$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8229cee-e3b4-4c22-8a5a-905277f9fcbe.roa File: e8229cee-e3b4-4c22-8a5a-905277f9fcbe.roa (raw, json) Hash identifier: 79+d3kWN8SXZkB1YYZf/NBnjWVMc1bKHMfl8cjih6v4= Subject key identifier: FA:C0:6D:AD:6B:F1:26:E3:AD:4E:71:2B:F1:F2:43:2E:8A:51:21:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2047D7BC4A2EC364D4AEA2A320919F2AF8975AB6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8229cee-e3b4-4c22-8a5a-905277f9fcbe.roa Signing time: Mon 20 Oct 2025 08:13:33 +0000 ROA not before: Mon 20 Oct 2025 08:13:33 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:47:d7:bc:4a:2e:c3:64:d4:ae:a2:a3:20:91:9f:2a:f8:97:5a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 08:13:33 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=0e486ffa752554f3e98eb169d01a72e820396ff41d4dd9ac61a67427730d13f5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1d:52:4f:e3:1b:f6:b3:46:93:0d:ee:9e:64: 30:40:a5:3a:ee:d2:26:fe:94:25:35:8d:65:79:4e: 47:e5:ef:d9:8b:d7:62:6a:cb:f3:91:47:7e:a6:95: 1e:01:14:27:76:4d:e2:ce:4c:b7:7e:84:4c:36:4a: 8c:55:8a:3e:d8:27:91:1a:2e:04:0a:22:0e:64:db: be:52:35:44:56:9a:b3:a7:4d:dd:d6:9f:de:61:c1: d5:f8:aa:32:30:3d:6b:37:2b:61:df:5b:20:ea:91: 54:cc:58:99:83:e8:ad:39:bf:e0:2c:8b:a5:b2:c5: a4:f6:9a:39:1a:b0:36:eb:53:13:c6:70:ea:4c:9e: 1f:db:57:d6:ed:09:49:45:fd:09:23:4c:1e:93:e3: 08:f5:87:3d:a1:d8:55:54:90:69:83:c6:a6:f7:f7: 72:9a:f1:0f:a5:99:73:f0:d2:fe:4f:fe:4a:e7:d6: 0f:af:0b:f2:09:d4:e1:b6:1b:50:97:8e:e0:de:c8: 06:8d:bf:f6:90:b4:01:74:f3:6c:9e:6a:5b:ee:0b: 7c:00:7a:06:56:f4:9a:3c:03:4b:0e:45:52:83:34: 01:f0:6d:40:84:87:d4:a9:63:4e:ea:5b:1b:18:17: c6:49:37:ab:e5:42:36:34:f1:6a:23:84:fa:81:07: 97:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C0:6D:AD:6B:F1:26:E3:AD:4E:71:2B:F1:F2:43:2E:8A:51:21:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8229cee-e3b4-4c22-8a5a-905277f9fcbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.111.0/24 Signature Algorithm: sha256WithRSAEncryption 93:b5:cf:33:13:cb:2d:10:94:4f:81:1a:ff:5e:58:d8:1e:58: c2:f6:16:de:be:ca:9f:69:f0:50:ec:26:ab:ed:93:67:11:5d: 97:8d:81:45:b2:2b:61:2e:b4:c0:82:25:99:e8:fd:ab:d6:fb: 72:88:98:50:ab:b9:51:53:de:2c:3e:51:e3:99:04:30:88:b6: bc:37:4c:99:8a:3c:d2:17:f1:48:46:71:95:69:bf:cb:8e:5d: 3b:bd:c4:b6:a3:f7:20:4c:3a:c5:03:a3:97:04:87:da:15:7b: 55:34:67:a8:06:38:ca:4d:d9:59:8a:37:a2:87:dc:9a:b9:17: 1f:2b:d9:94:14:e7:ce:94:63:32:ab:27:9e:75:9d:73:b2:46: e7:a0:11:e0:b8:02:61:0a:43:fa:cd:53:44:a6:15:e4:89:1c: 19:fe:ea:e0:be:ef:1a:08:23:05:03:2d:23:b8:90:7d:36:57: a1:e2:9f:08:a0:02:cb:dc:71:56:74:2a:50:81:ed:6f:04:d8: 58:95:57:ab:75:a3:74:ff:a7:06:a5:b5:05:90:1d:64:41:52: 82:dc:79:1a:82:16:41:2f:6c:27:17:80:f3:14:47:0d:96:05: ec:24:b5:cd:19:21:24:f1:f3:12:7e:c3:b7:15:96:56:4e:ee: 58:33:5e:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIEfXvEouw2TUrqKjIJGfKviXWrYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMDgxMzMzWhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTQ4NmZmYTc1MjU1NGYzZTk4ZWIxNjlkMDFhNzJlODIw Mzk2ZmY0MWQ0ZGQ5YWM2MWE2NzQyNzczMGQxM2Y1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUHVJP4xv2s0aTDe6eZDBApTru0ib+lCU1jWV5Tkfl79mL 12Jqy/ORR36mlR4BFCd2TeLOTLd+hEw2SoxVij7YJ5EaLgQKIg5k275SNURWmrOn Td3Wn95hwdX4qjIwPWs3K2HfWyDqkVTMWJmD6K05v+Asi6WyxaT2mjkasDbrUxPG cOpMnh/bV9btCUlF/QkjTB6T4wj1hz2h2FVUkGmDxqb393Ka8Q+lmXPw0v5P/krn 1g+vC/IJ1OG2G1CXjuDeyAaNv/aQtAF082yealvuC3wAegZW9Jo8A0sORVKDNAHw bUCEh9SpY07qWxsYF8ZJN6vlQjY08WojhPqBB5epAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+sBtrWvxJuOtTnEr8fJDLopRIaMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U4MjI5Y2VlLWUzYjQtNGMyMi04YTVhLTkwNTI3N2Y5ZmNiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqm8wDQYJKoZIhvcNAQELBQADggEBAJO1zzMTyy0QlE+BGv9eWNgeWML2 Ft6+yp9p8FDsJqvtk2cRXZeNgUWyK2EutMCCJZno/avW+3KImFCruVFT3iw+UeOZ BDCItrw3TJmKPNIX8UhGcZVpv8uOXTu9xLaj9yBMOsUDo5cEh9oVe1U0Z6gGOMpN 2VmKN6KH3Jq5Fx8r2ZQU586UYzKrJ551nXOyRuegEeC4AmEKQ/rNU0SmFeSJHBn+ 6uC+7xoIIwUDLSO4kH02V6HinwigAsvccVZ0KlCB7W8E2FiVV6t1o3T/pwaltQWQ HWRBUoLceRqCFkEvbCcXgPMURw2WBewktc0ZISTx8xJ+w7cVllZO7lgzXoY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:15 2025 by rpki-client