$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7331953b-712a-43c5-933d-585a1a41a7b4.roa File: 7331953b-712a-43c5-933d-585a1a41a7b4.roa (raw, json) Hash identifier: oQ+zNX8uWH2SuOi7hANpkbhbEPSaO0Q/tm9BbWWgZlI= Subject key identifier: CD:FA:E6:B0:D3:43:67:51:6B:02:91:63:E3:D3:F1:D8:BE:25:62:93 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6E666CDF46AE0DAE2632368A826695922392679A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7331953b-712a-43c5-933d-585a1a41a7b4.roa Signing time: Thu 25 Sep 2025 20:45:20 +0000 ROA not before: Thu 25 Sep 2025 20:45:20 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:66:6c:df:46:ae:0d:ae:26:32:36:8a:82:66:95:92:23:92:67:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:45:20 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=634fdab93b461dee349590fcc5d3c5ccc5c906cd6b9ecd866f62d83de9b889cc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:38:04:20:b7:ca:c9:f7:5f:1a:b0:94:9d:03: bf:ad:fd:1b:63:49:97:9b:71:d5:fd:8e:67:be:21: f3:d7:c2:95:9d:bd:39:42:7b:70:ab:2e:84:1e:3a: fc:16:52:18:a0:b7:bc:d6:7c:60:0d:f5:3b:ff:21: 76:47:5d:f8:b9:06:49:03:b2:ee:04:30:34:9c:d3: 1f:73:67:88:a0:45:36:e5:d3:98:10:45:e7:8b:f0: ea:a4:38:e5:a7:57:94:b4:57:43:e8:c3:51:20:85: 2f:9c:59:dd:52:bf:09:57:2f:18:49:9e:74:16:51: 16:01:4b:6b:38:39:fe:26:06:e3:a0:79:47:aa:87: 35:e6:e0:0f:13:05:7e:95:b4:9a:20:9e:c5:6d:95: e0:cb:db:ae:15:55:e0:f5:7b:41:50:f5:1b:a7:13: 6d:25:a0:5f:b2:bc:e3:54:8d:57:0b:c6:25:ae:26: 63:71:28:d6:ff:9b:d7:46:66:ac:fb:32:87:a0:60: 02:d0:21:25:d2:b0:45:88:7c:b5:99:3a:09:9d:1f: 13:33:45:42:14:fb:66:28:22:24:0e:07:4d:90:fa: 19:7e:d5:1e:0d:70:f8:4a:a1:0a:8a:15:cd:26:d8: 46:2e:39:32:71:51:0a:65:17:97:3b:fe:12:1e:ba: cc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FA:E6:B0:D3:43:67:51:6B:02:91:63:E3:D3:F1:D8:BE:25:62:93 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7331953b-712a-43c5-933d-585a1a41a7b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.80.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:91:ef:5b:38:ca:8b:da:9b:e7:48:d7:64:69:35:54:41:f2: a5:96:ab:7c:a6:c3:68:00:09:00:08:5a:e6:f1:6a:ad:5e:5a: 7f:28:8c:ec:5e:63:6d:84:3d:8c:c2:8a:f6:06:5c:31:78:6d: a2:25:40:35:66:d1:f1:19:40:4c:17:68:e9:82:f6:a5:23:75: 11:39:e8:40:82:76:ac:42:d0:03:12:f2:2b:d2:a4:e5:d2:e2: 30:23:18:cb:bf:a5:d8:83:ed:57:e5:41:38:48:94:0d:c0:95: e0:fe:d6:3c:eb:3f:f1:8e:e7:b9:8b:7a:f7:b6:c1:0a:4f:17: 33:fa:c3:bf:e0:d0:64:83:74:a1:b0:d8:54:c1:f7:ab:d5:e0: 58:b3:1c:43:ac:96:86:13:46:e8:63:d8:15:06:df:c9:4c:37: ef:80:46:b5:c0:6e:74:cd:2c:83:77:29:0f:f5:a3:4c:ba:ef: df:eb:a7:55:35:2b:cc:07:c1:a3:6d:56:01:64:83:1e:5d:6d: b1:d8:bc:e5:79:2b:c8:1c:ae:b8:5e:87:af:b4:fb:0f:06:9b: 15:df:1a:10:4f:0e:c7:5c:58:c8:a4:3f:ca:01:58:9a:76:80: 3d:7c:48:dc:39:b7:91:fc:1c:96:e5:0d:bd:c3:8d:4b:ae:7e: eb:ae:a6:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbmZs30auDa4mMjaKgmaVkiOSZ5owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjA0NTIwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzRmZGFiOTNiNDYxZGVlMzQ5NTkwZmNjNWQzYzVjY2M1 YzkwNmNkNmI5ZWNkODY2ZjYyZDgzZGU5Yjg4OWNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvOAQgt8rJ918asJSdA7+t/RtjSZebcdX9jme+IfPXwpWd vTlCe3CrLoQeOvwWUhigt7zWfGAN9Tv/IXZHXfi5BkkDsu4EMDSc0x9zZ4igRTbl 05gQReeL8OqkOOWnV5S0V0Pow1EghS+cWd1SvwlXLxhJnnQWURYBS2s4Of4mBuOg eUeqhzXm4A8TBX6VtJognsVtleDL264VVeD1e0FQ9RunE20loF+yvONUjVcLxiWu JmNxKNb/m9dGZqz7MoegYALQISXSsEWIfLWZOgmdHxMzRUIU+2YoIiQOB02Q+hl+ 1R4NcPhKoQqKFc0m2EYuOTJxUQplF5c7/hIeuswRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzfrmsNNDZ1FrApFj49Px2L4lYpMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzczMzE5NTNiLTcxMmEtNDNjNS05MzNkLTU4NWExYTQxYTdiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrVAwDQYJKoZIhvcNAQELBQADggEBAG2R71s4yovam+dI12RpNVRB8qWW q3ymw2gACQAIWubxaq1eWn8ojOxeY22EPYzCivYGXDF4baIlQDVm0fEZQEwXaOmC 9qUjdRE56ECCdqxC0AMS8ivSpOXS4jAjGMu/pdiD7VflQThIlA3AleD+1jzrP/GO 57mLeve2wQpPFzP6w7/g0GSDdKGw2FTB96vV4FizHEOsloYTRuhj2BUG38lMN++A RrXAbnTNLIN3KQ/1o0y679/rp1U1K8wHwaNtVgFkgx5dbbHYvOV5K8gcrrheh6+0 +w8GmxXfGhBPDsdcWMikP8oBWJp2gD18SNw5t5H8HJblDb3DjUuufuuuppk= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:24 2025 by rpki-client