$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/002e25d4-4ae2-499d-a147-c4e0e5723ac3.roa File: 002e25d4-4ae2-499d-a147-c4e0e5723ac3.roa (raw, json) Hash identifier: Ga6C2M708Pew/YEqkv5JgZ16+2YKI62weH4CAU0PEX4= Subject key identifier: 0C:56:78:85:4C:9C:99:96:93:06:19:A7:D2:5D:84:C8:4E:BD:FF:EF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1D415D3B94A5ADF3D8987850D3FECFF9614AE506 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/002e25d4-4ae2-499d-a147-c4e0e5723ac3.roa Signing time: Fri 26 Sep 2025 01:27:07 +0000 ROA not before: Fri 26 Sep 2025 01:27:07 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:41:5d:3b:94:a5:ad:f3:d8:98:78:50:d3:fe:cf:f9:61:4a:e5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:27:07 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=70d4d8c897979530fcac1079e8175b1325adf0b5814b64f81e3f2e3ce26cc6d5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:5c:41:53:7c:0f:ee:e6:39:f6:4f:a2:92: 8f:d9:4a:13:69:47:43:ff:34:c1:7d:21:62:09:0a: 32:47:57:a8:e1:1a:38:06:f5:a8:43:fc:55:42:08: 7b:c0:44:79:b5:3c:d5:06:fa:5c:74:ff:36:da:18: d9:73:c6:85:7d:f1:e5:68:9b:1c:8e:38:2e:08:96: 4a:8c:c7:23:dc:1f:3e:07:dd:d7:14:ec:ca:6c:a9: 4e:02:c4:76:4d:0f:a4:44:e1:4b:55:19:1f:20:df: 3c:f6:98:ae:ac:af:ae:13:50:21:d4:2c:99:29:ae: c0:aa:08:36:26:aa:72:06:16:cd:24:7f:8c:30:fb: 83:bc:ac:6d:32:28:e6:6d:aa:f7:6f:52:71:98:58: 99:9c:ca:38:3a:8d:d2:1a:19:20:7f:cc:ac:1c:62: 18:06:96:1a:22:2f:dc:e7:92:93:80:92:b9:eb:a8: f4:c6:f0:08:1a:b5:ad:26:b2:9d:10:c2:53:61:28: 91:b4:ce:ed:9c:0b:c1:8f:64:91:ff:9c:94:fa:d9: d0:53:18:17:d9:99:aa:c0:a7:6b:92:27:a2:d5:21: 18:cd:0f:4a:7e:07:ac:b4:71:15:cf:27:da:b7:83: 93:8b:63:4f:59:cb:39:9f:a3:0b:45:5e:e3:92:5d: 92:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:56:78:85:4C:9C:99:96:93:06:19:A7:D2:5D:84:C8:4E:BD:FF:EF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/002e25d4-4ae2-499d-a147-c4e0e5723ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.24.0/21 Signature Algorithm: sha256WithRSAEncryption 6f:89:ad:b1:d2:31:12:7e:7c:2f:b7:4f:e2:75:2d:88:9d:16: f5:95:db:45:24:7c:fb:b2:41:98:fe:de:97:f5:c1:ea:7f:a2: 81:5b:eb:d2:d5:2a:10:7c:8e:cc:99:36:03:ee:16:28:ae:2c: dd:be:ba:0b:87:8e:7d:db:31:92:4d:9c:60:e6:47:c0:d2:58: a2:48:5b:a5:31:79:24:c8:24:f2:1d:36:b1:22:5d:b0:e5:96: 45:fe:76:34:46:f6:ac:75:ab:2c:12:db:7a:ed:ea:3b:03:af: 6b:17:94:2c:d7:6c:57:0a:af:d4:eb:60:00:99:a4:31:6f:57: 80:4c:30:c8:ec:f9:ab:7a:40:69:79:af:38:17:9a:66:0b:a9: 3e:e6:76:25:51:c2:a0:75:40:69:ca:0f:e1:89:2f:61:d4:0a: 73:c8:41:21:1f:48:44:d5:78:8d:f7:d4:99:74:5f:68:78:30: 34:b7:f9:10:ac:3c:60:13:40:0e:14:4f:6e:f5:2c:65:b7:38: 56:ba:fe:2a:63:4c:2a:de:ed:0e:da:f0:8e:0f:ad:75:aa:15: f6:dd:04:d1:cc:31:bb:08:df:e2:0e:b2:7b:4f:67:73:16:ac: a3:05:cc:1d:24:c0:b4:59:05:ed:51:ad:3d:da:75:79:ef:e0: f1:fb:08:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHUFdO5SlrfPYmHhQ0/7P+WFK5QYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEyNzA3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MGQ0ZDhjODk3OTc5NTMwZmNhYzEwNzllODE3NWIxMzI1 YWRmMGI1ODE0YjY0ZjgxZTNmMmUzY2UyNmNjNmQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOnFxBU3wP7uY59k+iko/ZShNpR0P/NMF9IWIJCjJHV6jh GjgG9ahD/FVCCHvARHm1PNUG+lx0/zbaGNlzxoV98eVomxyOOC4IlkqMxyPcHz4H 3dcU7MpsqU4CxHZND6RE4UtVGR8g3zz2mK6sr64TUCHULJkprsCqCDYmqnIGFs0k f4ww+4O8rG0yKOZtqvdvUnGYWJmcyjg6jdIaGSB/zKwcYhgGlhoiL9znkpOAkrnr qPTG8Agata0msp0QwlNhKJG0zu2cC8GPZJH/nJT62dBTGBfZmarAp2uSJ6LVIRjN D0p+B6y0cRXPJ9q3g5OLY09ZyzmfowtFXuOSXZKVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDFZ4hUycmZaTBhmn0l2EyE69/+8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAwMmUyNWQ0LTRhZTItNDk5ZC1hMTQ3LWM0ZTBlNTcyM2FjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDqBgwDQYJKoZIhvcNAQELBQADggEBAG+JrbHSMRJ+fC+3T+J1LYidFvWV 20UkfPuyQZj+3pf1wep/ooFb69LVKhB8jsyZNgPuFiiuLN2+uguHjn3bMZJNnGDm R8DSWKJIW6UxeSTIJPIdNrEiXbDllkX+djRG9qx1qywS23rt6jsDr2sXlCzXbFcK r9TrYACZpDFvV4BMMMjs+at6QGl5rzgXmmYLqT7mdiVRwqB1QGnKD+GJL2HUCnPI QSEfSETVeI331Jl0X2h4MDS3+RCsPGATQA4UT271LGW3OFa6/ipjTCre7Q7a8I4P rXWqFfbdBNHMMbsI3+IOsntPZ3MWrKMFzB0kwLRZBe1RrT3adXnv4PH7CNQ= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:31 2025 by rpki-client