$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0b64900-5613-4edf-8c01-5a204f1ea688.roa File: c0b64900-5613-4edf-8c01-5a204f1ea688.roa (raw, json) Hash identifier: 3b8Scq206DCQI/4NNliD+96rkB4sLmk1dj78pMT1UMs= Subject key identifier: 7B:F0:6A:FE:DD:4F:C9:FA:46:97:8D:F7:AE:E1:CE:44:1B:1F:62:4B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 794B76F8B8601F5E73B12166EA30DC0ABE18D83C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0b64900-5613-4edf-8c01-5a204f1ea688.roa Signing time: Fri 26 Sep 2025 00:18:21 +0000 ROA not before: Fri 26 Sep 2025 00:18:21 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4b:76:f8:b8:60:1f:5e:73:b1:21:66:ea:30:dc:0a:be:18:d8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 00:18:21 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=74b94a347103f7baf98e2a73ce6d6fd7d282a694fd1ccdcaa990e55b5b3c8dd2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:82:df:3b:58:65:b6:bf:9e:13:b0:5c:7a:98: 69:ee:6f:d3:ce:3f:91:ad:b9:a7:d7:e8:a0:18:35: 9b:73:fa:c7:b1:a6:72:66:df:ed:c2:eb:61:19:94: 8c:9e:ac:cc:2a:25:85:12:77:46:6f:f0:d0:84:bb: 3b:75:92:d1:b8:dd:3d:92:0b:93:90:89:39:3f:67: 58:39:c5:4c:76:96:c3:5b:ec:00:ac:f7:fd:96:77: c5:80:60:85:d2:23:57:43:ca:10:35:99:81:f5:c6: e2:95:e6:96:82:bb:ab:57:87:eb:1e:2f:45:ba:d1: 47:f1:77:d9:57:9d:72:f0:c1:de:a8:38:ba:8a:1e: 8e:c0:6c:4e:ac:37:cd:5d:1f:f1:56:e7:11:72:cb: 4b:66:93:54:cb:99:17:ed:11:69:0a:12:9f:89:6c: 77:30:64:40:82:5b:f0:6f:e8:21:18:d3:55:6f:e2: e7:5a:48:8a:d6:bd:12:aa:45:f1:34:03:ad:d1:3e: e0:b8:b3:04:54:11:a0:8b:0f:d4:a0:b9:5e:ca:c2: e1:80:bc:5c:6c:73:14:3b:8a:f3:c2:1d:f8:c5:2b: 35:52:43:5b:99:21:2b:0e:01:fb:76:ac:14:cb:1a: c8:67:4d:39:86:93:6d:cd:89:3f:17:86:6d:4a:83: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F0:6A:FE:DD:4F:C9:FA:46:97:8D:F7:AE:E1:CE:44:1B:1F:62:4B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0b64900-5613-4edf-8c01-5a204f1ea688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.204.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:ba:d9:65:0f:60:91:ed:92:65:7f:98:9d:ae:43:1c:ab:ad: f9:ae:67:73:8f:7e:b1:a3:79:3d:38:00:00:6f:89:07:d7:95: cb:ba:04:dd:6f:44:6a:76:43:e9:fb:25:94:df:66:7f:dd:ca: 5a:71:7e:0d:52:c5:0e:20:6c:cd:eb:69:7d:51:3b:fd:5f:a3: 69:54:f2:d5:ed:f3:6b:e0:54:5c:66:fd:96:81:9e:68:50:7e: bd:29:dd:c9:c8:ee:eb:6b:91:79:9a:10:c3:69:a0:8e:ea:43: c9:b7:bd:94:4b:8c:81:6e:9d:ed:b3:e4:d7:b1:b9:e0:47:eb: 2e:83:b2:0e:38:93:83:f9:c5:77:09:78:8c:11:b0:dd:69:57: 89:b9:19:99:ba:ce:0c:93:0d:33:97:70:85:1a:9b:0e:98:53: 27:e4:e6:24:ed:52:85:b5:eb:a4:29:ec:61:ff:00:86:09:ef: be:2e:2c:f8:98:8e:af:7e:62:ab:55:fe:c5:77:a9:57:f1:85: c6:0a:b5:69:fa:6c:87:c2:31:73:0f:dd:33:dd:5b:90:26:bd: 63:4f:48:32:3a:e5:6f:34:2a:43:80:e1:39:22:4b:42:12:89: 68:c8:5a:0c:f8:d9:7f:88:32:95:96:73:2d:ec:1a:cf:50:cf: b8:89:91:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeUt2+LhgH15zsSFm6jDcCr4Y2DwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDAxODIxWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NGI5NGEzNDcxMDNmN2JhZjk4ZTJhNzNjZTZkNmZkN2Qy ODJhNjk0ZmQxY2NkY2FhOTkwZTU1YjViM2M4ZGQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpgt87WGW2v54TsFx6mGnub9POP5GtuafX6KAYNZtz+sex pnJm3+3C62EZlIyerMwqJYUSd0Zv8NCEuzt1ktG43T2SC5OQiTk/Z1g5xUx2lsNb 7ACs9/2Wd8WAYIXSI1dDyhA1mYH1xuKV5paCu6tXh+seL0W60Ufxd9lXnXLwwd6o OLqKHo7AbE6sN81dH/FW5xFyy0tmk1TLmRftEWkKEp+JbHcwZECCW/Bv6CEY01Vv 4udaSIrWvRKqRfE0A63RPuC4swRUEaCLD9SguV7KwuGAvFxscxQ7ivPCHfjFKzVS Q1uZISsOAft2rBTLGshnTTmGk23NiT8Xhm1Kg8IlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUe/Bq/t1PyfpGl433ruHORBsfYkswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MwYjY0OTAwLTU2MTMtNGVkZi04YzAxLTVhMjA0ZjFlYTY4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDpcwwDQYJKoZIhvcNAQELBQADggEBAGy62WUPYJHtkmV/mJ2uQxyrrfmu Z3OPfrGjeT04AABviQfXlcu6BN1vRGp2Q+n7JZTfZn/dylpxfg1SxQ4gbM3raX1R O/1fo2lU8tXt82vgVFxm/ZaBnmhQfr0p3cnI7utrkXmaEMNpoI7qQ8m3vZRLjIFu ne2z5NexueBH6y6Dsg44k4P5xXcJeIwRsN1pV4m5GZm6zgyTDTOXcIUamw6YUyfk 5iTtUoW166Qp7GH/AIYJ774uLPiYjq9+YqtV/sV3qVfxhcYKtWn6bIfCMXMP3TPd W5AmvWNPSDI65W80KkOA4TkiS0ISiWjIWgz42X+IMpWWcy3sGs9Qz7iJkUI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:18 2025 by rpki-client