$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/844e4076-8af2-4740-9afb-ce79048563c8.roa File: 844e4076-8af2-4740-9afb-ce79048563c8.roa (raw, json) Hash identifier: Wmj58mWBk4WK8pfTws87r7gIV+qj97xagyAi7Zb5oy0= Subject key identifier: 49:3B:67:62:A6:D5:81:92:5B:35:90:8A:BC:30:4D:47:65:EA:05:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 38319607142D667AFB1393CD621E8D95BF79D8E7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/844e4076-8af2-4740-9afb-ce79048563c8.roa Signing time: Thu 25 Sep 2025 22:14:51 +0000 ROA not before: Thu 25 Sep 2025 22:14:51 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:31:96:07:14:2d:66:7a:fb:13:93:cd:62:1e:8d:95:bf:79:d8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:14:51 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=366ee9a2072c1cf0f561a1b28d64701eb03c9ff666af6395562c26403d535b18, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:11:48:aa:20:41:a4:22:b7:13:92:9c:f3: 23:da:8b:30:f2:48:8c:26:8c:13:20:9a:de:6b:ca: 11:af:bb:4f:8d:d7:04:f7:ba:84:24:74:31:8d:d0: 4a:94:94:77:80:fd:e9:38:93:ef:47:fd:2e:e1:8a: ec:d3:14:53:5f:81:e7:4a:7a:c0:70:bc:d2:f6:79: 2a:10:27:a5:a4:50:73:af:9f:69:d7:0d:ff:8f:36: 9e:57:80:d2:ba:a8:ae:a1:15:3b:3a:67:fa:f1:0a: 5d:76:b7:99:ac:91:43:bb:51:22:7d:b8:7b:92:04: 6d:85:7d:6f:43:be:29:dc:35:9c:32:2d:49:c0:ed: 37:31:8c:d6:20:ce:92:ec:a3:65:4f:65:5c:88:d2: b6:64:e7:03:5e:03:34:a8:5e:71:7e:e4:62:57:6e: 8a:cb:47:7d:ed:a8:9e:fa:da:86:34:d0:59:53:ae: b5:a0:7d:5f:d5:2f:1d:c3:fa:34:41:a6:58:a8:2d: 71:7f:f1:b7:d2:df:fb:e5:3d:7c:15:38:c8:9d:04: 39:97:bd:bc:fa:0a:69:6d:84:64:f1:1f:ab:62:60: 16:7c:55:6c:99:a2:01:58:94:6b:e7:86:3d:f3:b5: 79:f2:9b:8d:62:ee:5e:8f:c4:55:ea:45:81:67:35: e8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3B:67:62:A6:D5:81:92:5B:35:90:8A:BC:30:4D:47:65:EA:05:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/844e4076-8af2-4740-9afb-ce79048563c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.192.0/23 Signature Algorithm: sha256WithRSAEncryption 96:fb:79:80:72:51:11:7b:ac:85:23:b7:af:ec:4e:c1:1a:0e: 81:45:70:e3:ea:05:28:a3:61:19:c6:7c:bc:27:2c:8a:d7:f9: e4:81:c6:34:09:d9:38:bb:69:2f:80:94:5c:ba:fe:d6:14:b9: bd:03:fe:74:07:53:46:b8:2c:c3:b2:80:3c:2d:0e:6d:e5:11: 2c:ed:f1:b3:f2:41:63:24:76:73:36:bd:3c:47:b8:8a:20:01: 6c:51:9b:b3:7d:de:f0:1d:2f:9f:82:82:96:0a:d3:04:9d:47: 4e:a3:37:93:cf:4c:83:35:e3:48:de:f7:60:f0:e6:b3:a4:67: c5:6a:3d:26:36:62:a2:4e:ad:fc:f2:49:ee:79:18:b4:66:f3: 1d:fd:26:42:62:c4:0d:f5:3f:1e:a6:23:cc:8c:96:63:89:2a: 97:c9:68:b4:45:7b:3b:a4:3e:e0:1f:20:fb:40:43:7a:6d:31: d5:29:0b:de:46:df:45:54:d0:60:6e:90:24:02:4e:b1:32:58: be:2d:90:ea:54:d2:d2:c8:d5:aa:9a:36:a8:8e:4b:d0:e4:5f: 20:0f:49:f1:88:9b:1e:6c:64:d0:fe:df:76:b2:9b:12:12:74: 1e:f8:73:6d:95:06:89:fa:e5:c6:62:b8:ca:40:61:04:ac:53: 87:b8:d9:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUODGWBxQtZnr7E5PNYh6Nlb952OcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIxNDUxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjZlZTlhMjA3MmMxY2YwZjU2MWExYjI4ZDY0NzAxZWIw M2M5ZmY2NjZhZjYzOTU1NjJjMjY0MDNkNTM1YjE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3VRFIqiBBpCK3E5Kc8yPaizDySIwmjBMgmt5ryhGvu0+N 1wT3uoQkdDGN0EqUlHeA/ek4k+9H/S7hiuzTFFNfgedKesBwvNL2eSoQJ6WkUHOv n2nXDf+PNp5XgNK6qK6hFTs6Z/rxCl12t5mskUO7USJ9uHuSBG2FfW9DvincNZwy LUnA7TcxjNYgzpLso2VPZVyI0rZk5wNeAzSoXnF+5GJXborLR33tqJ762oY00FlT rrWgfV/VLx3D+jRBplioLXF/8bfS3/vlPXwVOMidBDmXvbz6CmlthGTxH6tiYBZ8 VWyZogFYlGvnhj3ztXnym41i7l6PxFXqRYFnNehfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSTtnYqbVgZJbNZCKvDBNR2XqBTwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0NGU0MDc2LThhZjItNDc0MC05YWZiLWNlNzkwNDg1NjNjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDpcAwDQYJKoZIhvcNAQELBQADggEBAJb7eYByURF7rIUjt6/sTsEaDoFF cOPqBSijYRnGfLwnLIrX+eSBxjQJ2Ti7aS+AlFy6/tYUub0D/nQHU0a4LMOygDwt Dm3lESzt8bPyQWMkdnM2vTxHuIogAWxRm7N93vAdL5+CgpYK0wSdR06jN5PPTIM1 40je92Dw5rOkZ8VqPSY2YqJOrfzySe55GLRm8x39JkJixA31Px6mI8yMlmOJKpfJ aLRFezukPuAfIPtAQ3ptMdUpC95G30VU0GBukCQCTrEyWL4tkOpU0tLI1aqaNqiO S9DkXyAPSfGImx5sZND+33aymxISdB74c22VBon65cZiuMpAYQSsU4e42Y8= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:56 2025 by rpki-client