$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa7b617a-db3f-404f-bf67-1a303c274396.roa File: fa7b617a-db3f-404f-bf67-1a303c274396.roa (raw, json) Hash identifier: Xu8ALFM59WQAxj0UOLm6Ap8A+7jua6nw4kYXtnRuZng= Subject key identifier: CF:5C:48:D6:C9:77:CB:0A:01:51:6C:72:AD:45:6E:86:AA:0A:37:67 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 61898C8C0B7C0D29186B6E5A1AD8080A794CFF51 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa7b617a-db3f-404f-bf67-1a303c274396.roa Signing time: Fri 26 Sep 2025 02:15:02 +0000 ROA not before: Fri 26 Sep 2025 02:15:02 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.171.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:89:8c:8c:0b:7c:0d:29:18:6b:6e:5a:1a:d8:08:0a:79:4c:ff:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:15:02 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=33c57926241f91f1c82c1068e2f61c82a089418b38edb540fa2c433a71ce90db, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:2a:d2:21:c5:ef:20:a1:f5:a8:76:4c:5f: 9a:cf:c0:dc:68:32:c6:a0:32:33:8b:57:88:6b:eb: 5e:69:75:5f:df:81:09:4e:6f:86:6a:95:38:73:be: 1f:eb:d4:d8:8f:fc:47:82:97:74:49:4f:5f:8f:dd: 85:5a:03:07:a1:14:af:09:b7:3e:b9:21:f4:77:45: a3:5a:df:96:a9:ac:6e:39:ab:da:db:81:2b:1b:a6: 6b:1a:6f:6e:bc:60:63:9d:45:07:2c:ce:13:07:d5: 81:c9:7f:79:29:fe:0d:90:5f:b9:3f:6f:a5:dc:4d: 5e:16:2d:f6:2f:d2:d8:a5:3f:09:23:15:d2:e2:5f: 8a:e5:f9:2b:21:33:bb:67:5f:9a:27:e8:69:1c:46: 5b:b2:89:d2:8a:81:b4:ac:fe:aa:b3:4a:ed:a4:24: c9:45:9c:f1:47:c2:52:4a:ac:89:5b:44:00:f3:2c: 2e:9e:d2:95:1d:fb:13:6c:8d:82:a7:df:56:b8:b0: 7d:e7:11:58:ea:7f:d2:f5:0e:db:f0:b3:11:b2:8a: ec:a0:d0:3d:17:27:e8:83:3b:da:d8:8d:ac:21:36: be:fc:2d:55:86:42:cc:34:90:74:a4:b2:e0:83:3c: 03:6c:1b:33:c2:c5:1d:1f:7d:0b:c1:69:4e:36:5a: dc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5C:48:D6:C9:77:CB:0A:01:51:6C:72:AD:45:6E:86:AA:0A:37:67 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa7b617a-db3f-404f-bf67-1a303c274396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.171.64.0/18 Signature Algorithm: sha256WithRSAEncryption 59:a0:40:c7:8c:5d:3e:de:5d:cd:49:c9:d4:e1:86:f8:79:f9: 30:35:10:d1:83:f0:5c:ed:6b:c9:25:62:7c:5b:39:d6:9f:ba: 34:fd:43:75:24:a8:f2:4c:a3:7c:aa:81:8b:8a:f1:e6:e0:5e: 1e:01:ad:ce:a7:6c:6d:da:3b:e5:b7:28:72:91:02:2a:fb:77: e3:70:02:06:fb:18:a0:ec:a8:94:c2:27:69:03:60:50:ee:9f: c1:5b:f8:04:85:35:6c:11:7c:84:e9:cb:7c:c8:30:42:9a:aa: 8e:e4:de:77:17:50:66:3b:45:c9:89:51:14:01:af:c9:06:71: b0:cc:54:a8:35:e4:36:77:bd:7d:a3:2c:02:41:a1:fe:bd:de: e9:23:60:4c:24:8a:97:ba:29:fc:e3:ab:45:1b:4d:ae:e0:8b: ab:93:e4:5f:c1:cd:86:2d:77:34:7c:b8:89:b0:c7:40:4c:57: a6:ea:2f:29:ae:d0:fc:71:e1:05:80:26:ff:f8:b3:a0:24:89: 32:7c:cf:93:65:fa:c1:a3:4c:c1:84:8a:b6:49:d5:46:45:ec: 8a:27:de:dd:b2:e7:54:89:10:10:74:13:5b:fe:ce:28:b0:17: af:31:a9:72:a8:74:3a:a5:99:ac:61:c4:bb:f4:dd:d8:b5:35: f9:c7:66:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYYmMjAt8DSkYa25aGtgICnlM/1EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIxNTAyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2M1NzkyNjI0MWY5MWYxYzgyYzEwNjhlMmY2MWM4MmEw ODk0MThiMzhlZGI1NDBmYTJjNDMzYTcxY2U5MGRiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF3yrSIcXvIKH1qHZMX5rPwNxoMsagMjOLV4hr615pdV/f gQlOb4ZqlThzvh/r1NiP/EeCl3RJT1+P3YVaAwehFK8Jtz65IfR3RaNa35aprG45 q9rbgSsbpmsab268YGOdRQcszhMH1YHJf3kp/g2QX7k/b6XcTV4WLfYv0tilPwkj FdLiX4rl+SshM7tnX5on6GkcRluyidKKgbSs/qqzSu2kJMlFnPFHwlJKrIlbRADz LC6e0pUd+xNsjYKn31a4sH3nEVjqf9L1DtvwsxGyiuyg0D0XJ+iDO9rYjawhNr78 LVWGQsw0kHSksuCDPANsGzPCxR0ffQvBaU42WtzfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUz1xI1sl3ywoBUWxyrUVuhqoKN2cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZhN2I2MTdhLWRiM2YtNDA0Zi1iZjY3LTFhMzAzYzI3NDM5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYDq0AwDQYJKoZIhvcNAQELBQADggEBAFmgQMeMXT7eXc1JydThhvh5+TA1 ENGD8Fzta8klYnxbOdafujT9Q3UkqPJMo3yqgYuK8ebgXh4Brc6nbG3aO+W3KHKR Air7d+NwAgb7GKDsqJTCJ2kDYFDun8Fb+ASFNWwRfITpy3zIMEKaqo7k3ncXUGY7 RcmJURQBr8kGcbDMVKg15DZ3vX2jLAJBof693ukjYEwkipe6Kfzjq0UbTa7gi6uT 5F/BzYYtdzR8uImwx0BMV6bqLymu0Pxx4QWAJv/4s6AkiTJ8z5Nl+sGjTMGEirZJ 1UZF7Ion3t2y51SJEBB0E1v+ziiwF68xqXKodDqlmaxhxLv03di1NfnHZt0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:21:10 2025 by rpki-client