$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f33b08d-ba5e-4763-bb68-8250e71525c7.roa File: 1f33b08d-ba5e-4763-bb68-8250e71525c7.roa (raw, json) Hash identifier: GJMUNUDhSV7qZ3PB6QWV5bpvaIRfSlXJNLEdPlDK1qw= Subject key identifier: F3:E4:78:A5:3C:96:F7:EC:68:12:BD:F7:0B:D6:17:2C:37:89:86:06 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5867419780EA9FC23E659EF13028320CE2127A52 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f33b08d-ba5e-4763-bb68-8250e71525c7.roa Signing time: Fri 26 Sep 2025 01:47:08 +0000 ROA not before: Fri 26 Sep 2025 01:47:08 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.163.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:67:41:97:80:ea:9f:c2:3e:65:9e:f1:30:28:32:0c:e2:12:7a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:47:08 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=c53b283ee8899ca2085cd5b19ff8b6f8f34911bdf1eaf8658cbb4b10e982fbbb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:37:db:b5:14:4f:46:08:59:7d:bb:d5:f3: 2b:21:42:3f:09:d8:ec:8d:fd:9f:b3:fb:67:53:a2: 75:a0:02:33:1b:0f:43:2f:55:c9:00:9d:12:b2:e0: b6:6b:87:92:a0:55:37:e6:2a:1c:70:a9:59:e6:e9: ec:b4:57:34:cd:04:bc:09:06:7f:fd:e6:f9:a6:82: b3:05:f8:a9:73:26:c6:09:79:01:f9:fb:3f:31:55: c2:b7:70:f6:58:c1:74:e0:99:49:4c:dd:39:5e:9b: 72:3f:4a:8a:ee:05:57:d0:da:3c:64:75:db:6b:c4: 52:39:4a:04:89:ae:e0:01:c9:f2:ed:b9:b1:c8:4a: e4:f6:2a:6c:36:56:6c:60:1d:e4:e5:93:f9:55:23: 19:10:d5:d8:96:f8:08:4c:4e:de:b4:d6:5d:e6:25: 2b:4d:cb:5a:5f:13:92:3c:64:44:48:c4:6f:3f:85: 04:a6:1d:32:9c:bc:64:49:e8:d5:7c:eb:23:ec:86: b5:f4:b6:f4:6d:da:21:69:31:b5:45:e6:da:04:21: e8:99:13:43:74:38:74:4c:43:d4:78:21:12:bf:ca: ca:32:30:9f:61:20:da:82:10:dc:3d:05:f2:94:ce: 6d:24:cb:40:81:20:2e:35:7f:b5:c7:81:61:79:53: f8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E4:78:A5:3C:96:F7:EC:68:12:BD:F7:0B:D6:17:2C:37:89:86:06 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f33b08d-ba5e-4763-bb68-8250e71525c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.163.224.0/20 Signature Algorithm: sha256WithRSAEncryption 98:bb:42:5a:b7:8d:02:12:db:a4:91:21:45:21:d1:75:88:c1: d4:17:80:ac:d4:22:e2:11:36:b1:d6:15:77:1b:18:09:2f:ef: 96:8d:3d:b5:bd:6e:56:c9:70:50:42:65:59:e1:39:f3:75:39: 0a:22:16:90:66:0f:84:c6:cd:ef:03:26:25:41:ed:e2:f5:61: e8:25:95:00:9e:16:4a:a9:f1:c3:0f:3c:9f:b8:dc:c2:29:2b: bd:49:2f:9d:61:a1:db:d1:42:66:3b:3c:3f:8a:c2:29:5f:9b: 4e:f9:c6:27:63:b4:87:c3:3a:38:0e:cd:70:4c:ba:6c:a3:45: 51:67:b1:57:72:f0:c9:c4:9b:a2:37:87:f1:4b:a2:00:9a:6c: 23:3e:7c:2d:dc:a6:cc:ca:5c:7b:9d:18:64:cc:3a:4a:8c:29: c9:0f:44:d1:ff:9b:23:bd:86:9d:7c:c2:1d:fd:67:98:3e:cd: 84:03:4c:01:7e:77:61:2c:25:18:9b:a2:63:6c:17:30:21:8d: ba:2c:ab:6d:61:e7:20:f7:77:5d:13:dc:a5:46:76:72:19:f0: 96:dc:4e:3d:ae:af:db:08:e3:64:07:16:a6:72:b2:76:80:78: ba:64:dc:98:ae:3a:03:ab:df:97:ec:4d:a6:f9:eb:ae:02:df: 5e:c8:4e:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWGdBl4Dqn8I+ZZ7xMCgyDOISelIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDE0NzA4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTNiMjgzZWU4ODk5Y2EyMDg1Y2Q1YjE5ZmY4YjZmOGYz NDkxMWJkZjFlYWY4NjU4Y2JiNGIxMGU5ODJmYmJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3rTfbtRRPRghZfbvV8yshQj8J2OyN/Z+z+2dTonWgAjMb D0MvVckAnRKy4LZrh5KgVTfmKhxwqVnm6ey0VzTNBLwJBn/95vmmgrMF+KlzJsYJ eQH5+z8xVcK3cPZYwXTgmUlM3Tlem3I/SoruBVfQ2jxkddtrxFI5SgSJruAByfLt ubHISuT2Kmw2VmxgHeTlk/lVIxkQ1diW+AhMTt601l3mJStNy1pfE5I8ZERIxG8/ hQSmHTKcvGRJ6NV86yPshrX0tvRt2iFpMbVF5toEIeiZE0N0OHRMQ9R4IRK/ysoy MJ9hINqCENw9BfKUzm0ky0CBIC41f7XHgWF5U/gRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8+R4pTyW9+xoEr33C9YXLDeJhgYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmMzNiMDhkLWJhNWUtNDc2My1iYjY4LTgyNTBlNzE1MjVjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDo+AwDQYJKoZIhvcNAQELBQADggEBAJi7Qlq3jQIS26SRIUUh0XWIwdQX gKzUIuIRNrHWFXcbGAkv75aNPbW9blbJcFBCZVnhOfN1OQoiFpBmD4TGze8DJiVB 7eL1YegllQCeFkqp8cMPPJ+43MIpK71JL51hodvRQmY7PD+Kwilfm075xidjtIfD OjgOzXBMumyjRVFnsVdy8MnEm6I3h/FLogCabCM+fC3cpszKXHudGGTMOkqMKckP RNH/myO9hp18wh39Z5g+zYQDTAF+d2EsJRibomNsFzAhjbosq21h5yD3d10T3KVG dnIZ8JbcTj2ur9sI42QHFqZysnaAeLpk3JiuOgOr35fsTab5664C317ITls= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:39 2025 by rpki-client