$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2b2688f-fc3d-4cfe-9480-aa403cc19f4d.roa File: d2b2688f-fc3d-4cfe-9480-aa403cc19f4d.roa (raw, json) Hash identifier: xsC6Xu3sL7f+hS7nEZkYb4TrxMOZ4oVbOU8RJwXjibk= Subject key identifier: 95:74:7D:E5:76:7D:26:40:F0:0B:67:B4:71:7D:D1:23:19:2F:BC:36 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 465A68C6D0471BB5EB90AFB7BB785BF1A47EDBA3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2b2688f-fc3d-4cfe-9480-aa403cc19f4d.roa Signing time: Fri 26 Sep 2025 01:29:34 +0000 ROA not before: Fri 26 Sep 2025 01:29:34 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:5a:68:c6:d0:47:1b:b5:eb:90:af:b7:bb:78:5b:f1:a4:7e:db:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:29:34 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=1b6da23ab0c6fab56afccde55c519c2a474092c396d7ec6365959ba2c5d093db, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:45:a1:18:9a:a9:3b:c5:de:dd:f7:a1:9b:eb: df:f5:1a:98:61:c2:dc:57:4f:e9:04:9b:79:a8:49: 0e:81:d4:4e:a2:ad:ca:1a:9c:f9:6c:6c:d5:be:b0: 0d:3b:37:38:91:bd:c6:3a:6a:41:3c:eb:34:9b:cf: 58:95:a4:96:6f:94:4e:63:bd:db:2f:51:cc:2f:f6: 7e:3d:58:1b:f7:2b:54:62:04:cb:5c:2f:44:b9:9c: 45:c4:ac:30:44:1b:f4:0d:c6:70:05:19:23:59:2d: df:02:cd:43:49:99:a1:f9:7f:5d:e6:4b:53:ae:d8: fd:65:51:88:07:5b:db:0c:d5:00:b1:a1:83:ff:e2: 1d:9f:fe:96:01:42:e4:da:81:18:94:eb:27:5d:2e: 2c:2b:5b:48:01:ab:08:e8:9e:b2:ce:5f:ba:5e:f4: 15:7e:a9:cc:d0:26:2d:ba:23:bb:ba:e5:8b:44:5e: cf:53:b3:58:f4:6e:70:42:79:e3:8b:7a:34:50:43: 47:d6:42:e8:a3:46:80:30:c1:1a:69:f4:0c:02:19: c0:c6:13:45:f3:97:2b:22:5b:76:03:f1:be:61:6f: 9e:36:57:85:3a:4c:46:73:0d:59:51:f2:51:9e:dd: 6b:ad:fe:59:bb:a6:91:c7:ac:04:7f:c7:2b:7b:9b: dd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:74:7D:E5:76:7D:26:40:F0:0B:67:B4:71:7D:D1:23:19:2F:BC:36 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2b2688f-fc3d-4cfe-9480-aa403cc19f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.40.0/21 Signature Algorithm: sha256WithRSAEncryption ac:05:c2:86:bd:14:cd:59:fe:dd:4a:39:06:de:3e:9e:8f:fb: 29:d2:90:ae:f2:b1:e4:46:b0:1d:59:0d:bf:4f:58:86:c6:ab: 57:97:89:42:b1:7f:f0:a7:04:0e:df:0e:a1:75:a4:71:e7:1b: 26:27:9f:d7:bf:72:b4:6f:a5:c7:5f:e3:6c:ca:ad:f2:1c:b0: ce:20:a4:d2:17:ff:54:00:24:c4:ba:c8:55:45:9b:1c:30:28: f3:87:fd:42:10:c5:1f:44:34:03:1d:43:7c:06:82:ac:60:1d: 75:32:23:8c:68:c0:28:40:66:2e:90:8b:bc:39:10:91:7a:7c: 72:74:bf:98:59:22:ae:36:19:11:56:54:f2:8b:f6:9e:77:f5: e2:5a:e9:06:16:11:60:3c:e4:0b:03:e7:1a:16:b1:21:e2:f4: 00:35:15:98:9b:bc:9f:e3:81:6e:e1:ec:c4:67:56:85:6e:1e: 60:cd:a8:40:77:02:d9:1a:eb:93:42:74:6f:98:d3:36:c7:d7: 2d:6c:9e:4f:64:f8:cd:b9:65:2a:ea:82:4e:8b:7f:09:6e:61: a5:b1:f6:da:dc:02:9a:0e:bd:47:3e:99:90:5a:84:17:72:d1: 3f:22:c4:f5:6e:d8:93:56:c5:c7:c8:44:81:6b:14:4c:f4:ed: 88:90:2e:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURlpoxtBHG7XrkK+3u3hb8aR+26MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEyOTM0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjZkYTIzYWIwYzZmYWI1NmFmY2NkZTU1YzUxOWMyYTQ3 NDA5MmMzOTZkN2VjNjM2NTk1OWJhMmM1ZDA5M2RiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0RaEYmqk7xd7d96Gb69/1GphhwtxXT+kEm3moSQ6B1E6i rcoanPlsbNW+sA07NziRvcY6akE86zSbz1iVpJZvlE5jvdsvUcwv9n49WBv3K1Ri BMtcL0S5nEXErDBEG/QNxnAFGSNZLd8CzUNJmaH5f13mS1Ou2P1lUYgHW9sM1QCx oYP/4h2f/pYBQuTagRiU6yddLiwrW0gBqwjonrLOX7pe9BV+qczQJi26I7u65YtE Xs9Ts1j0bnBCeeOLejRQQ0fWQuijRoAwwRpp9AwCGcDGE0XzlysiW3YD8b5hb542 V4U6TEZzDVlR8lGe3Wut/lm7ppHHrAR/xyt7m93JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlXR95XZ9JkDwC2e0cX3RIxkvvDYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyYjI2ODhmLWZjM2QtNGNmZS05NDgwLWFhNDAzY2MxOWY0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDqSgwDQYJKoZIhvcNAQELBQADggEBAKwFwoa9FM1Z/t1KOQbePp6P+ynS kK7yseRGsB1ZDb9PWIbGq1eXiUKxf/CnBA7fDqF1pHHnGyYnn9e/crRvpcdf42zK rfIcsM4gpNIX/1QAJMS6yFVFmxwwKPOH/UIQxR9ENAMdQ3wGgqxgHXUyI4xowChA Zi6Qi7w5EJF6fHJ0v5hZIq42GRFWVPKL9p539eJa6QYWEWA85AsD5xoWsSHi9AA1 FZibvJ/jgW7h7MRnVoVuHmDNqEB3Atka65NCdG+Y0zbH1y1snk9k+M25ZSrqgk6L fwluYaWx9trcApoOvUc+mZBahBdy0T8ixPVu2JNWxcfIRIFrFEz07YiQLsE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:02:00 2025 by rpki-client