$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e409405d-9503-4b42-9879-514ebc65b290.roa File: e409405d-9503-4b42-9879-514ebc65b290.roa (raw, json) Hash identifier: C6BPjA/pV4WbagM9CauCWdnWTX2biS5aLKn8PJV1d2o= Subject key identifier: 68:17:B8:FD:71:45:2D:FC:4A:EB:0E:51:21:A3:0C:3E:30:65:26:15 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6999F90292EB4D6656A0816121EC5FA00A95546C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e409405d-9503-4b42-9879-514ebc65b290.roa Signing time: Thu 25 Sep 2025 19:39:56 +0000 ROA not before: Thu 25 Sep 2025 19:39:56 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.169.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:99:f9:02:92:eb:4d:66:56:a0:81:61:21:ec:5f:a0:0a:95:54:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:39:56 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=901545c963cb6bc747301c7cda74da7b1920b41f02bed6694eab15ca2d7162b0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:dd:87:f6:ad:3a:ed:b2:64:08:87:79:89: 11:be:c1:47:1f:37:57:b0:e4:20:85:96:76:bb:ca: 4e:de:3b:ea:f5:80:ff:dd:f2:b1:52:37:59:fb:5e: f5:27:88:3e:ce:66:94:89:cf:8c:ab:5e:aa:07:b1: 74:1f:d8:de:71:7c:54:68:fa:44:f3:6c:18:50:37: 53:a3:d5:6d:f2:0a:39:8a:61:27:9d:5b:57:f0:52: 60:4f:b8:19:61:29:f3:dd:79:c4:0c:dd:66:71:b9: e1:17:d4:87:55:c5:ce:aa:bc:d5:29:1c:3c:df:bb: b8:c5:f5:1b:f6:d6:74:42:f1:40:67:02:a5:a2:a9: fc:b5:f2:5d:d6:93:01:4b:55:ed:3e:0a:54:98:17: 76:71:db:d1:30:a9:96:4c:fb:f6:5c:e9:58:a7:16: e9:dc:25:21:fe:7d:6d:92:20:2e:77:ea:f2:e8:c7: 9d:aa:3a:28:78:51:75:eb:a2:7f:3e:54:fa:2f:57: db:b2:e3:a6:a1:a1:cb:39:5f:d3:4e:46:f4:f6:07: ed:b3:31:ca:50:ae:69:92:d9:f0:7a:39:fe:19:36: 75:ff:bd:87:29:6c:d2:20:eb:57:d2:71:04:79:f9: 23:e4:8e:3e:ff:54:5b:72:80:fb:96:f8:ad:af:6f: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:17:B8:FD:71:45:2D:FC:4A:EB:0E:51:21:A3:0C:3E:30:65:26:15 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e409405d-9503-4b42-9879-514ebc65b290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.169.38.0/24 Signature Algorithm: sha256WithRSAEncryption ac:12:fa:7b:48:5e:81:3b:4c:0f:37:75:60:1d:e4:0f:1f:b5: 46:e2:2b:0d:d5:95:ac:50:7f:f5:34:d2:cb:90:4b:dd:41:20: c9:a3:97:3d:b3:4d:0d:b4:13:a6:20:9f:05:b4:cf:53:83:c0: 78:13:bf:8a:89:21:59:49:e6:03:09:67:d8:1f:2c:5c:33:74: 2e:05:3c:db:96:29:3d:2b:d4:30:21:cb:f7:b4:6d:48:fe:68: 23:ea:0e:b7:71:38:a0:ff:d9:42:e2:2b:da:2d:7f:63:fc:93: 26:b8:00:10:a0:f5:bb:8f:d5:24:25:81:7b:ba:ce:b8:07:56: 1a:9d:65:a6:10:16:8c:69:e1:4a:82:9b:b9:9a:b4:aa:82:e4: 18:09:6b:1a:0f:91:42:5d:eb:52:a3:0e:c9:27:e5:01:76:2f: 56:e7:cc:76:5b:19:83:40:c0:79:b5:2f:e4:a0:fe:32:db:56: 21:f3:a4:50:27:12:c6:41:ed:53:72:b3:0d:d9:02:93:14:2d: 29:fc:d4:48:db:9f:3b:de:ab:87:d9:50:5b:51:b4:4d:80:19: 5c:da:0b:d2:dd:a2:91:7b:46:0f:96:8b:20:fb:2b:e2:bf:4f: d9:6e:78:14:44:58:43:61:c0:98:9f:ca:13:53:34:c2:0c:b0: 28:12:16:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaZn5ApLrTWZWoIFhIexfoAqVVGwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkzOTU2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDE1NDVjOTYzY2I2YmM3NDczMDFjN2NkYTc0ZGE3YjE5 MjBiNDFmMDJiZWQ2Njk0ZWFiMTVjYTJkNzE2MmIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1S92H9q067bJkCId5iRG+wUcfN1ew5CCFlna7yk7eO+r1 gP/d8rFSN1n7XvUniD7OZpSJz4yrXqoHsXQf2N5xfFRo+kTzbBhQN1Oj1W3yCjmK YSedW1fwUmBPuBlhKfPdecQM3WZxueEX1IdVxc6qvNUpHDzfu7jF9Rv21nRC8UBn AqWiqfy18l3WkwFLVe0+ClSYF3Zx29EwqZZM+/Zc6VinFuncJSH+fW2SIC536vLo x52qOih4UXXron8+VPovV9uy46ahocs5X9NORvT2B+2zMcpQrmmS2fB6Of4ZNnX/ vYcpbNIg61fScQR5+SPkjj7/VFtygPuW+K2vb3irAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaBe4/XFFLfxK6w5RIaMMPjBlJhUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U0MDk0MDVkLTk1MDMtNGI0Mi05ODc5LTUxNGViYzY1YjI5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqSYwDQYJKoZIhvcNAQELBQADggEBAKwS+ntIXoE7TA83dWAd5A8ftUbi Kw3VlaxQf/U00suQS91BIMmjlz2zTQ20E6YgnwW0z1ODwHgTv4qJIVlJ5gMJZ9gf LFwzdC4FPNuWKT0r1DAhy/e0bUj+aCPqDrdxOKD/2ULiK9otf2P8kya4ABCg9buP 1SQlgXu6zrgHVhqdZaYQFoxp4UqCm7matKqC5BgJaxoPkUJd61KjDskn5QF2L1bn zHZbGYNAwHm1L+Sg/jLbViHzpFAnEsZB7VNysw3ZApMULSn81Ejbnzveq4fZUFtR tE2AGVzaC9LdopF7Rg+WiyD7K+K/T9lueBREWENhwJifyhNTNMIMsCgSFmo= -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:56 2025 by rpki-client