$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6439208c-ccf1-40d8-a951-f35955f2aa73.roa File: 6439208c-ccf1-40d8-a951-f35955f2aa73.roa (raw, json) Hash identifier: F4UeW4G0+V8ZwLy/1J/u6AYbY2q83VjuAYVEoSNC/v0= Subject key identifier: 2D:A9:AC:F4:4F:80:B3:0E:1F:2B:94:6D:1B:9E:E7:BC:48:96:1A:9E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5117DFD6857D8247E0693C6B09857CB41EA7D01B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6439208c-ccf1-40d8-a951-f35955f2aa73.roa Signing time: Fri 31 Oct 2025 01:20:15 +0000 ROA not before: Fri 31 Oct 2025 01:20:15 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:17:df:d6:85:7d:82:47:e0:69:3c:6b:09:85:7c:b4:1e:a7:d0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 01:20:15 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=f03d5e2b9eeff2ce1fe8535118bf63c0e661156643593a53a6f7ea5041071c58, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:22:6a:19:db:98:91:81:25:8f:08:cf:f5:62: 97:9f:67:d3:bd:9d:94:bf:ad:ad:fb:49:6e:d1:fd: 08:4e:f1:74:ef:34:82:2e:0e:ca:1a:c5:4c:1d:5e: ee:b3:8c:01:46:2c:ad:d8:fb:8b:74:1c:d8:22:95: ec:3d:ca:0c:d6:18:86:19:f7:fe:e5:b0:8b:69:51: d0:74:26:1c:66:92:68:28:d5:45:3a:4b:d9:67:25: 4b:1c:89:0d:e1:2d:eb:75:e0:24:a6:3e:0a:91:3b: 61:64:72:97:f8:f8:98:ee:bf:1e:59:36:df:9b:85: 1d:69:08:8e:85:df:d7:16:56:b4:59:f8:20:77:ff: 14:fb:69:ab:16:ac:2c:9c:9a:fb:4b:e3:5a:53:83: 1b:9d:41:36:a1:2d:96:e7:e3:7b:38:4e:fc:00:a1: c8:c5:79:dd:17:32:03:e2:31:f8:6d:ff:cb:63:0d: 97:09:1b:dd:16:cb:5b:6a:ca:24:18:d2:65:de:ab: d1:99:9a:bf:0d:dc:e5:11:9e:11:cf:ce:55:51:a9: 51:16:44:5e:cc:b5:aa:06:46:a7:1a:41:47:bb:76: 89:f6:b3:eb:93:2f:68:06:60:48:83:a1:82:86:c7: bc:b0:22:da:f4:86:c1:77:1c:4e:18:50:9f:1a:f5: a6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A9:AC:F4:4F:80:B3:0E:1F:2B:94:6D:1B:9E:E7:BC:48:96:1A:9E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6439208c-ccf1-40d8-a951-f35955f2aa73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.91.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:30:5c:6c:25:86:cc:17:e8:3f:a5:58:aa:0c:69:85:17:0a: 49:af:56:b9:f3:1d:82:87:44:50:b0:ac:12:3b:d4:e5:6b:9b: ae:6e:1e:dc:e9:ff:bb:0f:ac:60:b3:80:f2:3e:3d:a7:50:dc: da:9f:eb:73:ca:7b:d8:62:fd:6f:62:43:5b:bd:2e:f8:7a:a9: df:99:60:05:f2:19:13:f6:77:f6:8c:f2:03:df:02:a8:81:f3: f3:e1:5f:e7:4d:e3:42:42:5b:1c:94:f9:7f:2b:2b:44:99:84: c5:9d:97:73:af:26:66:88:7f:96:78:df:fb:df:f7:48:17:e0: 9b:9f:21:63:b6:f9:d1:44:ea:00:3c:b7:dc:e0:51:a6:53:a5: 2b:4e:80:8c:58:c0:b2:e7:0b:4c:8d:06:69:b6:4e:bd:4a:ce: 8c:2e:33:2a:4c:6c:65:c1:50:08:82:dd:6a:a5:f9:21:fe:9f: 4a:60:69:17:c4:5b:f5:1f:58:8a:f3:56:d5:23:f0:df:41:22: a6:e9:d5:72:b8:09:82:5f:a2:8f:20:54:88:e9:19:2e:22:4a: 4d:30:47:14:5d:5c:cb:b9:fc:6e:41:bd:b6:b0:0f:c1:e4:64: fb:6d:4d:f1:25:5b:9a:27:68:c8:d3:bf:7e:dd:ca:9b:c5:ba: 06:94:a0:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUURff1oV9gkfgaTxrCYV8tB6n0BswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMDEyMDE1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDNkNWUyYjllZWZmMmNlMWZlODUzNTExOGJmNjNjMGU2 NjExNTY2NDM1OTNhNTNhNmY3ZWE1MDQxMDcxYzU4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjImoZ25iRgSWPCM/1YpefZ9O9nZS/ra37SW7R/QhO8XTv NIIuDsoaxUwdXu6zjAFGLK3Y+4t0HNgilew9ygzWGIYZ9/7lsItpUdB0Jhxmkmgo 1UU6S9lnJUsciQ3hLet14CSmPgqRO2Fkcpf4+Jjuvx5ZNt+bhR1pCI6F39cWVrRZ +CB3/xT7aasWrCycmvtL41pTgxudQTahLZbn43s4TvwAocjFed0XMgPiMfht/8tj DZcJG90Wy1tqyiQY0mXeq9GZmr8N3OURnhHPzlVRqVEWRF7MtaoGRqcaQUe7don2 s+uTL2gGYEiDoYKGx7ywItr0hsF3HE4YUJ8a9aZ3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULams9E+Asw4fK5RtG57nvEiWGp4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY0MzkyMDhjLWNjZjEtNDBkOC1hOTUxLWYzNTk1NWYyYWE3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAlswDQYJKoZIhvcNAQELBQADggEBAJswXGwlhswX6D+lWKoMaYUXCkmv VrnzHYKHRFCwrBI71OVrm65uHtzp/7sPrGCzgPI+PadQ3Nqf63PKe9hi/W9iQ1u9 Lvh6qd+ZYAXyGRP2d/aM8gPfAqiB8/PhX+dN40JCWxyU+X8rK0SZhMWdl3OvJmaI f5Z43/vf90gX4JufIWO2+dFE6gA8t9zgUaZTpStOgIxYwLLnC0yNBmm2Tr1Kzowu MypMbGXBUAiC3Wql+SH+n0pgaRfEW/UfWIrzVtUj8N9BIqbp1XK4CYJfoo8gVIjp GS4iSk0wRxRdXMu5/G5BvbawD8HkZPttTfElW5onaMjTv37dypvFugaUoB0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:46:36 2025 by rpki-client