$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0e216ca-9675-4f57-8ea2-5dd938393f1a.roa File: a0e216ca-9675-4f57-8ea2-5dd938393f1a.roa (raw, json) Hash identifier: ib1oksvjA0Td8TbPe3ftDk0A5wAHYzUsTVdFWDtOAn0= Subject key identifier: 20:91:52:0D:FC:32:0E:68:7E:F7:33:2A:3F:A1:1F:F3:DE:38:A4:BF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 66EE9F02A8F0BCA4930930B3B3BB1D78BCC95CD3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0e216ca-9675-4f57-8ea2-5dd938393f1a.roa Signing time: Mon 20 Oct 2025 06:53:47 +0000 ROA not before: Mon 20 Oct 2025 06:53:47 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ee:9f:02:a8:f0:bc:a4:93:09:30:b3:b3:bb:1d:78:bc:c9:5c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 06:53:47 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=7f13636330432e5a0b79bbd3809a98a4ce6f8f884d9ab3e22cf187299d76875a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:80:7a:c0:92:09:cd:a4:5c:00:00:76:41: 6a:9f:40:df:7b:41:ac:99:00:d9:92:05:b2:ff:95: ac:8b:0a:33:79:eb:cd:fe:5b:c0:b5:fe:0d:e1:2a: b0:1d:10:16:b6:e1:24:5b:bc:00:a9:4e:51:02:90: ad:26:d5:6d:7d:53:eb:fd:25:ca:3d:89:3a:9a:73: d8:c2:d0:89:3b:c3:47:fa:46:b2:ce:76:a4:ae:e0: 1c:f5:34:61:42:45:3b:a2:88:a7:00:35:32:58:24: 87:55:df:4d:6b:1d:7c:d6:93:f6:53:71:11:f6:7f: 05:58:30:75:0d:f7:0e:41:68:2f:4c:ec:8b:c4:31: bc:bf:3f:37:00:4f:d5:25:b3:b2:0f:4d:a4:41:7a: 27:bc:8d:eb:d7:2a:81:c1:89:09:c7:0c:2b:b8:1f: 42:b2:fd:7f:81:7d:3f:ca:ef:74:7b:b6:bb:0f:2a: 37:e0:5d:ff:d8:d3:b0:28:e0:14:7d:85:e1:8f:f3: bd:d4:6f:b1:26:78:36:59:12:d8:a1:e1:0f:12:54: fa:89:ab:ad:45:f6:64:47:e5:39:9f:4c:34:9b:e2: c9:8c:1e:4e:dd:e9:8a:c6:db:7d:1f:eb:8b:8c:b1: 63:35:24:e6:1b:c6:60:38:82:ce:a3:52:e6:63:d7: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:91:52:0D:FC:32:0E:68:7E:F7:33:2A:3F:A1:1F:F3:DE:38:A4:BF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0e216ca-9675-4f57-8ea2-5dd938393f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.16.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:d4:2a:e3:4b:df:71:bd:e5:ca:24:f5:63:57:d5:2c:e6:c1: 38:d1:36:ce:c2:3b:5c:8a:55:b4:a4:26:d3:9a:97:9b:60:20: d6:87:c7:13:a0:eb:f2:76:71:75:ad:39:a0:96:d5:ee:67:c4: 82:13:62:9e:e4:e1:65:cd:50:78:91:23:51:b6:a4:2a:81:b9: 29:11:53:7b:b4:78:ca:72:f4:8d:99:21:6d:9b:86:e9:ff:53: 8c:84:6d:78:1c:64:7f:df:5f:a9:36:43:6a:4c:8a:0b:63:3d: 2c:fb:d5:a1:fc:ff:57:ff:13:50:c4:9c:18:2b:fe:44:1a:45: db:dc:18:f6:84:69:b5:49:dd:0b:49:18:ca:eb:90:26:c5:a8: 79:d5:21:ba:38:b5:07:fd:97:e9:02:56:80:37:c1:e2:3f:81: 62:38:4a:b5:fb:b2:d2:ea:5d:66:9d:4a:3b:dc:2c:d0:73:32: 40:86:b8:ce:49:b2:e3:c7:89:70:70:a8:0b:1d:1e:92:72:22: c6:fd:b1:36:0c:84:cb:02:fd:98:2b:93:eb:60:0e:a5:b9:76: a0:8b:d0:1e:20:7c:09:2b:82:1b:9b:74:b7:20:e9:4d:48:85: 60:b5:da:c1:92:89:ef:43:0a:6d:e6:1c:85:03:53:0c:de:ac: a0:df:e5:f9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZu6fAqjwvKSTCTCzs7sdeLzJXNMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMDY1MzQ3WhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjEzNjM2MzMwNDMyZTVhMGI3OWJiZDM4MDlhOThhNGNl NmY4Zjg4NGQ5YWIzZTIyY2YxODcyOTlkNzY4NzVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2N4B6wJIJzaRcAAB2QWqfQN97QayZANmSBbL/layLCjN5 683+W8C1/g3hKrAdEBa24SRbvACpTlECkK0m1W19U+v9Jco9iTqac9jC0Ik7w0f6 RrLOdqSu4Bz1NGFCRTuiiKcANTJYJIdV301rHXzWk/ZTcRH2fwVYMHUN9w5BaC9M 7IvEMby/PzcAT9Uls7IPTaRBeie8jevXKoHBiQnHDCu4H0Ky/X+BfT/K73R7trsP KjfgXf/Y07Ao4BR9heGP873Ub7EmeDZZEtih4Q8SVPqJq61F9mRH5TmfTDSb4smM Hk7d6YrG230f64uMsWM1JOYbxmA4gs6jUuZj1x1hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIJFSDfwyDmh+9zMqP6Ef8944pL8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EwZTIxNmNhLTk2NzUtNGY1Ny04ZWEyLTVkZDkzODM5M2YxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDoBAwDQYJKoZIhvcNAQELBQADggEBAAvUKuNL33G95cok9WNX1SzmwTjR Ns7CO1yKVbSkJtOal5tgINaHxxOg6/J2cXWtOaCW1e5nxIITYp7k4WXNUHiRI1G2 pCqBuSkRU3u0eMpy9I2ZIW2bhun/U4yEbXgcZH/fX6k2Q2pMigtjPSz71aH8/1f/ E1DEnBgr/kQaRdvcGPaEabVJ3QtJGMrrkCbFqHnVIbo4tQf9l+kCVoA3weI/gWI4 SrX7stLqXWadSjvcLNBzMkCGuM5JsuPHiXBwqAsdHpJyIsb9sTYMhMsC/Zgrk+tg DqW5dqCL0B4gfAkrghubdLcg6U1IhWC12sGSie9DCm3mHIUDUwzerKDf5fk= -----END CERTIFICATE-----Generated at Mon Oct 20 11:56:06 2025 by rpki-client