$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9abfed5f-7494-4f52-89a3-175164f44881.roa File: 9abfed5f-7494-4f52-89a3-175164f44881.roa (raw, json) Hash identifier: E5P+bmRsXHuqq9xTT+nuOe+nX0LEP+eE5/Hnq6Bs6+0= Subject key identifier: 94:41:CC:95:06:E8:1A:BE:DB:18:69:AE:B2:51:82:BF:71:7F:69:17 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 582798502AEDE29A9C848B0F4F80279406806C67 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9abfed5f-7494-4f52-89a3-175164f44881.roa Signing time: Thu 25 Sep 2025 19:48:01 +0000 ROA not before: Thu 25 Sep 2025 19:48:01 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:27:98:50:2a:ed:e2:9a:9c:84:8b:0f:4f:80:27:94:06:80:6c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:48:01 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=7c1c60f4393d68884538e28d3cc0d4e3e7b2396bcbec1995a8317fdf31b0e436, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bb:ac:52:34:b1:54:8e:bc:55:4f:45:4e:5a: 95:12:ef:63:99:34:3b:87:da:1a:5e:c9:6a:d2:b4: 1d:94:f0:57:d3:b4:b6:55:8d:ce:c5:2f:7c:a9:ca: f7:32:3a:4c:c5:6b:10:75:69:6d:a5:04:c3:d1:0f: c0:23:46:19:b5:a2:8e:7e:42:89:53:0e:aa:db:08: 77:ab:cb:d4:08:b2:e3:40:38:95:35:19:6e:51:2c: f0:73:ef:f7:56:79:7c:3e:89:26:fc:3e:c8:77:d3: f4:c3:8c:1e:7c:94:15:41:6e:5a:8c:5b:e8:6b:cc: d4:f5:56:c8:31:a9:ec:d2:f1:dc:bf:45:91:80:5f: 45:9d:6e:d1:be:ed:c6:64:9f:fe:87:c0:16:43:7b: a8:ef:9b:50:1c:5c:c6:af:bb:88:1d:47:de:58:64: da:b9:f4:dd:63:5d:5f:eb:a2:22:d0:fd:60:6c:e9: ef:e8:64:04:25:56:c9:b4:73:2c:69:45:a7:96:9a: 1e:cc:84:ae:ab:fb:d5:f3:89:5f:79:84:2e:02:e7: 0a:10:2a:1b:80:8f:81:6c:c8:77:de:8b:cc:93:8c: 0d:70:db:1f:58:56:0a:1e:17:09:19:ff:6f:da:86: 8c:74:1e:70:f3:39:82:dd:c2:5e:8e:e7:7b:f3:4a: 1d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:41:CC:95:06:E8:1A:BE:DB:18:69:AE:B2:51:82:BF:71:7F:69:17 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9abfed5f-7494-4f52-89a3-175164f44881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.140.0/24 Signature Algorithm: sha256WithRSAEncryption 75:b0:9c:30:35:45:57:2a:6e:3a:ff:15:2d:f8:62:ce:fe:ef: ca:d2:d6:a9:39:82:e1:06:42:d4:0b:2b:f4:26:3c:94:0a:d7: 99:e3:0e:44:d2:92:6d:a3:b1:10:73:cb:87:b4:93:f7:69:51: c0:ee:5a:0c:51:e8:6a:4b:09:fc:90:1e:28:53:8a:bd:52:f6: 9f:af:a1:aa:a8:67:03:ae:ed:cc:b4:ad:43:ce:7d:86:11:e8: 6c:b8:bc:d2:07:30:65:eb:30:f7:3c:40:01:3e:a1:f0:a6:f0: 2c:dd:7c:d4:74:73:c6:d6:33:80:a4:4b:a5:c5:5c:27:eb:ac: 97:8b:33:2e:ac:27:32:b4:a9:55:a2:64:25:0c:d2:5b:85:49: 10:b4:dd:89:16:1b:49:19:51:11:48:ed:cf:8b:40:f0:20:ac: 78:6f:97:2c:fe:48:ae:56:7b:27:b0:f0:34:6f:20:75:8d:ee: f8:30:86:b5:7b:cc:69:7e:e9:be:3b:c0:e4:14:0a:c3:ed:13: 95:fd:56:fa:6a:d7:e7:5c:0a:52:16:92:5d:be:e4:ae:38:62: 8d:9d:05:3d:4f:3c:d2:47:9a:6d:91:86:62:e9:c5:77:11:3f: 89:ae:66:63:2b:81:9d:6b:93:07:6c:7a:22:08:c6:d0:63:b3: 45:14:c3:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWCeYUCrt4pqchIsPT4AnlAaAbGcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTk0ODAxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzFjNjBmNDM5M2Q2ODg4NDUzOGUyOGQzY2MwZDRlM2U3 YjIzOTZiY2JlYzE5OTVhODMxN2ZkZjMxYjBlNDM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDu6xSNLFUjrxVT0VOWpUS72OZNDuH2hpeyWrStB2U8FfT tLZVjc7FL3ypyvcyOkzFaxB1aW2lBMPRD8AjRhm1oo5+QolTDqrbCHery9QIsuNA OJU1GW5RLPBz7/dWeXw+iSb8Psh30/TDjB58lBVBblqMW+hrzNT1VsgxqezS8dy/ RZGAX0WdbtG+7cZkn/6HwBZDe6jvm1AcXMavu4gdR95YZNq59N1jXV/roiLQ/WBs 6e/oZAQlVsm0cyxpRaeWmh7MhK6r+9XziV95hC4C5woQKhuAj4FsyHfei8yTjA1w 2x9YVgoeFwkZ/2/ahox0HnDzOYLdwl6O53vzSh0tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlEHMlQboGr7bGGmuslGCv3F/aRcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhYmZlZDVmLTc0OTQtNGY1Mi04OWEzLTE3NTE2NGY0NDg4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqowwDQYJKoZIhvcNAQELBQADggEBAHWwnDA1RVcqbjr/FS34Ys7+78rS 1qk5guEGQtQLK/QmPJQK15njDkTSkm2jsRBzy4e0k/dpUcDuWgxR6GpLCfyQHihT ir1S9p+voaqoZwOu7cy0rUPOfYYR6Gy4vNIHMGXrMPc8QAE+ofCm8CzdfNR0c8bW M4CkS6XFXCfrrJeLMy6sJzK0qVWiZCUM0luFSRC03YkWG0kZURFI7c+LQPAgrHhv lyz+SK5Weyew8DRvIHWN7vgwhrV7zGl+6b47wOQUCsPtE5X9Vvpq1+dcClIWkl2+ 5K44Yo2dBT1PPNJHmm2RhmLpxXcRP4muZmMrgZ1rkwdseiIIxtBjs0UUw1I= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:06 2025 by rpki-client