$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6340562a-2507-4ad9-83b0-f0fe6f525388.roa File: 6340562a-2507-4ad9-83b0-f0fe6f525388.roa (raw, json) Hash identifier: 6DrkKwpkQ6gVqak+ZgbGHPYKWsAjRnT5VbIU9Ot9JzA= Subject key identifier: AF:5A:68:CC:F5:28:3D:6A:05:7E:04:EF:E2:2A:FD:9A:75:04:2B:12 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0BB2A368D70B018E11E6F7D290258C0D547AE2F8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6340562a-2507-4ad9-83b0-f0fe6f525388.roa Signing time: Fri 26 Sep 2025 01:36:38 +0000 ROA not before: Fri 26 Sep 2025 01:36:38 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b2:a3:68:d7:0b:01:8e:11:e6:f7:d2:90:25:8c:0d:54:7a:e2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:36:38 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=d7f9bf92a0aa51b507ecaa7b6a16848b3904f6d5f8c315869dcaf4c4d603a737, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:1d:9e:24:c3:e6:45:fc:80:5e:7f:c9:43: 8f:62:ac:cf:c6:64:e1:f6:f2:ec:69:23:e9:b3:e9: 7d:1b:4a:5f:57:f2:dc:a6:b6:8c:dd:59:ab:27:41: 1c:4a:07:83:cb:3a:27:86:c9:76:02:89:3a:98:66: ad:ad:da:01:a3:b1:60:9c:6f:57:2c:0a:1f:b7:67: 0b:45:bb:fa:e2:94:06:26:31:cc:b9:70:03:e5:1d: 4e:dc:44:98:1d:96:11:cb:32:84:37:86:ec:14:4d: 24:7b:59:c9:72:56:e7:1d:ef:31:e6:d6:be:89:35: c0:f2:81:04:8a:1b:84:d3:77:49:02:44:7a:50:34: a0:c7:58:9a:47:51:4b:5e:9f:26:47:c8:a5:e8:be: c8:7a:ed:20:21:42:c1:2d:61:f2:18:a5:d8:b8:04: fd:03:e9:03:0d:93:63:86:37:b2:58:c8:89:e5:6b: d7:f8:95:f5:52:34:f2:d9:af:17:97:ed:09:de:9e: d7:a7:c9:58:3d:64:07:41:4e:29:4a:87:a2:37:31: 1a:a3:6a:bf:ec:f3:19:33:9e:da:b6:eb:8d:da:58: 1d:95:01:6d:96:d7:a5:85:ad:24:53:91:a8:b9:44: c3:1f:96:d9:c5:aa:3f:c2:e1:62:a2:6f:76:5c:55: 9d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5A:68:CC:F5:28:3D:6A:05:7E:04:EF:E2:2A:FD:9A:75:04:2B:12 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6340562a-2507-4ad9-83b0-f0fe6f525388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.88.0/21 Signature Algorithm: sha256WithRSAEncryption 54:74:5d:7d:9c:ac:c9:44:b9:0e:28:db:f3:56:b9:a3:56:e5: ef:e6:10:0d:aa:3e:3b:67:86:a0:9b:d4:44:67:e4:7e:ac:ab: 35:94:07:ae:97:89:4a:71:bd:91:8c:18:2f:58:d8:a2:cf:57: 9a:8d:6d:ed:9a:76:9b:55:1f:0c:da:62:07:47:7e:52:4a:96: 86:34:f1:32:1a:4e:21:66:45:90:8d:43:31:be:90:9b:e4:92: 49:29:c3:b0:fd:e0:e9:f0:95:de:e1:96:a8:e6:8d:dc:12:98: 03:3b:fa:7f:ad:dc:b7:a2:b1:69:4c:ed:c1:56:4d:5c:56:4b: d5:57:95:3f:f0:e8:70:f7:06:a6:ec:f7:b5:0a:4c:e4:19:d8: 01:40:3a:5f:c5:ca:0d:80:a3:99:7b:c9:0e:3b:5e:ce:bb:e5: df:c4:70:4c:af:79:9f:4d:3a:29:be:86:54:a5:13:2c:75:61: 17:3e:8b:32:7c:fb:a2:a6:fb:be:91:31:a7:01:1a:9f:14:10: 09:93:23:d2:6e:68:19:5a:07:55:ad:78:29:d8:7b:2b:89:26: ae:64:54:71:22:00:ae:c3:ba:c6:e7:f0:07:b9:95:12:5b:f0: 63:6b:1d:7b:5c:61:59:30:6d:75:33:31:32:f9:ca:5d:fc:10: 14:cc:a8:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC7KjaNcLAY4R5vfSkCWMDVR64vgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEzNjM4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkN2Y5YmY5MmEwYWE1MWI1MDdlY2FhN2I2YTE2ODQ4YjM5 MDRmNmQ1ZjhjMzE1ODY5ZGNhZjRjNGQ2MDNhNzM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi8x2eJMPmRfyAXn/JQ49irM/GZOH28uxpI+mz6X0bSl9X 8tymtozdWasnQRxKB4PLOieGyXYCiTqYZq2t2gGjsWCcb1csCh+3ZwtFu/rilAYm Mcy5cAPlHU7cRJgdlhHLMoQ3huwUTSR7WclyVucd7zHm1r6JNcDygQSKG4TTd0kC RHpQNKDHWJpHUUtenyZHyKXovsh67SAhQsEtYfIYpdi4BP0D6QMNk2OGN7JYyInl a9f4lfVSNPLZrxeX7QnentenyVg9ZAdBTilKh6I3MRqjar/s8xkzntq2643aWB2V AW2W16WFrSRTkai5RMMfltnFqj/C4WKib3ZcVZ0XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr1pozPUoPWoFfgTv4ir9mnUEKxIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYzNDA1NjJhLTI1MDctNGFkOS04M2IwLWYwZmU2ZjUyNTM4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDrFgwDQYJKoZIhvcNAQELBQADggEBAFR0XX2crMlEuQ4o2/NWuaNW5e/m EA2qPjtnhqCb1ERn5H6sqzWUB66XiUpxvZGMGC9Y2KLPV5qNbe2adptVHwzaYgdH flJKloY08TIaTiFmRZCNQzG+kJvkkkkpw7D94Onwld7hlqjmjdwSmAM7+n+t3Lei sWlM7cFWTVxWS9VXlT/w6HD3Bqbs97UKTOQZ2AFAOl/Fyg2Ao5l7yQ47Xs675d/E cEyveZ9NOim+hlSlEyx1YRc+izJ8+6Km+76RMacBGp8UEAmTI9JuaBlaB1WteCnY eyuJJq5kVHEiAK7Dusbn8Ae5lRJb8GNrHXtcYVkwbXUzMTL5yl38EBTMqKc= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:19 2025 by rpki-client