$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e7272cba-d4e2-49f6-9004-184abf4241b1.roa File: e7272cba-d4e2-49f6-9004-184abf4241b1.roa (raw, json) Hash identifier: 0SwS5106GOIKHMmIGYEw/6bxUIIuuzs3usl8NWFmUF8= Subject key identifier: 58:81:4F:1E:F8:4C:7D:E8:89:49:B4:25:0D:2C:21:1C:84:53:90:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 285288FBD77B513F6462205E081721BA39AF20A7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e7272cba-d4e2-49f6-9004-184abf4241b1.roa Signing time: Fri 10 Oct 2025 15:09:03 +0000 ROA not before: Fri 10 Oct 2025 15:09:03 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.144.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:52:88:fb:d7:7b:51:3f:64:62:20:5e:08:17:21:ba:39:af:20:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 15:09:03 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=c6284ad200e0a201601df92b4531a079aa32306dba6539a935768f5ff9ad6aab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:5d:28:68:3f:f3:42:18:a6:5d:51:86:ff: 97:90:05:02:4f:fc:1c:fb:61:ff:56:2c:2b:c0:21: d6:bf:0e:74:50:fe:97:d3:78:4c:d4:98:b5:24:a6: 64:b7:31:16:56:98:73:77:70:01:00:1d:a1:0d:69: 87:a2:a1:78:1e:c6:8b:6b:0e:7f:ca:a4:5c:b5:74: 4a:72:ae:0d:50:de:ef:96:0d:b4:e2:f3:6f:57:89: ce:51:cd:a9:f8:11:00:fa:b8:f6:7f:df:ca:25:98: 8f:6a:27:8f:98:76:37:ec:47:50:0a:e2:02:26:56: e5:60:cd:6d:ce:32:f9:df:f1:e2:b1:4a:ed:d4:d8: 6e:9f:6c:98:75:b3:89:38:04:e8:04:2b:8a:9b:37: 74:39:66:b7:04:22:0d:ea:1c:37:5c:d2:ee:df:bd: f8:d0:69:38:f1:13:87:7e:1d:af:82:ae:1b:aa:77: 93:9a:84:b1:e0:23:6f:14:3f:52:93:7a:8d:8d:0b: ac:f1:e0:20:52:b5:c7:d1:eb:f6:40:34:30:20:0a: 45:70:a9:3b:b2:6b:4d:36:df:22:71:ff:79:d5:c9: 46:68:b2:fc:fd:02:a8:7f:39:e8:d0:7f:71:9b:cf: 15:c6:fc:d3:7d:24:cc:c1:62:b0:76:07:f4:b4:a5: e4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:81:4F:1E:F8:4C:7D:E8:89:49:B4:25:0D:2C:21:1C:84:53:90:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e7272cba-d4e2-49f6-9004-184abf4241b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.144.0.0/13 Signature Algorithm: sha256WithRSAEncryption 15:bc:38:47:47:75:b4:b2:e8:2b:21:39:94:2a:e0:d2:da:69: 8c:c9:2c:61:25:b1:96:cd:68:09:84:6c:9a:2a:a7:18:de:14: bd:9c:d3:60:08:32:5f:06:80:b7:19:70:ac:f2:9e:da:b0:10: d7:fb:97:fc:8c:97:fe:e1:1d:06:94:10:b9:a9:5a:d0:91:cc: 7c:a8:df:53:ae:b7:62:73:fa:6e:95:2d:07:04:35:e3:69:03: 2f:00:d6:90:6d:1a:9b:61:a8:67:26:74:e4:6e:b9:e6:7b:2c: 7d:2f:3e:b3:12:d2:04:a4:a5:5e:2b:50:12:20:61:27:6e:f9: 1a:74:e9:f4:bd:fc:7f:a9:71:44:fb:49:d4:a4:a7:00:66:de: 19:c5:bf:3a:70:f8:14:f5:ad:50:41:e3:14:e3:e5:28:41:e1: 49:61:a4:8f:40:88:b9:36:a4:61:7c:92:24:0f:08:55:41:91: c9:26:c9:1b:b5:fe:b9:fd:b8:1e:73:af:1e:ac:e8:01:67:43: c1:b4:92:22:fb:0a:71:33:23:2e:a1:54:43:ce:16:0c:a8:3c: 1a:8b:39:28:75:e0:76:f7:65:ed:bb:a5:4e:0d:c7:6a:9d:05: 01:c4:a1:a5:c8:c5:b3:7c:fc:28:06:80:b0:f9:f3:3c:e1:62: 7e:4e:a5:c0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKFKI+9d7UT9kYiBeCBchujmvIKcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTUwOTAzWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjI4NGFkMjAwZTBhMjAxNjAxZGY5MmI0NTMxYTA3OWFh MzIzMDZkYmE2NTM5YTkzNTc2OGY1ZmY5YWQ2YWFiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyV10oaD/zQhimXVGG/5eQBQJP/Bz7Yf9WLCvAIda/DnRQ /pfTeEzUmLUkpmS3MRZWmHN3cAEAHaENaYeioXgexotrDn/KpFy1dEpyrg1Q3u+W DbTi829Xic5Rzan4EQD6uPZ/38olmI9qJ4+YdjfsR1AK4gImVuVgzW3OMvnf8eKx Su3U2G6fbJh1s4k4BOgEK4qbN3Q5ZrcEIg3qHDdc0u7fvfjQaTjxE4d+Ha+Crhuq d5OahLHgI28UP1KTeo2NC6zx4CBStcfR6/ZANDAgCkVwqTuya0023yJx/3nVyUZo svz9Aqh/OejQf3GbzxXG/NN9JMzBYrB2B/S0peTbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWIFPHvhMfeiJSbQlDSwhHIRTkDwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U3MjcyY2JhLWQ0ZTItNDlmNi05MDA0LTE4NGFiZjQyNDFiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMDkDANBgkqhkiG9w0BAQsFAAOCAQEAFbw4R0d1tLLoKyE5lCrg0tppjMks YSWxls1oCYRsmiqnGN4UvZzTYAgyXwaAtxlwrPKe2rAQ1/uX/IyX/uEdBpQQuala 0JHMfKjfU663YnP6bpUtBwQ142kDLwDWkG0am2GoZyZ05G655nssfS8+sxLSBKSl XitQEiBhJ275GnTp9L38f6lxRPtJ1KSnAGbeGcW/OnD4FPWtUEHjFOPlKEHhSWGk j0CIuTakYXySJA8IVUGRySbJG7X+uf24HnOvHqzoAWdDwbSSIvsKcTMjLqFUQ84W DKg8Gos5KHXgdvdl7bulTg3Hap0FAcShpcjFs3z8KAaAsPnzPOFifk6lwA== -----END CERTIFICATE-----Generated at Mon Oct 20 06:21:51 2025 by rpki-client