$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59d76f09-3e74-4a2d-8358-3f3f6fa79201.roa File: 59d76f09-3e74-4a2d-8358-3f3f6fa79201.roa (raw, json) Hash identifier: kVu3plLfagD6d0dZODwUM1+twbaQdsbJCKJcAllhZu4= Subject key identifier: 11:4D:EF:F0:16:7A:53:28:37:C9:06:92:D8:57:7B:FF:15:1A:E8:0E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 09AE28EB9CBE82300EF8BB7501C9026EFF88EAAF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59d76f09-3e74-4a2d-8358-3f3f6fa79201.roa Signing time: Fri 26 Sep 2025 01:32:32 +0000 ROA not before: Fri 26 Sep 2025 01:32:32 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ae:28:eb:9c:be:82:30:0e:f8:bb:75:01:c9:02:6e:ff:88:ea:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:32:32 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=540c2f9543d753dd2429df00965f4563764716538acca704bd42d0ad3a0163b2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ac:6e:6b:1a:cf:86:f6:de:cc:27:7e:8e:d5: 14:05:69:7f:30:88:16:76:25:a0:a8:ae:5b:ad:91: f4:5e:7c:22:da:15:25:55:33:c9:0f:bc:b4:61:90: 4c:e2:38:91:9e:24:c3:a7:c0:e5:d4:3b:eb:8c:15: 8d:df:5c:2c:64:a5:b1:b9:59:28:d9:7e:1b:f8:24: 5b:f4:0d:0b:56:05:72:fa:a7:09:9f:e1:c5:fa:d9: 45:6b:c9:e2:7b:46:f1:58:84:cb:60:4c:e5:60:0b: bf:7f:aa:b1:25:60:5e:3f:c1:60:9f:97:4a:47:9b: ac:b3:7d:0b:60:67:c2:ba:38:94:26:84:cb:92:61: b2:62:3c:e5:0a:63:c0:c6:00:1a:0d:94:9a:c5:52: fe:3b:6f:57:41:4a:9f:bb:af:8a:88:60:d3:76:a8: 51:8a:0d:53:7a:3b:01:66:97:b9:d1:ae:96:d1:6e: 48:9a:30:c5:20:1a:89:06:68:d2:db:1e:f0:4d:23: 93:3e:a2:88:4d:db:4a:39:3c:36:df:0f:11:5e:7d: d6:9f:10:1c:a3:5f:81:94:23:6d:03:68:37:79:9c: 61:d3:4e:58:f9:ea:2c:38:78:75:9e:bb:c9:75:cf: 8a:66:1f:47:18:b4:4b:97:b6:82:75:6c:31:22:ed: bf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4D:EF:F0:16:7A:53:28:37:C9:06:92:D8:57:7B:FF:15:1A:E8:0E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59d76f09-3e74-4a2d-8358-3f3f6fa79201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.64.0/21 Signature Algorithm: sha256WithRSAEncryption 60:a0:42:80:c9:64:18:a0:14:ff:7f:5f:8d:d6:22:6b:4a:64: af:a8:1e:4d:32:fd:51:9e:12:c8:45:00:f3:32:b9:02:da:0b: 14:de:12:2e:25:27:8a:df:c7:9d:24:2d:f7:46:cf:e7:94:ff: 40:7f:1e:5e:a2:d4:1c:4a:4f:0b:95:63:1e:00:17:3f:90:c9: dc:72:81:44:79:22:4b:79:04:b2:84:aa:1e:7d:05:44:37:0a: d5:4f:dd:17:65:a9:5f:6d:06:1c:46:e1:f7:78:fe:ed:ea:95: 17:2d:5b:1a:fc:3e:50:71:fe:a2:ab:e7:ed:1a:35:41:17:68: 1a:6e:b2:9b:68:7b:3e:4e:53:09:49:c1:78:a0:58:fe:95:cf: 14:aa:6b:7c:dc:82:62:8f:88:05:cd:a2:70:58:db:12:f5:81: e7:e8:e8:d3:f3:b2:76:a3:df:53:18:e2:25:ae:b0:fd:db:49: 7a:cb:3a:c3:1b:3b:87:8a:d6:64:3c:b8:a8:19:b8:24:b4:f8: 60:b6:9e:9b:2e:6c:51:16:e7:8f:01:e1:b0:4c:b7:1e:0a:c0: 9c:e0:11:b7:7f:47:90:9a:e7:a5:e7:46:7f:75:13:d0:f4:29: fe:61:2f:58:14:18:d3:07:51:cd:b3:d5:8b:11:a4:5b:73:05: 66:e1:d0:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCa4o65y+gjAO+Lt1AckCbv+I6q8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEzMjMyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDBjMmY5NTQzZDc1M2RkMjQyOWRmMDA5NjVmNDU2Mzc2 NDcxNjUzOGFjY2E3MDRiZDQyZDBhZDNhMDE2M2IyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPrG5rGs+G9t7MJ36O1RQFaX8wiBZ2JaCorlutkfRefCLa FSVVM8kPvLRhkEziOJGeJMOnwOXUO+uMFY3fXCxkpbG5WSjZfhv4JFv0DQtWBXL6 pwmf4cX62UVryeJ7RvFYhMtgTOVgC79/qrElYF4/wWCfl0pHm6yzfQtgZ8K6OJQm hMuSYbJiPOUKY8DGABoNlJrFUv47b1dBSp+7r4qIYNN2qFGKDVN6OwFml7nRrpbR bkiaMMUgGokGaNLbHvBNI5M+oohN20o5PDbfDxFefdafEByjX4GUI20DaDd5nGHT Tlj56iw4eHWeu8l1z4pmH0cYtEuXtoJ1bDEi7b8fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEU3v8BZ6Uyg3yQaS2Fd7/xUa6A4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU5ZDc2ZjA5LTNlNzQtNGEyZC04MzU4LTNmM2Y2ZmE3OTIwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDq0AwDQYJKoZIhvcNAQELBQADggEBAGCgQoDJZBigFP9/X43WImtKZK+o Hk0y/VGeEshFAPMyuQLaCxTeEi4lJ4rfx50kLfdGz+eU/0B/Hl6i1BxKTwuVYx4A Fz+QydxygUR5Ikt5BLKEqh59BUQ3CtVP3RdlqV9tBhxG4fd4/u3qlRctWxr8PlBx /qKr5+0aNUEXaBpusptoez5OUwlJwXigWP6VzxSqa3zcgmKPiAXNonBY2xL1gefo 6NPzsnaj31MY4iWusP3bSXrLOsMbO4eK1mQ8uKgZuCS0+GC2npsubFEW548B4bBM tx4KwJzgEbd/R5Ca56XnRn91E9D0Kf5hL1gUGNMHUc2z1YsRpFtzBWbh0Fc= -----END CERTIFICATE-----Generated at Fri Oct 17 23:43:48 2025 by rpki-client