$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70547fbf-a209-4222-912a-1b1008aeddd0.roa File: 70547fbf-a209-4222-912a-1b1008aeddd0.roa (raw, json) Hash identifier: TV73Egel6VkJP+mO9Q4V/YqFlu6UtrN7JN0Y81F2yp0= Subject key identifier: 38:D0:3F:7C:8F:1A:13:DF:B6:C5:14:34:FB:10:5D:B4:E9:5A:03:D6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 28D4738503B6BC799E08E7DD1F7E3F9E0D20414B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70547fbf-a209-4222-912a-1b1008aeddd0.roa Signing time: Thu 25 Sep 2025 19:45:07 +0000 ROA not before: Thu 25 Sep 2025 19:45:07 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d4:73:85:03:b6:bc:79:9e:08:e7:dd:1f:7e:3f:9e:0d:20:41:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:45:07 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=b489e93581dbd2ea97c8db60d3d5e7f280cc2b2ea3828431ea26e31a40da576b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:34:76:b5:b0:89:50:13:39:c0:4a:e3:ff: c7:20:dd:1b:10:b9:3f:2d:6b:9e:6d:7e:6b:53:15: c2:58:d8:a1:2f:2d:08:34:4d:e8:1c:58:4e:ee:37: 41:e5:e5:7b:2d:43:05:05:31:35:ed:68:b5:32:45: 2e:59:79:14:98:69:11:c3:9d:3b:69:00:35:80:4b: df:20:29:c0:b4:b0:a6:a9:dc:c8:d7:cf:f2:98:d8: 72:96:83:b5:42:f7:9a:b9:4f:6a:61:c2:ca:a6:1f: ac:07:49:08:09:42:c0:69:59:c8:79:11:a6:84:c5: 5d:e6:0d:45:1c:ce:71:b4:fa:39:7a:bd:42:8a:5d: c7:b8:50:38:3b:64:c5:8d:d7:73:11:9e:4f:e5:c0: 61:f6:bd:a0:ad:b4:10:4c:16:7b:74:de:c9:52:35: b5:f4:6f:bc:c6:cb:9b:f2:fc:67:d9:0c:d7:7f:52: dd:4d:c9:97:3c:67:4a:11:5e:c1:37:b2:7e:75:93: b7:fb:4a:f3:08:cb:83:7b:ad:18:e3:e5:15:4f:b7: a3:92:df:f3:fd:8c:10:90:17:a2:b5:57:87:13:60: a3:60:91:5f:0a:8f:c5:50:c9:5e:d1:31:21:1a:ee: 23:fc:99:da:ac:21:35:8e:e7:10:c1:79:2e:d7:34: 01:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D0:3F:7C:8F:1A:13:DF:B6:C5:14:34:FB:10:5D:B4:E9:5A:03:D6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70547fbf-a209-4222-912a-1b1008aeddd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.98.0/24 Signature Algorithm: sha256WithRSAEncryption ac:4e:a8:47:42:76:46:a8:f0:ad:87:87:f8:16:27:24:d8:e4: 0e:8c:21:56:6b:5e:20:56:4a:dc:8c:86:ad:49:2b:d9:9d:29: bd:82:9c:7e:70:5d:7c:c4:72:7a:2d:2b:89:2d:0d:3f:ae:99: 12:84:4c:88:56:ea:00:bc:8f:92:45:a3:5e:1f:6b:8d:1c:e9: 77:15:4c:14:d1:b3:7e:3e:e8:9c:7d:00:5b:1c:d1:db:fd:5b: c9:3a:9a:5c:d4:7f:27:49:42:7d:95:f9:16:e6:21:a5:9b:bf: 98:dd:05:c6:9b:04:08:7a:28:21:29:49:8c:9b:5b:6f:bd:35: 01:cc:96:89:f9:bb:be:f6:eb:d9:ee:34:0a:2c:43:af:34:7a: f7:06:91:75:d3:08:5f:c5:26:af:4b:a0:34:72:a3:bb:ae:34: d3:6d:25:24:ca:81:29:a4:d5:c1:96:db:d3:82:79:99:67:56: ac:90:b1:18:8c:10:2a:1a:8d:99:8e:67:b6:e1:06:9d:1d:de: f7:89:3a:8d:db:9b:38:ed:7d:cd:2b:df:85:b8:d2:ad:53:31: 78:83:30:29:d3:b1:6d:1a:d2:76:b0:42:95:6f:01:7a:9d:eb: f8:72:8a:dd:0d:5d:9a:75:4e:90:88:ec:cd:a4:d2:2c:97:dd: cf:bc:f6:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKNRzhQO2vHmeCOfdH34/ng0gQUswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTk0NTA3WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDg5ZTkzNTgxZGJkMmVhOTdjOGRiNjBkM2Q1ZTdmMjgw Y2MyYjJlYTM4Mjg0MzFlYTI2ZTMxYTQwZGE1NzZiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuLjR2tbCJUBM5wErj/8cg3RsQuT8ta55tfmtTFcJY2KEv LQg0TegcWE7uN0Hl5XstQwUFMTXtaLUyRS5ZeRSYaRHDnTtpADWAS98gKcC0sKap 3MjXz/KY2HKWg7VC95q5T2phwsqmH6wHSQgJQsBpWch5EaaExV3mDUUcznG0+jl6 vUKKXce4UDg7ZMWN13MRnk/lwGH2vaCttBBMFnt03slSNbX0b7zGy5vy/GfZDNd/ Ut1NyZc8Z0oRXsE3sn51k7f7SvMIy4N7rRjj5RVPt6OS3/P9jBCQF6K1V4cTYKNg kV8Kj8VQyV7RMSEa7iP8mdqsITWO5xDBeS7XNAGDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUONA/fI8aE9+2xRQ0+xBdtOlaA9YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcwNTQ3ZmJmLWEyMDktNDIyMi05MTJhLTFiMTAwOGFlZGRkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqWIwDQYJKoZIhvcNAQELBQADggEBAKxOqEdCdkao8K2Hh/gWJyTY5A6M IVZrXiBWStyMhq1JK9mdKb2CnH5wXXzEcnotK4ktDT+umRKETIhW6gC8j5JFo14f a40c6XcVTBTRs34+6Jx9AFsc0dv9W8k6mlzUfydJQn2V+RbmIaWbv5jdBcabBAh6 KCEpSYybW2+9NQHMlon5u77269nuNAosQ680evcGkXXTCF/FJq9LoDRyo7uuNNNt JSTKgSmk1cGW29OCeZlnVqyQsRiMECoajZmOZ7bhBp0d3veJOo3bmzjtfc0r34W4 0q1TMXiDMCnTsW0a0nawQpVvAXqd6/hyit0NXZp1TpCI7M2k0iyX3c+89q0= -----END CERTIFICATE-----Generated at Fri Oct 17 23:56:27 2025 by rpki-client