$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7e6190a3-10a0-43c6-a8e9-6237fe422203.roa File: 7e6190a3-10a0-43c6-a8e9-6237fe422203.roa (raw, json) Hash identifier: ZHBKFirn0zLWMZ/Sz914cNQXwfW4VYCfVHuTDHu6GZ0= Subject key identifier: 23:D2:E8:CC:A2:8D:F1:E4:40:E9:31:2E:69:7C:EC:45:D0:55:07:5A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 210FF10F4FB2F5AF2119D5B3BAF1F1670CE39F19 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7e6190a3-10a0-43c6-a8e9-6237fe422203.roa Signing time: Fri 26 Sep 2025 00:47:53 +0000 ROA not before: Fri 26 Sep 2025 00:47:53 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0f:f1:0f:4f:b2:f5:af:21:19:d5:b3:ba:f1:f1:67:0c:e3:9f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:47:53 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=960136d69cdc2ab0d5c22906df8683e5923f7c2b7c73dd1383277a15551784da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2d:f6:62:01:8f:b2:75:8a:d4:0d:6a:bf:8b: df:0d:8b:a3:ea:d6:4f:76:9f:5d:1e:33:ad:d7:16: 8e:58:87:e8:df:72:10:b7:07:a4:8a:09:19:c1:84: 75:ac:ea:a8:25:d8:98:2d:ad:49:6c:1b:fc:8e:40: 88:9c:1e:1d:a3:b9:9d:75:7a:8f:a3:e3:50:7c:ec: 1b:7a:06:aa:bf:b5:21:c5:b7:8c:54:d9:63:73:e0: 8d:ae:0e:37:f8:6f:6f:ee:c0:a5:26:bb:37:c7:06: 37:eb:d5:70:9e:e2:c0:d9:bc:b3:3e:df:ae:48:4d: d2:c6:9a:2f:91:98:f0:e1:9d:3f:c1:3b:eb:7b:88: 1d:0e:f8:02:2d:7b:3b:7d:02:05:aa:b8:dd:50:a1: bf:1f:1d:cd:28:aa:0e:f2:b7:b7:81:23:e2:3f:3f: b8:4a:c1:8d:87:a8:6b:7a:43:b9:a9:88:a5:62:65: f3:12:6c:cf:23:44:9a:67:0f:41:0d:ce:5b:cb:a5: dd:22:1a:0f:b7:03:b1:0e:d3:7a:e0:09:4f:7d:5e: 15:82:58:26:75:3b:c2:a2:cf:99:87:62:26:33:ea: 06:2d:54:07:91:82:31:47:75:ce:23:33:0f:e8:00: 17:32:fa:e7:b2:1f:e1:01:73:45:a1:ed:7a:09:64: 91:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D2:E8:CC:A2:8D:F1:E4:40:E9:31:2E:69:7C:EC:45:D0:55:07:5A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7e6190a3-10a0-43c6-a8e9-6237fe422203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.72.0/22 Signature Algorithm: sha256WithRSAEncryption 06:37:85:99:ae:6d:94:2d:4e:48:0e:55:e9:d6:34:8b:9d:ad: af:bf:ef:76:1b:ba:e4:63:e3:b2:53:3f:c8:6b:51:ba:75:41: 35:6e:13:41:0a:3e:ed:9b:ab:c8:f6:9e:df:7d:39:0a:be:93: 35:f7:ce:14:59:ab:23:c4:80:53:1b:21:a4:13:c9:61:e1:61: 23:d6:ed:f6:48:59:9a:5f:97:f6:db:89:11:1c:7b:31:5e:c4: 5d:eb:f3:54:04:ce:af:c6:00:e1:01:d1:f7:b6:5d:05:ac:7c: 10:91:83:ec:2f:85:80:4d:07:32:83:5e:9e:50:a2:a6:68:07: b1:95:d6:e5:f2:d6:ce:23:07:cd:0b:5b:bb:84:88:f2:6e:f5: 62:78:a2:a8:b2:06:8d:03:3d:3a:20:d7:80:8c:24:be:8b:e4: 9d:30:d5:a1:a5:c9:8b:a5:63:f6:9f:0d:0f:9c:64:4a:73:a3: a1:a4:e1:16:a1:78:5f:0b:36:36:7a:08:12:44:cd:b8:59:e3: bd:39:f2:7c:db:ab:3b:65:96:02:03:bb:ac:64:69:a9:68:8d: 5b:e9:05:f2:19:46:c0:69:19:a4:0e:1c:12:98:fa:92:13:86: ad:ac:49:1e:df:ab:bc:35:74:b9:77:25:c0:cf:87:7f:9c:47: ac:f8:03:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIQ/xD0+y9a8hGdWzuvHxZwzjnxkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDA0NzUzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjAxMzZkNjljZGMyYWIwZDVjMjI5MDZkZjg2ODNlNTky M2Y3YzJiN2M3M2RkMTM4MzI3N2ExNTU1MTc4NGRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSLfZiAY+ydYrUDWq/i98Ni6Pq1k92n10eM63XFo5Yh+jf chC3B6SKCRnBhHWs6qgl2JgtrUlsG/yOQIicHh2juZ11eo+j41B87Bt6Bqq/tSHF t4xU2WNz4I2uDjf4b2/uwKUmuzfHBjfr1XCe4sDZvLM+365ITdLGmi+RmPDhnT/B O+t7iB0O+AItezt9AgWquN1Qob8fHc0oqg7yt7eBI+I/P7hKwY2HqGt6Q7mpiKVi ZfMSbM8jRJpnD0ENzlvLpd0iGg+3A7EO03rgCU99XhWCWCZ1O8Kiz5mHYiYz6gYt VAeRgjFHdc4jMw/oABcy+ueyH+EBc0Wh7XoJZJFlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI9LozKKN8eRA6TEuaXzsRdBVB1owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdlNjE5MGEzLTEwYTAtNDNjNi1hOGU5LTYyMzdmZTQyMjIwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDq0gwDQYJKoZIhvcNAQELBQADggEBAAY3hZmubZQtTkgOVenWNIudra+/ 73YbuuRj47JTP8hrUbp1QTVuE0EKPu2bq8j2nt99OQq+kzX3zhRZqyPEgFMbIaQT yWHhYSPW7fZIWZpfl/bbiREcezFexF3r81QEzq/GAOEB0fe2XQWsfBCRg+wvhYBN BzKDXp5QoqZoB7GV1uXy1s4jB80LW7uEiPJu9WJ4oqiyBo0DPTog14CMJL6L5J0w 1aGlyYulY/afDQ+cZEpzo6Gk4RaheF8LNjZ6CBJEzbhZ47058nzbqztllgIDu6xk aalojVvpBfIZRsBpGaQOHBKY+pIThq2sSR7fq7w1dLl3JcDPh3+cR6z4A0c= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:30 2025 by rpki-client