$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77a5540f-5293-45b0-a386-e02768148de2.roa File: 77a5540f-5293-45b0-a386-e02768148de2.roa (raw, json) Hash identifier: K+R7lUgPGvaBvGWSiKhflXeLfSs3N5ECauNvbYbqF0A= Subject key identifier: 14:65:77:E1:3F:10:79:7C:56:BC:C0:75:FB:85:39:57:E3:C7:BE:BD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 13D60C72130965438CD418BD8CACF92D1B3805A9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77a5540f-5293-45b0-a386-e02768148de2.roa Signing time: Thu 25 Sep 2025 23:15:10 +0000 ROA not before: Thu 25 Sep 2025 23:15:10 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d6:0c:72:13:09:65:43:8c:d4:18:bd:8c:ac:f9:2d:1b:38:05:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:15:10 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=1c1fbf2859669f7f1140f0cb7a53d42388b94478c4c8507cbe6e01aafa664ed3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:b7:04:40:e9:64:db:ff:10:a4:cd:94:c5: e9:cd:74:ec:14:a1:50:ab:46:f6:fa:2d:06:0e:e4: cd:5d:dc:2e:61:18:00:b3:d9:d6:ba:60:eb:2c:c1: 70:95:87:3d:eb:53:a0:13:e6:fc:90:63:f6:16:f2: ec:50:f3:dc:b0:e8:ac:45:c0:89:ae:16:10:3b:c7: 05:65:fd:70:74:bb:35:1e:a0:59:7a:1e:19:5d:fc: 40:f5:2d:96:f1:68:4e:9a:7d:3b:a0:d7:ae:9e:06: e9:07:6b:47:b6:4b:bb:6e:bc:bb:86:a5:f7:96:35: 5d:3e:4e:8b:60:4e:49:67:62:c6:df:ba:f5:e3:76: f3:77:be:df:59:db:65:57:d1:a8:cf:e9:ad:84:45: cd:39:b0:70:4f:34:f0:46:0f:e6:80:de:1d:ea:32: f8:61:11:6e:fa:9b:4f:4d:a0:6a:fc:32:59:2a:80: 49:a0:91:63:13:1e:f2:f5:dd:ce:a6:55:71:81:cb: 2d:ab:ce:81:be:f0:7c:67:4b:a0:f0:90:e4:91:4f: 83:88:8b:4a:51:72:96:53:d3:2c:c4:a0:1e:cd:bf: 6d:6b:1a:ed:5f:6d:81:57:0a:84:15:c9:79:fa:52: 13:26:f0:b2:9a:8c:af:54:8d:e8:03:e6:45:83:c0: 5f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:65:77:E1:3F:10:79:7C:56:BC:C0:75:FB:85:39:57:E3:C7:BE:BD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77a5540f-5293-45b0-a386-e02768148de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.248.0/23 Signature Algorithm: sha256WithRSAEncryption 69:d9:62:3b:4d:71:4d:a4:a2:8f:f0:99:96:e4:8e:1a:0d:7a: c3:f2:e2:5f:c5:f2:0f:ad:b8:46:fb:e7:25:2c:82:8c:14:ed: d7:a2:a3:af:1f:e6:54:54:6d:94:73:db:ab:d8:05:d9:e3:2a: 7b:fa:25:4a:2e:33:de:09:61:6a:91:ca:88:4d:71:38:1f:e6: 21:64:bd:b5:90:9a:30:3b:82:3d:5d:fe:9d:57:2d:d4:57:d2: 81:5f:32:67:b4:a4:38:d7:da:e2:3c:14:56:a7:e6:c3:54:0b: 07:15:ee:12:0e:8d:96:bd:06:49:a2:e7:b6:35:e3:4a:cc:02: 35:3d:35:12:41:87:cc:c2:fd:b8:78:17:cf:54:97:a7:05:4b: 40:a8:b0:f4:29:b7:65:78:be:eb:dc:94:b4:82:7d:a5:8d:c9: 91:f9:7a:6e:d7:b2:7e:74:00:6d:67:5a:7e:44:81:dc:9f:70: 75:40:ec:ee:a0:0b:30:0c:00:a3:9f:14:68:dd:6b:17:41:89: c1:d4:4d:29:3e:67:15:7d:c0:df:0d:e2:e8:e5:9e:70:18:c4: 3f:59:22:53:7a:ae:bb:d2:43:83:08:48:e5:40:58:85:df:95: f2:6b:3f:33:02:b7:2b:67:01:cd:d1:32:44:6b:a4:b6:2a:1d: a2:d1:5d:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE9YMchMJZUOM1Bi9jKz5LRs4BakwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMxNTEwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzFmYmYyODU5NjY5ZjdmMTE0MGYwY2I3YTUzZDQyMzg4 Yjk0NDc4YzRjODUwN2NiZTZlMDFhYWZhNjY0ZWQzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp6LcEQOlk2/8QpM2UxenNdOwUoVCrRvb6LQYO5M1d3C5h GACz2da6YOsswXCVhz3rU6AT5vyQY/YW8uxQ89yw6KxFwImuFhA7xwVl/XB0uzUe oFl6Hhld/ED1LZbxaE6afTug166eBukHa0e2S7tuvLuGpfeWNV0+TotgTklnYsbf uvXjdvN3vt9Z22VX0ajP6a2ERc05sHBPNPBGD+aA3h3qMvhhEW76m09NoGr8Mlkq gEmgkWMTHvL13c6mVXGByy2rzoG+8HxnS6DwkOSRT4OIi0pRcpZT0yzEoB7Nv21r Gu1fbYFXCoQVyXn6UhMm8LKajK9UjegD5kWDwF+/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFGV34T8QeXxWvMB1+4U5V+PHvr0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc3YTU1NDBmLTUyOTMtNDViMC1hMzg2LWUwMjc2ODE0OGRlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDq/gwDQYJKoZIhvcNAQELBQADggEBAGnZYjtNcU2koo/wmZbkjhoNesPy 4l/F8g+tuEb75yUsgowU7deio68f5lRUbZRz26vYBdnjKnv6JUouM94JYWqRyohN cTgf5iFkvbWQmjA7gj1d/p1XLdRX0oFfMme0pDjX2uI8FFan5sNUCwcV7hIOjZa9 Bkmi57Y140rMAjU9NRJBh8zC/bh4F89Ul6cFS0CosPQpt2V4vuvclLSCfaWNyZH5 em7Xsn50AG1nWn5EgdyfcHVA7O6gCzAMAKOfFGjdaxdBicHUTSk+ZxV9wN8N4ujl nnAYxD9ZIlN6rrvSQ4MISOVAWIXflfJrPzMCtytnAc3RMkRrpLYqHaLRXZI= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:38 2025 by rpki-client