$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0748001-1f4c-4143-b276-15b60b76a355.roa File: c0748001-1f4c-4143-b276-15b60b76a355.roa (raw, json) Hash identifier: KGKQ1sPNjdfeSMurnDYyduPLk/g+U1cGJA/1PpVLHGE= Subject key identifier: 72:C5:32:CE:09:DD:93:47:67:3E:CB:BC:CC:DE:53:8E:2C:79:99:B4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5C35C4E7D5275EA105344F63FA85B29FC0E702D1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0748001-1f4c-4143-b276-15b60b76a355.roa Signing time: Fri 26 Sep 2025 02:06:43 +0000 ROA not before: Fri 26 Sep 2025 02:06:43 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:35:c4:e7:d5:27:5e:a1:05:34:4f:63:fa:85:b2:9f:c0:e7:02:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:06:43 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=dd453e919b7da4fba96019a5abca6432bc8f13888e41d39ea65ae746f5a8e915, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:ab:b2:df:f3:a4:02:cc:6f:e3:5b:68:aa: 16:8f:f4:90:91:72:4f:5b:65:be:dc:6e:e1:93:6e: ca:ff:39:b8:53:d9:8a:c1:78:11:72:8c:fd:d9:1e: 7d:85:cc:6d:08:f3:ea:21:d2:4e:da:d6:e3:ca:4c: eb:56:12:11:7b:a1:b8:89:38:aa:13:1f:7b:40:28: c5:97:1e:42:88:45:5a:45:df:46:17:53:85:ac:d4: e7:ef:39:02:41:54:38:cd:e9:12:74:f6:7f:40:42: ed:cb:bf:e2:4d:d7:e7:0d:f0:30:97:f2:f4:ad:59: 01:93:ed:0d:2e:6b:01:46:75:21:3c:48:19:c0:d1: d1:d5:cf:bd:33:e0:f9:bb:b0:a4:a9:c3:45:c6:c2: 29:bb:f0:61:2c:e5:04:1f:31:d8:0c:94:8a:88:e4: 2f:54:9a:38:d9:c9:23:20:8d:8f:92:54:6d:93:52: 92:64:c1:76:48:49:1d:63:60:d9:91:16:da:59:ce: c5:a9:cd:9f:7c:60:d2:55:07:a3:91:ed:e4:dc:c2: 6a:d9:cd:1b:63:76:d5:86:8e:c2:8c:fb:b1:d1:68: cd:02:73:e0:67:22:8c:b1:8b:8e:46:18:73:d6:15: f3:4d:d4:5c:e9:a5:ee:75:ee:fd:cb:90:03:e0:d0: 12:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C5:32:CE:09:DD:93:47:67:3E:CB:BC:CC:DE:53:8E:2C:79:99:B4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0748001-1f4c-4143-b276-15b60b76a355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.32.0/19 Signature Algorithm: sha256WithRSAEncryption 18:ae:d4:d2:ca:2b:4a:6c:e3:b3:7b:e8:69:08:78:89:e3:f1: bc:19:c6:b9:88:ad:91:f8:fc:00:b4:74:2a:ba:39:6b:35:5e: 20:46:12:be:9e:8f:02:a4:01:ad:91:d0:10:b3:51:70:89:8d: 09:6f:65:b6:45:85:cd:97:60:d2:42:5f:a8:7a:0f:09:3d:b9: d8:38:18:0c:e3:a5:7e:52:e1:64:ef:1b:4e:eb:6f:70:17:f2: a2:8a:1e:31:c0:ab:29:b2:f1:c1:ac:52:b4:d4:1d:0b:2f:2a: a2:14:22:16:e6:7d:a2:7f:09:99:df:2c:4a:df:c7:33:ee:dc: fa:51:a3:0a:1e:d9:1f:e4:0e:ca:61:82:f8:00:9b:c6:46:40: 50:fa:2c:21:5f:d7:f1:e2:72:0d:c6:14:e7:e0:04:b7:2b:34: 4f:32:2a:c8:73:c3:5f:4b:5c:b9:81:38:e4:d5:2f:0c:ee:4e: 7b:09:a6:e4:af:12:de:26:fc:6d:18:03:14:d5:79:99:ec:de: 1d:98:0a:c6:73:68:84:12:8f:68:a0:32:81:26:47:c5:7c:c3: fb:e7:61:e0:f1:31:8a:0f:4b:57:b3:01:b6:e0:38:99:3a:e0: 02:c4:1b:89:ba:14:54:cb:44:bc:13:54:41:a0:32:8d:57:87: ba:bd:b5:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXDXE59UnXqEFNE9j+oWyn8DnAtEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIwNjQzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDQ1M2U5MTliN2RhNGZiYTk2MDE5YTVhYmNhNjQzMmJj OGYxMzg4OGU0MWQzOWVhNjVhZTc0NmY1YThlOTE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq+Kuy3/OkAsxv41toqhaP9JCRck9bZb7cbuGTbsr/ObhT 2YrBeBFyjP3ZHn2FzG0I8+oh0k7a1uPKTOtWEhF7obiJOKoTH3tAKMWXHkKIRVpF 30YXU4Ws1OfvOQJBVDjN6RJ09n9AQu3Lv+JN1+cN8DCX8vStWQGT7Q0uawFGdSE8 SBnA0dHVz70z4Pm7sKSpw0XGwim78GEs5QQfMdgMlIqI5C9UmjjZySMgjY+SVG2T UpJkwXZISR1jYNmRFtpZzsWpzZ98YNJVB6OR7eTcwmrZzRtjdtWGjsKM+7HRaM0C c+BnIoyxi45GGHPWFfNN1Fzppe517v3LkAPg0BKFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcsUyzgndk0dnPsu8zN5Tjix5mbQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MwNzQ4MDAxLTFmNGMtNDE0My1iMjc2LTE1YjYwYjc2YTM1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUDpSAwDQYJKoZIhvcNAQELBQADggEBABiu1NLKK0ps47N76GkIeInj8bwZ xrmIrZH4/AC0dCq6OWs1XiBGEr6ejwKkAa2R0BCzUXCJjQlvZbZFhc2XYNJCX6h6 Dwk9udg4GAzjpX5S4WTvG07rb3AX8qKKHjHAqymy8cGsUrTUHQsvKqIUIhbmfaJ/ CZnfLErfxzPu3PpRowoe2R/kDsphgvgAm8ZGQFD6LCFf1/Hicg3GFOfgBLcrNE8y Kshzw19LXLmBOOTVLwzuTnsJpuSvEt4m/G0YAxTVeZns3h2YCsZzaIQSj2igMoEm R8V8w/vnYeDxMYoPS1ezAbbgOJk64ALEG4m6FFTLRLwTVEGgMo1Xh7q9tUw= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:57 2025 by rpki-client