$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e8ee7e7-b344-4993-839d-7d5d69fecfea.roa File: 9e8ee7e7-b344-4993-839d-7d5d69fecfea.roa (raw, json) Hash identifier: aUV2VpEVist13uZ42QoOTwWtKrq3KiOHbrLxGtue3ms= Subject key identifier: 36:45:AE:E7:8C:97:A5:B4:A6:14:49:D8:D7:B5:96:41:89:17:4B:6A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 044A4DBF06C13B5405ECFFD2B5489C189B8943BA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e8ee7e7-b344-4993-839d-7d5d69fecfea.roa Signing time: Thu 25 Sep 2025 23:21:51 +0000 ROA not before: Thu 25 Sep 2025 23:21:51 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:4a:4d:bf:06:c1:3b:54:05:ec:ff:d2:b5:48:9c:18:9b:89:43:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:21:51 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=a3af2cb8fc0321503e397ff4d405b89f27972f264300ad58dc4eb1d29ab3d74c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f4:fd:c4:7b:ef:a8:12:d7:5e:47:58:fd:2d: e3:e2:26:f0:79:cc:27:e5:20:0b:be:ca:ae:36:38: 6f:4b:49:1b:30:6a:df:2e:a7:35:9c:3c:ad:50:6c: 9b:6a:d9:82:50:61:8a:9f:e7:32:15:2e:fc:b5:a7: af:f0:c5:20:c0:76:16:04:23:c9:ba:f8:8c:60:4a: 48:76:6d:b7:d0:94:56:86:1c:00:98:8e:df:16:79: d1:5d:68:30:a0:b1:b7:98:79:9a:17:9b:65:d1:5e: 67:4b:41:d7:70:ef:db:47:04:c5:fd:f0:f1:5d:50: c9:98:38:8d:c5:86:b7:30:78:36:02:8e:c1:96:a0: e5:87:e2:0c:83:1f:72:27:74:9f:45:72:8b:e4:5d: 36:5c:6b:de:6a:aa:fe:e1:9f:04:fb:5a:a5:37:bf: aa:16:25:9c:7c:0d:1f:67:d3:18:ab:0b:d6:c6:69: 59:3f:50:6a:03:cf:20:42:8f:e3:d5:e4:90:b3:01: 3f:54:30:44:4d:fa:0a:06:8f:b2:c1:f3:03:83:aa: c5:82:5b:c0:26:a1:df:82:cf:5b:f4:0f:60:a9:16: 49:be:98:dc:f6:19:f9:38:35:96:2b:f5:a3:44:2d: 09:0d:1c:c6:60:71:13:88:c5:40:0c:04:45:cc:ea: eb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:45:AE:E7:8C:97:A5:B4:A6:14:49:D8:D7:B5:96:41:89:17:4B:6A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e8ee7e7-b344-4993-839d-7d5d69fecfea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.42.0/23 Signature Algorithm: sha256WithRSAEncryption b0:e6:28:81:29:25:b1:19:2a:d4:86:3f:55:49:89:dd:bf:a3: c0:ce:7a:30:9c:3c:13:22:04:36:b7:56:d0:66:3e:e0:de:8f: b1:ef:6d:40:aa:80:f8:ed:91:33:cc:7e:e0:f6:ec:51:ba:43: 64:33:64:3c:6c:fe:c3:e1:2b:dd:85:b0:f4:5d:cb:88:5f:a9: 2f:f4:07:69:5b:83:09:93:bb:a9:4e:05:e6:96:b8:fe:d9:89: 79:aa:14:64:5b:d4:3f:c9:61:31:44:6e:f1:c6:ac:ea:f4:df: 46:36:f3:c4:64:30:48:96:97:2e:f6:7c:5a:0f:96:b2:50:4a: e1:0e:9e:34:d9:1b:c2:a7:fd:82:43:99:1f:38:05:cd:81:4f: ef:4c:f9:d4:25:af:a9:0e:85:db:4e:6d:e3:8a:9c:c8:80:00: 14:9f:0b:14:96:1a:4d:d5:a4:93:86:25:b1:dd:af:19:15:55: 0d:d9:d5:ae:d3:42:92:68:3e:f4:ee:8a:b1:78:be:70:3f:b7: c2:77:95:e4:d5:17:5f:5e:d0:80:a1:93:8e:1b:c7:91:a7:d7: c1:c6:03:61:82:c5:5d:25:8c:21:b4:b4:0c:57:49:4e:ca:f0: 56:69:fa:de:c5:11:f6:46:42:84:84:44:59:50:25:ba:7b:e3: f4:21:28:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBEpNvwbBO1QF7P/StUicGJuJQ7owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjMyMTUxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhM2FmMmNiOGZjMDMyMTUwM2UzOTdmZjRkNDA1Yjg5ZjI3 OTcyZjI2NDMwMGFkNThkYzRlYjFkMjlhYjNkNzRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY9P3Ee++oEtdeR1j9LePiJvB5zCflIAu+yq42OG9LSRsw at8upzWcPK1QbJtq2YJQYYqf5zIVLvy1p6/wxSDAdhYEI8m6+IxgSkh2bbfQlFaG HACYjt8WedFdaDCgsbeYeZoXm2XRXmdLQddw79tHBMX98PFdUMmYOI3FhrcweDYC jsGWoOWH4gyDH3IndJ9FcovkXTZca95qqv7hnwT7WqU3v6oWJZx8DR9n0xirC9bG aVk/UGoDzyBCj+PV5JCzAT9UMERN+goGj7LB8wODqsWCW8Amod+Cz1v0D2CpFkm+ mNz2Gfk4NZYr9aNELQkNHMZgcROIxUAMBEXM6usbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNkWu54yXpbSmFEnY17WWQYkXS2owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzllOGVlN2U3LWIzNDQtNDk5My04MzlkLTdkNWQ2OWZlY2ZlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDrCowDQYJKoZIhvcNAQELBQADggEBALDmKIEpJbEZKtSGP1VJid2/o8DO ejCcPBMiBDa3VtBmPuDej7HvbUCqgPjtkTPMfuD27FG6Q2QzZDxs/sPhK92FsPRd y4hfqS/0B2lbgwmTu6lOBeaWuP7ZiXmqFGRb1D/JYTFEbvHGrOr030Y288RkMEiW ly72fFoPlrJQSuEOnjTZG8Kn/YJDmR84Bc2BT+9M+dQlr6kOhdtObeOKnMiAABSf CxSWGk3VpJOGJbHdrxkVVQ3Z1a7TQpJoPvTuirF4vnA/t8J3leTVF19e0IChk44b x5Gn18HGA2GCxV0ljCG0tAxXSU7K8FZp+t7FEfZGQoSERFlQJbp74/QhKAU= -----END CERTIFICATE-----Generated at Fri Oct 17 21:59:28 2025 by rpki-client