$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/581e284a-3089-44fd-8bc9-ca53fdd55f7b.roa File: 581e284a-3089-44fd-8bc9-ca53fdd55f7b.roa (raw, json) Hash identifier: jVhihMC3TmU1xVQlg3CTpXrhYqxFko/P+ShBsglX46s= Subject key identifier: D8:1D:32:5E:DE:68:8D:E5:95:D0:54:0C:20:39:97:47:80:47:CE:24 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1137F2954B7696339D964F9913ED580E69F4DE44 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/581e284a-3089-44fd-8bc9-ca53fdd55f7b.roa Signing time: Thu 25 Sep 2025 19:47:36 +0000 ROA not before: Thu 25 Sep 2025 19:47:36 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:37:f2:95:4b:76:96:33:9d:96:4f:99:13:ed:58:0e:69:f4:de:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:47:36 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=4e8f0a1129309d0b51f0116adcd5e5d17daacf171204a57ffbbda05475ba3d4d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:42:e6:1c:1b:0e:e5:43:af:93:b8:f2:7c:b5: 7f:33:6a:4b:69:37:1d:a5:a2:81:94:df:ae:ca:bf: 0b:5d:18:40:93:a4:cb:fd:82:e8:c8:e5:e8:c7:6f: 05:93:26:dc:3c:c5:c0:ec:b6:2b:89:8d:22:d4:db: 36:03:14:05:ac:79:30:57:a0:61:68:d0:f0:69:cb: 7c:62:72:d4:46:a2:eb:30:82:a2:42:77:c3:85:87: 83:80:bd:58:0e:e9:0b:86:1b:e0:d0:39:11:4b:ec: 37:c5:9c:0b:62:70:f8:86:1d:b3:e6:cb:5a:83:1c: ed:8c:b1:7c:dc:5a:24:4a:51:f5:c0:33:1b:e7:d7: d8:a6:e3:31:24:e0:c7:ee:35:c1:da:16:c2:7d:d6: fa:5a:e2:93:4e:59:e7:b6:84:de:6f:c7:91:9c:a7: 86:57:70:9a:55:5e:52:20:15:1b:b1:df:f0:95:e6: e9:54:c7:07:5a:fb:e1:29:c4:e0:dc:c7:43:2b:a9: 80:eb:03:ef:6b:4c:fe:d3:68:22:df:da:f9:4c:0f: 48:0d:51:cc:b7:11:fa:3b:de:dd:63:d2:2a:8e:04: ec:4b:3d:f4:d1:91:5f:10:78:78:38:4d:42:45:93: a1:b4:81:5a:27:e6:34:8d:57:5c:49:62:cc:d0:25: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1D:32:5E:DE:68:8D:E5:95:D0:54:0C:20:39:97:47:80:47:CE:24 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/581e284a-3089-44fd-8bc9-ca53fdd55f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.119.0/24 Signature Algorithm: sha256WithRSAEncryption 45:ed:ad:b9:9f:7f:40:e6:e4:22:60:9b:5a:ca:ba:a1:17:52: 3b:4c:7f:00:27:7f:7f:a3:c8:be:6c:3e:16:66:7e:2e:6f:40: 79:73:3e:aa:89:1a:0f:e6:14:6d:f9:e9:9b:fe:e1:68:16:64: 27:14:17:b3:1b:fb:f2:47:95:18:03:00:1f:6d:63:a5:60:69: d3:18:6b:a0:83:66:00:c3:3c:96:16:c8:b9:fb:11:30:13:04: 89:5e:20:40:a4:c4:b0:53:a7:15:d8:45:11:88:3e:46:13:a7: bb:09:14:44:41:b4:9a:6f:ab:5d:ba:1e:c6:e7:6c:d9:b0:64: 5c:85:87:99:a0:ca:86:03:84:4b:d4:59:59:4f:e7:85:f1:5f: e1:ba:e4:25:87:82:fa:ff:04:e1:80:3d:54:12:10:8f:8c:b8: 68:e0:a3:8a:ad:27:19:75:11:c2:31:12:3f:5e:1c:ef:08:03: 2e:94:83:62:38:df:66:80:55:8a:9d:ca:83:80:11:6b:39:98: e7:29:cd:b9:50:c5:94:ef:70:9f:e8:8e:74:2e:4a:19:fa:06: 1b:38:32:95:2e:6e:20:29:ab:23:b0:d4:6d:e7:77:cc:c2:d7: c6:79:df:9e:b7:94:5e:58:41:5e:8f:da:77:cd:e0:7b:b0:28: 2b:df:e2:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUETfylUt2ljOdlk+ZE+1YDmn03kQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTk0NzM2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZThmMGExMTI5MzA5ZDBiNTFmMDExNmFkY2Q1ZTVkMTdk YWFjZjE3MTIwNGE1N2ZmYmJkYTA1NDc1YmEzZDRkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeQuYcGw7lQ6+TuPJ8tX8zaktpNx2looGU367KvwtdGECT pMv9gujI5ejHbwWTJtw8xcDstiuJjSLU2zYDFAWseTBXoGFo0PBpy3xictRGousw gqJCd8OFh4OAvVgO6QuGG+DQORFL7DfFnAticPiGHbPmy1qDHO2MsXzcWiRKUfXA Mxvn19im4zEk4MfuNcHaFsJ91vpa4pNOWee2hN5vx5Gcp4ZXcJpVXlIgFRux3/CV 5ulUxwda++EpxODcx0MrqYDrA+9rTP7TaCLf2vlMD0gNUcy3Efo73t1j0iqOBOxL PfTRkV8QeHg4TUJFk6G0gVon5jSNV1xJYszQJUPLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2B0yXt5ojeWV0FQMIDmXR4BHziQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU4MWUyODRhLTMwODktNDRmZC04YmM5LWNhNTNmZGQ1NWY3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqncwDQYJKoZIhvcNAQELBQADggEBAEXtrbmff0Dm5CJgm1rKuqEXUjtM fwAnf3+jyL5sPhZmfi5vQHlzPqqJGg/mFG356Zv+4WgWZCcUF7Mb+/JHlRgDAB9t Y6VgadMYa6CDZgDDPJYWyLn7ETATBIleIECkxLBTpxXYRRGIPkYTp7sJFERBtJpv q126HsbnbNmwZFyFh5mgyoYDhEvUWVlP54XxX+G65CWHgvr/BOGAPVQSEI+MuGjg o4qtJxl1EcIxEj9eHO8IAy6Ug2I432aAVYqdyoOAEWs5mOcpzblQxZTvcJ/ojnQu Shn6Bhs4MpUubiApqyOw1G3nd8zC18Z53563lF5YQV6P2nfN4HuwKCvf4sc= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:02 2025 by rpki-client