$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30687e8c-bef8-449a-8c9c-f47596630469.roa File: 30687e8c-bef8-449a-8c9c-f47596630469.roa (raw, json) Hash identifier: 9Vvcp+V7CDDaxPtkNCv3ZADf0MUDfLN1gHMpT4kEoIo= Subject key identifier: 3A:AE:52:B9:56:7A:2E:EE:58:5D:6C:FD:41:ED:51:B5:A0:AD:01:D5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70089CAA5F3807C2FB520A1F81C6F99A9CAC4A20 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30687e8c-bef8-449a-8c9c-f47596630469.roa Signing time: Thu 25 Sep 2025 18:17:23 +0000 ROA not before: Thu 25 Sep 2025 18:17:23 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:08:9c:aa:5f:38:07:c2:fb:52:0a:1f:81:c6:f9:9a:9c:ac:4a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:17:23 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=0d0a5c7b0543fc4fa6fc9993981931cbde6030e77e16eec557d9acbbf222f324, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:33:38:55:48:4f:b4:9b:14:9b:a0:7b:3c: b0:43:70:c0:ec:51:cd:82:ec:c2:68:82:08:f3:ae: 3b:5e:6d:98:b7:bc:ea:a9:4d:d9:9e:c7:ea:ac:7f: ff:a0:2f:c5:fe:32:ff:63:af:73:a1:9f:72:28:1b: 96:9c:da:6b:9f:b3:61:1c:69:84:f0:29:2e:59:53: ac:49:21:94:e4:e7:41:13:b2:c4:dd:a6:e8:a8:6e: 2b:59:df:15:85:c0:6c:82:95:0a:de:0f:da:9f:b6: ba:05:2e:ec:e1:98:b4:33:80:e7:b8:79:d4:77:d0: 7e:f3:66:c6:f6:64:e5:7c:a1:f2:c5:a7:a3:6a:e1: f7:ec:7c:ad:9e:73:fe:06:de:e9:ad:d4:45:9d:e3: 6b:1d:ee:8e:3f:d9:ba:90:67:20:4b:e2:94:8b:f1: 1a:fd:bb:de:3d:1a:67:0a:19:99:27:3c:8b:d5:51: d1:15:da:42:24:cd:8a:69:44:6f:2f:59:b3:ae:ac: bc:34:8a:43:2b:ea:3a:62:5e:e1:ca:ba:c6:f1:99: 08:29:b0:d7:70:dd:f8:6b:54:6b:30:dc:33:49:62: 5d:aa:a2:1c:c8:4c:91:21:e4:a4:e7:15:6f:57:f5: b6:58:15:1c:7c:d7:7d:a7:cb:7c:fb:3d:e4:bf:30: 6e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AE:52:B9:56:7A:2E:EE:58:5D:6C:FD:41:ED:51:B5:A0:AD:01:D5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30687e8c-bef8-449a-8c9c-f47596630469.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.198.0/24 Signature Algorithm: sha256WithRSAEncryption 91:4f:af:41:eb:09:de:7d:2c:93:e2:44:0f:68:d5:c1:bb:d0: d4:15:d2:e0:57:a7:88:4e:15:56:84:92:f1:92:7d:81:47:a3: 40:30:61:fc:35:37:94:06:b2:18:68:6f:65:30:87:a3:af:57: bb:04:a5:fe:8e:ce:3d:10:6a:9e:a1:3f:76:74:9f:96:69:78: 0e:cc:40:2b:e5:7b:a0:37:51:f9:63:d3:6a:92:34:4d:82:de: 2e:0e:c9:16:59:b1:fa:c1:05:ac:67:83:d2:f5:c6:98:25:82: f2:a2:44:0b:b8:dc:8b:e0:6b:18:ca:b7:6f:07:f2:13:be:43: e4:d5:20:de:ea:5f:28:2a:00:f7:08:14:32:54:28:20:1d:80: e5:09:82:39:60:ff:78:2b:bb:e4:48:6b:0e:c4:ce:8d:88:1c: 1b:16:43:04:9a:b4:64:db:b3:dd:93:cb:48:a4:e4:e8:24:9a: 88:94:2b:12:52:5d:4b:96:c8:fd:01:08:bf:16:4e:d2:24:79: 17:42:18:69:84:af:61:29:76:36:20:f1:8c:71:41:0c:f5:bf: 4e:cd:78:18:0d:37:46:c3:7a:10:24:17:75:2b:33:34:5f:f1: db:ce:89:24:03:e1:cd:74:90:4d:62:49:c4:a0:41:03:1b:d3: 76:d2:48:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcAicql84B8L7Ugofgcb5mpysSiAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgxNzIzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDBhNWM3YjA1NDNmYzRmYTZmYzk5OTM5ODE5MzFjYmRl NjAzMGU3N2UxNmVlYzU1N2Q5YWNiYmYyMjJmMzI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcOjM4VUhPtJsUm6B7PLBDcMDsUc2C7MJoggjzrjtebZi3 vOqpTdmex+qsf/+gL8X+Mv9jr3Ohn3IoG5ac2mufs2EcaYTwKS5ZU6xJIZTk50ET ssTdpuiobitZ3xWFwGyClQreD9qftroFLuzhmLQzgOe4edR30H7zZsb2ZOV8ofLF p6Nq4ffsfK2ec/4G3umt1EWd42sd7o4/2bqQZyBL4pSL8Rr9u949GmcKGZknPIvV UdEV2kIkzYppRG8vWbOurLw0ikMr6jpiXuHKusbxmQgpsNdw3fhrVGsw3DNJYl2q ohzITJEh5KTnFW9X9bZYFRx8132ny3z7PeS/MG4FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOq5SuVZ6Lu5YXWz9Qe1RtaCtAdUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMwNjg3ZThjLWJlZjgtNDQ5YS04YzljLWY0NzU5NjYzMDQ2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpcYwDQYJKoZIhvcNAQELBQADggEBAJFPr0HrCd59LJPiRA9o1cG70NQV 0uBXp4hOFVaEkvGSfYFHo0AwYfw1N5QGshhob2Uwh6OvV7sEpf6Ozj0Qap6hP3Z0 n5ZpeA7MQCvle6A3Uflj02qSNE2C3i4OyRZZsfrBBaxng9L1xpglgvKiRAu43Ivg axjKt28H8hO+Q+TVIN7qXygqAPcIFDJUKCAdgOUJgjlg/3gru+RIaw7Ezo2IHBsW QwSatGTbs92Ty0ik5OgkmoiUKxJSXUuWyP0BCL8WTtIkeRdCGGmEr2EpdjYg8Yxx QQz1v07NeBgNN0bDehAkF3UrMzRf8dvOiSQD4c10kE1iScSgQQMb03bSSJ4= -----END CERTIFICATE-----Generated at Fri Oct 17 23:58:13 2025 by rpki-client