$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71920981-f63f-4c2b-9b5b-7e9beebac4ce.roa File: 71920981-f63f-4c2b-9b5b-7e9beebac4ce.roa (raw, json) Hash identifier: r4cQCMDhm+xe8aKDrtCXChe94IASdzbCF/3FefNa9XQ= Subject key identifier: 93:AE:D3:EB:79:92:94:89:6B:95:F9:49:72:2A:3B:24:34:02:D0:6D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 450A046716FE2C2565B6A3FC99CC2E7C5F36DB70 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71920981-f63f-4c2b-9b5b-7e9beebac4ce.roa Signing time: Thu 25 Sep 2025 20:45:30 +0000 ROA not before: Thu 25 Sep 2025 20:45:30 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:0a:04:67:16:fe:2c:25:65:b6:a3:fc:99:cc:2e:7c:5f:36:db:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:45:30 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=a8eb2d318b89328899f4fc9de07863361c27b20216c49aedfb47afb872566a38, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:75:af:eb:a9:b9:da:6c:eb:e8:47:47:8b: 06:02:96:dd:0b:69:c9:6b:e9:16:cf:1e:9d:66:98: 71:e1:2a:1a:b8:33:fe:2f:22:4f:b3:63:98:b3:16: 53:8c:cc:bb:68:87:98:a8:2b:c4:83:c7:38:05:e2: e1:ff:62:79:68:ad:ad:b6:9c:ba:24:c1:3b:2d:a7: 61:37:8e:1b:eb:f2:30:ae:88:f2:52:04:c1:79:fb: 50:81:50:73:32:86:d1:90:fd:48:1e:73:e0:bb:8e: 31:2d:ea:fe:39:e4:b2:49:fc:48:6a:99:4d:6c:29: ee:66:0c:7a:fd:1c:a9:ec:f8:59:48:db:b9:fd:13: c4:8f:f0:8b:55:17:e9:a8:15:01:7f:03:59:52:b0: 38:b5:48:88:c5:36:80:8c:c0:d8:b3:d5:0f:ec:76: 20:ce:41:e2:fc:d0:65:9a:f3:a2:ea:a9:f1:4e:7a: a2:f1:a4:f7:89:c5:e0:fd:11:89:0d:db:0d:71:e0: 2b:31:32:df:89:a4:ec:1e:e8:63:e5:57:10:c9:17: ce:36:d1:0f:0d:8b:88:85:42:aa:f9:65:39:a4:2c: 36:cc:31:45:8d:f0:9b:85:9d:98:7f:7e:51:b9:b3: e7:2b:da:b2:67:20:c9:cb:84:44:2b:d0:7a:a7:5a: bc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AE:D3:EB:79:92:94:89:6B:95:F9:49:72:2A:3B:24:34:02:D0:6D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71920981-f63f-4c2b-9b5b-7e9beebac4ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.88.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:e4:fb:e5:91:ab:aa:7e:b6:28:84:d0:3f:79:6d:b9:db:b2: e4:79:0b:85:0f:a4:62:90:38:bd:b8:ff:71:82:db:30:b8:4e: 44:f9:b4:fe:d6:5b:74:1e:b9:9f:0d:48:be:43:40:b9:0b:2e: 53:55:47:3d:30:5f:22:3a:f6:b5:82:e6:f8:9e:30:92:78:27: 8d:0e:3e:f5:dc:eb:6d:84:86:44:d0:17:ff:4a:bc:6d:47:d3: 5c:f5:0b:ec:9a:87:86:d9:11:28:17:91:bc:42:90:58:b5:ed: be:37:9d:30:f6:4d:ab:d8:10:dd:e1:77:58:44:8a:5f:17:18: d3:9a:9f:98:bc:b1:59:c2:64:50:42:2f:f7:f8:73:32:93:80: 73:1c:1c:7d:60:96:c3:14:f3:b7:d5:73:a9:48:b9:d4:87:ef: cf:0c:50:c9:fa:9b:9b:42:06:3e:9b:2c:a2:3b:69:3d:9a:a8: 4e:3d:54:c2:39:d9:b1:1c:6c:13:62:7d:5a:ed:bf:f6:2b:82: b9:50:65:5b:56:b8:f6:88:4d:81:20:80:14:ab:ae:a4:b8:2b: 5f:26:9d:e4:07:b5:51:a1:3d:c1:c2:ed:16:2c:99:43:d0:39: 45:37:be:ad:20:c8:61:e2:78:4c:55:cf:16:70:1b:9f:f3:74: 1f:c4:9c:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURQoEZxb+LCVltqP8mcwufF8223AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjA0NTMwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOGViMmQzMThiODkzMjg4OTlmNGZjOWRlMDc4NjMzNjFj MjdiMjAyMTZjNDlhZWRmYjQ3YWZiODcyNTY2YTM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQhXWv66m52mzr6EdHiwYClt0Laclr6RbPHp1mmHHhKhq4 M/4vIk+zY5izFlOMzLtoh5ioK8SDxzgF4uH/Ynlora22nLokwTstp2E3jhvr8jCu iPJSBMF5+1CBUHMyhtGQ/Ugec+C7jjEt6v455LJJ/EhqmU1sKe5mDHr9HKns+FlI 27n9E8SP8ItVF+moFQF/A1lSsDi1SIjFNoCMwNiz1Q/sdiDOQeL80GWa86LqqfFO eqLxpPeJxeD9EYkN2w1x4CsxMt+JpOwe6GPlVxDJF8420Q8Ni4iFQqr5ZTmkLDbM MUWN8JuFnZh/flG5s+cr2rJnIMnLhEQr0HqnWrzNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUk67T63mSlIlrlflJcio7JDQC0G0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcxOTIwOTgxLWY2M2YtNGMyYi05YjViLTdlOWJlZWJhYzRjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrVgwDQYJKoZIhvcNAQELBQADggEBAFvk++WRq6p+tiiE0D95bbnbsuR5 C4UPpGKQOL24/3GC2zC4TkT5tP7WW3QeuZ8NSL5DQLkLLlNVRz0wXyI69rWC5vie MJJ4J40OPvXc622EhkTQF/9KvG1H01z1C+yah4bZESgXkbxCkFi17b43nTD2TavY EN3hd1hEil8XGNOan5i8sVnCZFBCL/f4czKTgHMcHH1glsMU87fVc6lIudSH788M UMn6m5tCBj6bLKI7aT2aqE49VMI52bEcbBNifVrtv/YrgrlQZVtWuPaITYEggBSr rqS4K18mneQHtVGhPcHC7RYsmUPQOUU3vq0gyGHieExVzxZwG5/zdB/EnEo= -----END CERTIFICATE-----Generated at Fri Oct 17 23:45:41 2025 by rpki-client