$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23f00e9b-ead5-42cb-965b-50d21690087c.roa File: 23f00e9b-ead5-42cb-965b-50d21690087c.roa (raw, json) Hash identifier: Z2cW+Ph7gpPEUVHysGHT/JmNrjBtjI89E2qpYvYX+x0= Subject key identifier: 71:EA:1F:2D:52:C9:8D:1D:95:5A:FC:B0:48:5C:B6:32:C3:2C:9D:A8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 381D6A46994126341BA108AA38F48754424CB822 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23f00e9b-ead5-42cb-965b-50d21690087c.roa Signing time: Fri 26 Sep 2025 01:47:04 +0000 ROA not before: Fri 26 Sep 2025 01:47:04 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.163.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1d:6a:46:99:41:26:34:1b:a1:08:aa:38:f4:87:54:42:4c:b8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:47:04 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=fa26a7b64a56410acccfa9795cf2e63c2f23440a271020a031a9210ed16ac222, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:cc:1e:af:9c:60:47:ab:cb:41:c2:b2:db: f9:5f:16:92:78:88:5c:30:67:3c:2c:85:6a:f8:92: 3f:d0:1c:a8:4d:e3:4c:d9:8c:eb:fd:f6:c3:c4:ce: 70:2e:28:14:fc:3c:a3:48:38:4e:1c:5c:15:5c:39: a4:35:df:9b:b9:02:e4:5a:9e:53:a1:a7:3f:9f:c9: 3f:0c:a7:84:38:9b:79:47:cd:2b:57:08:b9:7c:d5: 53:0e:6b:a6:ca:d4:d2:88:c0:dc:e7:c7:be:a8:ff: b8:b7:d3:40:75:63:39:d1:bf:c5:60:84:dd:6b:0d: c7:10:8e:ca:2a:8b:46:07:f8:a3:ab:46:cc:58:ae: ea:b6:2b:16:5c:5f:34:4b:aa:4d:74:9b:1d:64:25: 9e:28:a9:e5:5a:93:c5:2c:e0:9e:a6:21:3a:26:6a: 01:e8:10:21:13:f2:c0:b5:53:2c:a2:f8:1e:11:10: f2:56:04:a1:de:8f:b0:65:07:4d:7f:28:81:3c:fc: 59:ec:0f:c4:34:b1:60:d1:11:0f:1d:3f:83:8a:43: 2d:2d:a4:f1:96:e6:4d:1c:be:a2:06:41:75:f1:0a: cf:c0:48:63:67:bb:80:c4:17:94:e8:b1:eb:9a:69: ce:81:98:fc:13:f3:24:ae:ee:5d:24:98:43:fe:b3: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EA:1F:2D:52:C9:8D:1D:95:5A:FC:B0:48:5C:B6:32:C3:2C:9D:A8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23f00e9b-ead5-42cb-965b-50d21690087c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.163.160.0/20 Signature Algorithm: sha256WithRSAEncryption 07:3b:fc:8e:28:78:a5:4b:bc:bb:fe:1f:a7:ab:6a:07:b2:7c: 77:b2:10:12:7e:00:bf:e1:52:0c:ac:cd:50:bf:fa:0a:7a:f3: 04:23:59:8c:7b:65:94:4c:f5:e1:4d:b2:bf:f0:6c:99:45:ea: ac:87:2c:46:b4:ba:21:9b:6f:5f:61:37:76:a1:c8:25:f1:7a: bb:f4:84:9a:72:0f:f8:9d:33:f7:ab:80:d3:dd:db:00:11:af: d4:82:00:88:18:31:7a:f0:49:bd:4d:f7:cf:00:b9:9f:3e:73: ee:b1:a1:19:30:e0:1f:79:e2:e0:b3:9f:91:b1:b3:84:c5:03: 9e:b1:a8:ca:18:26:b0:d7:f6:c3:30:a5:70:0a:db:7e:3c:60: 09:cc:82:4e:e2:f8:d4:c6:28:58:b5:6a:ae:bf:3d:81:2f:81: 08:ed:9d:3c:7e:c6:b1:da:e1:f1:c0:2c:4e:d4:2e:c2:9d:72: e9:d5:91:9e:ee:7a:d4:d5:6f:83:2e:16:02:e1:24:89:c0:ca: 2b:65:9b:6e:f0:75:8b:4e:fc:81:7f:fd:a4:86:f8:2d:ee:0e: 4d:68:8e:ce:01:76:30:30:94:4f:25:6c:21:2b:2f:c1:0d:a2: 46:94:9a:4a:02:df:59:20:93:ce:ac:ec:35:12:59:3c:9e:cb: b5:dd:31:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOB1qRplBJjQboQiqOPSHVEJMuCIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDE0NzA0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTI2YTdiNjRhNTY0MTBhY2NjZmE5Nzk1Y2YyZTYzYzJm MjM0NDBhMjcxMDIwYTAzMWE5MjEwZWQxNmFjMjIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj0swer5xgR6vLQcKy2/lfFpJ4iFwwZzwshWr4kj/QHKhN 40zZjOv99sPEznAuKBT8PKNIOE4cXBVcOaQ135u5AuRanlOhpz+fyT8Mp4Q4m3lH zStXCLl81VMOa6bK1NKIwNznx76o/7i300B1YznRv8VghN1rDccQjsoqi0YH+KOr RsxYruq2KxZcXzRLqk10mx1kJZ4oqeVak8Us4J6mITomagHoECET8sC1Uyyi+B4R EPJWBKHej7BlB01/KIE8/FnsD8Q0sWDREQ8dP4OKQy0tpPGW5k0cvqIGQXXxCs/A SGNnu4DEF5Toseuaac6BmPwT8ySu7l0kmEP+szE5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUceofLVLJjR2VWvywSFy2MsMsnagwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIzZjAwZTliLWVhZDUtNDJjYi05NjViLTUwZDIxNjkwMDg3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDo6AwDQYJKoZIhvcNAQELBQADggEBAAc7/I4oeKVLvLv+H6erageyfHey EBJ+AL/hUgyszVC/+gp68wQjWYx7ZZRM9eFNsr/wbJlF6qyHLEa0uiGbb19hN3ah yCXxerv0hJpyD/idM/ergNPd2wARr9SCAIgYMXrwSb1N988AuZ8+c+6xoRkw4B95 4uCzn5Gxs4TFA56xqMoYJrDX9sMwpXAK2348YAnMgk7i+NTGKFi1aq6/PYEvgQjt nTx+xrHa4fHALE7ULsKdcunVkZ7uetTVb4MuFgLhJInAyitlm27wdYtO/IF//aSG +C3uDk1ojs4BdjAwlE8lbCErL8ENokaUmkoC31kgk86s7DUSWTyey7XdMVM= -----END CERTIFICATE-----Generated at Sat Oct 18 00:00:04 2025 by rpki-client