$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6af4e986-eb5e-48c5-a295-1cd027c0ff9f.roa File: 6af4e986-eb5e-48c5-a295-1cd027c0ff9f.roa (raw, json) Hash identifier: arwEuxXhM5ccAmvSBTw7puhTmMMc7VPNcxaXQ8Mi4no= Subject key identifier: 35:03:F7:1B:EB:E6:1A:FD:0E:D6:0A:91:1A:6F:DD:FE:34:BD:93:78 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1160D8096D7B5B617525963BE8F71D817A28525A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6af4e986-eb5e-48c5-a295-1cd027c0ff9f.roa Signing time: Mon 20 Oct 2025 11:40:09 +0000 ROA not before: Mon 20 Oct 2025 11:40:09 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:60:d8:09:6d:7b:5b:61:75:25:96:3b:e8:f7:1d:81:7a:28:52:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 11:40:09 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=7c255ee7772512d57c646a6f453b9c1819d4b3d9dcc29254f5d3c9adaf05df94, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:3d:10:46:b4:3a:71:2a:4a:3b:9f:d2:8b: 81:03:ae:b6:1e:00:4b:c0:31:8e:89:22:77:70:69: 4e:9a:b9:38:bc:e8:b3:4d:7a:4b:6f:f9:7a:9b:98: 13:40:b4:00:d4:e3:ba:b9:7c:2a:d1:ae:b8:cc:af: 56:2f:4b:aa:70:75:1a:9a:ba:36:bd:67:92:0c:b4: ff:5e:59:39:5a:09:2c:e1:0b:1a:b6:07:08:ce:7d: b4:06:24:29:7a:e6:30:dd:d6:1a:6c:35:a1:8b:50: d0:fb:0e:de:f5:b9:97:d5:aa:d0:a0:0f:6c:35:59: 43:02:7b:16:c3:98:9a:ae:8f:e2:3c:4b:65:72:f3: 97:75:ea:d9:c7:ce:f7:7a:05:7a:4e:e4:5e:18:40: d5:0c:8c:98:68:92:6e:b7:7e:fb:49:7e:0b:f6:1a: 0f:8c:d7:13:20:73:0d:3d:28:17:6a:36:1e:9c:6d: 1a:de:db:7c:10:87:45:5c:36:1c:c1:53:b4:f6:b8: 1c:51:6a:55:11:7f:39:d3:cc:fb:10:dc:29:d3:3e: 0d:8f:ec:3b:fa:4a:1d:de:a3:54:ad:6d:79:a9:89: f1:15:95:4c:5c:ba:b8:eb:29:9a:89:17:b1:57:79: 95:3e:6f:e2:19:6a:8e:88:36:d4:93:38:06:32:c8: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:03:F7:1B:EB:E6:1A:FD:0E:D6:0A:91:1A:6F:DD:FE:34:BD:93:78 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6af4e986-eb5e-48c5-a295-1cd027c0ff9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.220.0/24 Signature Algorithm: sha256WithRSAEncryption 06:bb:07:be:b6:94:51:af:94:69:ec:37:33:02:83:10:ae:e2: c3:b3:c2:10:2c:63:5c:8e:4c:56:3c:d7:60:02:93:8e:de:a1: ea:9d:f7:6e:dc:bd:10:19:3a:da:f0:45:fb:89:dc:6e:70:4e: ec:6a:13:a9:37:5d:f0:b6:a8:db:7e:bd:da:75:09:52:4e:56: 8d:e7:d1:58:9d:2f:4b:47:e3:1c:d0:e0:69:17:ec:a3:76:db: 7c:8e:c5:cd:8f:86:c8:e3:b6:39:94:02:31:8e:25:cf:6a:a4: 35:fc:b3:e7:76:9e:8b:16:57:e3:75:6f:f2:b2:83:7b:89:5c: ed:7f:5a:17:aa:85:ab:1a:e1:bd:00:3d:bc:0d:26:6e:24:77: 08:4b:56:ed:ae:82:4f:7f:de:77:59:9a:1a:f9:7c:4f:ff:2d: fe:5b:e0:1c:60:01:0b:a8:c4:c8:dc:a8:ba:33:07:53:74:a3: aa:1b:c1:d2:71:0b:c5:71:62:ed:32:71:4e:12:af:c2:ba:62: 56:f4:9d:43:0e:65:8c:0b:fb:93:cb:f7:20:d6:3c:8d:60:26: 89:df:65:d2:11:bc:04:bb:49:94:b7:35:7f:f6:32:d4:d7:ea: c5:88:bd:c2:84:07:dc:2b:71:6b:36:ef:b1:b2:15:38:a4:33: 23:8b:8b:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEWDYCW17W2F1JZY76PcdgXooUlowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMTE0MDA5WhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzI1NWVlNzc3MjUxMmQ1N2M2NDZhNmY0NTNiOWMxODE5 ZDRiM2Q5ZGNjMjkyNTRmNWQzYzlhZGFmMDVkZjk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEpT0QRrQ6cSpKO5/Si4EDrrYeAEvAMY6JIndwaU6auTi8 6LNNektv+XqbmBNAtADU47q5fCrRrrjMr1YvS6pwdRqauja9Z5IMtP9eWTlaCSzh Cxq2BwjOfbQGJCl65jDd1hpsNaGLUND7Dt71uZfVqtCgD2w1WUMCexbDmJquj+I8 S2Vy85d16tnHzvd6BXpO5F4YQNUMjJhokm63fvtJfgv2Gg+M1xMgcw09KBdqNh6c bRre23wQh0VcNhzBU7T2uBxRalURfznTzPsQ3CnTPg2P7Dv6Sh3eo1StbXmpifEV lUxcurjrKZqJF7FXeZU+b+IZao6INtSTOAYyyHMNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNQP3G+vmGv0O1gqRGm/d/jS9k3gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZhZjRlOTg2LWViNWUtNDhjNS1hMjk1LTFjZDAyN2MwZmY5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpNwwDQYJKoZIhvcNAQELBQADggEBAAa7B762lFGvlGnsNzMCgxCu4sOz whAsY1yOTFY812ACk47eoeqd927cvRAZOtrwRfuJ3G5wTuxqE6k3XfC2qNt+vdp1 CVJOVo3n0VidL0tH4xzQ4GkX7KN223yOxc2PhsjjtjmUAjGOJc9qpDX8s+d2nosW V+N1b/Kyg3uJXO1/Wheqhasa4b0APbwNJm4kdwhLVu2ugk9/3ndZmhr5fE//Lf5b 4BxgAQuoxMjcqLozB1N0o6obwdJxC8VxYu0ycU4Sr8K6Ylb0nUMOZYwL+5PL9yDW PI1gJonfZdIRvAS7SZS3NX/2MtTX6sWIvcKEB9wrcWs277GyFTikMyOLi+g= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:58 2025 by rpki-client