$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d094f3c4-0c24-4bc2-9263-81a3be01b5fe.roa File: d094f3c4-0c24-4bc2-9263-81a3be01b5fe.roa (raw, json) Hash identifier: Tgp2g3RzLpm17fsPa+mk03i/lw2scFhsxknU0UCes6o= Subject key identifier: 36:85:CA:F5:36:95:0A:66:91:07:C7:9E:0D:B5:02:97:FD:C4:D7:34 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 673E0E45C907F82FBEEFDC2A90DD6A6323217C77 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d094f3c4-0c24-4bc2-9263-81a3be01b5fe.roa Signing time: Thu 25 Sep 2025 20:27:34 +0000 ROA not before: Thu 25 Sep 2025 20:27:34 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.172.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3e:0e:45:c9:07:f8:2f:be:ef:dc:2a:90:dd:6a:63:23:21:7c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:27:34 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=20af45ab24537ef415191cf020a4ec5167df644e5c320688cbf40c80c2c7ff64, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:44:04:30:0f:6e:a4:61:50:7b:09:56:af:a8: b7:06:e7:5d:0d:a2:41:ee:14:17:fe:ec:41:24:b8: 45:94:68:10:ca:f4:02:e4:9b:88:2c:3b:69:5f:6d: 21:77:a1:c6:1a:1d:1f:a2:b2:98:28:c3:50:03:2a: e0:30:76:59:5b:b2:91:1b:31:cf:65:79:09:a0:e6: 9c:81:3f:4c:30:24:1b:60:77:77:a3:cb:7b:aa:68: 49:77:70:27:af:96:de:ae:92:55:32:fe:0c:26:79: d8:05:cd:d8:36:f8:ab:87:71:e7:5e:6e:c4:23:90: 0e:6d:4b:43:87:a5:8c:3c:ad:5c:98:39:fd:a3:f1: f9:7f:c5:16:6f:55:5f:5b:74:32:2f:c9:6e:63:d9: 21:59:cb:b1:96:30:1b:88:83:f6:9e:a1:b4:73:ea: 82:99:5d:c8:84:7a:79:11:d2:48:16:d5:b8:ee:1a: 48:75:46:be:44:03:6c:c1:87:96:25:97:6b:48:b9: b2:a7:c3:ad:2f:8f:5b:46:e9:45:b9:9d:1c:b4:bb: 9c:bc:c7:22:3d:64:5c:d4:d7:70:bc:37:33:a8:1a: d5:20:a6:0d:d8:70:aa:1e:5b:69:f4:77:ed:78:6f: 70:9a:34:3f:70:e4:34:2a:95:32:c7:08:2c:a7:89: 99:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:85:CA:F5:36:95:0A:66:91:07:C7:9E:0D:B5:02:97:FD:C4:D7:34 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d094f3c4-0c24-4bc2-9263-81a3be01b5fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.172.76.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:1b:32:11:5c:0e:72:f8:68:e5:62:a9:39:3d:05:73:47:b9: 4c:2d:36:d8:79:7f:f0:dc:a1:2f:c0:81:e3:11:58:41:61:39: 4e:f2:77:b7:e4:a4:0a:9a:5e:4f:be:9b:7b:09:ba:85:af:9e: 8b:79:c4:01:b2:bf:24:98:51:d0:27:89:82:64:15:25:01:77: 06:47:f1:4a:90:35:01:f1:7b:57:ef:8b:ed:20:b0:32:35:37: 58:f5:df:53:17:77:51:42:56:b7:f8:ee:3e:25:b9:39:18:98: 96:7b:31:79:95:73:bd:43:a8:be:2b:e3:ce:20:0e:13:e8:02: 41:94:5f:fb:70:65:62:6a:bc:e0:bc:7f:f6:83:0d:7a:98:25: 2c:15:44:71:84:fd:ae:2e:7c:11:ba:95:88:c5:6f:2b:9a:88: ad:0d:12:8d:e2:18:e8:55:57:7d:0f:6c:09:81:97:69:b0:31: 08:8b:ef:2c:f6:6f:a2:55:ab:df:cd:cb:da:d3:1f:b1:b6:d5: 65:ed:70:76:25:5b:40:56:d6:f5:62:cf:3f:19:69:c9:a7:2d: 40:45:40:d1:05:12:a9:45:5a:fb:0a:06:c8:42:9d:4d:93:a9: 93:6c:36:26:a8:7c:8a:9c:ad:8c:04:95:74:18:ec:f8:b4:a7: 92:a9:4d:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZz4ORckH+C++79wqkN1qYyMhfHcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjAyNzM0WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGFmNDVhYjI0NTM3ZWY0MTUxOTFjZjAyMGE0ZWM1MTY3 ZGY2NDRlNWMzMjA2ODhjYmY0MGM4MGMyYzdmZjY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTRAQwD26kYVB7CVavqLcG510NokHuFBf+7EEkuEWUaBDK 9ALkm4gsO2lfbSF3ocYaHR+ispgow1ADKuAwdllbspEbMc9leQmg5pyBP0wwJBtg d3ejy3uqaEl3cCevlt6uklUy/gwmedgFzdg2+KuHcedebsQjkA5tS0OHpYw8rVyY Of2j8fl/xRZvVV9bdDIvyW5j2SFZy7GWMBuIg/aeobRz6oKZXciEenkR0kgW1bju Gkh1Rr5EA2zBh5Yll2tIubKnw60vj1tG6UW5nRy0u5y8xyI9ZFzU13C8NzOoGtUg pg3YcKoeW2n0d+14b3CaND9w5DQqlTLHCCyniZmFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNoXK9TaVCmaRB8eeDbUCl/3E1zQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QwOTRmM2M0LTBjMjQtNGJjMi05MjYzLTgxYTNiZTAxYjVmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADrEwwDQYJKoZIhvcNAQELBQADggEBAJobMhFcDnL4aOViqTk9BXNHuUwt Nth5f/DcoS/AgeMRWEFhOU7yd7fkpAqaXk++m3sJuoWvnot5xAGyvySYUdAniYJk FSUBdwZH8UqQNQHxe1fvi+0gsDI1N1j131MXd1FCVrf47j4luTkYmJZ7MXmVc71D qL4r484gDhPoAkGUX/twZWJqvOC8f/aDDXqYJSwVRHGE/a4ufBG6lYjFbyuaiK0N Eo3iGOhVV30PbAmBl2mwMQiL7yz2b6JVq9/Ny9rTH7G21WXtcHYlW0BW1vVizz8Z acmnLUBFQNEFEqlFWvsKBshCnU2TqZNsNiaofIqcrYwElXQY7Pi0p5KpTbo= -----END CERTIFICATE-----Generated at Mon Oct 20 06:00:52 2025 by rpki-client