$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/047f2375-b9ed-43f5-a2da-54375156b6c6.roa File: 047f2375-b9ed-43f5-a2da-54375156b6c6.roa (raw, json) Hash identifier: sPPccx3E7IwrhxUi7txedkghndPpDDbDbn63DnB8z2s= Subject key identifier: 40:40:A4:60:22:37:B1:B7:F8:2F:27:57:59:47:DD:98:F9:58:AB:9A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7AC9785F2A5EAD39EA392BDC67E4F0BA7C0AEBA8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/047f2375-b9ed-43f5-a2da-54375156b6c6.roa Signing time: Fri 26 Sep 2025 00:45:06 +0000 ROA not before: Fri 26 Sep 2025 00:45:06 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c9:78:5f:2a:5e:ad:39:ea:39:2b:dc:67:e4:f0:ba:7c:0a:eb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:45:06 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=19b5515ce17ec4c8578a23a95ef43d1ce9ab5f052e7c6aec5cee8aef5c5f7737, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:6c:2b:3b:cf:1a:57:96:c2:fc:1c:38:13: 71:d2:56:31:ee:c4:2f:a5:6a:59:5a:a4:5b:48:a6: 23:59:d9:b9:25:59:f1:ee:15:40:c3:b2:d3:6d:ef: 0f:d7:54:b2:0c:9a:dc:7b:68:ab:02:b0:c7:03:4d: 32:05:52:86:13:de:e4:66:40:28:26:a7:f9:70:04: 5e:53:ce:29:95:26:22:55:9a:8a:b2:29:b4:e6:c8: 1a:40:65:e2:14:96:dd:67:8e:f8:b7:dd:e5:fb:94: 75:c3:5d:65:cd:24:e2:cf:22:a2:ee:f0:2f:2c:b5: 15:fa:71:12:c3:08:e6:94:3d:5a:7c:3e:b1:ea:84: f3:f9:02:1a:31:1a:42:8f:36:13:1d:18:e2:23:4d: 32:c2:aa:d9:49:41:50:99:0c:ee:21:92:58:8c:ef: 44:c9:c5:0e:45:1a:4d:2a:d0:8b:5a:e9:b9:bc:6b: 14:4f:26:a7:0e:20:c9:6d:ac:7b:16:00:db:cb:23: f7:7a:5a:37:18:f8:2d:a9:f6:19:25:51:16:60:ec: 44:ce:bc:a3:e9:bd:05:a1:07:b1:ed:6d:7d:19:a7: 18:59:75:af:f9:04:96:6b:e9:f5:8f:60:d9:da:35: e1:b0:53:44:5a:55:9f:3b:60:59:3d:6f:ad:0c:93: 39:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:40:A4:60:22:37:B1:B7:F8:2F:27:57:59:47:DD:98:F9:58:AB:9A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/047f2375-b9ed-43f5-a2da-54375156b6c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.0.0/22 Signature Algorithm: sha256WithRSAEncryption 34:a4:23:d4:ad:52:b7:65:7c:c0:26:60:0c:0a:88:1b:8e:88: 9f:2a:95:85:83:02:b4:61:92:58:35:35:ab:32:bb:b8:1e:7b: 73:ab:ab:e1:84:5b:25:c8:a6:3a:ad:c9:cf:66:1f:90:17:87: d5:be:51:75:da:60:81:a7:df:f6:72:16:73:19:b4:02:0f:b2: 50:99:3f:e4:e3:66:95:77:88:a3:da:f2:7b:37:59:7f:7d:e5: 90:61:1d:0d:34:97:ac:dc:d7:db:57:63:fd:49:89:a7:9f:f6: af:a2:f1:f7:f0:03:f1:a4:fd:f3:e3:e0:26:33:73:27:cb:82: b9:52:70:c7:69:d3:f0:05:f6:92:10:e4:c8:05:6d:c8:f3:b4: 6a:52:c1:aa:a6:a0:4a:8e:48:a3:95:fe:e1:c7:bc:3e:99:dc: 64:77:4f:22:b1:5d:7e:2b:42:d1:b9:d5:9b:27:43:01:d4:9f: a4:56:37:0a:98:68:b0:b8:6d:4e:46:16:44:09:3b:2b:57:33: ca:28:3a:bd:72:a2:be:9b:75:09:7c:e8:8f:ec:77:47:45:c1: ca:f1:54:2e:bb:00:88:3a:db:b2:3d:35:ae:75:d9:d0:ba:1b: 39:31:61:d2:7e:49:34:22:b1:b5:31:74:20:a4:bb:e3:a8:e8: aa:3d:2e:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUesl4XyperTnqOSvcZ+TwunwK66gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDA0NTA2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOWI1NTE1Y2UxN2VjNGM4NTc4YTIzYTk1ZWY0M2QxY2U5 YWI1ZjA1MmU3YzZhZWM1Y2VlOGFlZjVjNWY3NzM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6MGwrO88aV5bC/Bw4E3HSVjHuxC+lallapFtIpiNZ2bkl WfHuFUDDstNt7w/XVLIMmtx7aKsCsMcDTTIFUoYT3uRmQCgmp/lwBF5TzimVJiJV moqyKbTmyBpAZeIUlt1njvi33eX7lHXDXWXNJOLPIqLu8C8stRX6cRLDCOaUPVp8 PrHqhPP5AhoxGkKPNhMdGOIjTTLCqtlJQVCZDO4hkliM70TJxQ5FGk0q0Ita6bm8 axRPJqcOIMltrHsWANvLI/d6WjcY+C2p9hklURZg7ETOvKPpvQWhB7HtbX0ZpxhZ da/5BJZr6fWPYNnaNeGwU0RaVZ87YFk9b60MkzmfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQECkYCI3sbf4LydXWUfdmPlYq5owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA0N2YyMzc1LWI5ZWQtNDNmNS1hMmRhLTU0Mzc1MTU2YjZjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDqwAwDQYJKoZIhvcNAQELBQADggEBADSkI9StUrdlfMAmYAwKiBuOiJ8q lYWDArRhklg1Nasyu7gee3Orq+GEWyXIpjqtyc9mH5AXh9W+UXXaYIGn3/ZyFnMZ tAIPslCZP+TjZpV3iKPa8ns3WX995ZBhHQ00l6zc19tXY/1Jiaef9q+i8ffwA/Gk /fPj4CYzcyfLgrlScMdp0/AF9pIQ5MgFbcjztGpSwaqmoEqOSKOV/uHHvD6Z3GR3 TyKxXX4rQtG51ZsnQwHUn6RWNwqYaLC4bU5GFkQJOytXM8ooOr1yor6bdQl86I/s d0dFwcrxVC67AIg627I9Na512dC6GzkxYdJ+STQisbUxdCCku+Oo6Ko9Lgg= -----END CERTIFICATE-----Generated at Fri Oct 17 22:15:42 2025 by rpki-client