$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5378ad2-5723-4333-9456-1c2881e9c4c5.roa File: a5378ad2-5723-4333-9456-1c2881e9c4c5.roa (raw, json) Hash identifier: B76xiv56N4tg7tTw4jBSknvWbNlCJKf6XmBIR6v+mUA= Subject key identifier: 7E:16:F2:1B:5B:69:EA:59:E7:C0:FB:E1:23:BA:87:43:B6:AC:F6:0F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 212577967E342F24F7A637E221B2F012BE243AC6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5378ad2-5723-4333-9456-1c2881e9c4c5.roa Signing time: Fri 26 Sep 2025 01:47:06 +0000 ROA not before: Fri 26 Sep 2025 01:47:06 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.163.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:25:77:96:7e:34:2f:24:f7:a6:37:e2:21:b2:f0:12:be:24:3a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:47:06 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=645bbcfe28d8680be38679a151d5642239ebe664835cf823622b3277eeb943b0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:29:3c:36:60:b9:e7:cb:d6:30:1f:2b:55:29: 8b:0e:a2:56:28:34:09:e7:59:9a:8c:92:b3:bd:ed: 5b:12:72:3d:13:c8:ca:a7:8f:b2:11:a1:21:eb:f6: 12:45:36:08:ee:92:11:67:f7:92:8a:51:93:7d:a2: 94:ee:01:4a:6d:24:c3:1b:3d:8b:48:0a:b3:00:a9: 21:80:56:1d:dc:65:12:04:21:48:b6:d0:00:ac:f8: 53:2f:4b:60:86:69:b9:05:d5:d8:5c:e4:18:b2:43: 9c:8d:ca:29:1f:5e:40:cb:16:9c:21:3d:57:66:bb: 3e:29:54:6d:a4:29:3f:76:4a:bd:27:7f:3f:8d:80: fd:99:f3:7c:aa:ea:6f:75:dd:08:fb:78:ec:31:e5: ec:79:fb:14:3e:ac:2d:8a:53:3a:27:2b:53:91:e8: 25:f7:8c:71:75:db:75:d5:9e:90:c5:b3:d0:8e:0b: 9d:c0:e7:42:23:81:a2:84:37:36:1b:da:c1:77:aa: f1:bb:08:50:70:e3:3e:cb:88:26:f4:cd:18:de:5e: 8a:0f:ad:c4:72:97:b6:59:f7:22:8b:1f:c4:8c:d7: 02:a5:9c:63:01:dc:df:6a:8a:72:d2:aa:be:42:ce: aa:97:9a:f1:e6:f2:db:da:0b:b8:dd:41:d0:0e:b8: 18:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:16:F2:1B:5B:69:EA:59:E7:C0:FB:E1:23:BA:87:43:B6:AC:F6:0F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5378ad2-5723-4333-9456-1c2881e9c4c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.163.208.0/20 Signature Algorithm: sha256WithRSAEncryption 97:d6:a3:cd:b9:c1:3d:97:89:db:26:7a:94:fc:ee:50:da:07: 34:5d:80:1b:7f:8b:88:92:7b:40:b5:66:23:22:ed:38:92:34: 0c:49:03:78:b0:c2:4c:e1:26:60:2c:47:e9:b9:23:05:d7:85: 33:e0:a5:c4:94:bd:84:ab:15:da:74:8f:3e:cf:a3:0b:c0:1d: 0c:27:44:00:94:c4:7a:c7:24:57:3c:f5:4d:e5:eb:5c:60:f6: 98:98:f5:2e:f8:f7:0e:b5:ce:c0:e0:cb:77:84:2f:3d:16:06: 72:bb:7e:34:a2:da:fa:bc:a4:2f:89:c6:57:f9:a9:92:8a:15: 61:47:b8:01:47:97:4a:19:2e:6a:cb:70:55:f7:9c:7b:fc:11: 24:07:ff:14:8c:02:91:1c:89:03:b3:19:cb:ad:4c:b1:bc:7a: af:3b:02:8c:c7:e8:9a:bb:27:d3:f7:34:86:ac:6c:6f:49:63: 54:98:87:ea:55:7e:71:39:13:b5:5b:f1:ad:ee:2e:94:2d:f8: 37:31:6b:19:c1:90:b4:ee:04:09:2f:13:87:87:be:93:55:f3: 61:31:e4:8a:70:a4:c2:c9:dd:a4:15:3c:d6:b5:c2:a0:da:5c: 18:48:04:86:5c:7c:43:85:a1:88:6a:75:4f:b7:7e:1a:ff:6c: 30:a5:2c:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUISV3ln40LyT3pjfiIbLwEr4kOsYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDE0NzA2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDViYmNmZTI4ZDg2ODBiZTM4Njc5YTE1MWQ1NjQyMjM5 ZWJlNjY0ODM1Y2Y4MjM2MjJiMzI3N2VlYjk0M2IwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPKTw2YLnny9YwHytVKYsOolYoNAnnWZqMkrO97VsScj0T yMqnj7IRoSHr9hJFNgjukhFn95KKUZN9opTuAUptJMMbPYtICrMAqSGAVh3cZRIE IUi20ACs+FMvS2CGabkF1dhc5BiyQ5yNyikfXkDLFpwhPVdmuz4pVG2kKT92Sr0n fz+NgP2Z83yq6m913Qj7eOwx5ex5+xQ+rC2KUzonK1OR6CX3jHF123XVnpDFs9CO C53A50IjgaKENzYb2sF3qvG7CFBw4z7LiCb0zRjeXooPrcRyl7ZZ9yKLH8SM1wKl nGMB3N9qinLSqr5CzqqXmvHm8tvaC7jdQdAOuBjTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfhbyG1tp6lnnwPvhI7qHQ7as9g8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E1Mzc4YWQyLTU3MjMtNDMzMy05NDU2LTFjMjg4MWU5YzRjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDo9AwDQYJKoZIhvcNAQELBQADggEBAJfWo825wT2XidsmepT87lDaBzRd gBt/i4iSe0C1ZiMi7TiSNAxJA3iwwkzhJmAsR+m5IwXXhTPgpcSUvYSrFdp0jz7P owvAHQwnRACUxHrHJFc89U3l61xg9piY9S749w61zsDgy3eELz0WBnK7fjSi2vq8 pC+Jxlf5qZKKFWFHuAFHl0oZLmrLcFX3nHv8ESQH/xSMApEciQOzGcutTLG8eq87 AozH6Jq7J9P3NIasbG9JY1SYh+pVfnE5E7Vb8a3uLpQt+DcxaxnBkLTuBAkvE4eH vpNV82Ex5IpwpMLJ3aQVPNa1wqDaXBhIBIZcfEOFoYhqdU+3fhr/bDClLDk= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:52 2025 by rpki-client