$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1e1ecda-a36a-49c0-8924-3a758871bee6.roa File: b1e1ecda-a36a-49c0-8924-3a758871bee6.roa (raw, json) Hash identifier: tVVtYzs0uYtAGsqe4RfIuDyO0/M2D0xcig9cFmrJYzA= Subject key identifier: FB:F4:35:E9:45:D2:85:8C:23:5D:22:C5:F7:56:D9:C5:AF:27:6F:79 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1EFA9F96757F94637BC53A29513EDFC53026DBCA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1e1ecda-a36a-49c0-8924-3a758871bee6.roa Signing time: Thu 25 Sep 2025 18:11:48 +0000 ROA not before: Thu 25 Sep 2025 18:11:48 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fa:9f:96:75:7f:94:63:7b:c5:3a:29:51:3e:df:c5:30:26:db:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:11:48 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c250d022984ea0240ec3424ab58c269638c796382aba3da83a2783b0bcaa1492, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:cb:02:b8:56:ae:71:0a:23:28:08:a1:91: 1a:05:8e:70:70:db:89:f1:67:e6:a9:e1:40:26:5d: 36:b7:28:aa:e2:cb:a4:56:35:85:5d:98:74:76:ed: cc:be:36:6f:b0:7d:fb:43:6f:56:c1:a9:86:8c:43: e8:e2:c8:6c:f1:6f:f0:1c:e4:14:2b:93:be:d4:3d: 41:e6:fd:5a:e8:43:e3:fb:7c:11:af:58:12:75:39: 42:01:16:12:b2:05:ca:a9:d0:fc:55:ad:39:2a:39: 98:2a:55:16:29:5f:1d:f2:c0:55:0d:c1:3c:b0:e2: 60:8f:19:8b:54:e4:be:9b:a7:52:3b:cd:4b:00:74: 5b:a3:6a:b4:a0:fb:3a:16:4d:6f:b1:30:22:89:a3: 8e:58:14:c3:ba:bf:95:86:94:bd:d2:0d:a8:1f:55: 2c:d6:02:19:fc:a0:92:78:70:bd:dd:26:33:f7:03: d3:a1:dc:c7:dd:6e:ef:70:1a:f7:5d:c7:44:c8:94: 73:fc:90:ed:d9:80:bc:ec:97:a0:af:50:74:3e:94: 9f:cc:f1:0b:ec:4d:e1:df:2f:ec:c5:0d:7b:19:1d: 57:06:52:95:a3:81:55:0d:6f:ac:41:0d:b6:c7:64: 55:07:70:d3:fc:0a:bd:49:51:34:68:e1:62:cb:68: c3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F4:35:E9:45:D2:85:8C:23:5D:22:C5:F7:56:D9:C5:AF:27:6F:79 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1e1ecda-a36a-49c0-8924-3a758871bee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.100.0/24 Signature Algorithm: sha256WithRSAEncryption 18:3d:25:1f:81:d4:8a:24:47:06:b8:ef:52:eb:39:44:55:71: 08:64:46:02:bc:33:89:e5:d0:8b:f5:44:9e:c9:71:97:04:03: af:64:ba:6d:1f:5d:fd:d2:63:8c:d2:7f:eb:43:5b:e9:93:93: 3f:b9:d6:7a:49:43:05:75:83:35:a7:12:84:97:ea:f7:61:1b: c3:70:e5:eb:30:8d:3c:f6:e9:eb:71:4a:c2:4f:dd:94:e7:e7: 6f:d8:dc:7e:c5:4e:c0:47:07:19:64:54:8c:e7:fd:6d:30:38: 21:48:f5:42:a1:83:8d:67:8b:20:52:c7:9a:17:67:ee:28:5d: 71:88:32:40:df:64:21:4f:23:a8:cf:cb:5a:f0:90:42:00:4e: 37:fd:55:c7:e6:6e:a1:6b:31:25:ac:81:f8:c7:01:3a:3f:f8: bd:c9:30:32:bb:be:b5:8e:e0:9b:77:0e:75:ac:fa:12:31:71: 0f:13:c8:13:7f:42:e1:dc:fe:8b:e2:72:27:31:ac:da:f1:e0: 47:29:99:79:3b:2b:7b:a7:21:22:15:83:f2:2a:3a:71:be:73: f4:01:0b:e8:21:79:13:82:f1:45:fe:00:80:4b:b1:2a:12:99: ba:26:41:c2:ee:d2:31:16:16:91:eb:be:3f:0f:25:dc:11:4a: c4:02:bc:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHvqflnV/lGN7xTopUT7fxTAm28owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgxMTQ4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMjUwZDAyMjk4NGVhMDI0MGVjMzQyNGFiNThjMjY5NjM4 Yzc5NjM4MmFiYTNkYTgzYTI3ODNiMGJjYWExNDkyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtTcsCuFaucQojKAihkRoFjnBw24nxZ+ap4UAmXTa3KKri y6RWNYVdmHR27cy+Nm+wfftDb1bBqYaMQ+jiyGzxb/Ac5BQrk77UPUHm/VroQ+P7 fBGvWBJ1OUIBFhKyBcqp0PxVrTkqOZgqVRYpXx3ywFUNwTyw4mCPGYtU5L6bp1I7 zUsAdFujarSg+zoWTW+xMCKJo45YFMO6v5WGlL3SDagfVSzWAhn8oJJ4cL3dJjP3 A9Oh3Mfdbu9wGvddx0TIlHP8kO3ZgLzsl6CvUHQ+lJ/M8QvsTeHfL+zFDXsZHVcG UpWjgVUNb6xBDbbHZFUHcNP8Cr1JUTRo4WLLaMNbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+/Q16UXShYwjXSLF91bZxa8nb3kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IxZTFlY2RhLWEzNmEtNDljMC04OTI0LTNhNzU4ODcxYmVlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpWQwDQYJKoZIhvcNAQELBQADggEBABg9JR+B1IokRwa471LrOURVcQhk RgK8M4nl0Iv1RJ7JcZcEA69kum0fXf3SY4zSf+tDW+mTkz+51npJQwV1gzWnEoSX 6vdhG8Nw5eswjTz26etxSsJP3ZTn52/Y3H7FTsBHBxlkVIzn/W0wOCFI9UKhg41n iyBSx5oXZ+4oXXGIMkDfZCFPI6jPy1rwkEIATjf9VcfmbqFrMSWsgfjHATo/+L3J MDK7vrWO4Jt3DnWs+hIxcQ8TyBN/QuHc/ovicicxrNrx4EcpmXk7K3unISIVg/Iq OnG+c/QBC+gheROC8UX+AIBLsSoSmbomQcLu0jEWFpHrvj8PJdwRSsQCvCg= -----END CERTIFICATE-----Generated at Sat Oct 18 02:17:33 2025 by rpki-client