$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f2ae221-4267-4149-afd7-e91b22c44a66.roa File: 9f2ae221-4267-4149-afd7-e91b22c44a66.roa (raw, json) Hash identifier: H5vQr2PF4mL+mWa6KugdA5N33JVwki1Kf/YLM/nr9Vw= Subject key identifier: 09:E0:67:4E:8D:58:1D:08:F8:4B:D2:4A:E5:0A:76:93:FA:4C:39:FD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D532D535B148BA1A747F4369D7510EC8921CE82 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f2ae221-4267-4149-afd7-e91b22c44a66.roa Signing time: Fri 26 Sep 2025 01:17:19 +0000 ROA not before: Fri 26 Sep 2025 01:17:19 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:53:2d:53:5b:14:8b:a1:a7:47:f4:36:9d:75:10:ec:89:21:ce:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:17:19 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=1d6159cb9fa3aa424e08a01cb5538ad069e475364693207e20adb778bd7fb3a1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3a:6b:6e:ed:57:0a:64:ff:9f:f2:40:2d:60: 5a:b5:66:c1:12:1d:c1:3c:57:91:41:cd:80:56:3d: 43:84:64:70:d3:74:d2:e7:99:24:ea:4c:93:1d:32: e1:42:26:fe:44:b2:97:ce:2f:59:f4:8f:ac:c9:f1: 39:f2:48:47:42:0b:b5:22:12:7d:96:0d:da:cc:4f: c1:3f:16:49:50:b6:3d:01:25:63:7d:2d:49:6f:c3: 82:9a:06:7b:c0:be:3c:86:d2:9f:45:19:cf:76:ae: 20:21:ff:67:c6:f3:b9:c6:5c:bb:9d:e2:e3:4d:80: 33:d0:7c:0c:d9:0b:b7:cc:50:f6:45:47:b3:29:72: 40:a8:64:7b:f1:97:48:0e:65:d1:50:20:da:e1:bf: 7a:c0:66:ea:5f:b7:b5:76:56:53:65:48:71:b4:91: 06:0d:70:9e:99:76:7c:db:2c:c0:1a:78:1f:19:a4: cb:7f:80:ed:c0:85:67:b6:56:f5:ed:6b:1b:e5:fb: fc:a1:01:80:0a:ff:78:0d:ad:85:08:b5:79:0b:8b: be:98:f5:80:a2:81:2d:9e:c0:76:c9:c2:6d:76:25: c9:b6:7e:e1:d1:48:bc:59:d7:0d:2f:62:08:d2:62: f4:a8:a6:f1:c4:01:0b:6a:c0:c0:cf:99:50:ab:b7: 4e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E0:67:4E:8D:58:1D:08:F8:4B:D2:4A:E5:0A:76:93:FA:4C:39:FD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f2ae221-4267-4149-afd7-e91b22c44a66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.72.0/21 Signature Algorithm: sha256WithRSAEncryption 9c:71:be:e1:8a:98:ff:ce:4f:23:5c:7b:64:2a:bf:9f:bc:79: a0:6f:db:a8:98:7a:5d:7f:23:88:21:50:26:17:62:db:ab:bc: 19:d2:c0:d4:15:d8:6d:02:ba:bb:92:9e:27:f5:f9:15:9d:9a: 1a:30:19:98:6f:b1:4c:8f:49:7f:dd:0a:51:c8:f2:ef:ba:dd: 6f:83:a3:49:1b:56:45:4a:0c:5b:eb:10:94:d9:60:ec:08:73: 29:50:9a:d9:64:b0:c6:f2:71:50:f3:bc:bc:21:e7:e4:5f:ef: 86:91:a9:17:23:8b:e3:22:f3:3d:82:58:66:55:44:fd:05:fc: 23:25:85:57:cf:33:42:02:98:b2:4d:0d:d6:a7:d9:e6:35:a7: fa:a3:36:a6:5e:b8:ab:46:11:9e:74:63:80:39:4c:3d:de:d6: 97:d7:49:87:2e:1c:b6:a2:67:fe:b2:6b:b5:e0:ef:23:20:cc: 93:1c:99:fc:b9:94:50:6c:8a:23:1d:a8:4f:9b:ff:8f:99:da: f0:75:d9:17:30:d3:c4:8e:e2:20:8a:77:81:25:2e:ef:59:b8: 9b:05:55:5e:c4:c5:7e:d5:a9:97:12:c0:20:9d:ea:24:20:47: de:db:1b:72:93:72:ef:f6:f5:68:f3:96:c6:e5:53:e6:38:2e: 5b:5c:11:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPVMtU1sUi6GnR/Q2nXUQ7IkhzoIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDExNzE5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDYxNTljYjlmYTNhYTQyNGUwOGEwMWNiNTUzOGFkMDY5 ZTQ3NTM2NDY5MzIwN2UyMGFkYjc3OGJkN2ZiM2ExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrOmtu7VcKZP+f8kAtYFq1ZsESHcE8V5FBzYBWPUOEZHDT dNLnmSTqTJMdMuFCJv5EspfOL1n0j6zJ8TnySEdCC7UiEn2WDdrMT8E/FklQtj0B JWN9LUlvw4KaBnvAvjyG0p9FGc92riAh/2fG87nGXLud4uNNgDPQfAzZC7fMUPZF R7MpckCoZHvxl0gOZdFQINrhv3rAZupft7V2VlNlSHG0kQYNcJ6ZdnzbLMAaeB8Z pMt/gO3AhWe2VvXtaxvl+/yhAYAK/3gNrYUItXkLi76Y9YCigS2ewHbJwm12Jcm2 fuHRSLxZ1w0vYgjSYvSopvHEAQtqwMDPmVCrt07NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCeBnTo1YHQj4S9JK5Qp2k/pMOf0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlmMmFlMjIxLTQyNjctNDE0OS1hZmQ3LWU5MWIyMmM0NGE2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDpEgwDQYJKoZIhvcNAQELBQADggEBAJxxvuGKmP/OTyNce2Qqv5+8eaBv 26iYel1/I4ghUCYXYturvBnSwNQV2G0CuruSnif1+RWdmhowGZhvsUyPSX/dClHI 8u+63W+Do0kbVkVKDFvrEJTZYOwIcylQmtlksMbycVDzvLwh5+Rf74aRqRcji+Mi 8z2CWGZVRP0F/CMlhVfPM0ICmLJNDdan2eY1p/qjNqZeuKtGEZ50Y4A5TD3e1pfX SYcuHLaiZ/6ya7Xg7yMgzJMcmfy5lFBsiiMdqE+b/4+Z2vB12Rcw08SO4iCKd4El Lu9ZuJsFVV7ExX7VqZcSwCCd6iQgR97bG3KTcu/29WjzlsblU+Y4LltcEY8= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:56 2025 by rpki-client