$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61ac838d-fce1-4d5a-a17d-2a8fc82e7516.roa File: 61ac838d-fce1-4d5a-a17d-2a8fc82e7516.roa (raw, json) Hash identifier: Yl3Osb0K4evCf5bUCytA+rREjXWMoturEouASYfqVxg= Subject key identifier: 0D:A3:10:09:7D:28:86:35:55:30:47:AD:97:DC:FD:E5:0D:FC:31:CE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 593F0B3A6D9E3AA3136B9D7A3F1A17D4B32E0F41 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61ac838d-fce1-4d5a-a17d-2a8fc82e7516.roa Signing time: Thu 25 Sep 2025 22:59:29 +0000 ROA not before: Thu 25 Sep 2025 22:59:29 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3f:0b:3a:6d:9e:3a:a3:13:6b:9d:7a:3f:1a:17:d4:b3:2e:0f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:59:29 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=6e75d58186552fd139b1d7a6512c2aff028e89a150fb1e5adce3bc607b463601, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:31:23:40:e7:c5:78:1c:fb:21:88:f8:79:84: 1f:fc:2f:28:25:a5:0d:b4:32:67:80:8e:89:54:3c: e0:38:fe:b0:32:f4:b6:db:80:17:47:c0:da:55:57: d3:e7:1a:d4:ce:12:20:8a:d9:c2:69:cc:4b:6d:a6: 3c:45:99:19:ec:8c:e9:98:2f:7d:d4:68:de:89:f0: 0e:f5:39:8f:18:a9:85:cf:8e:92:5f:ec:4a:a8:09: 84:a0:3d:6f:cd:ca:7a:d8:db:d9:5b:64:0f:c2:e1: bb:cb:71:8c:51:2e:33:b8:60:6e:71:10:57:91:fd: a5:a5:e3:c5:9d:9b:78:01:36:00:14:7f:78:35:70: 51:f0:b5:74:d5:4a:fe:7a:90:88:31:f8:68:72:2e: 61:89:af:42:3e:df:73:6e:28:d0:d9:2b:db:40:be: 67:74:70:fe:b9:b5:48:b5:d8:17:a7:14:0e:cc:28: c8:cf:6f:b8:12:44:5e:ab:51:9f:af:6e:db:fc:a5: 70:e5:36:dd:2e:9d:cc:81:dd:db:83:8c:f2:21:7e: 15:89:c6:82:6c:d9:77:be:24:7c:13:67:f2:b9:39: 44:bb:54:c0:7a:0c:62:4c:51:18:d2:14:e1:c2:96: 3a:5d:c8:91:86:15:08:ab:aa:15:b5:f4:d7:a1:1f: 5d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A3:10:09:7D:28:86:35:55:30:47:AD:97:DC:FD:E5:0D:FC:31:CE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61ac838d-fce1-4d5a-a17d-2a8fc82e7516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.96.0/23 Signature Algorithm: sha256WithRSAEncryption a3:f7:68:97:1c:d3:ad:93:df:8e:89:26:2b:84:ad:23:96:92: f6:bd:8f:84:ab:2c:31:b9:1c:39:58:1b:6d:4b:5d:33:cd:34: e9:d6:4a:9a:2d:54:24:c2:ad:87:dc:19:6d:9f:33:bd:6f:80: 61:fb:6f:82:e1:59:ec:5f:49:5b:f3:73:b3:3f:81:aa:f7:56: 83:4e:11:c6:19:6b:43:01:0a:ea:be:68:a5:e4:5e:d9:61:ae: a0:a4:19:53:a2:25:ef:44:5e:f6:f1:f7:5e:66:80:a6:b9:31: 7d:a6:46:97:a9:49:16:80:eb:b2:69:7b:62:f9:27:f3:ad:4d: 6e:9f:89:de:45:9c:4a:50:53:75:74:db:c3:82:d0:88:45:24: f9:87:71:ae:6e:df:7f:bf:8b:46:d4:dd:58:d4:0c:64:ab:3a: 76:29:44:5a:17:49:5e:27:e0:ff:87:92:85:b8:73:cb:a2:ad: da:fc:3d:13:7a:c0:ba:66:11:9b:c3:60:1d:7b:a9:f9:dc:dc: 39:0b:90:b2:db:10:e6:bd:6a:58:c9:b3:dd:5c:b9:ea:12:5f: ea:63:8a:8a:37:60:b5:e1:d1:9d:5d:f3:75:b4:f3:b8:12:70: 3f:01:13:18:6f:94:3f:88:ba:65:b4:36:0e:3b:65:4e:17:68: 7f:ea:c5:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWT8LOm2eOqMTa516PxoX1LMuD0EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjI1OTI5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZTc1ZDU4MTg2NTUyZmQxMzliMWQ3YTY1MTJjMmFmZjAy OGU4OWExNTBmYjFlNWFkY2UzYmM2MDdiNDYzNjAxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXMSNA58V4HPshiPh5hB/8LyglpQ20MmeAjolUPOA4/rAy 9LbbgBdHwNpVV9PnGtTOEiCK2cJpzEttpjxFmRnsjOmYL33UaN6J8A71OY8YqYXP jpJf7EqoCYSgPW/NynrY29lbZA/C4bvLcYxRLjO4YG5xEFeR/aWl48Wdm3gBNgAU f3g1cFHwtXTVSv56kIgx+GhyLmGJr0I+33NuKNDZK9tAvmd0cP65tUi12BenFA7M KMjPb7gSRF6rUZ+vbtv8pXDlNt0uncyB3duDjPIhfhWJxoJs2Xe+JHwTZ/K5OUS7 VMB6DGJMURjSFOHCljpdyJGGFQirqhW19NehH10zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDaMQCX0ohjVVMEetl9z95Q38Mc4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYxYWM4MzhkLWZjZTEtNGQ1YS1hMTdkLTJhOGZjODJlNzUxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqWAwDQYJKoZIhvcNAQELBQADggEBAKP3aJcc062T346JJiuErSOWkva9 j4SrLDG5HDlYG21LXTPNNOnWSpotVCTCrYfcGW2fM71vgGH7b4LhWexfSVvzc7M/ gar3VoNOEcYZa0MBCuq+aKXkXtlhrqCkGVOiJe9EXvbx915mgKa5MX2mRpepSRaA 67Jpe2L5J/OtTW6fid5FnEpQU3V028OC0IhFJPmHca5u33+/i0bU3VjUDGSrOnYp RFoXSV4n4P+HkoW4c8uirdr8PRN6wLpmEZvDYB17qfnc3DkLkLLbEOa9aljJs91c ueoSX+pjioo3YLXh0Z1d83W087gScD8BExhvlD+IumW0Ng47ZU4XaH/qxcc= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:22 2025 by rpki-client