$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42667a30-068b-4f56-abe0-756424740941.roa File: 42667a30-068b-4f56-abe0-756424740941.roa (raw, json) Hash identifier: NxbEV3w4Bokpj1GAknQKQpLIeohPkf9hK9qK7nFD+Qo= Subject key identifier: 57:37:68:8C:7D:DF:3F:8F:1D:58:98:5F:18:89:47:26:60:6C:95:68 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 06CB2CF0382F74A11C557E9B21D553499141AE55 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42667a30-068b-4f56-abe0-756424740941.roa Signing time: Thu 25 Sep 2025 19:17:51 +0000 ROA not before: Thu 25 Sep 2025 19:17:51 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:cb:2c:f0:38:2f:74:a1:1c:55:7e:9b:21:d5:53:49:91:41:ae:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:17:51 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=333f5616ce0abe143074381df268dc035b3cd33f692e296d2cefcb941b28ca23, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:16:99:7f:ad:c3:8a:4f:15:84:18:a4:a2: 33:bf:f6:90:f0:4b:c6:33:44:18:f0:45:b7:d4:8b: e6:52:68:fc:63:c1:81:1e:2e:cc:d8:3e:d3:14:e5: d5:3c:05:23:b2:65:fc:ed:73:74:f7:31:e7:96:78: 30:36:69:33:50:68:68:f6:4f:fc:e1:1e:70:ff:31: d5:05:f5:f2:b7:d5:15:fe:1a:9f:7d:15:c6:4e:95: b4:10:28:36:a8:0d:19:b6:73:9e:d2:3f:e5:72:09: 9b:24:a1:58:e0:34:57:9d:a2:d2:48:44:15:71:62: 77:b4:88:e4:50:b7:27:0c:f0:d7:cd:d5:aa:a2:38: 81:a2:13:c8:e9:c4:20:75:90:a4:4f:7f:26:89:e4: 67:6b:a8:14:1e:cd:94:2d:d2:69:93:75:1a:9d:37: d4:26:c8:1b:90:82:b1:a5:91:2b:bb:89:d9:0a:9b: 4c:8f:0d:c2:19:0a:39:fa:2f:13:a1:30:1f:32:96: 3a:ef:cf:67:6e:7b:31:70:17:ea:d3:7e:29:37:26: 9a:b2:5e:0a:9e:f7:bd:33:8b:bc:b4:4c:1e:15:fc: da:0c:c5:44:aa:a3:40:cb:e3:2e:87:90:83:40:66: ad:8b:13:cb:79:1b:af:cf:fb:e8:98:9e:95:a6:dd: e8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:37:68:8C:7D:DF:3F:8F:1D:58:98:5F:18:89:47:26:60:6C:95:68 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42667a30-068b-4f56-abe0-756424740941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.220.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:66:4a:3e:14:c4:b9:fd:a2:57:98:17:7f:a0:60:b1:34:7a: ac:68:ab:38:24:10:4c:96:ee:27:07:05:7d:e3:4c:6a:1e:5c: 7a:6d:b5:cb:26:f9:de:89:5a:08:0d:f2:e6:85:e6:1b:73:1f: 4b:8a:f9:65:75:d7:d3:14:c5:60:c5:af:2c:b2:93:1f:7d:db: b3:6d:51:ab:98:64:f5:35:04:7e:b5:0f:e7:36:4e:d7:71:0b: 3c:dd:56:f3:74:e7:15:fe:69:d0:8c:39:d8:aa:ce:16:53:88: d1:31:68:f8:72:43:e4:7d:de:f9:bb:0b:d0:9c:e5:66:40:88: 91:2d:65:94:e1:dd:2b:2d:f0:9d:f8:19:64:b4:6b:f1:8b:06: 9a:03:bd:9b:d5:de:18:98:6e:b1:0f:50:e5:43:c7:8d:1c:fa: 8d:09:ad:11:c2:89:5d:c0:3d:1e:58:fe:d4:f9:40:47:04:45: bc:81:34:78:21:9a:b9:54:14:ed:e2:54:6b:9a:7d:4a:57:81: 93:3c:0b:98:ac:4f:3f:de:fd:9e:0a:d7:79:76:1b:bc:9e:53: c7:ef:c8:16:b1:dd:cb:d4:ec:8b:f9:de:a5:86:b0:7e:4f:f4: fe:ea:eb:04:d6:12:cb:8a:02:fb:cb:16:bf:d6:a2:1a:c0:57: c0:8f:ad:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBsss8DgvdKEcVX6bIdVTSZFBrlUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkxNzUxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzNmNTYxNmNlMGFiZTE0MzA3NDM4MWRmMjY4ZGMwMzVi M2NkMzNmNjkyZTI5NmQyY2VmY2I5NDFiMjhjYTIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMbhaZf63Dik8VhBikojO/9pDwS8YzRBjwRbfUi+ZSaPxj wYEeLszYPtMU5dU8BSOyZfztc3T3MeeWeDA2aTNQaGj2T/zhHnD/MdUF9fK31RX+ Gp99FcZOlbQQKDaoDRm2c57SP+VyCZskoVjgNFedotJIRBVxYne0iORQtycM8NfN 1aqiOIGiE8jpxCB1kKRPfyaJ5GdrqBQezZQt0mmTdRqdN9QmyBuQgrGlkSu7idkK m0yPDcIZCjn6LxOhMB8yljrvz2duezFwF+rTfik3JpqyXgqe970zi7y0TB4V/NoM xUSqo0DL4y6HkINAZq2LE8t5G6/P++iYnpWm3ejpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVzdojH3fP48dWJhfGIlHJmBslWgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQyNjY3YTMwLTA2OGItNGY1Ni1hYmUwLTc1NjQyNDc0MDk0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqNwwDQYJKoZIhvcNAQELBQADggEBAI9mSj4UxLn9oleYF3+gYLE0eqxo qzgkEEyW7icHBX3jTGoeXHpttcsm+d6JWggN8uaF5htzH0uK+WV119MUxWDFryyy kx9927NtUauYZPU1BH61D+c2TtdxCzzdVvN05xX+adCMOdiqzhZTiNExaPhyQ+R9 3vm7C9Cc5WZAiJEtZZTh3Sst8J34GWS0a/GLBpoDvZvV3hiYbrEPUOVDx40c+o0J rRHCiV3APR5Y/tT5QEcERbyBNHghmrlUFO3iVGuafUpXgZM8C5isTz/e/Z4K13l2 G7yeU8fvyBax3cvU7Iv53qWGsH5P9P7q6wTWEsuKAvvLFr/WohrAV8CPrdM= -----END CERTIFICATE-----Generated at Sat Oct 18 05:12:32 2025 by rpki-client