$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/842855df-5c04-4b16-97d7-3e487608e0a3.roa File: 842855df-5c04-4b16-97d7-3e487608e0a3.roa (raw, json) Hash identifier: u4ZNwUBfvWwdPxFenLOnHlUEHzJXDekJl1D90REuofo= Subject key identifier: 71:88:E4:CE:04:99:CB:FD:63:00:02:E2:81:95:BB:94:0C:78:F1:8B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 07D41D91774DA8DB816BE7AA6D3882446481CBB8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/842855df-5c04-4b16-97d7-3e487608e0a3.roa Signing time: Thu 25 Sep 2025 18:47:49 +0000 ROA not before: Thu 25 Sep 2025 18:47:49 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d4:1d:91:77:4d:a8:db:81:6b:e7:aa:6d:38:82:44:64:81:cb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:47:49 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=4787f658783851f9fb42d6369b480b134b4605e8d90372e796dfb2329d82c502, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:98:61:cb:89:bf:64:32:a6:ed:af:a7:14:f9: 76:28:a1:a2:87:75:ae:19:5b:88:71:f8:59:23:6a: e5:24:54:10:8e:43:19:0e:9a:cc:b1:51:46:03:ab: 07:2e:35:a5:e8:fe:5f:15:ce:30:8d:77:3b:7c:f8: 49:7d:39:c9:38:6f:18:04:99:7e:70:40:57:fd:3d: 6a:57:a7:45:b0:ab:91:43:0a:20:48:41:29:54:dc: e0:3f:15:ee:70:15:f3:12:f4:c2:37:8c:d4:f7:71: c6:51:66:6c:57:44:be:f0:1d:f2:22:70:29:9b:df: c5:a4:40:50:20:f6:92:af:e1:46:22:82:b4:53:f8: b2:7e:e6:78:2b:8a:f6:75:d5:96:b7:b3:f3:d3:77: f6:28:2c:7c:1f:d0:fa:55:58:0b:48:4d:48:cb:ac: 63:e8:39:5b:f1:e5:49:5c:02:b6:65:54:db:b4:c3: ff:38:69:c0:c5:05:88:0f:d4:d0:6a:0b:d4:e9:33: 81:05:47:6e:ff:0c:f1:e0:13:be:7f:06:27:77:97: cd:db:33:a2:c2:d0:a0:97:e4:84:f2:4c:96:6d:02: 03:b0:99:cf:4c:48:ea:6d:81:5f:cd:c2:a9:af:69: 7c:ec:c9:ec:f8:63:82:c6:41:db:0e:3c:86:44:89: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:88:E4:CE:04:99:CB:FD:63:00:02:E2:81:95:BB:94:0C:78:F1:8B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/842855df-5c04-4b16-97d7-3e487608e0a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.76.0/24 Signature Algorithm: sha256WithRSAEncryption 50:f8:39:c1:e0:15:44:3f:9a:90:92:0f:30:c5:f0:77:47:3a: a0:90:ec:48:35:2c:a9:5e:df:b8:ef:c6:d1:31:62:91:64:d4: af:69:a2:95:4d:d8:4f:e9:45:43:59:f0:fc:9d:7e:4e:0e:90: 05:a8:cd:f5:14:3a:f4:11:67:7c:61:8f:49:fe:ea:5a:0c:58: c6:17:b7:19:df:50:be:77:1d:f6:4a:33:28:c4:6b:17:1e:02: 06:57:52:c6:1c:45:34:7e:7c:61:28:0e:d5:93:4c:d6:83:15: 2d:36:19:51:7e:c3:23:d9:1b:79:a7:69:1a:35:0a:7b:07:82: 56:a0:53:d5:04:9d:0e:70:61:7a:e1:59:8c:78:55:a4:86:ec: b4:00:f0:f0:af:8f:71:ac:63:ec:ae:35:07:23:1d:be:17:40: 20:5e:44:61:7e:3e:f5:6e:4a:b1:3e:ec:2e:9a:a5:ea:20:d0: 63:fc:ac:ad:2f:dd:85:c5:f8:20:be:d5:0d:0c:46:ea:bb:2e: eb:95:6a:82:ad:ab:85:62:33:ea:28:0d:83:6a:ed:12:ed:76: 1d:8f:83:b7:b9:9f:d4:75:a9:4a:42:d4:45:6f:18:be:8a:a0: 07:03:6a:65:7b:3e:67:e7:4d:4e:f6:8a:05:48:a4:22:06:f6: a0:7a:4c:3a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB9QdkXdNqNuBa+eqbTiCRGSBy7gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTg0NzQ5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Nzg3ZjY1ODc4Mzg1MWY5ZmI0MmQ2MzY5YjQ4MGIxMzRi NDYwNWU4ZDkwMzcyZTc5NmRmYjIzMjlkODJjNTAyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNmGHLib9kMqbtr6cU+XYooaKHda4ZW4hx+FkjauUkVBCO QxkOmsyxUUYDqwcuNaXo/l8VzjCNdzt8+El9Ock4bxgEmX5wQFf9PWpXp0Wwq5FD CiBIQSlU3OA/Fe5wFfMS9MI3jNT3ccZRZmxXRL7wHfIicCmb38WkQFAg9pKv4UYi grRT+LJ+5ngrivZ11Za3s/PTd/YoLHwf0PpVWAtITUjLrGPoOVvx5UlcArZlVNu0 w/84acDFBYgP1NBqC9TpM4EFR27/DPHgE75/Bid3l83bM6LC0KCX5ITyTJZtAgOw mc9MSOptgV/NwqmvaXzsyez4Y4LGQdsOPIZEiUv7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcYjkzgSZy/1jAALigZW7lAx48YswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0Mjg1NWRmLTVjMDQtNGIxNi05N2Q3LTNlNDg3NjA4ZTBhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpkwwDQYJKoZIhvcNAQELBQADggEBAFD4OcHgFUQ/mpCSDzDF8HdHOqCQ 7Eg1LKle37jvxtExYpFk1K9popVN2E/pRUNZ8Pydfk4OkAWozfUUOvQRZ3xhj0n+ 6loMWMYXtxnfUL53HfZKMyjEaxceAgZXUsYcRTR+fGEoDtWTTNaDFS02GVF+wyPZ G3mnaRo1CnsHglagU9UEnQ5wYXrhWYx4VaSG7LQA8PCvj3GsY+yuNQcjHb4XQCBe RGF+PvVuSrE+7C6apeog0GP8rK0v3YXF+CC+1Q0MRuq7LuuVaoKtq4ViM+ooDYNq 7RLtdh2Pg7e5n9R1qUpC1EVvGL6KoAcDamV7PmfnTU72igVIpCIG9qB6TDo= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:51 2025 by rpki-client