$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3edbd77-ba3a-45fd-8abc-dcd91252f055.roa File: a3edbd77-ba3a-45fd-8abc-dcd91252f055.roa (raw, json) Hash identifier: KlKZuLByIdfzey9GWGUB9VYYgdM61pt5HZI9y7p0UWw= Subject key identifier: AD:A4:C9:69:70:22:A8:C9:58:0A:FE:1E:39:B9:0A:BD:06:FC:42:CE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31FD5AABFB1C01D2B16232F256F79BA0B3FF82CD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3edbd77-ba3a-45fd-8abc-dcd91252f055.roa Signing time: Fri 26 Sep 2025 01:36:35 +0000 ROA not before: Fri 26 Sep 2025 01:36:35 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:fd:5a:ab:fb:1c:01:d2:b1:62:32:f2:56:f7:9b:a0:b3:ff:82:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:36:35 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=57d7ce76370920f4586c63892c2da28d806bc5e686e4a18e4765deb1d95b30c9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d7:99:b8:d8:0b:39:41:b2:64:6d:83:1b:b6: c5:4d:2e:a2:33:82:f3:f4:b0:c7:e7:c0:0d:5f:67: b9:4c:ad:9c:e2:0c:63:d9:75:ff:1c:94:85:94:54: ba:d3:c1:b3:bf:58:ee:6b:54:89:8c:54:25:1e:fc: 89:05:00:c4:44:46:b2:4a:c6:98:53:80:ac:92:9c: bf:c0:84:81:76:ba:f9:28:64:ad:da:fa:3a:2d:15: f0:0a:f3:4f:76:26:70:ca:fb:1b:4d:0f:63:04:1d: 6e:a6:89:22:4a:ab:98:ba:9b:4c:59:4f:c8:fa:60: eb:76:af:bc:1b:a9:28:28:4d:be:83:42:e6:95:e4: 62:84:97:d8:01:bc:46:47:15:72:23:70:27:70:b0: f5:de:0e:8b:3e:80:ed:88:96:57:21:8e:00:df:06: 99:f2:6d:c8:24:d1:79:18:6c:81:7e:20:b0:45:65: cf:b1:fc:19:6d:3d:66:23:ab:a0:30:91:38:e1:7e: da:be:be:81:8f:8d:7c:f6:93:4f:17:b8:f9:d8:ce: 99:26:e8:c9:c0:84:a6:1c:3c:ae:b8:50:7a:4a:55: cf:ae:a8:d8:a8:ae:5b:c7:c4:c1:53:f0:49:cb:6d: 0a:f8:18:5e:8f:e4:55:00:51:fa:a9:18:79:5d:44: 8f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A4:C9:69:70:22:A8:C9:58:0A:FE:1E:39:B9:0A:BD:06:FC:42:CE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3edbd77-ba3a-45fd-8abc-dcd91252f055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.64.0/21 Signature Algorithm: sha256WithRSAEncryption 77:51:ab:31:cf:c5:93:fa:f0:68:66:4e:c4:e6:d4:24:4e:16: 49:6a:a6:9a:9c:50:9e:38:74:fd:b4:32:98:3a:ea:4b:67:04: 39:da:f0:b4:04:18:54:73:2f:93:12:c3:25:18:e6:ae:19:b2: a8:56:39:c2:2b:7b:75:fa:c7:22:13:8b:f1:79:82:7a:87:dd: c4:51:4d:03:1c:3d:be:9e:4d:fa:5a:c7:43:36:06:0f:f7:e2: dc:fa:09:1e:df:d6:c0:24:a8:b6:75:ea:05:26:19:79:47:8d: be:ff:93:a0:ab:af:a0:ef:eb:5c:39:96:35:6a:c9:83:ed:13: 5d:2e:10:a6:ba:70:d4:2c:f6:1b:69:b4:22:d8:84:25:60:10: 6a:90:ea:44:93:de:d3:a0:c5:4e:5e:4b:62:f2:a7:00:64:54: 15:13:93:cd:d1:2f:19:46:f3:45:b5:6f:e7:32:8b:b8:22:3a: 04:41:3e:84:f1:ac:07:c9:ee:31:71:cc:44:bf:0e:28:2a:19: 76:e0:f4:38:57:88:80:e3:75:2a:d4:ef:09:7d:8e:8c:1c:cf: 32:d7:cd:73:98:c0:2d:8e:1b:56:90:96:e8:7a:10:b4:5e:57: 82:70:5a:cc:cc:67:ab:b0:bb:cc:85:cc:a6:db:2f:e4:76:50: 92:69:23:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMf1aq/scAdKxYjLyVveboLP/gs0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEzNjM1WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1N2Q3Y2U3NjM3MDkyMGY0NTg2YzYzODkyYzJkYTI4ZDgw NmJjNWU2ODZlNGExOGU0NzY1ZGViMWQ5NWIzMGM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV15m42As5QbJkbYMbtsVNLqIzgvP0sMfnwA1fZ7lMrZzi DGPZdf8clIWUVLrTwbO/WO5rVImMVCUe/IkFAMRERrJKxphTgKySnL/AhIF2uvko ZK3a+jotFfAK8092JnDK+xtND2MEHW6miSJKq5i6m0xZT8j6YOt2r7wbqSgoTb6D QuaV5GKEl9gBvEZHFXIjcCdwsPXeDos+gO2IllchjgDfBpnybcgk0XkYbIF+ILBF Zc+x/BltPWYjq6AwkTjhftq+voGPjXz2k08XuPnYzpkm6MnAhKYcPK64UHpKVc+u qNiorlvHxMFT8EnLbQr4GF6P5FUAUfqpGHldRI9VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUraTJaXAiqMlYCv4eObkKvQb8Qs4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EzZWRiZDc3LWJhM2EtNDVmZC04YWJjLWRjZDkxMjUyZjA1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDrEAwDQYJKoZIhvcNAQELBQADggEBAHdRqzHPxZP68GhmTsTm1CROFklq ppqcUJ44dP20Mpg66ktnBDna8LQEGFRzL5MSwyUY5q4ZsqhWOcIre3X6xyITi/F5 gnqH3cRRTQMcPb6eTfpax0M2Bg/34tz6CR7f1sAkqLZ16gUmGXlHjb7/k6Crr6Dv 61w5ljVqyYPtE10uEKa6cNQs9htptCLYhCVgEGqQ6kST3tOgxU5eS2LypwBkVBUT k83RLxlG80W1b+cyi7giOgRBPoTxrAfJ7jFxzES/DigqGXbg9DhXiIDjdSrU7wl9 jowczzLXzXOYwC2OG1aQluh6ELReV4JwWszMZ6uwu8yFzKbbL+R2UJJpI0w= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:06 2025 by rpki-client