$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03bc8562-8246-4830-931b-72dd41a42993.roa File: 03bc8562-8246-4830-931b-72dd41a42993.roa (raw, json) Hash identifier: UOyj+QC7tWn8e7RazWFnmKK1ZBgwehOnw/zCc1B4aak= Subject key identifier: 48:DE:F3:49:83:CF:E9:E3:6D:13:0D:94:39:7C:DB:A2:23:F6:FC:A9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 76BEE390426E9624DF7535D7406A84A1E707A484 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03bc8562-8246-4830-931b-72dd41a42993.roa Signing time: Thu 25 Sep 2025 23:57:05 +0000 ROA not before: Thu 25 Sep 2025 23:57:05 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:be:e3:90:42:6e:96:24:df:75:35:d7:40:6a:84:a1:e7:07:a4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:57:05 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=ed0de4ec46d57d303eee6fb6cc64feef0695054d64f91faef3a6b0b2e46da703, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:df:5b:44:df:f7:a0:77:28:09:24:7f:7f:1a: de:5f:64:a1:0d:49:32:91:1b:b0:5e:28:33:30:d4: 74:c6:4b:9a:59:7f:fc:0b:97:1a:01:e8:b7:51:11: 91:e8:3f:1f:79:bb:e2:47:c5:bd:ac:a3:c9:f2:39: 53:52:dc:89:9a:7d:a4:f8:6c:c0:18:ce:52:5b:7a: fd:1e:c2:be:6e:41:88:7b:dd:ba:6f:8a:cf:aa:a0: 2f:05:2a:9f:06:1a:b4:77:ce:88:3f:77:dd:dd:3c: db:77:7e:a1:ce:32:88:f1:9c:c8:7b:2c:c5:88:bd: 23:bd:21:02:c0:56:2f:27:cc:cf:c6:ec:db:eb:c2: 91:ae:d6:5a:85:d2:7d:22:1a:31:bf:13:b2:f1:de: 2f:08:78:cd:9a:02:45:21:16:3d:ec:a5:51:b6:e0: 3a:c5:28:8b:63:8f:c1:2e:31:4b:33:f4:f8:52:3e: cb:cb:09:21:ad:b0:75:40:ba:b2:af:a3:6b:d8:08: 0e:14:44:27:b2:3f:2d:28:50:4a:08:d3:13:a8:ea: ae:9d:6f:57:6a:d3:c3:9f:0a:d3:d0:7f:79:3e:e8: d2:59:fa:99:d6:85:a6:26:5b:e4:21:c6:b1:c5:8d: da:8b:e2:dd:69:0d:0e:f2:fd:5b:0f:8f:99:2e:fb: 2c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DE:F3:49:83:CF:E9:E3:6D:13:0D:94:39:7C:DB:A2:23:F6:FC:A9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03bc8562-8246-4830-931b-72dd41a42993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.8.0/22 Signature Algorithm: sha256WithRSAEncryption 92:b3:27:e3:f1:2f:66:f1:87:15:83:61:0c:6d:c6:bf:83:e3: a9:b2:c8:bc:7f:bc:5e:4b:e4:d8:10:33:03:39:88:c0:72:d7: bd:b1:b9:9e:e5:b7:54:50:21:6e:dd:8e:06:90:70:f8:15:48: 4e:38:86:bd:b7:6a:12:d6:d8:21:84:2b:56:29:90:cc:a6:d0: da:8c:dd:86:e3:19:d2:99:42:fc:ad:16:f1:23:f9:6a:9a:7d: 7b:64:82:23:f3:69:45:62:7c:16:40:cd:be:ef:ae:be:ea:dc: 52:13:1a:76:e4:67:d0:cd:68:6d:66:c1:98:20:38:50:a4:b1: cf:76:f7:76:12:03:f4:ca:d1:f4:16:ab:49:03:9f:ec:62:02: b4:d2:3b:49:fb:62:67:f6:d9:ed:60:fd:c5:a2:fd:45:c6:c4: b5:d3:fa:6c:35:7a:32:d5:98:28:11:f8:3c:52:9d:8f:0b:a4: 87:a5:d0:1d:0d:2f:77:ec:91:19:64:71:b6:dd:db:d1:2b:53: be:c4:b7:1b:1c:d9:9f:d0:c4:c2:f8:65:0f:c8:15:2c:d7:4c: 6d:a0:46:64:59:2d:54:46:b5:eb:d4:36:d9:5c:1c:f4:7a:1b: 40:e1:05:d5:79:c5:07:be:2c:33:87:d1:87:bd:7b:08:28:d9: e8:0f:f3:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdr7jkEJuliTfdTXXQGqEoecHpIQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjM1NzA1WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDBkZTRlYzQ2ZDU3ZDMwM2VlZTZmYjZjYzY0ZmVlZjA2 OTUwNTRkNjRmOTFmYWVmM2E2YjBiMmU0NmRhNzAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDP31tE3/egdygJJH9/Gt5fZKENSTKRG7BeKDMw1HTGS5pZ f/wLlxoB6LdREZHoPx95u+JHxb2so8nyOVNS3ImafaT4bMAYzlJbev0ewr5uQYh7 3bpvis+qoC8FKp8GGrR3zog/d93dPNt3fqHOMojxnMh7LMWIvSO9IQLAVi8nzM/G 7NvrwpGu1lqF0n0iGjG/E7Lx3i8IeM2aAkUhFj3spVG24DrFKItjj8EuMUsz9PhS PsvLCSGtsHVAurKvo2vYCA4URCeyPy0oUEoI0xOo6q6db1dq08OfCtPQf3k+6NJZ +pnWhaYmW+QhxrHFjdqL4t1pDQ7y/VsPj5ku+yztAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSN7zSYPP6eNtEw2UOXzboiP2/KkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAzYmM4NTYyLTgyNDYtNDgzMC05MzFiLTcyZGQ0MWE0Mjk5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDoAgwDQYJKoZIhvcNAQELBQADggEBAJKzJ+PxL2bxhxWDYQxtxr+D46my yLx/vF5L5NgQMwM5iMBy172xuZ7lt1RQIW7djgaQcPgVSE44hr23ahLW2CGEK1Yp kMym0NqM3YbjGdKZQvytFvEj+WqafXtkgiPzaUVifBZAzb7vrr7q3FITGnbkZ9DN aG1mwZggOFCksc9293YSA/TK0fQWq0kDn+xiArTSO0n7Ymf22e1g/cWi/UXGxLXT +mw1ejLVmCgR+DxSnY8LpIel0B0NL3fskRlkcbbd29ErU77Etxsc2Z/QxML4ZQ/I FSzXTG2gRmRZLVRGtevUNtlcHPR6G0DhBdV5xQe+LDOH0Ye9ewgo2egP83I= -----END CERTIFICATE-----Generated at Sat Oct 18 05:08:45 2025 by rpki-client