$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5071506-1308-4251-9c75-705a0b3ea14a.roa File: a5071506-1308-4251-9c75-705a0b3ea14a.roa (raw, json) Hash identifier: 9aRCKqqhZm5x3UGudAy4rbkF2PAxBXvMTIMnFRCp+I8= Subject key identifier: 59:74:C8:87:38:A9:B1:F2:AB:B8:F5:C9:59:F9:A0:B1:A7:CB:08:A4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 782F19FDABE7211E37AD72915AA1E662058E0190 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5071506-1308-4251-9c75-705a0b3ea14a.roa Signing time: Thu 25 Sep 2025 22:39:19 +0000 ROA not before: Thu 25 Sep 2025 22:39:19 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2f:19:fd:ab:e7:21:1e:37:ad:72:91:5a:a1:e6:62:05:8e:01:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:39:19 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=e4f600b59142b4c46575f66026943a5f41bfaddf124987161cb185f5336a62ca, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2a:23:7e:62:fd:8b:47:f1:03:f3:5d:c0:b6: e7:81:e3:4d:55:44:ed:a7:15:98:4c:3e:50:92:bd: 84:9c:c7:e1:b1:07:9b:7b:ec:1d:b1:00:ae:43:ab: 86:68:bb:d5:45:97:6f:b8:5a:a4:9f:57:4e:52:9d: 26:ef:03:73:10:8f:4d:c1:cc:d3:1b:1b:66:2d:82: 7c:63:ae:a3:67:bd:08:34:70:a9:0d:0a:4c:28:ab: 2b:47:4c:a4:c4:19:ed:c5:5b:87:bf:16:52:a7:b4: 30:3f:b7:86:39:9a:66:28:4f:5a:92:43:ab:f4:6a: dc:ff:ea:53:84:6e:bb:48:81:ba:90:0e:ab:ba:57: 2e:d8:50:1b:b6:d2:f7:cd:d3:cc:4e:31:39:6e:14: 24:60:b0:38:e1:a9:42:eb:4c:ea:9d:ac:d3:ac:a5: 2a:58:1f:31:87:4a:a0:ae:69:59:47:27:ae:3f:7c: 48:23:15:31:e0:e5:f1:b0:ce:7d:64:5e:73:3d:11: 37:cb:92:7b:dc:07:e7:2f:76:e7:89:75:ba:c9:db: bd:68:c9:3f:bb:03:20:fe:60:a2:29:66:90:76:4b: 6e:47:ae:aa:18:df:ae:11:70:28:1b:2a:b4:f8:7f: 48:67:03:57:4b:ef:f8:53:37:ea:ee:1d:eb:92:8e: b9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:74:C8:87:38:A9:B1:F2:AB:B8:F5:C9:59:F9:A0:B1:A7:CB:08:A4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5071506-1308-4251-9c75-705a0b3ea14a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.80.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:4c:90:cb:da:ac:a4:64:97:a1:56:79:d3:cb:a1:32:39:fa: 33:d1:76:f4:30:0e:02:bd:db:15:10:d2:54:9c:a4:92:a5:1a: 1f:fe:aa:e8:fb:28:c3:0c:5d:04:67:e3:a3:9b:45:c2:ac:0c: fa:eb:41:2f:1f:ab:da:ec:9e:0f:86:08:4f:25:ce:af:f8:2f: 71:fc:e8:04:b9:7b:aa:5c:c7:94:30:29:e0:43:d5:80:0a:51: c2:98:75:fd:12:48:48:ef:37:41:64:12:15:b2:16:71:2f:57: 36:37:a2:5e:1e:54:30:bb:8a:df:a4:07:2e:fb:9d:b4:93:c7: f2:c6:3f:e6:e0:bd:48:f9:f5:f3:24:49:dc:0a:a3:a1:79:78: 1a:65:c8:0f:65:1a:b4:b1:53:4c:74:77:52:88:0f:4f:8e:bc: bb:af:7f:2a:3c:38:7e:1f:59:13:85:e4:92:48:60:b7:8d:62: ba:da:be:21:a2:4a:93:e1:b9:f9:13:83:31:45:c8:d4:4c:d0: f6:7e:c6:6a:da:6d:01:f2:8a:c5:f3:19:38:26:f3:f4:ac:b4: 36:c8:10:d2:96:06:1f:e9:39:a6:98:6f:99:0e:23:9b:36:f6: ee:d6:39:0d:0b:91:62:e2:fa:0d:f7:2b:46:66:50:29:2c:6a: cc:0a:9c:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeC8Z/avnIR43rXKRWqHmYgWOAZAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIzOTE5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNGY2MDBiNTkxNDJiNGM0NjU3NWY2NjAyNjk0M2E1ZjQx YmZhZGRmMTI0OTg3MTYxY2IxODVmNTMzNmE2MmNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNKiN+Yv2LR/ED813AtueB401VRO2nFZhMPlCSvYScx+Gx B5t77B2xAK5Dq4Zou9VFl2+4WqSfV05SnSbvA3MQj03BzNMbG2YtgnxjrqNnvQg0 cKkNCkwoqytHTKTEGe3FW4e/FlKntDA/t4Y5mmYoT1qSQ6v0atz/6lOEbrtIgbqQ Dqu6Vy7YUBu20vfN08xOMTluFCRgsDjhqULrTOqdrNOspSpYHzGHSqCuaVlHJ64/ fEgjFTHg5fGwzn1kXnM9ETfLknvcB+cvdueJdbrJ271oyT+7AyD+YKIpZpB2S25H rqoY364RcCgbKrT4f0hnA1dL7/hTN+ruHeuSjrmdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWXTIhzipsfKruPXJWfmgsafLCKQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E1MDcxNTA2LTEzMDgtNDI1MS05Yzc1LTcwNWEwYjNlYTE0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDp1AwDQYJKoZIhvcNAQELBQADggEBADxMkMvarKRkl6FWedPLoTI5+jPR dvQwDgK92xUQ0lScpJKlGh/+quj7KMMMXQRn46ObRcKsDPrrQS8fq9rsng+GCE8l zq/4L3H86AS5e6pcx5QwKeBD1YAKUcKYdf0SSEjvN0FkEhWyFnEvVzY3ol4eVDC7 it+kBy77nbSTx/LGP+bgvUj59fMkSdwKo6F5eBplyA9lGrSxU0x0d1KID0+OvLuv fyo8OH4fWROF5JJIYLeNYrraviGiSpPhufkTgzFFyNRM0PZ+xmrabQHyisXzGTgm 8/SstDbIENKWBh/pOaaYb5kOI5s29u7WOQ0LkWLi+g33K0ZmUCksaswKnOQ= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:09 2025 by rpki-client