$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/afc1e2e1-7a50-46e8-9769-71b6d39c6522.roa File: afc1e2e1-7a50-46e8-9769-71b6d39c6522.roa (raw, json) Hash identifier: lsUwA6FWFWqkN79GgkIJsKegBo1hOrSDelvOJWUZgek= Subject key identifier: F0:85:B9:66:BA:A8:0C:2C:EB:E3:0F:AB:FE:C8:98:D0:19:93:0D:22 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 406D847BDC907427E837E6A857CD98A9EA124F76 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/afc1e2e1-7a50-46e8-9769-71b6d39c6522.roa Signing time: Fri 26 Sep 2025 01:14:55 +0000 ROA not before: Fri 26 Sep 2025 01:14:55 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6d:84:7b:dc:90:74:27:e8:37:e6:a8:57:cd:98:a9:ea:12:4f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 01:14:55 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=126596b7d49b82111783827628dd926800137cb86fad5cdad7a0ecf466c795b3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:12:27:50:7f:f4:77:37:91:3c:8a:b9:0b: 60:53:7b:af:70:fd:9f:69:e8:68:21:7b:16:5a:4d: 4c:a0:11:bf:d0:23:e0:a2:69:34:a2:4d:00:12:f4: 0b:c9:f9:46:99:ac:66:0c:97:ff:99:25:f5:f3:67: be:af:fd:2a:1c:55:50:26:f2:ec:f7:af:74:9a:68: 58:ce:5c:12:80:f0:0c:a0:e4:6a:71:a8:4c:19:f3: 23:b8:d3:6d:ca:74:7b:38:5e:24:07:7c:35:e3:d3: 87:10:7b:18:5f:f6:10:bb:6c:6a:24:4b:4e:3b:62: 6f:77:2a:2b:ad:1d:3d:e1:36:39:2e:be:63:2a:1b: 45:50:7a:cb:a7:cf:4a:4e:11:a1:44:bf:b0:55:49: bd:0a:44:27:3d:90:a9:85:78:cd:76:cf:38:42:5f: b0:5b:49:d9:8b:c6:bf:22:e1:e7:b3:96:b4:f9:a7: eb:ea:21:a0:e3:df:4a:07:2c:0d:d6:34:e7:dc:ae: 42:56:ff:2d:2b:02:bb:1b:c2:16:c1:39:f5:0d:53: 53:96:02:3d:20:77:3a:94:fd:2a:31:53:40:77:af: 9c:de:d5:ad:81:53:e3:e1:83:8d:a7:4a:cb:fc:d2: 0e:4c:73:56:da:22:30:f8:b3:d1:36:99:de:62:0d: c3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:85:B9:66:BA:A8:0C:2C:EB:E3:0F:AB:FE:C8:98:D0:19:93:0D:22 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/afc1e2e1-7a50-46e8-9769-71b6d39c6522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.128.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:da:c5:26:fa:80:dd:11:a7:0c:91:83:a3:e2:68:ef:c6:11: 4c:46:41:15:93:8b:ee:c8:d8:df:78:05:19:29:3c:4f:1a:63: 74:9d:41:2b:76:21:32:d9:52:2f:dc:db:83:36:d6:14:81:c7: ab:54:8b:a7:2f:db:b6:8b:28:48:e1:56:9b:bc:37:b3:9f:96: a4:6b:a7:66:02:63:fd:ca:cb:e6:90:b0:08:b4:97:14:ef:50: 2e:ae:16:86:6f:5c:ca:70:75:44:fd:57:d7:35:9f:a7:b3:03: c5:27:0a:25:dc:12:ea:95:2c:0d:35:ad:8f:c1:3c:a5:2b:d4: 41:5c:5c:9a:61:b8:5c:18:46:90:26:c2:ad:40:8a:26:ee:b6: d6:6c:4b:b3:fc:b8:77:76:7b:26:63:54:30:3d:21:02:40:47: b4:2e:43:17:97:9b:d7:37:f8:bb:48:1f:a2:90:cd:da:fe:f0: aa:ef:9e:57:77:91:1c:1f:56:26:dc:2b:8b:4f:cc:f1:ca:f3: ee:2e:bd:37:c1:fd:0a:74:de:da:0f:25:ce:1c:9f:a9:26:63: 50:ea:07:16:3d:fe:cb:67:85:04:27:fa:4a:ab:1c:c4:80:52: 79:b3:00:a7:25:4d:b7:db:71:b2:55:0b:bc:48:bf:dd:8b:2e: 9a:3b:e6:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQG2Ee9yQdCfoN+aoV82YqeoST3YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDExNDU1WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjY1OTZiN2Q0OWI4MjExMTc4MzgyNzYyOGRkOTI2ODAw MTM3Y2I4NmZhZDVjZGFkN2EwZWNmNDY2Yzc5NWIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAMxInUH/0dzeRPIq5C2BTe69w/Z9p6GghexZaTUygEb/Q I+CiaTSiTQAS9AvJ+UaZrGYMl/+ZJfXzZ76v/SocVVAm8uz3r3SaaFjOXBKA8Ayg 5GpxqEwZ8yO4023KdHs4XiQHfDXj04cQexhf9hC7bGokS047Ym93KiutHT3hNjku vmMqG0VQesunz0pOEaFEv7BVSb0KRCc9kKmFeM12zzhCX7BbSdmLxr8i4eezlrT5 p+vqIaDj30oHLA3WNOfcrkJW/y0rArsbwhbBOfUNU1OWAj0gdzqU/SoxU0B3r5ze 1a2BU+Phg42nSsv80g5Mc1baIjD4s9E2md5iDcNvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8IW5ZrqoDCzr4w+r/siY0BmTDSIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FmYzFlMmUxLTdhNTAtNDZlOC05NzY5LTcxYjZkMzljNjUyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDpIAwDQYJKoZIhvcNAQELBQADggEBADvaxSb6gN0RpwyRg6PiaO/GEUxG QRWTi+7I2N94BRkpPE8aY3SdQSt2ITLZUi/c24M21hSBx6tUi6cv27aLKEjhVpu8 N7OflqRrp2YCY/3Ky+aQsAi0lxTvUC6uFoZvXMpwdUT9V9c1n6ezA8UnCiXcEuqV LA01rY/BPKUr1EFcXJphuFwYRpAmwq1AiibuttZsS7P8uHd2eyZjVDA9IQJAR7Qu QxeXm9c3+LtIH6KQzdr+8Krvnld3kRwfVibcK4tPzPHK8+4uvTfB/Qp03toPJc4c n6kmY1DqBxY9/stnhQQn+kqrHMSAUnmzAKclTbfbcbJVC7xIv92LLpo75u0= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:49 2025 by rpki-client