$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b58d5b61-4d7f-4123-8361-591f01dec9f8.roa File: b58d5b61-4d7f-4123-8361-591f01dec9f8.roa (raw, json) Hash identifier: 4JF4+moWtlj+hdbzBrH2tJHEJ6NXhnBKesWtdHcFZuE= Subject key identifier: 09:C0:D5:36:52:FB:26:6A:61:4F:2E:13:F0:77:B9:2E:B8:71:19:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0847E9B046F3E364387205A48E3184BAE320C2D1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b58d5b61-4d7f-4123-8361-591f01dec9f8.roa Signing time: Thu 25 Sep 2025 20:32:28 +0000 ROA not before: Thu 25 Sep 2025 20:32:28 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:47:e9:b0:46:f3:e3:64:38:72:05:a4:8e:31:84:ba:e3:20:c2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:32:28 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=33712de13d875d568b2bb14c80f06346048e509ebc433a0ead14efecbd05bf67, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fd:ae:a5:55:6c:0d:93:e5:44:4c:b3:5d:c3: 82:87:85:81:a3:9b:1b:05:db:e1:04:f3:2c:a5:cf: fb:3b:71:f2:4b:fa:27:d5:4d:90:1c:d9:73:58:06: 47:9d:83:e5:d7:03:ed:40:c3:0d:5c:f3:f9:7b:07: d9:a4:8a:d9:2d:43:4c:a2:01:1d:07:79:03:8a:e6: ca:aa:d5:66:0e:44:58:de:ec:e8:f5:ef:a4:79:c6: 2e:2e:d9:d5:ef:81:da:c9:b3:ea:13:d8:20:35:48: dc:01:39:fc:a2:a7:29:eb:a4:d0:26:3b:82:92:22: 5e:f0:34:be:1a:fe:34:9a:bb:62:3d:c4:3f:c1:bf: 04:a9:af:e6:9e:bf:23:e0:f7:40:35:69:01:42:94: bd:8a:27:ed:f8:3c:23:b2:2a:49:c2:eb:0e:43:ca: bf:c7:ae:a0:7b:c4:be:44:93:eb:95:6f:b7:f6:95: f5:af:59:a5:b6:bc:9f:cb:70:2c:06:14:20:78:02: ee:dd:48:91:52:17:b4:d8:7f:11:73:02:24:c6:08: cb:16:e5:32:0b:c8:31:9c:60:ce:de:8a:2d:0b:62: 7f:14:40:c5:8e:9e:50:f8:d2:24:c9:e9:94:a4:1e: 46:9d:0e:81:89:56:25:f7:5c:d2:34:f3:e5:b7:1d: 43:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C0:D5:36:52:FB:26:6A:61:4F:2E:13:F0:77:B9:2E:B8:71:19:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b58d5b61-4d7f-4123-8361-591f01dec9f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.120.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:90:a8:7d:ce:8a:0d:ff:00:e6:80:72:e3:d0:10:23:21:91: 6d:ee:67:73:5b:9c:18:29:4c:03:cd:69:e9:95:d0:65:16:68: 09:19:e9:8f:59:56:b6:ad:1e:ff:41:95:02:ae:ec:dd:35:61: 0e:bd:18:30:e9:83:d8:19:9a:cf:a2:e4:f1:92:af:d1:6b:71: 6e:7e:62:c2:35:ba:c3:0b:80:21:ed:2b:0c:3c:b0:e2:4a:02: 11:4e:77:f7:a0:fc:21:b7:ba:92:74:62:11:01:45:7f:00:f1: 68:86:e9:f1:ac:af:0f:31:81:8e:ac:93:75:a9:4c:a6:5f:98: 45:b5:f2:1e:69:ed:e5:eb:41:af:88:13:7e:56:9c:12:84:c1: 55:cc:d8:cf:38:f8:d6:72:6b:6c:0d:f3:bd:68:88:c2:bb:49: 61:d0:a0:d7:05:19:fd:85:4c:2b:ee:25:c8:16:4c:1d:09:15: da:2a:83:22:aa:36:7a:92:ab:2a:bc:80:5a:e9:56:d7:33:ce: c5:99:a2:9c:92:cc:d3:43:2e:a9:99:01:3a:cf:45:70:82:62: 08:ba:b2:3d:51:72:ef:1a:5e:6b:98:d0:3e:d8:cf:a3:24:f2: 05:55:a4:b8:19:70:78:ae:ba:70:df:87:c4:69:18:e6:d3:b6: e0:26:dd:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCEfpsEbz42Q4cgWkjjGEuuMgwtEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjAzMjI4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzcxMmRlMTNkODc1ZDU2OGIyYmIxNGM4MGYwNjM0NjA0 OGU1MDllYmM0MzNhMGVhZDE0ZWZlY2JkMDViZjY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCB/a6lVWwNk+VETLNdw4KHhYGjmxsF2+EE8yylz/s7cfJL +ifVTZAc2XNYBkedg+XXA+1Aww1c8/l7B9mkitktQ0yiAR0HeQOK5sqq1WYORFje 7Oj176R5xi4u2dXvgdrJs+oT2CA1SNwBOfyipynrpNAmO4KSIl7wNL4a/jSau2I9 xD/BvwSpr+aevyPg90A1aQFClL2KJ+34PCOyKknC6w5Dyr/HrqB7xL5Ek+uVb7f2 lfWvWaW2vJ/LcCwGFCB4Au7dSJFSF7TYfxFzAiTGCMsW5TILyDGcYM7eii0LYn8U QMWOnlD40iTJ6ZSkHkadDoGJViX3XNI08+W3HUMVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCcDVNlL7JmphTy4T8He5LrhxGY8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1OGQ1YjYxLTRkN2YtNDEyMy04MzYxLTU5MWYwMWRlYzlmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrXgwDQYJKoZIhvcNAQELBQADggEBAEyQqH3Oig3/AOaAcuPQECMhkW3u Z3NbnBgpTAPNaemV0GUWaAkZ6Y9ZVratHv9BlQKu7N01YQ69GDDpg9gZms+i5PGS r9FrcW5+YsI1usMLgCHtKww8sOJKAhFOd/eg/CG3upJ0YhEBRX8A8WiG6fGsrw8x gY6sk3WpTKZfmEW18h5p7eXrQa+IE35WnBKEwVXM2M84+NZya2wN871oiMK7SWHQ oNcFGf2FTCvuJcgWTB0JFdoqgyKqNnqSqyq8gFrpVtczzsWZopySzNNDLqmZATrP RXCCYgi6sj1Rcu8aXmuY0D7Yz6Mk8gVVpLgZcHiuunDfh8RpGObTtuAm3YE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:00:45 2025 by rpki-client