$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/137ab688-dd50-4847-b78a-4374bbf54dd8.roa File: 137ab688-dd50-4847-b78a-4374bbf54dd8.roa (raw, json) Hash identifier: Ho//9fI6CmUtryhxLic90h4mvKfSy74dg2o24vq+u5Q= Subject key identifier: 85:14:37:93:92:3D:8A:98:AD:6A:9A:7B:47:13:D5:AF:62:0E:7C:D9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 277ECA98ACEE2F65FEADA316D0C94A1400BDA66D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/137ab688-dd50-4847-b78a-4374bbf54dd8.roa Signing time: Thu 25 Sep 2025 23:48:04 +0000 ROA not before: Thu 25 Sep 2025 23:48:04 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:7e:ca:98:ac:ee:2f:65:fe:ad:a3:16:d0:c9:4a:14:00:bd:a6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:48:04 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=2b0d324e8bcf0bafba77602c9a13b2edbde0422dc2416a38a3be2c9aee880470, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:84:32:6f:82:6a:e8:68:74:16:5c:9e:11: 36:05:57:a4:db:88:7a:cf:eb:05:70:04:a2:03:5c: 37:a6:6d:59:67:60:26:26:5b:a7:23:d8:d7:90:04: 89:04:c6:2d:3c:89:93:d9:3d:59:93:06:e3:98:9c: 67:b1:96:d1:e9:b0:5d:07:ce:83:cf:c3:f7:59:2e: bc:47:42:a1:f4:ff:93:39:0b:d3:76:21:04:da:27: 98:e3:89:52:13:3e:63:e2:42:0f:1c:f0:d3:c6:1c: 2d:f8:0c:fc:b7:da:b0:3d:1c:16:a3:87:1a:ab:51: 1e:47:1c:b9:b8:80:8b:ab:f7:69:6b:5a:34:13:75: 10:ba:73:04:40:c0:f4:fc:83:8e:5a:0b:ad:13:46: 81:c7:11:f4:cd:16:01:7c:70:d2:56:7a:08:eb:47: 47:fa:6f:be:e1:54:67:df:58:ef:0e:b8:a6:de:46: 52:24:9d:52:1a:97:b1:bd:c6:60:55:8f:2a:20:94: 2a:a3:86:8e:3a:c6:ae:32:8b:92:52:dc:ae:af:52: fe:cb:2d:76:c7:8e:70:71:d3:72:07:6b:98:f0:55: 71:00:6b:c5:9e:2d:7b:b6:8e:ed:f5:0c:0e:51:33: e2:20:c1:ca:cf:a5:b6:ad:b2:2b:41:5e:cf:3c:d9: 8d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:14:37:93:92:3D:8A:98:AD:6A:9A:7B:47:13:D5:AF:62:0E:7C:D9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/137ab688-dd50-4847-b78a-4374bbf54dd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.30.0/23 Signature Algorithm: sha256WithRSAEncryption 04:bf:4d:05:c8:50:b2:17:14:39:ab:58:a6:ca:0c:58:f2:ad: 40:5c:ca:b5:eb:2c:b6:da:75:dc:23:53:d2:95:a7:96:95:39: d2:7f:fc:97:9e:18:e2:15:d3:8e:ff:b6:93:0f:77:61:ff:b9: 6e:01:c5:c1:c9:6b:42:90:3d:b1:6c:54:90:11:d0:bd:71:0e: f1:59:5c:c3:d8:67:c2:af:94:04:a0:12:03:cc:ba:6f:d7:a2: 79:af:d8:3d:ed:27:09:67:20:f9:f3:3e:07:0c:37:09:ba:2b: fa:c6:1f:32:e4:63:b2:54:a0:52:a8:d0:f8:c8:e6:c3:19:4b: 0b:eb:9e:4d:0d:5c:d3:71:12:80:7a:51:df:3e:df:ba:5e:55: 09:1a:45:18:b3:d2:64:f4:00:fe:f2:8f:ae:93:de:d2:d8:80: e3:8a:c1:16:00:cc:08:01:40:40:e7:e5:b2:70:ae:1f:51:6e: 14:4c:7b:75:5f:67:5d:f9:25:4d:2d:09:89:89:ce:5f:25:68: a6:6e:b2:24:ef:50:14:96:51:1a:2d:1f:70:3b:fb:0f:37:80: aa:a0:80:38:ea:68:49:51:45:b9:ff:33:b8:6d:2f:a4:75:98: 2f:d9:c5:ec:71:f3:f4:f6:cc:e3:c7:52:7f:a1:13:a5:d0:36: 31:1b:1e:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ37KmKzuL2X+raMW0MlKFAC9pm0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjM0ODA0WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjBkMzI0ZThiY2YwYmFmYmE3NzYwMmM5YTEzYjJlZGJk ZTA0MjJkYzI0MTZhMzhhM2JlMmM5YWVlODgwNDcwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDVIQyb4Jq6Gh0FlyeETYFV6TbiHrP6wVwBKIDXDembVln YCYmW6cj2NeQBIkExi08iZPZPVmTBuOYnGexltHpsF0HzoPPw/dZLrxHQqH0/5M5 C9N2IQTaJ5jjiVITPmPiQg8c8NPGHC34DPy32rA9HBajhxqrUR5HHLm4gIur92lr WjQTdRC6cwRAwPT8g45aC60TRoHHEfTNFgF8cNJWegjrR0f6b77hVGffWO8OuKbe RlIknVIal7G9xmBVjyoglCqjho46xq4yi5JS3K6vUv7LLXbHjnBx03IHa5jwVXEA a8WeLXu2ju31DA5RM+IgwcrPpbatsitBXs882Y2vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhRQ3k5I9ipitapp7RxPVr2IOfNkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzN2FiNjg4LWRkNTAtNDg0Ny1iNzhhLTQzNzRiYmY1NGRkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrx4wDQYJKoZIhvcNAQELBQADggEBAAS/TQXIULIXFDmrWKbKDFjyrUBc yrXrLLbaddwjU9KVp5aVOdJ//JeeGOIV047/tpMPd2H/uW4BxcHJa0KQPbFsVJAR 0L1xDvFZXMPYZ8KvlASgEgPMum/Xonmv2D3tJwlnIPnzPgcMNwm6K/rGHzLkY7JU oFKo0PjI5sMZSwvrnk0NXNNxEoB6Ud8+37peVQkaRRiz0mT0AP7yj66T3tLYgOOK wRYAzAgBQEDn5bJwrh9RbhRMe3VfZ135JU0tCYmJzl8laKZusiTvUBSWURotH3A7 +w83gKqggDjqaElRRbn/M7htL6R1mC/Zxexx8/T2zOPHUn+hE6XQNjEbHjk= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:39 2025 by rpki-client