$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21d99951-6cef-41a9-87e5-ecee9c082727.roa File: 21d99951-6cef-41a9-87e5-ecee9c082727.roa (raw, json) Hash identifier: +z84MCYoWju2MXSLcnHWvHwwEEjM4hI3DPIukzstoBI= Subject key identifier: 5E:42:8A:63:1C:A0:42:14:E7:0C:46:B5:4E:1B:9D:73:9A:5C:4F:8D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7882D6144A496437ABE0B8D62B15EF2D5F2E801A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21d99951-6cef-41a9-87e5-ecee9c082727.roa Signing time: Fri 26 Sep 2025 01:26:58 +0000 ROA not before: Fri 26 Sep 2025 01:26:58 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:82:d6:14:4a:49:64:37:ab:e0:b8:d6:2b:15:ef:2d:5f:2e:80:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:26:58 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=723dca5c13faa9d9e4b8c32fe58e736ff0587a5a2398664b3a88c9bb6658c1b7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:e2:cc:a4:e7:4f:91:17:7f:41:1e:46:c7: f1:35:a6:e2:57:df:c9:32:aa:11:f8:6a:88:0b:09: 53:22:e3:a1:67:f0:cb:73:4b:0a:65:55:e5:e1:14: 77:54:1a:ff:65:22:73:17:09:1f:56:ec:09:4d:0c: 1a:1f:a4:6f:f0:5c:d0:82:19:bf:be:2b:59:08:2d: c0:a2:34:8e:ee:82:b1:4f:ca:58:b8:74:9c:11:30: 10:83:12:b6:12:8d:28:86:80:9b:4e:ae:28:5c:87: a6:f2:1a:9c:21:b7:7b:61:08:16:f5:c3:c0:24:f6: 01:66:58:7f:1a:d1:37:c7:c8:4c:e5:7f:3b:7e:bf: b9:dd:62:8e:b4:7d:24:79:06:4e:00:23:1e:97:18: fe:b3:46:2f:41:99:2e:5a:28:5c:59:eb:88:74:2d: e7:49:b6:42:ce:ef:58:35:16:5d:db:b9:eb:73:3f: c5:df:17:41:b3:0f:bd:da:80:85:c1:fb:4d:04:58: f6:52:80:6d:42:ac:1d:e4:5e:82:e9:63:9d:e6:b1: fa:2b:1e:70:66:92:20:90:7c:ca:6f:d3:9c:f2:43: 7d:04:8b:18:25:02:17:04:b3:fe:13:1d:b2:ca:18: b7:ec:17:d1:93:e3:63:59:1c:1a:f9:de:a3:6e:91: 82:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:42:8A:63:1C:A0:42:14:E7:0C:46:B5:4E:1B:9D:73:9A:5C:4F:8D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21d99951-6cef-41a9-87e5-ecee9c082727.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.168.0/21 Signature Algorithm: sha256WithRSAEncryption 76:d9:70:d1:ad:40:21:5e:09:cf:c6:37:cc:dc:f2:a6:bf:bc: fc:bf:3a:22:d4:a7:49:3f:dd:20:6d:55:f6:01:b0:3e:a3:e9: e7:66:4a:81:c9:2a:76:18:07:65:a2:23:79:29:6d:81:06:5e: 87:d4:62:61:c9:07:03:e6:0a:23:e4:85:c6:80:b4:b6:b5:89: 99:6d:f7:77:80:e9:94:0b:04:c9:79:c3:2c:fa:b5:46:7f:a1: 4f:12:28:e6:a8:b2:31:8c:e5:a8:a7:d9:b4:12:71:7b:6b:e7: b5:01:de:2c:b9:34:8d:9a:af:dc:38:d5:a5:b2:3e:a9:a7:75: da:57:bf:88:13:be:f5:c6:b2:e9:0f:61:62:5b:08:9e:e1:cf: 32:44:54:71:46:a3:bd:7f:27:c7:e8:dc:ed:11:87:91:f1:be: e4:4d:75:11:82:95:29:1b:0f:5a:81:0f:7c:3c:bd:72:04:db: ea:c4:2b:63:83:bf:8a:47:43:f5:48:88:0e:9a:64:8c:23:62: cf:a2:73:e9:7e:8f:f2:57:d7:20:e9:5f:1a:12:06:a0:2c:c4: 50:07:16:aa:fa:1f:f2:26:cd:98:e4:b1:85:1a:7e:8a:bc:4d: c7:3d:58:3c:23:34:b4:1a:dc:88:ac:cf:71:62:d1:1f:2d:0c: 98:10:91:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeILWFEpJZDer4LjWKxXvLV8ugBowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEyNjU4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjNkY2E1YzEzZmFhOWQ5ZTRiOGMzMmZlNThlNzM2ZmYw NTg3YTVhMjM5ODY2NGIzYTg4YzliYjY2NThjMWI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmEuLMpOdPkRd/QR5Gx/E1puJX38kyqhH4aogLCVMi46Fn 8MtzSwplVeXhFHdUGv9lInMXCR9W7AlNDBofpG/wXNCCGb++K1kILcCiNI7ugrFP yli4dJwRMBCDErYSjSiGgJtOrihch6byGpwht3thCBb1w8Ak9gFmWH8a0TfHyEzl fzt+v7ndYo60fSR5Bk4AIx6XGP6zRi9BmS5aKFxZ64h0LedJtkLO71g1Fl3buetz P8XfF0GzD73agIXB+00EWPZSgG1CrB3kXoLpY53msforHnBmkiCQfMpv05zyQ30E ixglAhcEs/4THbLKGLfsF9GT42NZHBr53qNukYLPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXkKKYxygQhTnDEa1Thudc5pcT40wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxZDk5OTUxLTZjZWYtNDFhOS04N2U1LWVjZWU5YzA4MjcyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDqKgwDQYJKoZIhvcNAQELBQADggEBAHbZcNGtQCFeCc/GN8zc8qa/vPy/ OiLUp0k/3SBtVfYBsD6j6edmSoHJKnYYB2WiI3kpbYEGXofUYmHJBwPmCiPkhcaA tLa1iZlt93eA6ZQLBMl5wyz6tUZ/oU8SKOaosjGM5ain2bQScXtr57UB3iy5NI2a r9w41aWyPqmnddpXv4gTvvXGsukPYWJbCJ7hzzJEVHFGo71/J8fo3O0Rh5HxvuRN dRGClSkbD1qBD3w8vXIE2+rEK2ODv4pHQ/VIiA6aZIwjYs+ic+l+j/JX1yDpXxoS BqAsxFAHFqr6H/ImzZjksYUafoq8Tcc9WDwjNLQa3Iisz3Fi0R8tDJgQkZ4= -----END CERTIFICATE-----Generated at Sat Oct 18 07:40:23 2025 by rpki-client