$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee810ac0-c1cd-4936-9265-3fb62833860a.roa File: ee810ac0-c1cd-4936-9265-3fb62833860a.roa (raw, json) Hash identifier: 0HB/3FLD08l86WpV21iOOq6lf1a4GwzH37wonhAJL0U= Subject key identifier: D0:3D:65:F8:EA:86:D7:A8:59:7F:09:CE:90:EA:1E:7D:83:B4:C7:15 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1350AC8C4BD57EE69501325F7E6086517E9022DC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee810ac0-c1cd-4936-9265-3fb62833860a.roa Signing time: Thu 25 Sep 2025 18:02:48 +0000 ROA not before: Thu 25 Sep 2025 18:02:48 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.164.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:50:ac:8c:4b:d5:7e:e6:95:01:32:5f:7e:60:86:51:7e:90:22:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 18:02:48 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=d28172368c1480e40ad980a4188fa88c19a2d1291a4c463a182e2d1259a7b233, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:b0:f0:c6:d7:66:68:a4:e6:dc:31:f1:3a: ea:81:6f:45:ba:cc:1e:a4:3d:c6:e1:4d:2e:2a:54: ad:75:42:0d:b4:08:15:b7:79:0a:02:2a:0e:49:48: d9:12:b0:c5:a8:d5:01:8c:04:62:6c:38:45:8b:e1: 86:63:58:05:80:0d:61:7f:d6:26:44:bc:40:f1:43: ec:37:76:1a:1f:2f:5f:35:4a:59:2a:2a:83:2a:33: 59:f9:86:d5:5a:19:41:6a:25:73:92:4e:1b:5b:b7: 99:e5:82:dc:8f:85:a1:7c:a3:4e:7b:cf:c2:d1:b9: 19:2d:82:1e:07:50:80:3b:e3:e2:88:94:d7:4e:29: 6d:f7:a1:18:f7:95:81:cb:0e:5b:db:5b:51:8f:9b: cc:fb:f3:6d:24:1e:e1:aa:2d:8d:2e:05:bd:f7:3a: a6:63:27:f5:0e:12:1b:73:87:d6:c8:d7:c1:07:8b: 2d:33:3a:33:ce:29:22:42:e8:d0:25:54:e5:a9:6a: 62:48:d4:bb:c6:70:fd:fc:af:03:57:e1:25:1e:6c: 4c:f7:1d:c0:71:83:09:41:2c:4f:8d:ff:27:d6:d9: 1a:1e:e5:e5:a3:e5:8d:ac:ce:54:34:64:97:5e:3e: ef:b2:4b:e4:13:63:91:13:0b:94:15:96:da:26:75: c7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3D:65:F8:EA:86:D7:A8:59:7F:09:CE:90:EA:1E:7D:83:B4:C7:15 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee810ac0-c1cd-4936-9265-3fb62833860a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.164.248.0/24 Signature Algorithm: sha256WithRSAEncryption 62:5a:c0:bc:e8:d5:b9:c0:66:16:44:cc:4b:39:30:26:ca:d9: 59:8b:ef:7d:35:3c:6b:bc:ff:1e:30:55:d7:95:80:f6:2c:6d: e0:2c:55:ad:e7:be:d9:e5:30:cd:3b:df:a5:36:e6:2e:76:17: c0:4e:c5:ab:1d:cf:d6:95:5f:56:ab:07:67:ba:65:ff:31:3a: b6:21:81:9d:af:17:0d:41:e9:72:b1:72:d4:59:36:5e:c2:9e: bc:02:f2:f1:c3:53:51:fd:cc:27:7d:7c:46:9e:4c:3c:cf:12: f0:0f:ff:ae:8e:1d:07:7f:4d:1b:26:59:b8:5e:e6:3d:9c:d0: b2:c8:b1:11:7e:b4:40:4a:86:0a:48:19:3c:58:0b:7f:83:d0: 71:65:a2:55:c4:81:7c:37:e3:cf:4c:ff:f1:cd:66:23:33:18: 47:d3:91:4c:8b:0b:16:83:28:26:44:e4:21:7a:20:22:6e:01: 42:2e:8e:50:e3:e3:96:d2:6a:d7:5d:c4:4b:d1:b5:48:0a:1e: f2:a1:67:08:c2:bd:f0:b3:2d:f0:4e:6e:86:45:05:69:3d:fc: d5:b1:d5:f8:8f:8d:3f:7d:1f:68:2e:62:d2:98:ba:de:02:75: c8:07:0c:28:72:50:28:a5:3f:b2:05:8b:7d:3d:d1:98:de:8d: ce:73:83:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE1CsjEvVfuaVATJffmCGUX6QItwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgwMjQ4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjgxNzIzNjhjMTQ4MGU0MGFkOTgwYTQxODhmYTg4YzE5 YTJkMTI5MWE0YzQ2M2ExODJlMmQxMjU5YTdiMjMzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIz7DwxtdmaKTm3DHxOuqBb0W6zB6kPcbhTS4qVK11Qg20 CBW3eQoCKg5JSNkSsMWo1QGMBGJsOEWL4YZjWAWADWF/1iZEvEDxQ+w3dhofL181 SlkqKoMqM1n5htVaGUFqJXOSThtbt5nlgtyPhaF8o057z8LRuRktgh4HUIA74+KI lNdOKW33oRj3lYHLDlvbW1GPm8z7820kHuGqLY0uBb33OqZjJ/UOEhtzh9bI18EH iy0zOjPOKSJC6NAlVOWpamJI1LvGcP38rwNX4SUebEz3HcBxgwlBLE+N/yfW2Roe 5eWj5Y2szlQ0ZJdePu+yS+QTY5ETC5QVltomdcdbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0D1l+OqG16hZfwnOkOoefYO0xxUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VlODEwYWMwLWMxY2QtNDkzNi05MjY1LTNmYjYyODMzODYwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADpPgwDQYJKoZIhvcNAQELBQADggEBAGJawLzo1bnAZhZEzEs5MCbK2VmL 7301PGu8/x4wVdeVgPYsbeAsVa3nvtnlMM0736U25i52F8BOxasdz9aVX1arB2e6 Zf8xOrYhgZ2vFw1B6XKxctRZNl7CnrwC8vHDU1H9zCd9fEaeTDzPEvAP/66OHQd/ TRsmWbhe5j2c0LLIsRF+tEBKhgpIGTxYC3+D0HFlolXEgXw3489M//HNZiMzGEfT kUyLCxaDKCZE5CF6ICJuAUIujlDj45bSatddxEvRtUgKHvKhZwjCvfCzLfBOboZF BWk9/NWx1fiPjT99H2guYtKYut4CdcgHDChyUCilP7IFi3090Zjejc5zgyY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:04 2025 by rpki-client