$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9bfa58d-cfbf-49a0-a757-1d0be03ef66e.roa File: f9bfa58d-cfbf-49a0-a757-1d0be03ef66e.roa (raw, json) Hash identifier: KkfO3skmXUhH1FP3QPOO4/vS8Va6U0qlhr5cShQf7H0= Subject key identifier: DD:13:4A:C9:67:9D:69:C5:1B:27:C3:89:D4:15:67:36:42:BB:1B:AF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3DDC156E5D7D5F38910992542FD7AC29C29DE16A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9bfa58d-cfbf-49a0-a757-1d0be03ef66e.roa Signing time: Fri 26 Sep 2025 00:53:30 +0000 ROA not before: Fri 26 Sep 2025 00:53:30 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:dc:15:6e:5d:7d:5f:38:91:09:92:54:2f:d7:ac:29:c2:9d:e1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:53:30 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=5a03b702df02a90a878cd9bc09a927d91a6a48bfbbf21d4793b1531b5eecb227, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:6b:b4:b8:d9:91:ba:46:2e:b6:ff:3d:e0: 69:2a:8a:dd:58:03:ee:b3:58:ea:59:9b:68:9c:df: 45:b7:1e:79:37:66:1f:53:b0:e1:a4:47:98:b3:9b: 4b:75:b5:dc:f4:ea:cb:bb:e1:58:0e:40:c4:98:61: e6:39:3e:bd:0d:20:d0:69:6c:36:a7:91:3b:03:33: 1d:f5:33:7b:34:70:99:50:76:12:a4:a5:77:0b:b1: 57:71:88:1b:44:ff:e9:fd:dc:81:39:ac:52:b9:6d: 3b:ff:7c:80:6e:ac:51:b0:81:68:12:c6:71:bc:8a: e8:b5:2d:1a:05:8e:05:73:25:f3:52:46:93:c1:0a: 0a:4c:ac:59:15:03:b6:72:90:b1:ba:22:ae:14:90: ef:22:6d:c0:4a:b2:ee:64:de:8d:d0:6a:b1:85:b6: d2:48:59:73:58:eb:d3:d0:8a:08:b9:63:70:f5:35: a5:b3:ae:a5:de:e8:b2:97:8a:6d:66:b3:00:49:f0: ce:6f:e5:cc:29:3d:7f:d3:5c:c3:38:d1:6f:60:79: c6:40:4a:6b:2f:9f:f7:ac:2c:0a:d5:69:3d:25:a6: 81:89:d2:aa:28:3a:fe:95:ec:8e:4a:cf:20:fc:ec: 38:e3:e7:18:d4:2d:4c:2e:92:b8:e3:b8:5b:e2:89: 7b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:13:4A:C9:67:9D:69:C5:1B:27:C3:89:D4:15:67:36:42:BB:1B:AF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9bfa58d-cfbf-49a0-a757-1d0be03ef66e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.156.0/22 Signature Algorithm: sha256WithRSAEncryption 45:06:b6:12:1b:61:1f:f2:d1:5a:38:2c:66:e0:fe:96:29:c5: 7a:5c:51:b6:86:48:92:82:c4:33:50:8d:9e:01:ee:f4:ed:05: c2:32:3f:39:c1:f7:d6:06:56:6a:94:fa:0f:be:a7:3d:b9:a4: 90:b5:fc:a9:d8:80:b8:0a:e1:e0:f3:95:6b:37:e4:19:ce:f9: d6:e2:36:53:c3:ec:4c:3d:6e:0b:79:2e:81:39:2c:2f:d8:95: 5a:32:d6:c5:3e:15:69:3a:28:3d:db:34:6a:e0:3c:9c:9f:7a: e7:8f:c3:83:ca:22:0b:30:73:95:fc:e8:cb:2a:2b:4c:33:96: 1a:61:4d:61:3f:1d:d5:68:c7:0f:7f:d0:ec:45:27:49:f7:d6: 4a:af:95:fb:84:ca:5c:e1:96:78:a6:7a:bf:66:c5:71:5c:39: e6:44:9c:f0:11:a4:9e:5f:3e:ff:5f:f8:90:8f:77:29:31:de: c1:1f:c9:fa:86:07:51:61:29:dc:56:88:ae:88:25:05:f5:4d: 51:35:a9:21:55:2b:c1:b3:61:35:82:c0:4b:bd:16:f4:42:9b: b2:69:c4:96:0e:f8:ee:24:0e:81:bb:3a:d4:79:4f:5a:0e:50: ee:91:5f:0e:5b:96:b8:40:84:13:42:d5:33:b3:2d:ae:bf:cb: 3b:3e:8a:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPdwVbl19XziRCZJUL9esKcKd4WowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDA1MzMwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTAzYjcwMmRmMDJhOTBhODc4Y2Q5YmMwOWE5MjdkOTFh NmE0OGJmYmJmMjFkNDc5M2IxNTMxYjVlZWNiMjI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+bWu0uNmRukYutv894Gkqit1YA+6zWOpZm2ic30W3Hnk3 Zh9TsOGkR5izm0t1tdz06su74VgOQMSYYeY5Pr0NINBpbDankTsDMx31M3s0cJlQ dhKkpXcLsVdxiBtE/+n93IE5rFK5bTv/fIBurFGwgWgSxnG8iui1LRoFjgVzJfNS RpPBCgpMrFkVA7ZykLG6Iq4UkO8ibcBKsu5k3o3QarGFttJIWXNY69PQigi5Y3D1 NaWzrqXe6LKXim1mswBJ8M5v5cwpPX/TXMM40W9gecZASmsvn/esLArVaT0lpoGJ 0qooOv6V7I5KzyD87Djj5xjULUwukrjjuFviiXsFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3RNKyWedacUbJ8OJ1BVnNkK7G68wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y5YmZhNThkLWNmYmYtNDlhMC1hNzU3LTFkMGJlMDNlZjY2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDrZwwDQYJKoZIhvcNAQELBQADggEBAEUGthIbYR/y0Vo4LGbg/pYpxXpc UbaGSJKCxDNQjZ4B7vTtBcIyPznB99YGVmqU+g++pz25pJC1/KnYgLgK4eDzlWs3 5BnO+dbiNlPD7Ew9bgt5LoE5LC/YlVoy1sU+FWk6KD3bNGrgPJyfeuePw4PKIgsw c5X86MsqK0wzlhphTWE/HdVoxw9/0OxFJ0n31kqvlfuEylzhlnimer9mxXFcOeZE nPARpJ5fPv9f+JCPdykx3sEfyfqGB1FhKdxWiK6IJQX1TVE1qSFVK8GzYTWCwEu9 FvRCm7JpxJYO+O4kDoG7OtR5T1oOUO6RXw5blrhAhBNC1TOzLa6/yzs+ivs= -----END CERTIFICATE-----Generated at Mon Oct 20 15:46:36 2025 by rpki-client