$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de86537b-bef9-478c-9f6f-28b562af09a1.roa File: de86537b-bef9-478c-9f6f-28b562af09a1.roa (raw, json) Hash identifier: vcGCaDDj7xrht5uhXeVbWM1CrUlz5H5VoDDl2tFVCvw= Subject key identifier: B5:FE:94:CB:C1:2C:F7:C6:48:01:24:8A:7A:FB:2D:D7:74:5C:EC:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 47170AC1425EDD492AF591C4AF21EAEE3694EE70 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de86537b-bef9-478c-9f6f-28b562af09a1.roa Signing time: Fri 26 Sep 2025 01:32:34 +0000 ROA not before: Fri 26 Sep 2025 01:32:34 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:17:0a:c1:42:5e:dd:49:2a:f5:91:c4:af:21:ea:ee:36:94:ee:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:32:34 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=9f05fd45b474ed6fe8738bd1debead90b9ba05d1efd95e3cad965705d2834a03, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:79:0a:e1:eb:01:5a:d6:2f:10:bc:89:32: 19:c8:02:68:d8:e9:0e:05:d6:c5:58:f8:a9:50:ba: cb:03:03:7d:4e:62:5c:b5:c2:41:dc:3b:f9:3c:1c: db:4e:c9:5e:29:b7:dd:c5:22:20:c2:e2:af:75:a3: 52:ef:c0:bc:35:1f:71:4b:93:fc:e5:53:89:05:e1: 69:76:06:c6:90:7d:50:5f:b5:40:18:6e:00:5f:ed: 05:63:b3:32:97:5a:78:57:b6:5d:3b:db:12:1b:d4: a4:ff:47:3e:e3:e5:c1:71:db:56:82:2e:37:47:c4: e9:1f:8b:ed:36:38:04:6b:76:b2:71:c6:02:f4:66: 2b:c5:02:7a:7a:5f:99:d6:a6:aa:cf:df:e9:db:9b: 88:78:dc:05:8f:70:34:0b:7b:e1:92:7e:c9:3e:21: ef:12:f9:f3:f0:f9:21:1b:81:3f:c1:bb:2d:1d:5a: 78:b8:6f:bd:a6:2b:74:f6:11:25:d9:13:b1:6f:63: 6a:b8:e1:7a:55:14:fb:72:e5:8e:ee:88:57:6b:d9: 69:76:e7:24:fa:27:45:21:94:68:e0:13:19:20:c7: 5c:b1:f0:c8:76:58:8a:ff:25:03:3c:56:8f:71:c7: 30:a3:4f:e7:b5:9e:c3:fb:79:6b:ec:0d:f6:67:56: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FE:94:CB:C1:2C:F7:C6:48:01:24:8A:7A:FB:2D:D7:74:5C:EC:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de86537b-bef9-478c-9f6f-28b562af09a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.80.0/21 Signature Algorithm: sha256WithRSAEncryption 14:a8:fe:41:24:4f:39:2f:d5:bb:43:17:f9:92:d1:68:cf:db: 97:eb:52:8a:6a:a3:dc:71:b5:05:1b:6f:bf:9c:1a:3b:da:30: c4:ff:33:59:e2:3a:5b:ab:03:53:b5:10:d9:0f:91:89:53:35: c2:e7:bd:65:57:71:61:d5:78:e4:84:c5:74:b4:15:cd:55:3b: 86:c0:46:b4:73:ec:d5:22:e7:04:79:0a:14:cf:49:54:e3:73: 35:78:8d:e7:9c:45:6a:07:d0:66:05:e0:48:58:0f:47:0e:ee: 74:04:ce:6a:74:75:60:76:e6:87:a6:7c:13:20:cc:18:e9:0e: 8f:c3:44:be:17:19:fd:39:80:4e:ec:bb:09:df:8c:a1:ae:10: ca:94:cc:5c:69:19:34:d7:0b:de:20:3a:a3:d2:5f:02:01:95: 70:90:c3:6d:70:4a:41:2d:f7:b7:c4:9c:a8:a8:4f:d6:87:f2: 6f:b4:66:4c:02:9c:7f:73:b6:1c:52:38:0e:14:4a:0d:d9:7b: a1:91:0f:9c:e4:e0:ec:03:93:1f:9f:ab:20:fd:d0:78:f3:86: 5f:38:bf:49:ee:a3:42:ef:68:7d:5a:58:22:c8:c7:8c:e3:7b: 3c:60:ba:ca:00:05:64:69:42:89:78:f2:54:86:20:86:57:1a: 5b:9f:64:f5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURxcKwUJe3Ukq9ZHEryHq7jaU7nAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDEzMjM0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjA1ZmQ0NWI0NzRlZDZmZTg3MzhiZDFkZWJlYWQ5MGI5 YmEwNWQxZWZkOTVlM2NhZDk2NTcwNWQyODM0YTAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVnnkK4esBWtYvELyJMhnIAmjY6Q4F1sVY+KlQussDA31O Yly1wkHcO/k8HNtOyV4pt93FIiDC4q91o1LvwLw1H3FLk/zlU4kF4Wl2BsaQfVBf tUAYbgBf7QVjszKXWnhXtl072xIb1KT/Rz7j5cFx21aCLjdHxOkfi+02OARrdrJx xgL0ZivFAnp6X5nWpqrP3+nbm4h43AWPcDQLe+GSfsk+Ie8S+fPw+SEbgT/Buy0d Wni4b72mK3T2ESXZE7FvY2q44XpVFPty5Y7uiFdr2Wl25yT6J0UhlGjgExkgx1yx 8Mh2WIr/JQM8Vo9xxzCjT+e1nsP7eWvsDfZnVpiPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtf6Uy8Es98ZIASSKevst13Rc7NAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RlODY1MzdiLWJlZjktNDc4Yy05ZjZmLTI4YjU2MmFmMDlhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDq1AwDQYJKoZIhvcNAQELBQADggEBABSo/kEkTzkv1btDF/mS0WjP25fr Uopqo9xxtQUbb7+cGjvaMMT/M1niOlurA1O1ENkPkYlTNcLnvWVXcWHVeOSExXS0 Fc1VO4bARrRz7NUi5wR5ChTPSVTjczV4jeecRWoH0GYF4EhYD0cO7nQEzmp0dWB2 5oemfBMgzBjpDo/DRL4XGf05gE7suwnfjKGuEMqUzFxpGTTXC94gOqPSXwIBlXCQ w21wSkEt97fEnKioT9aH8m+0ZkwCnH9zthxSOA4USg3Ze6GRD5zk4OwDkx+fqyD9 0Hjzhl84v0nuo0LvaH1aWCLIx4zjezxgusoABWRpQol48lSGIIZXGlufZPU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:31 2025 by rpki-client