$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91c3fca3-fab8-410a-813a-a5971b891a35.roa File: 91c3fca3-fab8-410a-813a-a5971b891a35.roa (raw, json) Hash identifier: 5ZiNEn2tUuTGxqFjtseXq8MDdklLMroIc1jKWLq5pWk= Subject key identifier: D0:44:22:75:56:40:9A:8D:CD:4A:AD:EC:4A:41:99:2D:51:F6:92:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32630F6BFF117161272C9CE7FB9CB2E11617C798 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91c3fca3-fab8-410a-813a-a5971b891a35.roa Signing time: Thu 25 Sep 2025 19:42:16 +0000 ROA not before: Thu 25 Sep 2025 19:42:16 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:63:0f:6b:ff:11:71:61:27:2c:9c:e7:fb:9c:b2:e1:16:17:c7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:42:16 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=4daa23bdfa1560f399a7c55f77ab2cdde57b4808ada2d8d9a99de5d320332130, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:33:d0:f5:d0:c0:28:e3:90:51:42:6f:e9:ca: ad:ea:63:39:87:54:93:39:11:4a:5a:a6:05:97:4f: 2f:d1:9a:03:4c:9a:36:e2:e6:e2:f1:e7:2d:e7:81: c4:73:8e:cb:1b:b4:47:d1:35:30:a2:d1:01:1d:51: 1f:9c:dd:55:f5:56:7d:55:3f:03:df:b0:00:d2:b6: 1d:cc:90:5b:5c:77:0f:eb:a6:0d:12:4f:43:07:e8: 40:c8:99:f9:0d:51:fa:50:62:e8:5b:39:b7:f5:1a: 35:83:c1:52:c9:5f:9a:3d:58:7a:1c:e8:1a:e4:93: 9a:cc:ca:84:61:9c:a1:ce:c0:9c:b7:4e:6d:49:70: 3f:d8:36:b6:62:0f:94:17:07:b4:66:ec:9d:b5:a4: 41:bd:29:9b:24:69:27:86:9e:d3:92:31:bd:2d:9d: d0:62:cc:97:e1:fc:32:1a:dc:8a:f7:70:09:23:b2: b7:33:27:cb:02:36:c9:df:0a:57:60:11:3c:d8:6d: 0a:bc:10:19:98:ab:63:2a:c9:5f:9d:35:b6:f4:61: ef:ad:c1:15:5b:d5:cf:76:f5:09:6e:cb:f7:f2:4f: 37:27:19:58:6a:59:18:e7:25:01:43:f2:77:74:8a: 01:69:75:c1:58:37:57:de:f1:f1:33:37:6d:9f:50: f2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:44:22:75:56:40:9A:8D:CD:4A:AD:EC:4A:41:99:2D:51:F6:92:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91c3fca3-fab8-410a-813a-a5971b891a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.52.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:37:b9:90:23:8c:f6:10:5a:d4:60:7c:90:c0:ee:f0:f8:1a: ae:43:d9:7e:2c:76:10:9a:f7:53:ae:4b:8b:de:01:81:41:12: 0d:b7:43:d4:76:ba:0d:4e:10:bc:2a:09:4a:f2:c5:13:84:e9: c9:4f:c3:c0:a4:17:97:0a:09:a1:a3:63:e8:85:d9:01:c2:1d: 65:af:8e:07:bb:bc:eb:4b:16:dc:62:38:9a:92:85:ef:af:94: d7:92:d5:c4:cd:07:20:69:b8:41:22:59:88:60:9e:e9:bd:ac: 87:56:75:5a:99:23:f9:f5:63:7b:c8:d3:1b:7e:92:5d:2f:26: 99:b5:e9:f8:5c:12:25:f9:68:03:c6:b3:43:6a:ba:ba:36:96: c0:60:b8:55:30:ae:4d:5d:d6:b8:f9:74:aa:be:d2:57:da:b4: 35:06:d7:57:fc:f0:3d:ba:81:47:6b:5d:41:5e:f0:98:b3:94: 74:12:eb:54:0d:f5:c4:bf:8c:3d:2e:75:f5:99:d1:1d:76:28: 20:43:81:0a:e2:40:83:e9:4c:18:fc:48:69:3e:65:d6:0e:f7: 3e:e6:a6:b1:90:a3:45:8b:27:f2:b3:86:7d:3e:2c:3a:1b:fd: c2:2d:69:8d:30:3e:a8:36:fd:c1:40:51:a8:ce:84:1a:1d:75: 51:15:82:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMmMPa/8RcWEnLJzn+5yy4RYXx5gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTk0MjE2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZGFhMjNiZGZhMTU2MGYzOTlhN2M1NWY3N2FiMmNkZGU1 N2I0ODA4YWRhMmQ4ZDlhOTlkZTVkMzIwMzMyMTMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0M9D10MAo45BRQm/pyq3qYzmHVJM5EUpapgWXTy/RmgNM mjbi5uLx5y3ngcRzjssbtEfRNTCi0QEdUR+c3VX1Vn1VPwPfsADSth3MkFtcdw/r pg0ST0MH6EDImfkNUfpQYuhbObf1GjWDwVLJX5o9WHoc6Brkk5rMyoRhnKHOwJy3 Tm1JcD/YNrZiD5QXB7Rm7J21pEG9KZskaSeGntOSMb0tndBizJfh/DIa3Ir3cAkj srczJ8sCNsnfCldgETzYbQq8EBmYq2MqyV+dNbb0Ye+twRVb1c929Qluy/fyTzcn GVhqWRjnJQFD8nd0igFpdcFYN1fe8fEzN22fUPI1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0EQidVZAmo3NSq3sSkGZLVH2kh8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkxYzNmY2EzLWZhYjgtNDEwYS04MTNhLWE1OTcxYjg5MWEzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqTQwDQYJKoZIhvcNAQELBQADggEBAE03uZAjjPYQWtRgfJDA7vD4Gq5D 2X4sdhCa91OuS4veAYFBEg23Q9R2ug1OELwqCUryxROE6clPw8CkF5cKCaGjY+iF 2QHCHWWvjge7vOtLFtxiOJqShe+vlNeS1cTNByBpuEEiWYhgnum9rIdWdVqZI/n1 Y3vI0xt+kl0vJpm16fhcEiX5aAPGs0Nquro2lsBguFUwrk1d1rj5dKq+0lfatDUG 11f88D26gUdrXUFe8JizlHQS61QN9cS/jD0udfWZ0R12KCBDgQriQIPpTBj8SGk+ ZdYO9z7mprGQo0WLJ/Kzhn0+LDob/cItaY0wPqg2/cFAUajOhBoddVEVggI= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:44 2025 by rpki-client