$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f06510e-3477-4d8c-ab04-e3435000a697.roa File: 4f06510e-3477-4d8c-ab04-e3435000a697.roa (raw, json) Hash identifier: Sz0iPgZJ/+yvvb9pLDhQfEGdEASfhVItpf1+Ux7ujGs= Subject key identifier: AB:08:E5:CC:08:52:E7:2A:F9:73:09:57:16:6C:FD:3C:B8:3F:E8:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40287F94793C3D37E75C8BB8D4BF08818FAE8F94 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f06510e-3477-4d8c-ab04-e3435000a697.roa Signing time: Tue 21 Oct 2025 05:40:12 +0000 ROA not before: Tue 21 Oct 2025 05:40:12 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:28:7f:94:79:3c:3d:37:e7:5c:8b:b8:d4:bf:08:81:8f:ae:8f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 05:40:12 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=e1ef9d1c57191fc155b8afbf6c7a6a8ed4421e74eaa99fa8dd1db4cd260ae18f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5d:5a:6d:dd:43:b2:9f:34:f8:5a:8c:ce:75: dd:58:3a:89:a1:a6:97:e9:f4:fa:79:52:d0:68:cd: 0b:c9:ac:06:ba:0f:91:c0:95:1b:f0:f0:29:3e:99: cf:13:50:53:ca:ba:bb:56:c8:70:36:a5:40:93:92: f6:51:4b:88:ee:08:53:cd:c6:3f:cf:ef:c4:8b:a3: c7:de:b2:b8:9e:bf:34:1e:fc:f1:44:5d:12:d2:4b: f4:a5:d9:ce:91:da:7f:82:8b:d3:ee:d7:9a:39:e6: 12:37:e6:14:b6:a6:05:7a:b6:92:ba:9e:a5:17:16: c6:00:47:fa:0d:c6:78:49:42:66:ed:44:46:c3:2e: 1f:97:04:7a:76:6b:92:d4:98:b3:e6:95:5a:99:a0: e4:2c:56:b3:87:3a:ec:12:1c:29:43:aa:95:8f:d0: 0e:2d:97:be:62:9e:c5:3b:3c:97:43:fe:3d:6e:17: 32:65:d1:c5:bc:94:e5:05:82:30:c6:39:82:ae:bb: a4:07:e7:f2:b0:a8:05:ba:65:6c:24:31:8b:19:48: 85:95:6f:d5:ed:3c:82:02:1e:7e:2d:ac:8d:26:2b: 94:86:66:1b:cf:2a:f6:c4:7c:38:f0:63:b9:cc:bd: 4a:da:c5:ef:cf:ed:69:98:c3:8d:1b:0d:d7:68:31: 04:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:08:E5:CC:08:52:E7:2A:F9:73:09:57:16:6C:FD:3C:B8:3F:E8:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f06510e-3477-4d8c-ab04-e3435000a697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.192.0/18 Signature Algorithm: sha256WithRSAEncryption 9c:6e:7c:ee:5b:f6:87:d9:65:1c:61:aa:e7:90:8c:8f:24:58: e5:8a:8c:ba:82:d3:2d:9f:06:dc:03:56:db:54:44:2f:bb:d4: cd:ea:91:53:0c:93:79:41:ec:07:c9:de:01:ad:a3:58:19:66: cf:a8:9d:a0:43:e7:6f:db:6b:d3:ee:f1:5a:9b:b1:3b:62:90: d3:be:15:2a:c8:26:90:7d:d6:a1:d3:60:d4:ed:f4:49:cc:85: 04:6d:d8:2d:44:01:27:b6:e4:4a:6e:55:4f:73:e6:b0:92:db: 4b:72:70:ed:7d:bb:d3:ce:3d:99:03:e4:ab:aa:84:d4:dc:c3: ca:84:be:3c:2c:82:56:e3:8a:e7:68:4a:d2:9f:9a:1e:ef:7e: 50:d9:ec:f9:af:92:7e:5b:92:0d:1d:fa:db:59:f2:59:ff:36: b3:ad:43:84:91:b1:c6:78:6d:df:c1:33:bd:df:eb:61:60:1a: b6:e8:21:8e:a2:b0:16:c6:88:21:88:29:aa:eb:e1:9e:aa:ce: 16:f8:19:94:d7:96:97:ca:d5:01:72:23:1e:e2:35:7d:bc:72: c6:b5:ce:14:46:4c:a2:67:b7:65:06:90:3d:fa:5a:99:fe:5a: fe:15:09:5f:f0:c5:08:d6:7f:eb:34:e8:66:d3:1f:f8:ff:ba: 25:37:bb:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQCh/lHk8PTfnXIu41L8IgY+uj5QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDU0MDEyWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMWVmOWQxYzU3MTkxZmMxNTViOGFmYmY2YzdhNmE4ZWQ0 NDIxZTc0ZWFhOTlmYThkZDFkYjRjZDI2MGFlMThmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTXVpt3UOynzT4WozOdd1YOomhppfp9Pp5UtBozQvJrAa6 D5HAlRvw8Ck+mc8TUFPKurtWyHA2pUCTkvZRS4juCFPNxj/P78SLo8fesrievzQe /PFEXRLSS/Sl2c6R2n+Ci9Pu15o55hI35hS2pgV6tpK6nqUXFsYAR/oNxnhJQmbt REbDLh+XBHp2a5LUmLPmlVqZoOQsVrOHOuwSHClDqpWP0A4tl75insU7PJdD/j1u FzJl0cW8lOUFgjDGOYKuu6QH5/KwqAW6ZWwkMYsZSIWVb9XtPIICHn4trI0mK5SG ZhvPKvbEfDjwY7nMvUraxe/P7WmYw40bDddoMQSfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqwjlzAhS5yr5cwlXFmz9PLg/6BEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRmMDY1MTBlLTM0NzctNGQ4Yy1hYjA0LWUzNDM1MDAwYTY5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYDrcAwDQYJKoZIhvcNAQELBQADggEBAJxufO5b9ofZZRxhqueQjI8kWOWK jLqC0y2fBtwDVttURC+71M3qkVMMk3lB7AfJ3gGto1gZZs+onaBD52/ba9Pu8Vqb sTtikNO+FSrIJpB91qHTYNTt9EnMhQRt2C1EASe25EpuVU9z5rCS20tycO19u9PO PZkD5KuqhNTcw8qEvjwsglbjiudoStKfmh7vflDZ7Pmvkn5bkg0d+ttZ8ln/NrOt Q4SRscZ4bd/BM73f62FgGrboIY6isBbGiCGIKarr4Z6qzhb4GZTXlpfK1QFyIx7i NX28csa1zhRGTKJnt2UGkD36Wpn+Wv4VCV/wxQjWf+s06GbTH/j/uiU3u8Y= -----END CERTIFICATE-----Generated at Wed Nov 5 01:53:14 2025 by rpki-client