$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0157095-f717-443b-a277-ba69c5ee739b.roa File: f0157095-f717-443b-a277-ba69c5ee739b.roa (raw, json) Hash identifier: cQbqVEIMgAwJKoCP+dm4LR9fm0IDVeklZgjXLTOFBTU= Subject key identifier: 36:20:EB:16:2E:7E:78:DF:D7:C8:DC:E6:88:8C:52:C4:7F:4E:37:63 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1ACED3C410D27BEFE775461CD89F330FB27FFF60 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0157095-f717-443b-a277-ba69c5ee739b.roa Signing time: Thu 25 Sep 2025 17:37:03 +0000 ROA not before: Thu 25 Sep 2025 17:37:03 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.163.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ce:d3:c4:10:d2:7b:ef:e7:75:46:1c:d8:9f:33:0f:b2:7f:ff:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:37:03 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=a08e168b8019d4d5b65d03111101adcd07530dc0afaa7e72b6e8bf226b52ff66, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:09:fa:a6:a8:a6:7f:10:27:ff:17:f3:eb:d8: 6a:39:39:21:7a:7f:04:cd:6c:d7:a8:2f:6e:0c:5a: dd:b6:ce:3e:95:cd:a3:c7:d6:fe:eb:d8:07:45:e9: fe:88:bd:7c:4e:2e:b7:d6:ce:1d:ca:aa:0b:67:4d: 1c:d7:18:37:97:47:a3:cb:e7:56:92:e5:8b:c2:af: fd:a9:f8:06:fd:29:1f:26:d3:ac:98:58:3a:ca:be: 5d:68:af:04:c0:64:28:25:c2:d8:2a:46:5e:95:9e: eb:99:f8:86:d1:34:87:44:81:e1:78:ca:4b:2f:f9: 25:7c:02:75:ce:8b:8b:7b:9e:a0:76:55:37:59:7d: 00:90:36:9d:62:00:a8:33:39:f9:be:bf:22:fa:76: 8e:f3:71:3a:39:6e:99:92:c7:d7:94:55:68:c2:ba: b2:c2:26:6f:a8:3a:20:b6:d0:ce:40:7e:26:43:1d: 74:6f:d8:50:8c:c8:67:80:a3:aa:a0:e2:b0:2a:57: 2f:e1:21:69:bb:96:08:38:a1:ff:ed:30:51:29:14: e7:d9:c3:cd:20:a6:c4:6c:e8:bc:37:61:8b:08:f1: 97:1d:e2:d3:4f:60:00:43:14:54:5f:b8:85:b3:f6: 1b:bf:cd:5e:41:5a:2a:b5:fd:5b:34:e7:a7:b8:80: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:20:EB:16:2E:7E:78:DF:D7:C8:DC:E6:88:8C:52:C4:7F:4E:37:63 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0157095-f717-443b-a277-ba69c5ee739b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.163.157.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:8f:86:62:16:d2:57:b0:68:51:50:ea:34:ff:0f:37:82:37: 18:4c:6b:87:e5:2b:9e:c6:46:22:52:cb:43:ce:31:f2:98:6e: ce:08:1b:22:58:d4:7b:61:04:63:9b:59:be:f2:fb:be:8a:9e: 25:d2:f9:60:54:aa:27:73:57:03:f5:fe:43:45:c7:46:59:f1: 22:f5:5f:c4:62:6c:26:cf:01:db:5a:5b:4c:0b:1d:39:2a:bd: c4:7d:09:83:47:30:f0:d4:12:cc:34:2f:d1:3e:d3:65:9a:04: a1:31:0f:b4:64:48:21:03:42:bc:6b:d8:c8:b2:f1:30:e0:f0: 70:d8:0f:6c:9f:6b:49:da:c1:57:1e:39:ae:17:0c:e3:bb:52: 73:ec:9f:5b:80:4a:a7:46:a1:89:39:f1:61:35:77:78:cd:2b: ab:7d:ad:44:28:43:ce:86:fe:b3:41:b8:29:1a:e3:3d:fd:eb: c6:6b:a1:87:03:5d:de:45:6f:ec:50:ab:0c:09:55:05:d5:35: 6b:9b:42:86:b9:0f:2f:51:05:ec:4e:e3:99:09:fa:e6:35:4b: 15:71:bd:74:e0:4e:96:80:50:00:a5:47:65:07:e3:67:72:ca: bd:20:14:d5:71:ae:73:6e:09:a7:41:b0:e1:aa:b4:7c:1a:af: 48:10:04:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGs7TxBDSe+/ndUYc2J8zD7J//2AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTczNzAzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDhlMTY4YjgwMTlkNGQ1YjY1ZDAzMTExMTAxYWRjZDA3 NTMwZGMwYWZhYTdlNzJiNmU4YmYyMjZiNTJmZjY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuCfqmqKZ/ECf/F/Pr2Go5OSF6fwTNbNeoL24MWt22zj6V zaPH1v7r2AdF6f6IvXxOLrfWzh3KqgtnTRzXGDeXR6PL51aS5YvCr/2p+Ab9KR8m 06yYWDrKvl1orwTAZCglwtgqRl6VnuuZ+IbRNIdEgeF4yksv+SV8AnXOi4t7nqB2 VTdZfQCQNp1iAKgzOfm+vyL6do7zcTo5bpmSx9eUVWjCurLCJm+oOiC20M5AfiZD HXRv2FCMyGeAo6qg4rAqVy/hIWm7lgg4of/tMFEpFOfZw80gpsRs6Lw3YYsI8Zcd 4tNPYABDFFRfuIWz9hu/zV5BWiq1/Vs056e4gB7zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNiDrFi5+eN/XyNzmiIxSxH9ON2MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YwMTU3MDk1LWY3MTctNDQzYi1hMjc3LWJhNjljNWVlNzM5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADo50wDQYJKoZIhvcNAQELBQADggEBAE6PhmIW0lewaFFQ6jT/DzeCNxhM a4flK57GRiJSy0POMfKYbs4IGyJY1HthBGObWb7y+76KniXS+WBUqidzVwP1/kNF x0ZZ8SL1X8RibCbPAdtaW0wLHTkqvcR9CYNHMPDUEsw0L9E+02WaBKExD7RkSCED Qrxr2Miy8TDg8HDYD2yfa0nawVceOa4XDOO7UnPsn1uASqdGoYk58WE1d3jNK6t9 rUQoQ86G/rNBuCka4z3968ZroYcDXd5Fb+xQqwwJVQXVNWubQoa5Dy9RBexO45kJ +uY1SxVxvXTgTpaAUAClR2UH42dyyr0gFNVxrnNuCadBsOGqtHwar0gQBOA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:12 2025 by rpki-client