$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25dbd59d-714d-4c3d-b3ce-b80293b0f18d.roa File: 25dbd59d-714d-4c3d-b3ce-b80293b0f18d.roa (raw, json) Hash identifier: fawhA0NLFk3GmyRgyZfdm+K6LyhiZSbuWV1rblvAM+A= Subject key identifier: 13:FD:9A:AD:E8:E6:84:14:BA:29:B1:96:16:7A:9A:60:D3:B1:3D:AB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0FE0903D4D1B9393D442D34917CFF17AA639B0CC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25dbd59d-714d-4c3d-b3ce-b80293b0f18d.roa Signing time: Thu 25 Sep 2025 22:36:34 +0000 ROA not before: Thu 25 Sep 2025 22:36:34 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e0:90:3d:4d:1b:93:93:d4:42:d3:49:17:cf:f1:7a:a6:39:b0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:36:34 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=26960af74b1cca2c08dac265c214b0ce2e7991b436a571c9c546d18f03cdcae4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:83:3b:92:b0:b0:e7:cc:92:a1:b6:bf:89:c6: 58:eb:2b:d1:d8:aa:cd:4d:b6:c6:54:bc:49:f0:00: 4d:14:02:77:f6:9d:a2:7b:a3:2d:31:65:21:48:64: c3:ad:d3:c3:0c:0b:f9:7a:3c:92:1e:b9:3d:86:e9: e8:ea:a6:0d:80:23:cb:a8:ea:99:02:00:b0:d6:a8: a6:92:f4:32:48:e0:13:06:89:68:aa:85:c0:e7:83: 1a:4f:3e:19:34:ec:e7:e7:c1:c0:6f:53:dd:d4:54: d6:25:08:28:a0:a8:21:c3:6f:2d:22:23:20:34:a5: f9:cc:03:71:c2:93:17:8a:95:17:41:92:f3:a5:f9: 8f:22:11:e1:79:7c:c9:15:61:05:68:03:90:50:8c: a1:bd:3e:9f:f4:a1:1c:bd:23:d9:af:aa:14:bb:34: 5d:16:ce:bb:58:58:79:eb:16:d3:9c:61:a3:7a:44: cc:8f:82:9f:be:f9:23:bf:b9:eb:f9:62:41:98:46: 44:5d:95:da:11:ea:37:41:21:69:98:84:0a:fc:7a: 44:5d:1f:67:d8:37:8a:e0:b1:bd:0f:bf:6d:22:1b: 5a:71:29:58:75:6b:d0:f8:ca:5e:7d:58:1a:33:b3: fd:f8:4e:14:bf:57:93:db:2a:15:de:d3:bf:68:f5: b9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FD:9A:AD:E8:E6:84:14:BA:29:B1:96:16:7A:9A:60:D3:B1:3D:AB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25dbd59d-714d-4c3d-b3ce-b80293b0f18d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.216.0/23 Signature Algorithm: sha256WithRSAEncryption 40:93:11:cd:c7:65:bd:4e:57:a6:bd:fd:c2:9e:10:54:e1:3d: 87:be:99:fa:f4:36:f4:ac:a3:0d:42:37:b9:fb:a5:83:ed:61: a3:a1:55:09:52:e7:df:72:7f:30:ad:5c:13:cb:45:e4:1e:21: dd:64:02:f1:c6:7c:da:d7:c3:9a:fe:6a:6a:cd:9e:f3:f8:1f: e5:af:25:65:a5:7f:11:34:2a:2e:80:96:7a:1b:a4:6b:97:64: de:33:09:9f:86:7e:80:05:87:38:4a:0c:75:d4:34:53:f3:ea: 73:4d:bf:57:64:12:5d:98:cc:fe:8a:5e:65:68:23:bd:fe:f3: 80:de:77:29:bc:80:45:95:3d:01:33:eb:5e:97:a7:92:61:14: 3e:3a:a3:ef:54:cd:fa:63:bf:e5:bc:ab:78:75:d9:d7:67:27: 35:9a:f7:dc:ce:29:ee:0a:ce:3b:02:85:2a:50:57:e6:49:78: eb:50:da:f4:4e:00:7e:70:a3:b1:18:f9:b0:ec:eb:1a:12:7d: 49:54:60:ba:19:d6:fa:cf:fa:d9:e2:c3:91:b9:07:f6:a0:41: a1:52:3a:fc:4c:75:72:0b:ea:cb:92:be:bb:7f:55:ba:cb:70: e0:f7:c4:99:34:1b:af:19:aa:70:d8:b9:0a:f2:49:31:89:dc: eb:a3:42:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD+CQPU0bk5PUQtNJF8/xeqY5sMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIzNjM0WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjk2MGFmNzRiMWNjYTJjMDhkYWMyNjVjMjE0YjBjZTJl Nzk5MWI0MzZhNTcxYzljNTQ2ZDE4ZjAzY2RjYWU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfgzuSsLDnzJKhtr+JxljrK9HYqs1NtsZUvEnwAE0UAnf2 naJ7oy0xZSFIZMOt08MMC/l6PJIeuT2G6ejqpg2AI8uo6pkCALDWqKaS9DJI4BMG iWiqhcDngxpPPhk07OfnwcBvU93UVNYlCCigqCHDby0iIyA0pfnMA3HCkxeKlRdB kvOl+Y8iEeF5fMkVYQVoA5BQjKG9Pp/0oRy9I9mvqhS7NF0WzrtYWHnrFtOcYaN6 RMyPgp+++SO/uev5YkGYRkRdldoR6jdBIWmYhAr8ekRdH2fYN4rgsb0Pv20iG1px KVh1a9D4yl59WBozs/34ThS/V5PbKhXe079o9bndAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUE/2arejmhBS6KbGWFnqaYNOxPaswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI1ZGJkNTlkLTcxNGQtNGMzZC1iM2NlLWI4MDI5M2IwZjE4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDp9gwDQYJKoZIhvcNAQELBQADggEBAECTEc3HZb1OV6a9/cKeEFThPYe+ mfr0NvSsow1CN7n7pYPtYaOhVQlS599yfzCtXBPLReQeId1kAvHGfNrXw5r+amrN nvP4H+WvJWWlfxE0Ki6AlnobpGuXZN4zCZ+GfoAFhzhKDHXUNFPz6nNNv1dkEl2Y zP6KXmVoI73+84Dedym8gEWVPQEz616Xp5JhFD46o+9Uzfpjv+W8q3h12ddnJzWa 99zOKe4KzjsChSpQV+ZJeOtQ2vROAH5wo7EY+bDs6xoSfUlUYLoZ1vrP+tniw5G5 B/agQaFSOvxMdXIL6suSvrt/VbrLcOD3xJk0G68ZqnDYuQrySTGJ3OujQv0= -----END CERTIFICATE-----Generated at Sat Oct 18 02:16:39 2025 by rpki-client