$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65a0c229-f043-43f6-b98d-306862e4b17d.roa File: 65a0c229-f043-43f6-b98d-306862e4b17d.roa (raw, json) Hash identifier: HkPL+Y2ivgStM2m8/tN1B41WXWBVJfH+wSk+ktdr89U= Subject key identifier: A0:BD:66:D9:AB:66:D5:D3:8A:ED:11:6C:3A:F7:9D:B6:39:2F:11:52 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7926DFC18903AA33EA249C43FF7A2E39FFF214FF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65a0c229-f043-43f6-b98d-306862e4b17d.roa Signing time: Thu 25 Sep 2025 20:21:58 +0000 ROA not before: Thu 25 Sep 2025 20:21:58 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:26:df:c1:89:03:aa:33:ea:24:9c:43:ff:7a:2e:39:ff:f2:14:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:21:58 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=f556310f3b8813c47136b82d15be1f2d0ee0ff0f8a4b416def7751cb0bac77ee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:05:0b:7f:c0:28:e4:52:e4:49:2d:3c:25:eb: 76:ef:ae:9b:9c:8f:8b:81:87:6c:ee:68:ff:0d:ef: d4:8e:7c:6b:e9:6b:cf:c3:a9:31:ba:59:a6:f1:3a: 23:15:46:2e:2a:06:94:a0:ee:8c:95:f6:14:a8:d0: 91:e9:53:8e:0c:6e:09:8f:5c:36:cd:9b:19:c1:71: 44:7d:df:2b:cd:30:d7:6e:92:ef:bd:36:bb:08:ae: 69:67:d9:92:18:c2:d5:fc:3b:58:0d:10:77:5b:9c: fb:92:3a:95:14:66:bc:65:c8:0d:7e:4c:56:7c:f0: c5:1f:c3:99:60:a3:76:a8:6b:a2:b5:92:44:81:46: 51:20:05:21:e3:c3:94:b7:25:0a:6d:b1:c0:f2:e2: e6:d5:e4:b4:d3:04:5b:8c:fb:31:e8:9b:43:7b:83: 02:5b:b0:8e:d6:94:a5:28:b0:4d:8e:70:e4:03:ae: 8f:ef:45:86:b0:f0:87:84:94:dd:37:9d:e9:cb:15: 95:3d:a4:f8:2d:0c:f4:2c:d2:2a:62:8f:2b:b9:6c: f4:cd:8a:b7:51:cc:77:85:db:15:02:73:9e:95:fe: e2:bf:3d:47:46:0f:03:a1:3b:84:c3:bc:1e:47:12: 81:17:87:ef:6d:62:2f:42:5b:1e:1b:a9:51:02:e5: cd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BD:66:D9:AB:66:D5:D3:8A:ED:11:6C:3A:F7:9D:B6:39:2F:11:52 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65a0c229-f043-43f6-b98d-306862e4b17d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.9.0/24 Signature Algorithm: sha256WithRSAEncryption 40:4a:2b:23:54:fe:fb:28:50:1d:a9:27:a3:30:36:a4:90:7f: a7:27:60:c3:43:5d:4d:3a:fb:98:9d:33:c3:a3:66:97:45:5f: ec:2b:a7:b1:22:a0:a9:f2:44:7d:3a:8f:86:49:3d:60:9f:39: 6c:89:fe:6f:a3:cc:44:31:e9:97:44:62:ae:af:5b:ee:0d:4a: 5e:bd:c3:03:a7:10:c2:b9:34:52:11:26:c5:1e:f4:92:ac:ce: 85:7f:74:db:34:8f:5c:28:e6:08:44:68:f2:dc:49:c4:a0:0a: eb:4e:9e:09:ce:3f:69:1e:d4:57:ae:dd:aa:9d:4b:83:4d:92: 2a:f4:e0:4b:94:f8:e2:59:0c:74:aa:b1:15:ec:14:01:3d:24: 7f:9c:bd:02:a2:67:84:84:b0:a6:b4:cd:bc:ad:a4:91:14:ac: 5a:46:19:96:3a:23:8c:05:da:cd:2d:cc:5c:c6:47:2e:fe:6f: 60:d0:e7:9c:d2:c1:2e:30:c8:ee:1a:1f:4f:78:6d:cd:1a:d1: 18:9c:51:65:b8:31:c9:7b:5a:60:58:a6:41:8f:d0:54:9f:51: d1:84:1b:6c:fb:58:73:ac:b7:63:0c:ac:cd:e6:cb:df:86:4b: 67:ef:ae:05:3c:a2:fa:62:90:25:45:80:da:30:2a:a5:1a:bb: 55:fb:88:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeSbfwYkDqjPqJJxD/3ouOf/yFP8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjAyMTU4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTU2MzEwZjNiODgxM2M0NzEzNmI4MmQxNWJlMWYyZDBl ZTBmZjBmOGE0YjQxNmRlZjc3NTFjYjBiYWM3N2VlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaBQt/wCjkUuRJLTwl63bvrpucj4uBh2zuaP8N79SOfGvp a8/DqTG6WabxOiMVRi4qBpSg7oyV9hSo0JHpU44MbgmPXDbNmxnBcUR93yvNMNdu ku+9NrsIrmln2ZIYwtX8O1gNEHdbnPuSOpUUZrxlyA1+TFZ88MUfw5lgo3aoa6K1 kkSBRlEgBSHjw5S3JQptscDy4ubV5LTTBFuM+zHom0N7gwJbsI7WlKUosE2OcOQD ro/vRYaw8IeElN03nenLFZU9pPgtDPQs0ipijyu5bPTNirdRzHeF2xUCc56V/uK/ PUdGDwOhO4TDvB5HEoEXh+9tYi9CWx4bqVEC5c0DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoL1m2atm1dOK7RFsOvedtjkvEVIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY1YTBjMjI5LWYwNDMtNDNmNi1iOThkLTMwNjg2MmU0YjE3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqwkwDQYJKoZIhvcNAQELBQADggEBAEBKKyNU/vsoUB2pJ6MwNqSQf6cn YMNDXU06+5idM8OjZpdFX+wrp7EioKnyRH06j4ZJPWCfOWyJ/m+jzEQx6ZdEYq6v W+4NSl69wwOnEMK5NFIRJsUe9JKszoV/dNs0j1wo5ghEaPLcScSgCutOngnOP2ke 1Feu3aqdS4NNkir04EuU+OJZDHSqsRXsFAE9JH+cvQKiZ4SEsKa0zbytpJEUrFpG GZY6I4wF2s0tzFzGRy7+b2DQ55zSwS4wyO4aH094bc0a0RicUWW4Mcl7WmBYpkGP 0FSfUdGEG2z7WHOst2MMrM3my9+GS2fvrgU8ovpikCVFgNowKqUau1X7iAM= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:31 2025 by rpki-client