$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e9e5324-964e-4f26-b8e7-9edf8082d62b.roa File: 4e9e5324-964e-4f26-b8e7-9edf8082d62b.roa (raw, json) Hash identifier: 3zlkdo3djYFBVbeocGSMEdF6xGwk4zQg30+4nl6nFyk= Subject key identifier: 2D:7D:38:CF:1B:A9:05:B8:69:59:F9:6E:5C:E0:65:AA:F1:33:98:6D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4CE99E587CE8B895283816D3746A537150F61566 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e9e5324-964e-4f26-b8e7-9edf8082d62b.roa Signing time: Thu 25 Sep 2025 19:15:29 +0000 ROA not before: Thu 25 Sep 2025 19:15:29 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e9:9e:58:7c:e8:b8:95:28:38:16:d3:74:6a:53:71:50:f6:15:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:15:29 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=b75253e82397f564165825fdd2cf746b3bb3cd859724a04e4a2a4eafb991ceea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:37:48:18:a7:8c:0f:d8:6a:e6:4b:86:c0:6c: 02:a8:c6:2d:5f:5f:8a:35:d0:12:d1:9e:d1:c4:02: 26:57:0f:5f:be:21:43:e8:3e:5a:bc:35:fc:a9:30: 27:30:8f:3d:4f:4d:e3:00:d9:05:23:32:db:3e:fd: 12:d6:02:08:97:88:70:b8:e7:75:16:07:0d:f0:9e: bb:22:f8:83:16:f9:35:27:a4:2d:eb:e9:d0:d0:87: ff:58:d3:00:eb:53:eb:50:51:de:ca:6b:7b:df:58: fb:dd:9e:e4:ba:32:c7:a0:9a:c3:92:56:48:17:96: 69:a4:cd:2a:6f:f7:21:aa:c0:74:69:d6:8e:26:c5: 77:29:61:37:ec:10:f0:ea:57:03:a4:13:e5:21:ae: 1a:7d:9c:ec:3a:de:f7:03:28:c6:8a:53:8f:26:57: 54:42:cc:f6:80:18:cc:bb:7c:6f:ad:f5:ab:b8:5b: d7:9b:62:93:d6:61:37:cf:a2:d1:6c:75:34:39:4e: b2:94:fe:76:8b:75:df:19:fa:57:bd:8c:85:52:52: 89:cb:61:26:0e:99:16:10:4d:3a:34:6c:89:29:08: b0:ba:7f:6f:43:70:f9:d2:ca:9f:51:bf:60:cf:4c: 4c:b0:da:b5:03:d4:7f:35:df:48:19:33:99:45:a7: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7D:38:CF:1B:A9:05:B8:69:59:F9:6E:5C:E0:65:AA:F1:33:98:6D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e9e5324-964e-4f26-b8e7-9edf8082d62b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.204.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:14:12:c2:e6:ca:7f:4b:ad:99:3f:96:f7:88:34:39:d1:5c: 2f:b3:38:df:58:85:d3:7e:ef:53:8f:8c:c9:27:1a:3e:cb:40: 58:c2:a9:28:d3:09:e6:45:25:0b:2b:d1:ab:e5:ec:ee:d3:34: 16:e8:8b:43:a4:a5:df:d0:c9:91:01:f7:f7:ab:29:17:35:e6: c7:82:c2:01:e4:36:ee:0c:57:20:29:93:17:00:79:2b:06:55: 26:9d:93:58:d7:e6:f4:f0:91:1b:1b:74:a6:3d:c4:8d:b6:25: 44:14:09:40:cc:65:72:2b:3b:f8:8f:26:8d:66:9d:49:99:a5: ca:82:4d:cb:c8:ef:5e:0f:6d:bc:34:51:c5:25:ac:8a:bb:d0: 1a:14:48:60:86:c0:8f:57:46:ff:bc:10:fa:94:b4:b2:be:9e: 15:81:86:ca:ed:d3:22:ad:8e:90:e2:40:60:4f:1b:34:70:c9: a0:9a:bf:18:b8:7c:ea:70:4a:de:b8:f3:79:08:06:1d:9e:80: a9:88:5e:b6:7e:d1:30:e8:ef:cb:1d:27:bb:25:39:91:8c:4c: 8b:1f:c2:90:e8:fe:1b:fc:3b:bf:60:3a:6d:fd:19:7d:f2:02: fc:1e:a7:e4:b1:d8:57:cd:86:80:e1:fe:5c:03:a5:5f:1e:d0: 7d:a0:e8:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTOmeWHzouJUoOBbTdGpTcVD2FWYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkxNTI5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzUyNTNlODIzOTdmNTY0MTY1ODI1ZmRkMmNmNzQ2YjNi YjNjZDg1OTcyNGEwNGU0YTJhNGVhZmI5OTFjZWVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQN0gYp4wP2GrmS4bAbAKoxi1fX4o10BLRntHEAiZXD1++ IUPoPlq8NfypMCcwjz1PTeMA2QUjMts+/RLWAgiXiHC453UWBw3wnrsi+IMW+TUn pC3r6dDQh/9Y0wDrU+tQUd7Ka3vfWPvdnuS6MsegmsOSVkgXlmmkzSpv9yGqwHRp 1o4mxXcpYTfsEPDqVwOkE+Uhrhp9nOw63vcDKMaKU48mV1RCzPaAGMy7fG+t9au4 W9ebYpPWYTfPotFsdTQ5TrKU/naLdd8Z+le9jIVSUonLYSYOmRYQTTo0bIkpCLC6 f29DcPnSyp9Rv2DPTEyw2rUD1H8130gZM5lFp75LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULX04zxupBbhpWfluXOBlqvEzmG0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRlOWU1MzI0LTk2NGUtNGYyNi1iOGU3LTllZGY4MDgyZDYyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqMwwDQYJKoZIhvcNAQELBQADggEBAG8UEsLmyn9LrZk/lveINDnRXC+z ON9YhdN+71OPjMknGj7LQFjCqSjTCeZFJQsr0avl7O7TNBboi0Okpd/QyZEB9/er KRc15seCwgHkNu4MVyApkxcAeSsGVSadk1jX5vTwkRsbdKY9xI22JUQUCUDMZXIr O/iPJo1mnUmZpcqCTcvI714Pbbw0UcUlrIq70BoUSGCGwI9XRv+8EPqUtLK+nhWB hsrt0yKtjpDiQGBPGzRwyaCavxi4fOpwSt6483kIBh2egKmIXrZ+0TDo78sdJ7sl OZGMTIsfwpDo/hv8O79gOm39GX3yAvwep+Sx2FfNhoDh/lwDpV8e0H2g6J0= -----END CERTIFICATE-----Generated at Sat Oct 18 02:13:02 2025 by rpki-client