$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7edfbc84-01cd-4ba2-81a2-472860b9b27e.roa File: 7edfbc84-01cd-4ba2-81a2-472860b9b27e.roa (raw, json) Hash identifier: d1AfccISxh8FwgPysyBseG5dL0BgDk7G+dLvSRjD9iY= Subject key identifier: 9F:F0:1C:D0:19:30:FF:3C:92:36:F3:67:6C:9D:77:53:20:F0:A9:09 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 56A7A37E33C2B243D55B0FB911DCA28C1BAE0412 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7edfbc84-01cd-4ba2-81a2-472860b9b27e.roa Signing time: Fri 26 Sep 2025 01:17:10 +0000 ROA not before: Fri 26 Sep 2025 01:17:10 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a7:a3:7e:33:c2:b2:43:d5:5b:0f:b9:11:dc:a2:8c:1b:ae:04:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:17:10 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=91d8b5f93decf963a2078aee4b46392fa884753fe05bd39c7de0ffbbd04f4800, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:29:e1:c7:27:03:11:22:0d:94:a6:66:42:0c: 11:d8:4c:0c:99:26:cc:73:aa:a7:7c:3c:62:e9:ea: c9:97:09:7d:20:b3:ec:e0:4a:58:8d:66:40:7c:35: 15:7d:bd:94:af:33:ca:9e:60:20:a1:53:eb:ee:e5: df:08:a8:7e:d6:0a:f9:19:0e:7a:d3:af:3b:a3:72: aa:3b:7d:2b:ca:d9:93:0b:fc:a1:34:54:90:90:6f: 99:f7:ab:26:e0:7a:a4:57:ca:44:9e:2d:95:d6:5a: 4f:85:34:c7:2c:bb:db:97:cd:33:e0:00:d5:39:ef: bb:19:38:45:42:01:aa:75:c1:90:ef:7b:a9:3d:6a: 17:1f:36:bd:a6:6a:da:fc:e8:0c:eb:7e:30:fd:66: 36:7b:3b:ae:b8:8f:c1:de:a7:ab:0a:c3:dc:91:71: 05:01:c8:db:4d:0e:22:52:aa:2d:b3:fb:68:83:07: a3:12:db:6d:97:19:b5:b6:ed:66:59:c6:95:28:5f: 61:8e:d6:af:d9:98:26:a4:13:b6:25:36:fb:25:7b: 00:3e:cb:b3:fe:27:d2:f3:36:45:98:36:c8:f5:29: ee:6c:5e:84:f1:d1:c6:f4:92:98:89:45:5f:59:e1: 1e:82:75:c7:69:8c:06:75:cd:3b:a7:c9:76:9d:27: df:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F0:1C:D0:19:30:FF:3C:92:36:F3:67:6C:9D:77:53:20:F0:A9:09 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7edfbc84-01cd-4ba2-81a2-472860b9b27e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.232.0/21 Signature Algorithm: sha256WithRSAEncryption 6d:95:42:b9:30:ce:42:81:82:8e:ef:08:24:f8:c2:00:4a:0c: 35:72:b0:56:02:91:2f:0e:5f:a6:ef:86:b5:a6:ba:96:84:a5: 41:67:94:82:1c:24:f4:1c:64:b5:c2:7e:6f:ae:68:9a:33:50: 85:ca:56:3f:99:81:e0:68:86:5f:3a:19:17:26:27:7c:24:1c: 10:96:f8:a6:c5:f8:32:6c:c2:ee:84:67:e8:eb:57:c1:61:ec: f7:f9:ad:60:93:31:db:20:57:0d:16:1e:da:31:95:a2:d5:20: 51:25:78:df:14:38:2c:ab:b8:01:68:ec:52:81:1d:7d:6b:f5: a1:05:aa:b7:c1:0e:05:e6:03:47:6d:5a:4a:26:91:4c:f2:d4: 7b:be:40:29:dd:42:07:dd:d6:93:34:5d:b9:c5:b0:82:e0:0e: a8:ab:43:11:28:b4:24:3b:45:e4:19:2b:f1:a0:73:a1:5f:9a: 3a:cf:f3:6b:9e:58:98:16:ee:ff:51:dd:d4:5a:18:6e:17:cc: 2e:c8:6e:0f:52:cb:62:80:cd:67:8b:39:ac:ae:cc:5d:00:15: fc:e0:47:5d:fc:26:3f:1f:94:32:45:de:6f:14:ce:fb:b7:64: c2:46:4e:53:93:ad:54:78:36:d9:f8:2a:4c:81:e0:0b:28:92: c1:97:d9:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVqejfjPCskPVWw+5EdyijBuuBBIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDExNzEwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MWQ4YjVmOTNkZWNmOTYzYTIwNzhhZWU0YjQ2MzkyZmE4 ODQ3NTNmZTA1YmQzOWM3ZGUwZmZiYmQwNGY0ODAwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfKeHHJwMRIg2UpmZCDBHYTAyZJsxzqqd8PGLp6smXCX0g s+zgSliNZkB8NRV9vZSvM8qeYCChU+vu5d8IqH7WCvkZDnrTrzujcqo7fSvK2ZML /KE0VJCQb5n3qybgeqRXykSeLZXWWk+FNMcsu9uXzTPgANU577sZOEVCAap1wZDv e6k9ahcfNr2matr86AzrfjD9ZjZ7O664j8Hep6sKw9yRcQUByNtNDiJSqi2z+2iD B6MS222XGbW27WZZxpUoX2GO1q/ZmCakE7YlNvslewA+y7P+J9LzNkWYNsj1Ke5s XoTx0cb0kpiJRV9Z4R6CdcdpjAZ1zTunyXadJ99ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn/Ac0Bkw/zySNvNnbJ13UyDwqQkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdlZGZiYzg0LTAxY2QtNGJhMi04MWEyLTQ3Mjg2MGI5YjI3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDpOgwDQYJKoZIhvcNAQELBQADggEBAG2VQrkwzkKBgo7vCCT4wgBKDDVy sFYCkS8OX6bvhrWmupaEpUFnlIIcJPQcZLXCfm+uaJozUIXKVj+ZgeBohl86GRcm J3wkHBCW+KbF+DJswu6EZ+jrV8Fh7Pf5rWCTMdsgVw0WHtoxlaLVIFEleN8UOCyr uAFo7FKBHX1r9aEFqrfBDgXmA0dtWkomkUzy1Hu+QCndQgfd1pM0XbnFsILgDqir QxEotCQ7ReQZK/Ggc6FfmjrP82ueWJgW7v9R3dRaGG4XzC7Ibg9Sy2KAzWeLOayu zF0AFfzgR138Jj8flDJF3m8Uzvu3ZMJGTlOTrVR4Ntn4KkyB4AsoksGX2TI= -----END CERTIFICATE-----Generated at Fri Oct 17 23:45:42 2025 by rpki-client