$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2440e70-6142-41d8-a788-8a73f3bc2eb4.roa File: c2440e70-6142-41d8-a788-8a73f3bc2eb4.roa (raw, json) Hash identifier: u1xFLyH8kJVLD5/TwNvJ5wBuG3oChSjFTRhgZTIRhv8= Subject key identifier: 5B:7D:6C:E8:4A:83:D8:44:03:0A:70:9A:CA:BF:B9:76:D3:D8:BD:F4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5CA5E8468A6A89EE2685A261AE745F92034F6E7E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2440e70-6142-41d8-a788-8a73f3bc2eb4.roa Signing time: Thu 25 Sep 2025 18:09:38 +0000 ROA not before: Thu 25 Sep 2025 18:09:38 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a5:e8:46:8a:6a:89:ee:26:85:a2:61:ae:74:5f:92:03:4f:6e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:09:38 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=57d5e89d65c4efb1f1c560eb3a008b27ae0eab81b6eab85f16ff0764ad909583, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1e:f4:26:76:b7:c1:e7:20:75:9a:5e:a1:7c: 95:dc:d6:d8:f0:96:c2:fb:d6:0b:61:e1:eb:5e:c0: 4d:1a:5d:d7:6b:ad:2f:c6:e5:33:4d:5c:1f:ed:2a: fc:0f:99:bc:5f:ac:87:ef:4e:20:75:d9:4a:f2:3a: 67:9a:ea:ee:fc:48:52:c6:a4:5b:57:a1:86:ae:b5: e4:38:a1:92:9f:02:5a:4c:30:da:90:47:05:de:40: 33:f8:ad:09:c9:f7:99:ca:ce:41:eb:d2:1b:86:16: 20:2c:fe:fe:c7:eb:77:ee:63:c4:5a:77:3a:e5:20: a9:cc:7d:67:48:fb:70:1f:fa:ab:ac:31:8f:cd:98: dd:3b:5d:67:60:ea:21:68:a8:c5:82:06:a4:1c:e2: 9d:9a:35:c1:f8:89:c2:1f:6b:e9:b4:69:28:92:45: 62:ad:d6:73:ff:c5:d5:d4:9b:6c:72:e8:4d:32:88: be:d8:10:d4:cc:44:c5:69:be:50:96:c5:ab:9d:2b: 47:ba:b5:37:53:f0:59:2e:45:38:db:18:93:6e:8a: 71:21:5e:14:10:47:ef:e6:1a:74:74:24:2e:34:78: 43:1e:a8:cc:af:e9:2d:62:6d:b2:39:95:64:a4:7b: 9b:ad:3f:20:b8:49:a1:9b:84:90:54:21:32:8f:34: f2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7D:6C:E8:4A:83:D8:44:03:0A:70:9A:CA:BF:B9:76:D3:D8:BD:F4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2440e70-6142-41d8-a788-8a73f3bc2eb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.9.0/24 Signature Algorithm: sha256WithRSAEncryption 14:27:85:d1:b8:e2:ac:d1:4f:52:eb:96:71:38:e9:5b:2d:55: 50:b2:0c:60:9c:95:c4:19:d5:d2:52:92:e9:77:25:a5:c5:2f: 9a:48:49:d9:2f:7c:36:a0:1a:06:e9:8b:7f:cb:80:2c:15:45: 5a:1b:98:53:d6:82:07:dc:ae:41:ce:7a:69:36:3a:9a:26:aa: ca:40:67:05:eb:e2:ad:78:66:cd:e1:1a:21:57:24:fd:01:c8: 73:f4:85:6d:be:77:ba:28:47:74:2d:db:e7:b3:07:58:2c:aa: 8c:91:05:25:63:4d:2d:ab:32:ab:2e:fa:42:7d:f2:db:e1:f4: 99:a9:9a:0e:10:98:8d:2a:4e:96:d0:e0:df:25:78:b0:34:22: 51:6a:b3:cd:e3:b7:86:75:e7:29:51:01:ea:cb:60:1d:da:55: 01:de:30:f5:99:c8:d6:b5:dd:70:2e:d8:e9:b4:65:4c:04:87: e1:6e:68:f6:5f:be:80:7a:a4:5a:7d:8f:25:df:b7:19:b9:e9: 37:ef:7c:f1:19:06:ba:95:f7:1f:92:44:d7:07:93:ca:e9:a1: 62:eb:98:20:bb:f7:f8:55:d7:11:67:f1:76:bf:0c:33:64:c4: 47:96:81:2b:cc:32:a8:c3:5a:0c:dd:2e:01:0f:88:7b:38:99: 19:d5:c6:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXKXoRopqie4mhaJhrnRfkgNPbn4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgwOTM4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1N2Q1ZTg5ZDY1YzRlZmIxZjFjNTYwZWIzYTAwOGIyN2Fl MGVhYjgxYjZlYWI4NWYxNmZmMDc2NGFkOTA5NTgzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlHvQmdrfB5yB1ml6hfJXc1tjwlsL71gth4etewE0aXddr rS/G5TNNXB/tKvwPmbxfrIfvTiB12UryOmea6u78SFLGpFtXoYauteQ4oZKfAlpM MNqQRwXeQDP4rQnJ95nKzkHr0huGFiAs/v7H63fuY8RadzrlIKnMfWdI+3Af+qus MY/NmN07XWdg6iFoqMWCBqQc4p2aNcH4icIfa+m0aSiSRWKt1nP/xdXUm2xy6E0y iL7YENTMRMVpvlCWxaudK0e6tTdT8FkuRTjbGJNuinEhXhQQR+/mGnR0JC40eEMe qMyv6S1ibbI5lWSke5utPyC4SaGbhJBUITKPNPJLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW31s6EqD2EQDCnCayr+5dtPYvfQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MyNDQwZTcwLTYxNDItNDFkOC1hNzg4LThhNzNmM2JjMmViNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpAkwDQYJKoZIhvcNAQELBQADggEBABQnhdG44qzRT1LrlnE46VstVVCy DGCclcQZ1dJSkul3JaXFL5pISdkvfDagGgbpi3/LgCwVRVobmFPWggfcrkHOemk2 OpomqspAZwXr4q14Zs3hGiFXJP0ByHP0hW2+d7ooR3Qt2+ezB1gsqoyRBSVjTS2r Mqsu+kJ98tvh9Jmpmg4QmI0qTpbQ4N8leLA0IlFqs83jt4Z15ylRAerLYB3aVQHe MPWZyNa13XAu2Om0ZUwEh+FuaPZfvoB6pFp9jyXftxm56TfvfPEZBrqV9x+SRNcH k8rpoWLrmCC79/hV1xFn8Xa/DDNkxEeWgSvMMqjDWgzdLgEPiHs4mRnVxvc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:06 2025 by rpki-client