$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60b1ae10-fda3-4ee8-b4d5-937f6c1a5a1f.roa File: 60b1ae10-fda3-4ee8-b4d5-937f6c1a5a1f.roa (raw, json) Hash identifier: onDgxqMe8VbmYxuLhssYxkNm4U53EjeqToh53i4ijP0= Subject key identifier: 77:41:AE:C6:2C:DD:F1:AE:75:E0:6D:89:40:3F:B7:02:79:7E:44:D2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7EF04A746BDA9FE198759A194A9B14938D6AD148 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60b1ae10-fda3-4ee8-b4d5-937f6c1a5a1f.roa Signing time: Fri 26 Sep 2025 02:17:50 +0000 ROA not before: Fri 26 Sep 2025 02:17:50 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f0:4a:74:6b:da:9f:e1:98:75:9a:19:4a:9b:14:93:8d:6a:d1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:17:50 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=b5178357df4c686d120b728f04f5fb2d446391efe6aee2a8fb5f73be2ed166ed, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:65:bc:ae:1b:ff:2b:b9:bb:9e:98:73:15: 86:35:4c:6e:8f:69:48:43:32:5f:87:0e:5a:3a:df: 19:f7:6a:98:b5:1d:4f:2d:53:ea:b2:91:4a:a4:68: 6a:77:99:78:cd:88:26:4f:cb:6d:77:2a:56:5b:52: 05:49:88:a1:f5:85:b4:44:d7:fa:da:e4:54:f4:3d: 41:b3:60:03:d7:f4:1d:04:a1:b0:df:9b:d6:0f:e3: d8:93:e5:75:4f:d2:0b:eb:02:51:18:e3:46:f5:56: b0:0f:c3:fe:26:24:3e:31:1e:3e:0d:1b:cf:d9:d6: f8:74:5e:81:db:3d:24:44:52:01:52:71:46:02:6e: 1c:d4:3e:24:b6:ef:a2:8d:75:32:b1:88:95:9d:17: a8:aa:03:43:e9:50:74:05:0e:a7:cb:a5:9f:9e:cd: 58:ba:19:04:be:9a:a3:f6:37:15:7f:a3:44:53:99: 46:d0:82:39:15:2e:0b:4c:08:5d:eb:1b:c2:c3:f1: 90:85:4b:93:94:fa:ce:42:8b:ad:a0:f3:16:d8:ab: f2:d8:5c:bb:44:6f:20:64:bc:4f:55:96:9b:b7:51: bd:f9:71:f8:b0:49:fd:f5:ac:5f:50:a8:f6:52:a9: 8d:9b:02:dc:61:a6:e1:46:03:3f:85:2d:f5:cd:24: 88:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:41:AE:C6:2C:DD:F1:AE:75:E0:6D:89:40:3F:B7:02:79:7E:44:D2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60b1ae10-fda3-4ee8-b4d5-937f6c1a5a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.0.0/15 Signature Algorithm: sha256WithRSAEncryption 51:fa:82:be:18:fa:02:05:6d:b0:b1:2d:56:78:d8:9f:f7:4f: 13:99:78:90:ce:30:8e:31:a2:d2:9d:c0:76:6e:b0:95:e6:ad: 6d:bb:c3:7a:db:ae:1c:cb:c5:ba:87:ed:86:b4:9d:d6:f2:ec: 56:45:06:b5:1e:f8:d9:5c:e6:32:d8:8b:5b:d1:b0:76:e7:6f: ab:31:35:74:2a:7b:d4:71:5d:d6:b8:44:c4:9c:05:41:58:db: 3b:00:15:0a:36:bc:de:cb:fc:aa:ed:8a:d2:a2:47:13:82:4a: 9f:ae:a7:2c:d2:b5:73:bc:3a:0f:7b:a0:cb:bf:3d:25:34:f3: 4f:f3:70:f6:ee:65:1c:5c:6e:ea:62:9b:47:45:9a:62:05:ec: a1:f4:83:e1:0a:62:da:d0:85:f8:e2:b9:8b:3c:2d:a8:28:ad: 80:95:1f:9a:a5:ed:24:17:4a:bb:c0:ca:73:2d:40:c6:e3:44: b8:61:d7:74:ba:6b:60:8b:42:05:36:a7:c4:f6:e1:52:ed:a6: 5e:b6:b4:44:12:1e:c4:ee:87:4a:69:18:ea:c8:32:c8:01:38: ee:8c:c4:87:eb:b7:9e:00:28:1b:d9:95:06:45:0f:dd:2f:a4: 5f:58:ec:9a:eb:6e:7e:5d:12:4d:dd:23:e5:02:42:f6:ef:47: 32:d4:fb:25 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfvBKdGvan+GYdZoZSpsUk41q0UgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIxNzUwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTE3ODM1N2RmNGM2ODZkMTIwYjcyOGYwNGY1ZmIyZDQ0 NjM5MWVmZTZhZWUyYThmYjVmNzNiZTJlZDE2NmVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqrWW8rhv/K7m7nphzFYY1TG6PaUhDMl+HDlo63xn3api1 HU8tU+qykUqkaGp3mXjNiCZPy213KlZbUgVJiKH1hbRE1/ra5FT0PUGzYAPX9B0E obDfm9YP49iT5XVP0gvrAlEY40b1VrAPw/4mJD4xHj4NG8/Z1vh0XoHbPSREUgFS cUYCbhzUPiS276KNdTKxiJWdF6iqA0PpUHQFDqfLpZ+ezVi6GQS+mqP2NxV/o0RT mUbQgjkVLgtMCF3rG8LD8ZCFS5OU+s5Ci62g8xbYq/LYXLtEbyBkvE9Vlpu3Ub35 cfiwSf31rF9QqPZSqY2bAtxhpuFGAz+FLfXNJIjrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUd0Guxizd8a514G2JQD+3Anl+RNIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYwYjFhZTEwLWZkYTMtNGVlOC1iNGQ1LTkzN2Y2YzFhNWExZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEDoDANBgkqhkiG9w0BAQsFAAOCAQEAUfqCvhj6AgVtsLEtVnjYn/dPE5l4 kM4wjjGi0p3Adm6wleatbbvDetuuHMvFuofthrSd1vLsVkUGtR742VzmMtiLW9Gw dudvqzE1dCp71HFd1rhExJwFQVjbOwAVCja83sv8qu2K0qJHE4JKn66nLNK1c7w6 D3ugy789JTTzT/Nw9u5lHFxu6mKbR0WaYgXsofSD4Qpi2tCF+OK5izwtqCitgJUf mqXtJBdKu8DKcy1AxuNEuGHXdLprYItCBTanxPbhUu2mXra0RBIexO6HSmkY6sgy yAE47ozEh+u3ngAoG9mVBkUP3S+kX1jsmutufl0STd0j5QJC9u9HMtT7JQ== -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:18 2025 by rpki-client