$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/657203aa-bc59-499e-a071-5270518f4319.roa File: 657203aa-bc59-499e-a071-5270518f4319.roa (raw, json) Hash identifier: EoaQgBwx8UqqCll5XCxCCmYznTjyH1RunKmCT2zwdps= Subject key identifier: 5D:B2:99:CF:95:C4:2B:E8:22:28:F3:0B:E7:75:E0:46:FB:D1:56:E8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3F97762CD0B6D2A6E356A7AD007E43B805F1FE39 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/657203aa-bc59-499e-a071-5270518f4319.roa Signing time: Fri 26 Sep 2025 01:17:24 +0000 ROA not before: Fri 26 Sep 2025 01:17:24 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:97:76:2c:d0:b6:d2:a6:e3:56:a7:ad:00:7e:43:b8:05:f1:fe:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:17:24 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=44f348f010480cfc98484694529fff65a2b6fe672ace171232320a0a1bbad5ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:45:21:78:fc:bd:ca:b3:2f:2c:84:23:25:4e: 56:d2:40:b2:02:d2:50:14:7b:2f:05:a5:e8:41:85: 84:08:c2:dd:8c:3a:70:02:2b:5d:29:47:a5:38:63: 73:56:b7:7d:a1:9a:fb:49:53:8e:b1:43:71:24:3b: 2f:28:d2:53:75:79:22:b8:cc:ec:0e:1a:66:6f:ea: 08:94:ab:4a:3f:f1:d7:c9:b3:dc:c0:cf:a5:d6:7e: 7f:fd:95:e7:fd:7a:fe:11:37:e3:63:90:13:af:c7: 0d:ea:be:c9:9e:96:fe:0f:e9:a1:f0:3c:19:04:2b: 8f:7e:f6:01:55:6d:74:5c:f6:c4:d4:3a:41:78:6e: b7:12:9b:81:4e:b8:e8:cd:1a:82:d5:36:12:a6:75: 29:6d:db:1a:08:b1:6c:43:e3:1c:ee:57:cf:4c:d9: 11:96:f8:7f:e2:68:40:27:f1:a8:2e:68:ab:ad:60: 12:64:a0:d1:1f:46:4b:4c:03:e4:73:26:17:e4:3c: d7:4b:f2:94:6a:93:6f:7e:b7:7c:62:29:c5:a0:c5: b9:06:5c:6e:8c:a4:17:10:70:48:45:ac:e7:0d:99: 29:35:a0:19:d7:0b:a8:c2:5e:20:4f:7d:f8:c4:54: 14:82:aa:1b:fc:31:c3:20:01:4c:5c:f8:0b:e6:e5: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B2:99:CF:95:C4:2B:E8:22:28:F3:0B:E7:75:E0:46:FB:D1:56:E8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/657203aa-bc59-499e-a071-5270518f4319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.0.0/21 Signature Algorithm: sha256WithRSAEncryption 37:85:2f:88:c4:cb:36:3c:ed:2c:d5:eb:d7:f0:72:3f:98:8a: f5:02:bf:4b:0d:03:fa:c3:60:83:52:4f:c1:7e:bc:c3:bb:d3: 85:a4:26:72:40:19:03:ef:33:20:5d:1a:17:3b:5f:80:bd:8d: b5:e5:29:2e:fd:ce:a4:d3:49:34:45:ce:36:18:5b:d0:3e:ea: e2:fd:d5:f3:f0:03:e2:f7:92:38:84:b7:cb:e4:b4:a1:f5:03: 32:82:8f:46:24:b8:fe:21:be:2d:a2:4c:9d:3b:9c:d0:f0:bd: 7f:42:50:cc:98:99:74:e4:37:5a:16:ae:4c:8d:b1:9b:a6:b4: a3:ac:08:64:0d:0a:a7:4d:09:bc:00:15:e6:7a:23:95:e2:4d: 96:71:42:7d:46:ec:83:a1:b5:44:2a:3e:11:59:32:64:c3:86: 40:77:d1:d1:1f:76:8a:da:36:cc:74:2c:e3:3a:b0:d1:88:a4: 7b:ac:d9:51:8b:e3:87:ca:1d:e7:16:af:03:dd:14:7c:42:41: 4e:db:a6:77:fe:14:f4:83:da:f6:89:26:26:d8:38:6f:47:64: 3a:ac:a4:29:ec:a3:46:31:a8:94:6d:75:fa:57:af:db:83:cd: 7c:ec:9b:28:af:a2:6b:1e:91:bc:4c:79:bc:e6:31:83:d8:b6: 68:05:d6:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP5d2LNC20qbjVqetAH5DuAXx/jkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDExNzI0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGYzNDhmMDEwNDgwY2ZjOTg0ODQ2OTQ1MjlmZmY2NWEy YjZmZTY3MmFjZTE3MTIzMjMyMGEwYTFiYmFkNWNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+RSF4/L3Ksy8shCMlTlbSQLIC0lAUey8FpehBhYQIwt2M OnACK10pR6U4Y3NWt32hmvtJU46xQ3EkOy8o0lN1eSK4zOwOGmZv6giUq0o/8dfJ s9zAz6XWfn/9lef9ev4RN+NjkBOvxw3qvsmelv4P6aHwPBkEK49+9gFVbXRc9sTU OkF4brcSm4FOuOjNGoLVNhKmdSlt2xoIsWxD4xzuV89M2RGW+H/iaEAn8aguaKut YBJkoNEfRktMA+RzJhfkPNdL8pRqk29+t3xiKcWgxbkGXG6MpBcQcEhFrOcNmSk1 oBnXC6jCXiBPffjEVBSCqhv8McMgAUxc+Avm5fz5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXbKZz5XEK+giKPML53XgRvvRVugwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY1NzIwM2FhLWJjNTktNDk5ZS1hMDcxLTUyNzA1MThmNDMxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDpQAwDQYJKoZIhvcNAQELBQADggEBADeFL4jEyzY87SzV69fwcj+YivUC v0sNA/rDYINST8F+vMO704WkJnJAGQPvMyBdGhc7X4C9jbXlKS79zqTTSTRFzjYY W9A+6uL91fPwA+L3kjiEt8vktKH1AzKCj0YkuP4hvi2iTJ07nNDwvX9CUMyYmXTk N1oWrkyNsZumtKOsCGQNCqdNCbwAFeZ6I5XiTZZxQn1G7IOhtUQqPhFZMmTDhkB3 0dEfdoraNsx0LOM6sNGIpHus2VGL44fKHecWrwPdFHxCQU7bpnf+FPSD2vaJJibY OG9HZDqspCnso0YxqJRtdfpXr9uDzXzsmyivomsekbxMebzmMYPYtmgF1jY= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:35 2025 by rpki-client