$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72c99528-fc49-4b35-a1a0-56290cb38c94.roa File: 72c99528-fc49-4b35-a1a0-56290cb38c94.roa (raw, json) Hash identifier: Hbp84kyJtTTWZ3k8lu06JSKS/R8i5JId757YH3MyQ/s= Subject key identifier: 14:3F:F7:01:D0:3D:2A:AA:3D:C5:DB:E1:DC:5A:5B:B5:03:4A:1D:1A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2753188688A57B5C49E15EDAE96019BA5424E21E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72c99528-fc49-4b35-a1a0-56290cb38c94.roa Signing time: Thu 25 Sep 2025 20:06:42 +0000 ROA not before: Thu 25 Sep 2025 20:06:42 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:53:18:86:88:a5:7b:5c:49:e1:5e:da:e9:60:19:ba:54:24:e2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:06:42 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=e8a7dc457114bcecb2f795fba31664eab4364ec57158b2e44fcf6aea0577176d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6d:81:7e:ab:73:06:3a:24:8e:3c:cb:fa:36: f4:6d:64:75:a3:1a:b0:17:05:69:9b:56:68:42:27: 5b:f4:58:ce:60:3b:e1:8c:e6:67:38:e2:df:f5:f7: 91:2b:34:df:96:65:c3:bc:aa:fd:4d:b8:18:73:8b: 1d:61:db:05:df:56:b0:dd:fa:2d:b2:fd:45:f1:e0: f0:02:a7:f2:9d:0f:e9:30:76:a3:a2:80:fc:f3:6b: 92:9c:62:b5:86:58:8c:9b:17:ca:70:f9:06:b1:28: 9e:42:09:99:24:48:3a:ba:37:33:28:a4:7b:9f:de: d0:fb:9e:3e:2f:58:f9:f1:fb:d3:c8:87:fb:79:f4: a1:04:b1:37:08:55:33:4f:e4:53:4f:46:f9:2d:58: 22:9a:a2:33:11:c5:42:0b:19:22:3a:a2:b6:86:21: fc:98:37:27:7a:ad:44:e8:ca:92:c6:93:09:b3:c2: 87:fe:fc:9c:8f:3d:85:db:b4:78:87:a7:0d:29:26: 92:97:e0:79:17:17:fa:72:56:8f:a0:5c:31:34:5b: b6:04:4c:94:64:26:2f:7e:f9:76:f1:61:af:16:4f: b8:62:9c:c0:6d:fa:10:e8:ee:e8:35:91:e9:1f:22: 20:37:c6:00:00:75:8c:ae:10:df:b1:5f:97:d8:72: c8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3F:F7:01:D0:3D:2A:AA:3D:C5:DB:E1:DC:5A:5B:B5:03:4A:1D:1A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72c99528-fc49-4b35-a1a0-56290cb38c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.121.0/24 Signature Algorithm: sha256WithRSAEncryption 71:be:76:c7:10:ac:64:f5:8a:21:e1:34:d1:4d:c3:9e:0d:c4: 15:3a:7b:d4:59:76:90:f4:ff:e0:05:1b:28:0d:ca:c1:f2:25: 6a:85:b7:8c:9e:7b:89:ed:79:55:d8:3d:1b:2c:de:77:90:89: f8:f3:93:6a:43:ec:03:a1:a3:2b:3d:e4:8e:6c:f9:48:4c:cf: eb:37:15:d1:48:f5:ec:ba:a0:d9:3f:65:1a:6c:fa:db:44:ed: 2b:e5:f6:12:d9:55:b6:26:16:b2:52:23:89:a2:95:a9:b1:68: a0:a7:4e:d4:6c:2e:e5:53:34:06:68:22:db:c1:4f:3f:a8:fc: a4:19:11:73:c9:1f:ee:1b:83:2c:d4:db:32:63:52:15:94:fe: 08:40:6a:cc:80:98:3b:25:8e:08:bf:ca:9c:56:54:54:93:a4: 57:17:1f:3f:89:28:d8:5b:0f:74:77:c0:b6:4b:02:26:05:3b: 67:45:ec:99:05:47:69:f5:ea:88:d1:60:4d:ab:9c:99:1a:9f: c7:74:ea:47:dc:c2:b5:16:8b:5b:f9:e1:a0:84:76:58:d0:73: 75:9e:f2:9f:9a:fb:fc:6a:7d:1f:cd:2c:f8:69:77:e1:74:bb: 49:19:dc:b1:3b:d8:8d:6b:2b:d6:4f:5e:b9:fe:c4:14:4f:41: 19:a2:19:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ1MYhoile1xJ4V7a6WAZulQk4h4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjAwNjQyWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOGE3ZGM0NTcxMTRiY2VjYjJmNzk1ZmJhMzE2NjRlYWI0 MzY0ZWM1NzE1OGIyZTQ0ZmNmNmFlYTA1NzcxNzZkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSbYF+q3MGOiSOPMv6NvRtZHWjGrAXBWmbVmhCJ1v0WM5g O+GM5mc44t/195ErNN+WZcO8qv1NuBhzix1h2wXfVrDd+i2y/UXx4PACp/KdD+kw dqOigPzza5KcYrWGWIybF8pw+QaxKJ5CCZkkSDq6NzMopHuf3tD7nj4vWPnx+9PI h/t59KEEsTcIVTNP5FNPRvktWCKaojMRxUILGSI6oraGIfyYNyd6rUToypLGkwmz wof+/JyPPYXbtHiHpw0pJpKX4HkXF/pyVo+gXDE0W7YETJRkJi9++XbxYa8WT7hi nMBt+hDo7ug1kekfIiA3xgAAdYyuEN+xX5fYcsjzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFD/3AdA9Kqo9xdvh3FpbtQNKHRowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcyYzk5NTI4LWZjNDktNGIzNS1hMWEwLTU2MjkwY2IzOGM5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADq3kwDQYJKoZIhvcNAQELBQADggEBAHG+dscQrGT1iiHhNNFNw54NxBU6 e9RZdpD0/+AFGygNysHyJWqFt4yee4nteVXYPRss3neQifjzk2pD7AOhoys95I5s +UhMz+s3FdFI9ey6oNk/ZRps+ttE7Svl9hLZVbYmFrJSI4milamxaKCnTtRsLuVT NAZoItvBTz+o/KQZEXPJH+4bgyzU2zJjUhWU/ghAasyAmDsljgi/ypxWVFSTpFcX Hz+JKNhbD3R3wLZLAiYFO2dF7JkFR2n16ojRYE2rnJkan8d06kfcwrUWi1v54aCE dljQc3We8p+a+/xqfR/NLPhpd+F0u0kZ3LE72I1rK9ZPXrn+xBRPQRmiGVQ= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:17 2025 by rpki-client