$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2980344d-b84e-4e27-a24b-61e150aadaa3.roa File: 2980344d-b84e-4e27-a24b-61e150aadaa3.roa (raw, json) Hash identifier: DM8WMFmSUCipTPOVGNlxJXRX5FHuR2252m8R5W9Pmv4= Subject key identifier: 85:3B:68:AA:AB:A6:D6:56:83:C7:83:A4:31:42:32:6D:E5:45:57:9C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6810F1213850D9B6DB853DD327FBFE88CF733C71 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2980344d-b84e-4e27-a24b-61e150aadaa3.roa Signing time: Fri 26 Sep 2025 16:04:44 +0000 ROA not before: Fri 26 Sep 2025 16:04:44 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 6167 IP address blocks: 161.188.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:10:f1:21:38:50:d9:b6:db:85:3d:d3:27:fb:fe:88:cf:73:3c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 16:04:44 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=5244854272c3604886c7e0af5b589bd0b1974953562711afd98ee6c654a00f91, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:5e:c5:ae:5a:ed:37:68:3c:44:5e:a2:66: e5:4a:36:15:64:f2:a1:72:44:6e:04:66:f5:33:e2: 99:0e:e7:37:4c:fe:e4:78:2d:d7:5f:51:8a:eb:7a: 11:ee:15:81:65:1b:f2:2f:d5:27:e7:1f:fa:c9:8d: 6f:56:93:81:02:c3:ed:d0:f9:d7:a6:88:bb:ba:eb: 0f:2e:ba:a5:3d:9d:b1:28:7a:a7:2c:d3:4d:94:03: cf:f4:9c:31:b9:d1:27:e2:97:97:96:dd:86:b0:f1: ec:87:0e:82:94:c7:7e:b8:cb:d7:98:90:f2:aa:a8: 77:c8:f3:70:6a:48:1c:08:75:c1:1a:76:d9:f0:d6: 86:9d:75:a9:19:57:a1:33:3a:bf:ad:54:28:c3:96: 2f:34:fd:43:e4:dc:f1:4c:2f:50:85:90:ec:f1:70: 09:1f:44:46:89:49:77:13:16:59:ae:e7:ba:fc:53: 47:56:34:3b:3f:67:11:5b:90:bc:23:aa:f1:6f:68: 04:1d:66:d5:e3:83:07:48:46:11:04:14:2b:3f:4f: e8:87:69:53:a8:7f:81:a2:02:df:ce:9b:60:fc:4b: e2:e5:21:09:f1:27:37:1f:b1:9b:ed:70:ea:21:74: d0:5a:d5:e0:11:99:30:35:e7:b5:f5:98:46:d2:74: f1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3B:68:AA:AB:A6:D6:56:83:C7:83:A4:31:42:32:6D:E5:45:57:9C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2980344d-b84e-4e27-a24b-61e150aadaa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.16.0/20 Signature Algorithm: sha256WithRSAEncryption 4b:c3:58:27:f8:1a:f7:a7:27:68:03:80:c9:ed:79:b0:86:b6: f9:75:e6:55:a3:8b:78:60:76:42:db:ea:03:95:4e:14:9d:66: cd:fd:09:28:28:b1:97:8f:48:de:91:b7:1a:f2:ad:1b:b6:35: aa:8e:54:a4:0f:f3:94:14:d5:eb:13:10:b0:3a:fc:c0:fc:b8: 85:7e:a2:d0:5a:bc:ff:f4:59:da:57:8f:c6:38:94:94:a2:ab: 3e:c5:5f:46:5d:ec:40:00:23:f5:d8:ef:c9:65:76:0b:b0:03: cc:5b:56:32:f2:55:63:8d:12:b2:ea:61:aa:36:42:40:f3:b8: 8e:46:8e:5e:4e:a0:bf:6a:04:d9:65:f9:14:a9:d6:79:eb:6d: c6:20:46:4c:06:3f:4e:71:e4:9e:68:22:d4:db:66:3d:e9:62: 2f:d3:c1:ae:a7:51:a0:b8:b2:01:5e:95:7d:06:f0:33:ba:83: 32:43:a4:b7:85:12:5f:cd:cc:f8:22:94:30:72:e4:30:41:1b: 06:26:47:41:60:33:67:3f:ba:59:cc:bc:72:19:be:63:8e:39: d4:6c:e7:5f:b2:df:45:9f:f8:60:be:55:13:94:a5:23:fb:01: ef:95:fb:ec:d5:40:d1:2f:47:48:da:9e:cc:59:58:34:da:8c: 94:bf:3b:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaBDxIThQ2bbbhT3TJ/v+iM9zPHEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTYwNDQ0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjQ0ODU0MjcyYzM2MDQ4ODZjN2UwYWY1YjU4OWJkMGIx OTc0OTUzNTYyNzExYWZkOThlZTZjNjU0YTAwZjkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCy17FrlrtN2g8RF6iZuVKNhVk8qFyRG4EZvUz4pkO5zdM /uR4LddfUYrrehHuFYFlG/Iv1SfnH/rJjW9Wk4ECw+3Q+demiLu66w8uuqU9nbEo eqcs002UA8/0nDG50Sfil5eW3Yaw8eyHDoKUx364y9eYkPKqqHfI83BqSBwIdcEa dtnw1oaddakZV6EzOr+tVCjDli80/UPk3PFML1CFkOzxcAkfREaJSXcTFlmu57r8 U0dWNDs/ZxFbkLwjqvFvaAQdZtXjgwdIRhEEFCs/T+iHaVOof4GiAt/Om2D8S+Ll IQnxJzcfsZvtcOohdNBa1eARmTA157X1mEbSdPGPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhTtoqqum1laDx4OkMUIybeVFV5wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI5ODAzNDRkLWI4NGUtNGUyNy1hMjRiLTYxZTE1MGFhZGFhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAShvBAwDQYJKoZIhvcNAQELBQADggEBAEvDWCf4GvenJ2gDgMntebCGtvl1 5lWji3hgdkLb6gOVThSdZs39CSgosZePSN6RtxryrRu2NaqOVKQP85QU1esTELA6 /MD8uIV+otBavP/0WdpXj8Y4lJSiqz7FX0Zd7EAAI/XY78lldguwA8xbVjLyVWON ErLqYao2QkDzuI5Gjl5OoL9qBNll+RSp1nnrbcYgRkwGP05x5J5oItTbZj3pYi/T wa6nUaC4sgFelX0G8DO6gzJDpLeFEl/NzPgilDBy5DBBGwYmR0FgM2c/ulnMvHIZ vmOOOdRs51+y30Wf+GC+VROUpSP7Ae+V++zVQNEvR0jansxZWDTajJS/O2s= -----END CERTIFICATE-----Generated at Sat Oct 18 00:18:14 2025 by rpki-client