$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/234213fd-431c-4840-aea2-4e57588af112.roa File: 234213fd-431c-4840-aea2-4e57588af112.roa (raw, json) Hash identifier: im5C1o0oP3bd0+o9kn4/bz4ewdGvXgAplGFoy8LwHNY= Subject key identifier: CC:BA:A6:6C:17:2F:E2:B5:89:DB:E8:B1:A5:D2:5A:CF:CF:71:C1:5C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 787C8C9BC5043E5D95A21616457305125C3A6D62 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/234213fd-431c-4840-aea2-4e57588af112.roa Signing time: Tue 21 Oct 2025 02:02:30 +0000 ROA not before: Tue 21 Oct 2025 02:02:30 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.175.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7c:8c:9b:c5:04:3e:5d:95:a2:16:16:45:73:05:12:5c:3a:6d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 02:02:30 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=cca77bb3657a08de6793081719fc4d6d0b80025ccd55570c12d849e37a1f98f3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:5e:03:3f:c0:1c:f0:f5:d4:73:a6:1e:b4: 52:50:9d:ed:e9:37:4c:bc:92:e7:b1:62:ea:8a:da: 2c:2d:ff:e7:9e:9f:99:ec:8c:d0:ea:0f:be:1f:83: 7f:7e:85:a5:6e:e5:5a:33:9b:3a:d5:56:1e:1e:34: 95:1c:88:20:8a:49:a3:c0:c8:c0:f5:51:cb:6d:45: fd:6e:8b:bf:02:ba:47:9c:82:9a:fe:1d:9d:30:87: 9f:3c:19:77:ec:94:8e:75:75:19:c4:0f:89:7c:70: 35:7d:37:9e:57:ed:80:ee:58:ca:f2:45:7b:8b:1f: ce:33:dc:ae:7e:3e:8a:bb:7c:d4:4f:60:22:c8:ea: ea:75:fd:26:3f:c7:b9:d0:48:be:4e:eb:f9:5a:3e: 7b:2a:d0:2d:e2:00:15:87:fe:e9:b3:00:53:0a:fb: c1:a5:7d:28:97:44:c7:c1:0e:90:91:4f:a1:45:08: 4f:c6:62:15:27:67:78:da:f9:7b:41:47:3e:d7:5b: 85:10:20:db:27:8a:76:f3:d1:e2:9c:81:f2:4b:de: e0:b1:66:c1:a6:ea:bd:a9:98:f7:e7:c2:d2:df:1e: 09:81:c4:2c:a8:50:23:25:2c:99:6e:a4:55:da:4d: 38:3c:88:ef:2f:6e:22:da:dd:dd:dc:e1:7c:86:f7: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BA:A6:6C:17:2F:E2:B5:89:DB:E8:B1:A5:D2:5A:CF:CF:71:C1:5C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/234213fd-431c-4840-aea2-4e57588af112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.175.64.0/20 Signature Algorithm: sha256WithRSAEncryption 82:a7:bd:9f:be:bd:e8:42:b9:c6:d9:18:39:16:df:9e:d3:4d: cb:3e:04:4a:33:c5:08:92:cd:e3:6c:80:22:0e:95:5d:3c:45: dd:b3:8c:22:9c:b7:37:1c:25:8f:4c:62:4a:f8:3b:41:16:70: 17:f6:64:97:1a:48:74:0d:9d:f0:18:31:ed:ad:53:61:d6:6b: 27:01:e6:36:84:7b:dd:f8:72:ba:03:52:35:78:33:a0:21:73: 16:41:6b:81:d3:38:a0:e4:01:e4:d6:74:bf:62:e7:f9:92:8c: e8:d5:c6:f7:ac:be:60:d1:a9:f3:31:41:c9:10:fc:02:88:ef: d8:60:1b:4f:8f:78:28:32:84:58:32:1b:4e:63:ed:26:bd:20: d0:a3:e7:30:56:f2:22:d9:06:77:24:d6:48:51:b9:9f:9f:ac: 6c:7c:47:90:9a:2d:7a:29:1d:2e:ce:1e:79:f6:de:61:ef:32: ed:f4:a7:5a:3b:57:c6:8f:84:1a:c0:72:39:e2:86:7f:23:56: b8:90:60:78:cf:f2:f1:03:0e:74:ec:26:89:c5:5b:9d:ef:5f: 78:5b:6c:d0:4a:8f:a5:15:ce:42:ea:a4:27:97:9a:47:df:11: b7:21:80:65:e7:13:bb:f8:29:ef:e6:b0:aa:92:3f:2f:9a:d6: 3b:59:46:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeHyMm8UEPl2VohYWRXMFElw6bWIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDIwMjMwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjY2E3N2JiMzY1N2EwOGRlNjc5MzA4MTcxOWZjNGQ2ZDBi ODAwMjVjY2Q1NTU3MGMxMmQ4NDllMzdhMWY5OGYzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE7V4DP8Ac8PXUc6YetFJQne3pN0y8kuexYuqK2iwt/+ee n5nsjNDqD74fg39+haVu5VozmzrVVh4eNJUciCCKSaPAyMD1UcttRf1ui78Cukec gpr+HZ0wh588GXfslI51dRnED4l8cDV9N55X7YDuWMryRXuLH84z3K5+Poq7fNRP YCLI6up1/SY/x7nQSL5O6/laPnsq0C3iABWH/umzAFMK+8GlfSiXRMfBDpCRT6FF CE/GYhUnZ3ja+XtBRz7XW4UQINsninbz0eKcgfJL3uCxZsGm6r2pmPfnwtLfHgmB xCyoUCMlLJlupFXaTTg8iO8vbiLa3d3c4XyG93vdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzLqmbBcv4rWJ2+ixpdJaz89xwVwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIzNDIxM2ZkLTQzMWMtNDg0MC1hZWEyLTRlNTc1ODhhZjExMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDr0AwDQYJKoZIhvcNAQELBQADggEBAIKnvZ++vehCucbZGDkW357TTcs+ BEozxQiSzeNsgCIOlV08Rd2zjCKctzccJY9MYkr4O0EWcBf2ZJcaSHQNnfAYMe2t U2HWaycB5jaEe934croDUjV4M6AhcxZBa4HTOKDkAeTWdL9i5/mSjOjVxvesvmDR qfMxQckQ/AKI79hgG0+PeCgyhFgyG05j7Sa9INCj5zBW8iLZBnck1khRuZ+frGx8 R5CaLXopHS7OHnn23mHvMu30p1o7V8aPhBrAcjnihn8jVriQYHjP8vEDDnTsJonF W53vX3hbbNBKj6UVzkLqpCeXmkffEbchgGXnE7v4Ke/msKqSPy+a1jtZRow= -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:26 2025 by rpki-client