$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24891d2c-13c1-4685-80f8-bb3b9d6a5c50.roa File: 24891d2c-13c1-4685-80f8-bb3b9d6a5c50.roa (raw, json) Hash identifier: Fv/YrpSFe0bZoMdvKoLu/tajpBhGXATnXDhV+p/Z3Bg= Subject key identifier: E8:07:62:1A:1B:4E:C4:62:3B:7B:9D:13:B1:71:63:42:AF:F2:A7:61 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0DEAE442BFE6F247AD211131EA8F414DA968CEE1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24891d2c-13c1-4685-80f8-bb3b9d6a5c50.roa Signing time: Thu 25 Sep 2025 21:41:54 +0000 ROA not before: Thu 25 Sep 2025 21:41:54 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ea:e4:42:bf:e6:f2:47:ad:21:11:31:ea:8f:41:4d:a9:68:ce:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 21:41:54 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=e7e4615c380eef47034e5ecaa890793449fd711f895cf47507fd6667cf4b87dd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:4a:6f:d1:c1:d2:3e:92:1c:e0:4a:5c:2d: ce:c0:0f:1b:bc:2e:5f:27:75:ea:c0:3b:f1:ac:da: 8b:bd:cf:34:47:e7:39:c9:9b:67:ac:46:ac:af:2d: 4e:d6:31:cd:d7:8c:4c:8b:08:36:0e:09:97:41:c6: 31:37:df:83:7c:21:31:34:be:10:c3:8d:2d:d8:3f: f4:89:1f:88:da:b9:ec:cd:4e:93:04:69:5f:3c:61: 57:ad:ec:cd:ab:80:fa:68:9f:42:9b:74:b4:c9:53: f8:73:8c:47:a0:81:cf:57:a1:9a:96:5d:20:4c:48: e9:a3:5a:53:46:ba:09:84:35:94:55:03:8b:79:88: 19:27:d0:dc:a6:58:31:b3:53:ec:aa:4b:eb:83:58: ab:0d:6d:64:d9:47:80:e1:f0:2c:19:51:13:72:44: 28:60:d8:8f:06:2d:87:5f:fa:83:ca:8b:2b:ed:b5: 5b:51:0d:37:60:0c:5c:f2:82:30:15:db:13:88:99: 42:e0:20:a1:30:d5:b8:0d:53:6e:20:e5:72:bf:43: da:e5:eb:c5:9d:92:ea:97:47:42:2b:3e:1d:1c:66: 13:91:27:a8:5d:25:78:10:68:bb:cd:ba:20:81:35: 4f:62:58:a6:e9:d9:06:6d:20:79:8e:a3:d8:9f:17: 27:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:07:62:1A:1B:4E:C4:62:3B:7B:9D:13:B1:71:63:42:AF:F2:A7:61 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24891d2c-13c1-4685-80f8-bb3b9d6a5c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.66.0/23 Signature Algorithm: sha256WithRSAEncryption 83:61:12:bd:44:28:fd:e1:83:81:f4:5e:a7:88:f8:99:ab:59: 4e:f2:ec:d0:0c:9f:bb:81:5a:5a:56:13:5e:95:8d:63:0e:ad: b3:45:d7:4d:5f:3b:5f:da:76:00:51:e2:48:4a:49:0f:12:5d: 9b:30:2d:5d:82:81:d3:07:56:b7:f4:5c:1f:a1:d2:9c:44:eb: 62:ba:61:97:ad:df:9c:90:41:b1:f6:85:54:15:a6:c5:19:97: 7a:4d:09:42:2c:b5:79:f2:44:fe:81:91:62:e5:45:09:a1:89: e9:0b:65:7f:8f:4d:68:60:86:69:dd:a0:58:2c:fe:3f:24:96: 85:5c:58:85:7a:55:1c:c8:fa:e8:ac:b7:e2:31:17:51:ab:b0: 39:9c:3d:59:d5:95:0a:9d:25:90:20:09:81:dd:a9:a8:e6:72: 7e:d0:02:9a:b1:17:92:70:af:fb:7e:a6:cd:1f:32:c9:77:ff: 6b:b0:9c:1f:a2:9c:79:fa:8b:35:e6:f4:ad:29:ef:cc:0a:63: 1d:64:19:50:01:6c:88:a8:d3:0a:aa:7f:de:1d:c3:78:83:b7: 75:c9:e7:7d:b0:48:f2:d9:b0:9e:39:d2:c2:7d:f6:47:7b:92: 8f:24:89:34:ff:09:4c:19:7d:5c:7e:f1:df:bd:93:58:25:7c: b3:7e:dc:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDerkQr/m8ketIREx6o9BTalozuEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjE0MTU0WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlN2U0NjE1YzM4MGVlZjQ3MDM0ZTVlY2FhODkwNzkzNDQ5 ZmQ3MTFmODk1Y2Y0NzUwN2ZkNjY2N2NmNGI4N2RkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAmUpv0cHSPpIc4EpcLc7ADxu8Ll8nderAO/Gs2ou9zzRH 5znJm2esRqyvLU7WMc3XjEyLCDYOCZdBxjE334N8ITE0vhDDjS3YP/SJH4jauezN TpMEaV88YVet7M2rgPpon0KbdLTJU/hzjEeggc9XoZqWXSBMSOmjWlNGugmENZRV A4t5iBkn0NymWDGzU+yqS+uDWKsNbWTZR4Dh8CwZURNyRChg2I8GLYdf+oPKiyvt tVtRDTdgDFzygjAV2xOImULgIKEw1bgNU24g5XK/Q9rl68WdkuqXR0IrPh0cZhOR J6hdJXgQaLvNuiCBNU9iWKbp2QZtIHmOo9ifFyfjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6AdiGhtOxGI7e50TsXFjQq/yp2EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0ODkxZDJjLTEzYzEtNDY4NS04MGY4LWJiM2I5ZDZhNWM1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDoUIwDQYJKoZIhvcNAQELBQADggEBAINhEr1EKP3hg4H0XqeI+JmrWU7y 7NAMn7uBWlpWE16VjWMOrbNF101fO1/adgBR4khKSQ8SXZswLV2CgdMHVrf0XB+h 0pxE62K6YZet35yQQbH2hVQVpsUZl3pNCUIstXnyRP6BkWLlRQmhiekLZX+PTWhg hmndoFgs/j8kloVcWIV6VRzI+uist+IxF1GrsDmcPVnVlQqdJZAgCYHdqajmcn7Q ApqxF5Jwr/t+ps0fMsl3/2uwnB+inHn6izXm9K0p78wKYx1kGVABbIio0wqqf94d w3iDt3XJ532wSPLZsJ450sJ99kd7ko8kiTT/CUwZfVx+8d+9k1glfLN+3LU= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:48 2025 by rpki-client