$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b1f1fd5-6117-426d-8645-5c352dee9ac5.roa File: 1b1f1fd5-6117-426d-8645-5c352dee9ac5.roa (raw, json) Hash identifier: X+SxRBe4kK3LpusvNVzTU987FKhX8YH1pSVENIuAbcA= Subject key identifier: A4:CF:54:23:6B:09:0D:8A:13:0E:A0:F1:93:35:85:36:19:84:21:E7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 281B1D2E638D90A154B50DEEA899BD0F5A3F1D5C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b1f1fd5-6117-426d-8645-5c352dee9ac5.roa Signing time: Fri 10 Oct 2025 15:37:36 +0000 ROA not before: Fri 10 Oct 2025 15:37:36 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.104.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1b:1d:2e:63:8d:90:a1:54:b5:0d:ee:a8:99:bd:0f:5a:3f:1d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 15:37:36 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=c0f01c3adc447ff4900b1da35382f0cc60fc1778049ed9804bc243e3761ee987, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:aa:17:09:7b:1b:2e:04:9a:60:bc:a4:d2: 92:93:4d:cc:39:09:48:9a:4d:7f:15:47:89:6e:f8: 76:67:dc:09:f4:7c:e0:0a:4c:05:bc:bf:b6:b8:2a: 52:61:1e:42:4d:a8:a8:6b:2e:6c:32:a6:14:a4:4e: 80:23:b1:78:2b:6c:58:f1:30:60:19:4a:36:20:d9: af:9a:70:d5:ef:52:67:f0:05:c4:7a:76:b3:0e:bf: 93:d1:d5:22:21:f0:b5:50:3b:07:a4:b2:1f:f4:74: 8d:15:f6:63:33:16:30:2a:01:18:b6:a5:d8:7f:21: 96:ff:1f:95:21:d5:ab:47:25:7e:38:19:21:3b:5c: 8e:bc:90:ca:3e:b3:d9:f9:42:42:a6:06:6c:29:e1: 7c:dc:37:8d:20:d9:d4:ae:6a:3c:a2:03:4f:76:47: 79:ec:5b:35:2e:28:30:38:c7:33:55:8b:d1:e2:12: ca:72:2e:79:6b:66:7f:90:09:95:b0:d5:cd:24:5a: 81:88:34:55:67:e9:33:8d:9d:ea:52:62:d0:8d:77: be:76:83:fc:18:ba:70:8e:bb:07:cc:d8:f1:e5:e2: 1d:38:d0:b9:51:af:0d:89:2e:ea:a9:9f:eb:c0:78: 37:72:1f:ce:32:cb:3a:ae:eb:92:0a:7d:5e:b1:b8: 25:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CF:54:23:6B:09:0D:8A:13:0E:A0:F1:93:35:85:36:19:84:21:E7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b1f1fd5-6117-426d-8645-5c352dee9ac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.104.0.0/14 Signature Algorithm: sha256WithRSAEncryption 79:d0:4f:d8:37:25:00:02:a0:4c:ac:fb:77:cc:fc:bb:f4:0f: 2e:b8:db:0c:99:3d:67:99:4a:c2:34:01:34:a8:e9:03:a2:40: 6e:68:8b:cf:8d:bc:5d:47:de:8b:f7:f0:6f:ba:8a:37:82:c8: 56:49:c2:67:53:b7:74:3b:14:82:90:7d:04:a0:a0:b9:4f:e9: b5:86:5f:fe:95:d5:06:b4:91:a7:33:52:21:d6:f5:cc:7f:95: d8:ee:89:04:22:2e:5b:9f:52:1a:70:2e:c4:32:98:95:d7:28: ad:d4:c3:f7:14:55:db:97:ce:e2:2c:a3:5c:26:c8:e5:20:c1: 35:34:78:d2:c8:d3:9c:a8:49:48:6d:ab:52:44:b9:75:c5:b0: fb:7e:43:ef:2e:6a:ac:33:48:db:70:8e:7c:e1:9f:aa:dc:4e: 8f:d5:ec:99:c1:fb:bb:a7:9d:44:a6:d8:45:d1:ae:20:55:86: 1e:35:28:d4:c5:b7:47:54:79:bd:85:33:d1:83:c5:78:4f:4e: 07:6f:68:e3:e6:9b:6e:24:fd:36:c6:f8:45:ce:70:09:68:bb: 65:a2:c7:39:d3:6f:a8:7f:bc:ea:80:e1:1c:b0:cf:b5:b5:82: c3:3c:d6:97:ce:d0:4d:6c:8f:d6:cf:1c:b5:0d:63:cd:aa:fa: e8:d9:cb:55 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKBsdLmONkKFUtQ3uqJm9D1o/HVwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTUzNzM2WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMGYwMWMzYWRjNDQ3ZmY0OTAwYjFkYTM1MzgyZjBjYzYw ZmMxNzc4MDQ5ZWQ5ODA0YmMyNDNlMzc2MWVlOTg3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPNKoXCXsbLgSaYLyk0pKTTcw5CUiaTX8VR4lu+HZn3An0 fOAKTAW8v7a4KlJhHkJNqKhrLmwyphSkToAjsXgrbFjxMGAZSjYg2a+acNXvUmfw BcR6drMOv5PR1SIh8LVQOweksh/0dI0V9mMzFjAqARi2pdh/IZb/H5Uh1atHJX44 GSE7XI68kMo+s9n5QkKmBmwp4XzcN40g2dSuajyiA092R3nsWzUuKDA4xzNVi9Hi EspyLnlrZn+QCZWw1c0kWoGINFVn6TONnepSYtCNd752g/wYunCOuwfM2PHl4h04 0LlRrw2JLuqpn+vAeDdyH84yyzqu65IKfV6xuCUxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUpM9UI2sJDYoTDqDxkzWFNhmEIecwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFiMWYxZmQ1LTYxMTctNDI2ZC04NjQ1LTVjMzUyZGVlOWFjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIDaDANBgkqhkiG9w0BAQsFAAOCAQEAedBP2DclAAKgTKz7d8z8u/QPLrjb DJk9Z5lKwjQBNKjpA6JAbmiLz428XUfei/fwb7qKN4LIVknCZ1O3dDsUgpB9BKCg uU/ptYZf/pXVBrSRpzNSIdb1zH+V2O6JBCIuW59SGnAuxDKYldcordTD9xRV25fO 4iyjXCbI5SDBNTR40sjTnKhJSG2rUkS5dcWw+35D7y5qrDNI23COfOGfqtxOj9Xs mcH7u6edRKbYRdGuIFWGHjUo1MW3R1R5vYUz0YPFeE9OB29o4+abbiT9Nsb4Rc5w CWi7ZaLHOdNvqH+86oDhHLDPtbWCwzzWl87QTWyP1s8ctQ1jzar66NnLVQ== -----END CERTIFICATE-----Generated at Sat Oct 18 02:42:01 2025 by rpki-client