$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6368573-ad50-4bd8-b712-bffd961830b5.roa File: c6368573-ad50-4bd8-b712-bffd961830b5.roa (raw, json) Hash identifier: HGIXTK4J3KWjujz4BAQDKZG29MIqUu48/LVnGO1HY9I= Subject key identifier: D9:F3:77:7E:32:74:FC:31:BE:4C:4E:73:EA:80:6A:F4:15:7B:79:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 43CD234759A19D52C39D7D62A2FAC04749BABEFA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6368573-ad50-4bd8-b712-bffd961830b5.roa Signing time: Fri 26 Sep 2025 01:59:21 +0000 ROA not before: Fri 26 Sep 2025 01:59:21 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.174.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cd:23:47:59:a1:9d:52:c3:9d:7d:62:a2:fa:c0:47:49:ba:be:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:59:21 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=454a1366679ba4c1ed8720126dc9d6c4e98ebb040a9d864807c1406f376a7d11, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:a4:ee:28:3c:42:d4:01:55:67:7c:14:ca: ba:b0:99:26:7e:a9:2c:97:aa:8c:ad:7c:7f:6a:eb: 7e:31:63:69:d6:f2:29:bb:4f:9b:07:1d:99:e6:6f: 5f:39:57:96:ba:96:40:a4:f4:af:5c:24:9d:ab:f1: 4c:93:bd:54:55:85:c9:aa:0f:7c:f1:ec:30:7e:65: 01:fa:a3:27:16:59:fa:44:da:63:0c:88:38:70:c8: 26:60:ae:3c:d0:6e:d7:98:3e:db:e4:30:b7:4e:33: 78:c5:b4:7b:9a:a3:de:7d:68:e7:0c:a0:b2:45:23: 1b:ae:86:d2:e9:9e:d2:3b:bd:fb:64:55:64:07:f4: f6:62:c5:4d:07:b7:df:e2:4d:87:7d:72:36:e8:fa: 82:81:6a:49:1c:00:76:06:43:c8:7f:68:75:2e:4d: 6c:74:50:21:2f:44:24:4f:fd:00:19:68:d1:7c:81: 80:bc:e3:8e:bd:c2:22:11:69:91:75:a0:e0:5a:48: 31:df:bd:8c:76:17:13:ee:6d:f0:1f:96:07:63:59: 9e:94:0d:28:f6:bd:1c:0a:10:13:90:e4:7d:20:71: 9a:b3:5f:f0:b2:85:f0:02:26:12:8d:98:03:d4:7d: 82:5c:26:24:19:a0:3b:e3:e6:77:0c:69:61:c7:6d: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F3:77:7E:32:74:FC:31:BE:4C:4E:73:EA:80:6A:F4:15:7B:79:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6368573-ad50-4bd8-b712-bffd961830b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.174.112.0/20 Signature Algorithm: sha256WithRSAEncryption 38:c2:9e:b2:30:be:c9:c1:59:22:1d:f7:47:32:a1:6a:46:e6: 41:09:4a:5b:fa:c9:61:bb:e0:7f:44:0b:35:18:f4:30:5c:eb: 40:c1:e8:ab:ff:25:ec:17:a2:ed:cc:44:4c:49:c5:36:10:56: 73:06:54:37:f3:34:01:3c:a6:81:e2:9f:33:28:d9:12:5a:bb: 2c:6b:16:32:0f:a6:d9:c4:ad:5c:a8:d4:00:3e:cd:5b:90:c8: 8b:30:52:95:1b:fe:5e:d6:7d:5c:65:8a:c1:e1:ba:b2:77:07: 67:b8:b9:ad:e6:98:ca:52:26:aa:a2:84:bb:98:b9:90:59:9d: 57:0c:ec:08:ed:27:cb:d4:62:bc:25:a5:af:9a:b0:e8:f6:12: e3:b2:64:0e:ba:92:2d:79:70:4f:fd:3a:df:bf:06:54:f9:53: 97:a0:ad:64:0b:83:90:6a:29:59:ba:cf:f5:1e:96:07:65:05: 8d:80:f5:4a:ab:60:82:e6:34:11:90:93:af:3f:09:14:7d:ea: 72:68:cf:14:6b:86:fc:f0:b3:69:2f:60:f2:f7:34:0b:f4:97: 50:e2:87:d8:89:ed:44:ce:54:b0:2b:bf:5f:81:c5:ec:7d:4d: 9c:05:e8:93:76:d9:08:38:ae:fb:7d:11:3f:9c:77:11:62:35: 08:98:f7:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ80jR1mhnVLDnX1iovrAR0m6vvowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDE1OTIxWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NTRhMTM2NjY3OWJhNGMxZWQ4NzIwMTI2ZGM5ZDZjNGU5 OGViYjA0MGE5ZDg2NDgwN2MxNDA2ZjM3NmE3ZDExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHEaTuKDxC1AFVZ3wUyrqwmSZ+qSyXqoytfH9q634xY2nW 8im7T5sHHZnmb185V5a6lkCk9K9cJJ2r8UyTvVRVhcmqD3zx7DB+ZQH6oycWWfpE 2mMMiDhwyCZgrjzQbteYPtvkMLdOM3jFtHuao959aOcMoLJFIxuuhtLpntI7vftk VWQH9PZixU0Ht9/iTYd9cjbo+oKBakkcAHYGQ8h/aHUuTWx0UCEvRCRP/QAZaNF8 gYC84469wiIRaZF1oOBaSDHfvYx2FxPubfAflgdjWZ6UDSj2vRwKEBOQ5H0gcZqz X/CyhfACJhKNmAPUfYJcJiQZoDvj5ncMaWHHbZvbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2fN3fjJ0/DG+TE5z6oBq9BV7eVYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M2MzY4NTczLWFkNTAtNGJkOC1iNzEyLWJmZmQ5NjE4MzBiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDrnAwDQYJKoZIhvcNAQELBQADggEBADjCnrIwvsnBWSId90cyoWpG5kEJ Slv6yWG74H9ECzUY9DBc60DB6Kv/JewXou3MRExJxTYQVnMGVDfzNAE8poHinzMo 2RJauyxrFjIPptnErVyo1AA+zVuQyIswUpUb/l7WfVxlisHhurJ3B2e4ua3mmMpS JqqihLuYuZBZnVcM7AjtJ8vUYrwlpa+asOj2EuOyZA66ki15cE/9Ot+/BlT5U5eg rWQLg5BqKVm6z/UelgdlBY2A9UqrYILmNBGQk68/CRR96nJozxRrhvzws2kvYPL3 NAv0l1Dih9iJ7UTOVLArv1+Bxex9TZwF6JN22Qg4rvt9ET+cdxFiNQiY9x8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:06:58 2025 by rpki-client