$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ceaf435f-935e-4b69-8a94-a082ec43109e.roa File: ceaf435f-935e-4b69-8a94-a082ec43109e.roa (raw, json) Hash identifier: hndZhWn9FtG2Z/4CIbgnDI8/BUVnlsZ9cWQidrYGWrI= Subject key identifier: AE:F3:95:06:78:2D:3B:BF:90:F0:C3:CD:F5:5B:32:CB:11:A8:7B:02 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70312E47EC2F7FF7335A64B7E11A71DF5532E693 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ceaf435f-935e-4b69-8a94-a082ec43109e.roa Signing time: Thu 25 Sep 2025 16:51:36 +0000 ROA not before: Thu 25 Sep 2025 16:51:36 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:31:2e:47:ec:2f:7f:f7:33:5a:64:b7:e1:1a:71:df:55:32:e6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 16:51:36 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=80138ff1bfd12c650480e28722e4faf4b87de530197ba15801c468cb30066e6f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:43:6b:49:b2:35:9c:e9:0c:9f:05:f4:0e: d1:f2:13:9a:d3:07:7e:fb:a2:67:ca:b0:b6:13:e6: a4:63:ea:36:c3:ab:bf:33:d8:f5:28:b9:1b:06:c3: 97:66:99:52:00:5c:23:88:e1:b9:10:cd:92:6e:cd: a4:a7:d0:89:46:0c:d0:a4:ce:2c:42:4a:bc:e4:c6: 89:02:c3:19:56:5f:53:04:7c:ed:4b:e6:b2:d9:af: 36:72:35:5f:6c:2f:38:0b:fc:99:5c:5c:8b:58:8e: 82:80:03:f8:52:93:5e:54:9e:5d:bf:50:e2:a3:a5: fc:24:bc:33:99:a0:62:8e:0a:27:53:f5:e3:cb:50: 64:e4:2a:cd:f4:aa:af:67:aa:3d:14:37:02:2f:b5: 27:13:3a:88:da:f8:cc:87:a8:3a:52:f5:18:2c:82: 98:e3:d6:97:14:9f:16:76:ec:b8:30:ce:56:a2:21: 9a:10:40:b1:c6:e2:ba:d9:20:db:92:c3:41:25:81: 26:b7:5e:f4:cd:a5:64:08:60:ae:b5:cc:f4:9f:3a: 91:f9:07:99:bb:41:b1:54:70:db:e8:6c:db:64:4c: 83:56:29:33:42:b5:f8:f2:32:b5:fa:2c:ca:d2:94: ea:77:64:53:61:7a:db:9c:9f:0a:46:38:3c:a6:4a: e6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F3:95:06:78:2D:3B:BF:90:F0:C3:CD:F5:5B:32:CB:11:A8:7B:02 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ceaf435f-935e-4b69-8a94-a082ec43109e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.52.0/24 Signature Algorithm: sha256WithRSAEncryption 47:27:2b:ff:c5:7f:9d:92:a8:d3:18:ca:31:ff:6f:dc:8d:47: 93:fe:00:42:bd:a2:7b:b1:22:8d:2d:cd:eb:0d:16:ad:29:e0: b5:82:7d:dd:26:32:4c:b4:dc:51:a0:69:ca:25:15:eb:01:58: 87:9b:7a:86:ed:48:68:9b:de:e8:92:6f:43:ab:e5:94:ba:5d: 66:ea:27:62:ae:33:b2:eb:a2:04:19:ec:a4:25:8d:86:3b:45: 4b:a1:98:41:f6:ed:97:46:af:e5:6f:a2:6b:8e:5d:99:3a:a1: 24:c2:cf:ad:3b:4e:4d:4c:de:b1:46:7b:ff:e6:57:82:27:8c: 68:2d:f4:e9:ce:40:ee:a2:cd:e8:d6:88:60:d4:c9:31:78:2d: 6e:77:57:25:bf:91:65:bd:7c:bd:70:e0:f3:1c:43:02:97:e5: de:fe:8e:f0:42:1e:5e:f7:36:a7:a4:b1:6c:64:66:ee:83:8d: 50:1a:37:92:71:1e:d5:15:74:e3:ae:76:57:9a:8f:12:f8:bc: a9:7f:9c:c6:86:62:e8:51:40:d4:17:3c:e3:3f:8b:c3:9f:4f: 8e:b2:4d:67:4d:ee:02:e3:e4:0b:28:76:96:e4:c4:d4:26:16: 46:9f:40:92:6f:94:de:6a:67:d6:58:a8:ad:ce:4e:a9:7c:32: 10:73:4c:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcDEuR+wvf/czWmS34Rpx31Uy5pMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTY1MTM2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDEzOGZmMWJmZDEyYzY1MDQ4MGUyODcyMmU0ZmFmNGI4 N2RlNTMwMTk3YmExNTgwMWM0NjhjYjMwMDY2ZTZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0q0NrSbI1nOkMnwX0DtHyE5rTB377omfKsLYT5qRj6jbD q78z2PUouRsGw5dmmVIAXCOI4bkQzZJuzaSn0IlGDNCkzixCSrzkxokCwxlWX1ME fO1L5rLZrzZyNV9sLzgL/JlcXItYjoKAA/hSk15Unl2/UOKjpfwkvDOZoGKOCidT 9ePLUGTkKs30qq9nqj0UNwIvtScTOoja+MyHqDpS9Rgsgpjj1pcUnxZ27Lgwzlai IZoQQLHG4rrZINuSw0ElgSa3XvTNpWQIYK61zPSfOpH5B5m7QbFUcNvobNtkTINW KTNCtfjyMrX6LMrSlOp3ZFNhetucnwpGODymSuYRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrvOVBngtO7+Q8MPN9VsyyxGoewIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NlYWY0MzVmLTkzNWUtNGI2OS04YTk0LWEwODJlYzQzMTA5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoDQwDQYJKoZIhvcNAQELBQADggEBAEcnK//Ff52SqNMYyjH/b9yNR5P+ AEK9onuxIo0tzesNFq0p4LWCfd0mMky03FGgacolFesBWIebeobtSGib3uiSb0Or 5ZS6XWbqJ2KuM7LrogQZ7KQljYY7RUuhmEH27ZdGr+VvomuOXZk6oSTCz607Tk1M 3rFGe//mV4InjGgt9OnOQO6izejWiGDUyTF4LW53VyW/kWW9fL1w4PMcQwKX5d7+ jvBCHl73NqeksWxkZu6DjVAaN5JxHtUVdOOudleajxL4vKl/nMaGYuhRQNQXPOM/ i8OfT46yTWdN7gLj5AsodpbkxNQmFkafQJJvlN5qZ9ZYqK3OTql8MhBzTDE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:56:36 2025 by rpki-client