$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d840403-46bc-4952-991b-24c52a6c7bd7.roa File: 1d840403-46bc-4952-991b-24c52a6c7bd7.roa (raw, json) Hash identifier: gbr4sCcDwHrFHDGR7SpNVvUhBy/fRUk/pcMo8Gor1as= Subject key identifier: 54:8E:4E:42:03:62:69:24:5F:52:12:40:AC:96:24:E5:14:1E:AB:9B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2BB37FFAC830E9264E48228471B72926B1DF157C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d840403-46bc-4952-991b-24c52a6c7bd7.roa Signing time: Mon 20 Oct 2025 08:42:48 +0000 ROA not before: Mon 20 Oct 2025 08:42:48 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b3:7f:fa:c8:30:e9:26:4e:48:22:84:71:b7:29:26:b1:df:15:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 08:42:48 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=c0999837013fb77114ca6e8a71f0987bb0f161a7482b88802d04f8fcf27b2fb1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:1e:24:6c:d6:57:17:f6:7c:9d:8a:85:b7: 36:f1:cf:b8:ce:1a:84:94:6f:09:bd:48:4b:11:91: bb:90:c8:ff:7e:c5:ff:fa:46:bc:c0:54:cb:55:ff: 8e:fb:f6:48:f3:7d:02:c0:c3:df:8f:df:70:4e:e7: 26:35:52:3e:20:ec:6a:ba:49:9b:d9:44:23:f7:56: 8a:fa:e3:e3:f0:77:fb:31:8c:61:19:4c:3b:48:aa: cb:de:f0:de:82:81:b8:7a:5f:dd:8a:bd:9c:b7:5d: e6:f3:49:8a:16:4b:38:f1:5d:6c:9e:d2:a0:75:99: 32:46:b9:90:cb:36:bd:a0:61:50:ae:ce:16:e0:15: 4e:a3:3a:73:b8:c3:8a:75:ff:bc:b0:90:4b:4f:e5: ef:62:62:f6:a5:18:6b:4e:18:9d:1a:9b:45:c9:4e: 7e:26:b3:b8:d2:8c:cb:60:af:5a:f9:4b:ae:d3:52: aa:ee:9e:1e:01:bc:0e:f9:8f:25:f9:d5:19:79:a0: 91:ad:b8:c1:fb:4f:91:b1:0b:8f:0f:5e:4f:6e:a0: 83:7c:aa:4d:e5:94:32:31:ea:04:4b:06:85:fd:dd: 0f:0a:e1:0a:06:2d:ce:19:e8:f3:2f:76:2a:52:50: 9a:40:ff:a9:8d:33:65:36:a9:c3:01:f8:83:20:29: f6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8E:4E:42:03:62:69:24:5F:52:12:40:AC:96:24:E5:14:1E:AB:9B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d840403-46bc-4952-991b-24c52a6c7bd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.157.0/24 Signature Algorithm: sha256WithRSAEncryption 26:cc:1d:42:57:5c:1b:c4:a8:5f:f1:aa:fc:88:6c:97:eb:90: 58:64:53:a9:ec:5f:0f:60:70:51:b5:4d:7b:f2:38:57:8d:27: 70:87:5e:ca:fa:98:a1:2d:17:38:ea:48:da:9c:41:bf:26:93: bc:d7:d9:61:5d:a5:e3:99:6b:31:ea:2d:42:5b:b3:04:ba:a2: 40:da:2e:d5:92:81:41:14:bf:a7:c5:3b:a9:18:b3:0d:f4:e2: 68:b0:1c:24:76:03:9b:5d:b1:a9:c8:3f:24:67:ca:49:cf:f1: 6a:62:ee:fd:44:f3:9e:c1:eb:9e:59:de:05:51:a0:15:80:4e: 3e:b8:8f:ba:b7:8e:4a:a3:41:09:72:c5:7b:be:c0:54:54:ed: b7:33:78:9c:34:df:85:8a:e9:4f:45:ce:1f:db:6e:50:52:10: e1:b5:6c:d7:fd:a6:d4:39:ea:e3:5e:d0:82:1b:1c:f3:92:ab: 22:3d:d8:c2:28:2f:4c:e6:46:5f:4d:27:33:14:5f:f9:ab:cd: 3e:02:8b:3c:41:05:d3:e5:9c:46:f5:02:ca:89:a3:be:dd:09: 27:06:7b:01:57:fa:44:7c:29:08:12:0c:c4:5b:36:d3:19:cb: 4e:f1:6c:77:db:af:85:4f:fe:5a:15:73:64:b0:a7:79:c9:5e: 14:f3:ac:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK7N/+sgw6SZOSCKEcbcpJrHfFXwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMDg0MjQ4WhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDk5OTgzNzAxM2ZiNzcxMTRjYTZlOGE3MWYwOTg3YmIw ZjE2MWE3NDgyYjg4ODAyZDA0ZjhmY2YyN2IyZmIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfeR4kbNZXF/Z8nYqFtzbxz7jOGoSUbwm9SEsRkbuQyP9+ xf/6RrzAVMtV/4779kjzfQLAw9+P33BO5yY1Uj4g7Gq6SZvZRCP3Vor64+Pwd/sx jGEZTDtIqsve8N6Cgbh6X92KvZy3XebzSYoWSzjxXWye0qB1mTJGuZDLNr2gYVCu zhbgFU6jOnO4w4p1/7ywkEtP5e9iYvalGGtOGJ0am0XJTn4ms7jSjMtgr1r5S67T Uqrunh4BvA75jyX51Rl5oJGtuMH7T5GxC48PXk9uoIN8qk3llDIx6gRLBoX93Q8K 4QoGLc4Z6PMvdipSUJpA/6mNM2U2qcMB+IMgKfavAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVI5OQgNiaSRfUhJArJYk5RQeq5swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFkODQwNDAzLTQ2YmMtNDk1Mi05OTFiLTI0YzUyYTZjN2JkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADr50wDQYJKoZIhvcNAQELBQADggEBACbMHUJXXBvEqF/xqvyIbJfrkFhk U6nsXw9gcFG1TXvyOFeNJ3CHXsr6mKEtFzjqSNqcQb8mk7zX2WFdpeOZazHqLUJb swS6okDaLtWSgUEUv6fFO6kYsw304miwHCR2A5tdsanIPyRnyknP8Wpi7v1E857B 655Z3gVRoBWATj64j7q3jkqjQQlyxXu+wFRU7bczeJw034WK6U9Fzh/bblBSEOG1 bNf9ptQ56uNe0IIbHPOSqyI92MIoL0zmRl9NJzMUX/mrzT4CizxBBdPlnEb1AsqJ o77dCScGewFX+kR8KQgSDMRbNtMZy07xbHfbr4VP/loVc2Swp3nJXhTzrBI= -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:21 2025 by rpki-client