$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aca73f63-750e-49b1-9ad8-b6a8ffe0b067.roa File: aca73f63-750e-49b1-9ad8-b6a8ffe0b067.roa (raw, json) Hash identifier: R/TltKEU2WrVYHW3lbS3B8ncmH8O1FJrFbRDBgU56Dg= Subject key identifier: 76:D2:2A:F3:D4:E6:4E:76:30:FE:3B:63:66:12:69:6F:C0:1E:26:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7EB9628735FCEDF37198508352224D5ED1EDD240 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aca73f63-750e-49b1-9ad8-b6a8ffe0b067.roa Signing time: Tue 04 Nov 2025 02:00:59 +0000 ROA not before: Tue 04 Nov 2025 02:00:59 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.122.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b9:62:87:35:fc:ed:f3:71:98:50:83:52:22:4d:5e:d1:ed:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 02:00:59 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=add4a7a9a652a85d7fb10df84dddf4fc082c9c94fd716637ec4f4c1f771e405a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:aa:b9:01:4d:76:4f:2d:9b:e5:30:5e:54: 6b:02:d1:64:8a:05:e0:ea:21:1b:7f:e6:84:11:fe: 57:f4:f0:3e:4b:9d:08:fd:4f:06:32:e6:02:34:af: db:6c:e5:07:86:96:9b:b7:63:52:d3:4c:8c:db:1c: 8a:71:3f:f8:ee:14:19:4b:d9:92:d2:cd:2f:1b:ab: f1:87:63:d2:22:09:44:ce:7c:48:75:35:6d:fb:82: 0c:3d:28:13:95:ba:5f:c5:ef:ca:94:f6:d3:2f:35: e9:e0:36:db:ff:82:b2:dd:52:00:03:5e:80:1d:84: ef:ae:08:b7:d2:0d:8f:17:6c:7d:fc:7b:a3:48:b2: b8:5e:42:34:da:94:96:a0:e4:f4:09:bd:84:c1:b0: e2:bd:1a:38:7a:83:3a:16:e1:dc:f3:73:f7:0f:5e: fd:97:41:59:6b:ac:9b:68:1d:9e:5c:87:a2:68:9b: 55:71:e3:9f:f4:93:fc:c7:b2:6f:b1:64:b4:3d:98: 9d:cd:75:b5:96:e6:8b:03:32:01:b8:e5:39:85:3f: 12:eb:31:d8:01:fc:26:0a:0c:a5:1c:e0:fb:79:92: d6:40:34:05:c7:bf:b4:43:c8:1f:51:e7:d9:27:70: 17:d6:a4:65:78:e1:37:d9:78:98:24:e2:a8:2b:7b: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D2:2A:F3:D4:E6:4E:76:30:FE:3B:63:66:12:69:6F:C0:1E:26:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aca73f63-750e-49b1-9ad8-b6a8ffe0b067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.122.128.0/23 Signature Algorithm: sha256WithRSAEncryption 80:59:39:95:ed:57:e0:82:a9:95:d0:1e:28:e5:c0:02:d0:8d: 8f:9a:b4:72:e1:4e:7c:e1:d6:87:7f:89:d0:86:ea:7c:4a:08: 4f:cf:3d:b6:03:46:78:20:bb:49:0b:d1:4e:2d:30:5c:f3:a6: ce:f8:36:63:01:9f:f4:dc:30:dd:26:4e:eb:01:e0:05:21:21: 00:a2:7f:dc:c3:ab:aa:e4:8d:52:b5:cb:b0:30:d4:a5:c3:6d: c0:24:fd:72:e3:ec:ce:6d:18:f5:95:f6:9f:af:ea:55:a9:c3: 4b:bd:53:39:f6:fa:48:ac:30:5b:54:6e:5d:86:f5:b5:80:4f: e9:3f:40:c8:7f:42:fc:81:49:c1:82:a3:4c:bc:6a:1b:40:3e: da:00:dc:b3:a0:be:80:c0:7b:e9:20:68:fc:1c:6e:82:33:9b: f7:31:f5:46:38:53:30:97:a8:8b:05:5d:9c:1f:81:57:db:1e: 95:3f:b0:8a:ca:52:76:e6:46:1c:5f:f1:10:87:2b:b3:1e:4f: 1c:c3:f0:33:89:34:bf:7d:61:f6:16:35:e0:e9:d5:ee:8c:7f: af:57:c9:de:70:bc:26:84:f0:d8:29:b0:b5:42:89:c4:f6:00: e9:1e:ff:8c:27:d6:c9:d8:7e:41:b0:a3:57:0d:05:2a:1f:2d: 83:81:f7:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfrlihzX87fNxmFCDUiJNXtHt0kAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDIwMDU5WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZGQ0YTdhOWE2NTJhODVkN2ZiMTBkZjg0ZGRkZjRmYzA4 MmM5Yzk0ZmQ3MTY2MzdlYzRmNGMxZjc3MWU0MDVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7i6q5AU12Ty2b5TBeVGsC0WSKBeDqIRt/5oQR/lf08D5L nQj9TwYy5gI0r9ts5QeGlpu3Y1LTTIzbHIpxP/juFBlL2ZLSzS8bq/GHY9IiCUTO fEh1NW37ggw9KBOVul/F78qU9tMvNengNtv/grLdUgADXoAdhO+uCLfSDY8XbH38 e6NIsrheQjTalJag5PQJvYTBsOK9Gjh6gzoW4dzzc/cPXv2XQVlrrJtoHZ5ch6Jo m1Vx45/0k/zHsm+xZLQ9mJ3NdbWW5osDMgG45TmFPxLrMdgB/CYKDKUc4Pt5ktZA NAXHv7RDyB9R59kncBfWpGV44TfZeJgk4qgre0JJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdtIq89TmTnYw/jtjZhJpb8AeJkkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjYTczZjYzLTc1MGUtNDliMS05YWQ4LWI2YThmZmUwYjA2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDeoAwDQYJKoZIhvcNAQELBQADggEBAIBZOZXtV+CCqZXQHijlwALQjY+a tHLhTnzh1od/idCG6nxKCE/PPbYDRnggu0kL0U4tMFzzps74NmMBn/TcMN0mTusB 4AUhIQCif9zDq6rkjVK1y7Aw1KXDbcAk/XLj7M5tGPWV9p+v6lWpw0u9Uzn2+kis MFtUbl2G9bWAT+k/QMh/QvyBScGCo0y8ahtAPtoA3LOgvoDAe+kgaPwcboIzm/cx 9UY4UzCXqIsFXZwfgVfbHpU/sIrKUnbmRhxf8RCHK7MeTxzD8DOJNL99YfYWNeDp 1e6Mf69Xyd5wvCaE8NgpsLVCicT2AOke/4wn1snYfkGwo1cNBSofLYOB97I= -----END CERTIFICATE-----Generated at Wed Nov 5 03:27:18 2025 by rpki-client