqWcQMo1 weFsDY26j02+Zwmd/e4UhliCruAPMk8JrHNXSTubuKRxBqtjIPqg+xQDZEZQUljh vdNrRQIGOwfxCUZF+MfC0SgL6ZucqS6qlnvFd3rbg0Dj2k+Se+qhQFZ73Xo9J0gf PCgGeSLz4uUcqImi+Cu8jipS28oynNYy+bUJNGoHTRITfIV+V5by+HdeL9KGf8bi J0Zch6Jp+vzsbi4JQsu0L7LRWqqL2FsStpbIjuWdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKVwzvnEpWj1tIb6+KRAwahcxLVUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAyYmI3MTMwLWY4ZDEtNDUzMi1iOGM0LTg5OGQwZThmNDI1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrfcwDQYJKoZIhvcNAQELBQADggEBAHSiyw5dSBx6fvc3VX5/yMndcHXo QYe8BCMjSix1TSYfyIlCft1x0kVCxKuiLABjGRS57QvDrbkgToUEtubRmPoSyoRI A8Z3EABfe9lqFF+4gjXFNcDEcSuy2XD4HpJQUg2tg5nhte6SOCbQXrGR466F67j/ +jWrl3MqvEKuv2KqQFYPITlGADmMafgT4+kNBP/gz6d8s9d03+L2Y15P5PCchYJP 5aQb3sRQkD7BRs3p5Ed319ITQcstpg4zoTJsUVHe5jpAJiTx6xB1Em4WiTHLDCFy 2R8NDzmPuvmgwUh6RcI7uNNSBbiNcwfyJ7bY6scMXzwhoXKsOOSs6N2UZSg= -----END CERTIFICATE-----Generated at Fri Oct 17 23:58:30 2025 by rpki-client