$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30e071de-13eb-43af-a55e-cca1bf4b5085.roa File: 30e071de-13eb-43af-a55e-cca1bf4b5085.roa (raw, json) Hash identifier: pCkW5kF21Z4r3ESp9QqnX6hKxkQRhRbl7JrbCzZlKUM= Subject key identifier: 00:35:30:74:9D:6E:4E:F6:18:55:DC:B0:05:12:74:15:6E:7D:58:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 25F673E05A14809133BCF85B25B8EC9DB519A1A1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30e071de-13eb-43af-a55e-cca1bf4b5085.roa Signing time: Thu 25 Sep 2025 18:57:06 +0000 ROA not before: Thu 25 Sep 2025 18:57:06 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.167.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f6:73:e0:5a:14:80:91:33:bc:f8:5b:25:b8:ec:9d:b5:19:a1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:57:06 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=50e05ee5662796888ce719d132d32379e06f45bc75acdd4866c46243fb54eaa6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:73:05:4c:8b:cc:e2:df:d7:7a:61:11:22:a7: 6a:5e:f9:60:a7:67:a7:72:0d:0b:28:19:3d:a2:dd: 52:d8:34:ac:23:77:b5:4f:35:7e:09:e4:c5:ee:c3: 0c:a5:74:10:70:db:c9:13:a5:54:bd:24:69:06:1f: 4d:48:2e:ae:4d:4b:b0:dc:06:ce:62:19:82:db:f5: bd:56:c5:33:8c:f8:00:6c:bc:8b:be:9b:3d:ca:46: e0:ba:ae:9d:6c:e6:96:2b:02:0c:a0:e6:2d:f4:d6: cd:e1:31:0c:5e:a0:e2:34:05:c3:e5:ce:f5:27:bb: 74:cb:52:bc:44:8d:b4:7e:11:4e:d8:04:b5:e9:82: aa:bb:9f:cf:d4:c3:b8:f1:d0:6f:ce:93:99:58:8c: 01:ca:68:34:51:0b:ce:88:9e:da:6a:d3:21:8e:17: 29:97:81:ac:7e:b0:58:d0:b9:72:16:d3:b5:f0:3d: bd:b6:1e:4b:3f:91:4e:bf:aa:2a:68:91:90:a9:dc: bb:45:e3:37:75:c7:68:cb:44:ae:6f:41:a9:a8:80: 92:d9:1c:f1:f3:a4:9d:77:e9:b8:92:15:a4:70:eb: ac:32:56:b6:c9:e7:fa:e1:95:d5:40:80:45:db:87: 75:c1:92:74:6a:1d:d2:c8:42:f0:9c:86:e0:2a:bd: dc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:35:30:74:9D:6E:4E:F6:18:55:DC:B0:05:12:74:15:6E:7D:58:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30e071de-13eb-43af-a55e-cca1bf4b5085.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.167.185.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:02:85:68:6d:fe:b5:48:93:a1:7f:fd:13:2b:19:d0:31:22: 87:dc:e5:c5:e6:c3:51:4a:9d:28:33:1c:72:d9:b4:4c:f8:fa: cb:79:1b:fb:cf:ac:f1:90:d1:b3:36:be:12:ad:4d:c8:05:75: ba:f3:1b:45:7f:2c:67:c4:89:3e:8c:9c:0a:d4:cd:c4:a5:cc: ce:f2:68:44:88:ea:ac:84:b6:be:6f:e1:95:2b:55:e5:a7:8e: 62:ed:6b:28:3e:c8:2b:39:05:ed:e6:80:f1:54:ed:5b:42:1b: 04:6d:28:b0:d9:0c:9a:fc:8b:98:b1:8b:0e:90:84:1e:c9:c3: 75:49:1e:2c:0b:75:14:dd:30:a8:1a:72:25:0a:43:7c:0c:00: 46:a7:e1:59:7e:5d:52:91:ec:74:66:49:f8:2b:b1:22:9a:c9: d5:8a:95:5c:c1:23:15:79:ab:59:40:5f:e1:f2:eb:21:c8:83: 15:cf:c2:9a:bc:8a:ad:d8:4c:28:6e:f5:1a:29:fb:36:ec:f5: cf:ac:2e:fe:c8:55:a0:aa:a6:ff:48:f8:b0:27:73:83:5b:14: df:ad:4c:3c:11:68:13:42:52:1a:02:22:01:aa:6f:56:47:18: e5:70:3d:59:b6:e3:b6:cc:de:dc:5b:2f:4c:33:87:dc:d9:67: 36:72:d9:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJfZz4FoUgJEzvPhbJbjsnbUZoaEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTg1NzA2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGUwNWVlNTY2Mjc5Njg4OGNlNzE5ZDEzMmQzMjM3OWUw NmY0NWJjNzVhY2RkNDg2NmM0NjI0M2ZiNTRlYWE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWcwVMi8zi39d6YREip2pe+WCnZ6dyDQsoGT2i3VLYNKwj d7VPNX4J5MXuwwyldBBw28kTpVS9JGkGH01ILq5NS7DcBs5iGYLb9b1WxTOM+ABs vIu+mz3KRuC6rp1s5pYrAgyg5i301s3hMQxeoOI0BcPlzvUnu3TLUrxEjbR+EU7Y BLXpgqq7n8/Uw7jx0G/Ok5lYjAHKaDRRC86Intpq0yGOFymXgax+sFjQuXIW07Xw Pb22Hks/kU6/qipokZCp3LtF4zd1x2jLRK5vQamogJLZHPHzpJ136biSFaRw66wy VrbJ5/rhldVAgEXbh3XBknRqHdLIQvCchuAqvdzfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUADUwdJ1uTvYYVdywBRJ0FW59WL4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMwZTA3MWRlLTEzZWItNDNhZi1hNTVlLWNjYTFiZjRiNTA4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADp7kwDQYJKoZIhvcNAQELBQADggEBADoChWht/rVIk6F//RMrGdAxIofc 5cXmw1FKnSgzHHLZtEz4+st5G/vPrPGQ0bM2vhKtTcgFdbrzG0V/LGfEiT6MnArU zcSlzM7yaESI6qyEtr5v4ZUrVeWnjmLtayg+yCs5Be3mgPFU7VtCGwRtKLDZDJr8 i5ixiw6QhB7Jw3VJHiwLdRTdMKgaciUKQ3wMAEan4Vl+XVKR7HRmSfgrsSKaydWK lVzBIxV5q1lAX+Hy6yHIgxXPwpq8iq3YTChu9Rop+zbs9c+sLv7IVaCqpv9I+LAn c4NbFN+tTDwRaBNCUhoCIgGqb1ZHGOVwPVm247bM3txbL0wzh9zZZzZy2cA= -----END CERTIFICATE-----Generated at Sat Oct 18 05:09:26 2025 by rpki-client