$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d82a559-e0df-4318-9a3f-86879956c1ad.roa File: 3d82a559-e0df-4318-9a3f-86879956c1ad.roa (raw, json) Hash identifier: xioiDryScQ/4WzckXVDXUN3vJpIR6SUUkf4bMO0jSAU= Subject key identifier: 23:4C:1C:19:98:26:88:CA:44:60:38:A6:61:1E:E0:61:A1:BB:D6:2E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D01056C0DDB9B2B485DB997C0A7F2A37B2A6A90 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d82a559-e0df-4318-9a3f-86879956c1ad.roa Signing time: Thu 25 Sep 2025 18:12:00 +0000 ROA not before: Thu 25 Sep 2025 18:12:00 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:01:05:6c:0d:db:9b:2b:48:5d:b9:97:c0:a7:f2:a3:7b:2a:6a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:12:00 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=904e21c6dc91598027cd1d8d3df781bc15a210b7216b2a9f864e3f69f85987cd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:c4:52:a1:9e:6f:d5:a1:eb:7e:38:46:af: 18:37:7c:d7:84:b5:3f:24:9d:ee:ab:f1:46:6f:69: 04:1a:ef:20:57:43:eb:39:c4:7a:2b:a9:c2:23:dc: 03:1a:5a:7d:57:14:9f:5a:24:17:68:b2:28:db:57: 97:d1:d0:2b:5d:54:c8:c7:8a:a1:0b:60:90:7a:f5: 51:fa:bb:7f:93:c6:0e:bf:5f:f2:e0:97:af:ad:75: 09:ce:1d:df:1c:22:9e:b8:a0:c8:7b:84:1c:2e:d8: 66:b5:53:85:e6:ff:28:1b:2a:bb:b1:68:77:cb:af: 3c:e1:fb:57:06:39:cb:ed:c2:0e:6c:04:f1:4e:5f: 3d:2f:7f:8d:67:72:38:45:33:2d:a5:ec:40:4b:ad: 8c:07:a9:a9:be:bb:b4:a0:d7:e5:6d:1f:77:57:81: 19:ef:60:d1:44:8e:5c:c2:4f:96:a1:d6:34:3e:07: b3:bc:e5:cd:be:7a:6e:e9:42:de:c7:98:ec:2c:79: 44:a9:15:e2:48:0b:69:c9:b2:70:ed:f6:aa:a6:52: 57:48:ed:85:54:7b:4e:ce:c4:cc:00:a0:bf:37:bf: c8:08:03:0c:e4:a3:36:ed:61:7b:94:16:d5:42:b7: 68:72:44:b5:40:35:0e:82:1f:66:c0:1e:7d:0c:ed: 50:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4C:1C:19:98:26:88:CA:44:60:38:A6:61:1E:E0:61:A1:BB:D6:2E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d82a559-e0df-4318-9a3f-86879956c1ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.114.0/24 Signature Algorithm: sha256WithRSAEncryption 03:0e:eb:76:6f:42:15:0d:fc:31:dd:48:07:f3:26:ac:69:9f: 8c:cb:0f:6f:c1:fb:3a:2e:0a:b3:a9:62:96:24:41:ef:8a:ca: 52:66:1f:06:69:bf:e9:94:5c:50:cc:8c:25:90:24:bb:4d:ed: c8:45:25:27:cb:9e:61:d8:d3:73:28:fd:17:41:4b:68:0f:69: 1e:dc:9e:a7:c3:2a:b5:02:51:82:2f:83:c0:13:79:a7:38:59: cd:8c:e1:7c:8e:8d:27:16:3b:90:50:1b:6e:37:b8:42:34:4c: 23:d9:f7:7d:36:b6:52:38:fb:b3:39:30:46:84:06:04:9b:36: e2:a5:1c:c1:c3:44:b2:f9:64:49:cd:63:03:c5:d6:82:d8:2d: 93:28:bf:40:c9:34:8e:50:72:97:1c:09:f6:17:71:a3:26:43: c8:85:0b:67:b8:29:d9:3b:fa:ec:a9:cb:7e:bf:e0:61:85:0d: 7c:85:81:d9:ce:6c:13:80:d5:25:18:d1:eb:aa:03:b1:89:91: 30:6b:2d:45:ce:33:b6:c6:e1:c3:62:1c:f6:ec:12:94:f7:79: 37:5e:1d:01:95:ac:02:04:3a:f0:07:d1:a2:22:7d:55:d6:9e: 4b:73:a1:6f:91:e2:d5:3e:ef:19:4c:58:54:b6:1d:5f:ca:b5: 59:8e:ea:f5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDQEFbA3bmytIXbmXwKfyo3sqapAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgxMjAwWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDRlMjFjNmRjOTE1OTgwMjdjZDFkOGQzZGY3ODFiYzE1 YTIxMGI3MjE2YjJhOWY4NjRlM2Y2OWY4NTk4N2NkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5dcRSoZ5v1aHrfjhGrxg3fNeEtT8kne6r8UZvaQQa7yBX Q+s5xHorqcIj3AMaWn1XFJ9aJBdosijbV5fR0CtdVMjHiqELYJB69VH6u3+Txg6/ X/Lgl6+tdQnOHd8cIp64oMh7hBwu2Ga1U4Xm/ygbKruxaHfLrzzh+1cGOcvtwg5s BPFOXz0vf41ncjhFMy2l7EBLrYwHqam+u7Sg1+VtH3dXgRnvYNFEjlzCT5ah1jQ+ B7O85c2+em7pQt7HmOwseUSpFeJIC2nJsnDt9qqmUldI7YVUe07OxMwAoL83v8gI AwzkozbtYXuUFtVCt2hyRLVANQ6CH2bAHn0M7VDrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI0wcGZgmiMpEYDimYR7gYaG71i4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNkODJhNTU5LWUwZGYtNDMxOC05YTNmLTg2ODc5OTU2YzFhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpXIwDQYJKoZIhvcNAQELBQADggEBAAMO63ZvQhUN/DHdSAfzJqxpn4zL D2/B+zouCrOpYpYkQe+KylJmHwZpv+mUXFDMjCWQJLtN7chFJSfLnmHY03Mo/RdB S2gPaR7cnqfDKrUCUYIvg8ATeac4Wc2M4XyOjScWO5BQG243uEI0TCPZ9302tlI4 +7M5MEaEBgSbNuKlHMHDRLL5ZEnNYwPF1oLYLZMov0DJNI5QcpccCfYXcaMmQ8iF C2e4Kdk7+uypy36/4GGFDXyFgdnObBOA1SUY0euqA7GJkTBrLUXOM7bG4cNiHPbs EpT3eTdeHQGVrAIEOvAH0aIifVXWnktzoW+R4tU+7xlMWFS2HV/KtVmO6vU= -----END CERTIFICATE-----Generated at Sat Oct 18 02:36:50 2025 by rpki-client