$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f29635ef-564c-4260-b694-d617e860c878.roa File: f29635ef-564c-4260-b694-d617e860c878.roa (raw, json) Hash identifier: yHBzNON7asX71QPMRg7tAY/TA+n3jBsq82/IpSDYdWA= Subject key identifier: 14:28:7F:DC:29:ED:24:CF:14:D2:12:EF:3A:B3:AC:F4:03:64:48:22 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3B42FBE0239EA112D1E97450FAE251339753AA43 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f29635ef-564c-4260-b694-d617e860c878.roa Signing time: Thu 25 Sep 2025 17:39:13 +0000 ROA not before: Thu 25 Sep 2025 17:39:13 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.163.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:42:fb:e0:23:9e:a1:12:d1:e9:74:50:fa:e2:51:33:97:53:aa:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 17:39:13 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=54a375f6d9a1bccf3bfaf78408de285a0c62ba8bc4cbcd985cef629399aed65e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:0b:91:69:93:f4:42:ee:44:8d:b2:41:1b: f0:d0:19:50:8c:0b:e9:ef:00:ad:a5:d6:01:d9:72: 14:68:c1:47:12:20:33:0d:3e:06:d5:91:ea:d3:3a: 92:66:b7:2a:8b:fa:74:d7:36:1c:f4:61:ef:70:6d: ac:b6:46:63:47:54:cc:9c:fb:4e:f9:64:0c:52:f7: 71:72:26:18:21:0b:34:93:1e:5e:ab:4c:2d:85:a8: 14:91:d8:73:0a:e4:02:19:27:16:97:9c:d2:bd:a1: 59:8d:0c:31:16:b9:f8:6c:b1:0c:4f:f0:b4:fb:9e: b1:5d:3e:a9:21:14:a8:f4:ed:d5:10:fb:16:8b:ef: 89:1e:1a:91:d7:3d:72:04:48:07:44:53:0a:da:46: 52:38:8f:0b:d6:c3:4c:a3:28:9a:57:a8:bc:d9:ae: d5:16:20:95:66:c8:e3:58:1c:19:58:32:c0:bc:0c: 3b:52:52:0c:3c:82:da:80:15:a8:20:b4:a2:13:f6: 08:bb:ac:db:20:cc:98:ed:64:7f:18:dc:fc:59:d9: 4a:1b:8f:bc:ce:95:cc:79:28:dc:0a:d5:da:15:2e: 91:cf:31:c3:27:ce:11:39:0f:fa:9b:fe:eb:3d:48: 77:42:92:8c:ed:3d:00:bf:bb:a6:19:c9:f6:38:47: 86:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:28:7F:DC:29:ED:24:CF:14:D2:12:EF:3A:B3:AC:F4:03:64:48:22 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f29635ef-564c-4260-b694-d617e860c878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.163.176.0/24 Signature Algorithm: sha256WithRSAEncryption 88:83:1d:4a:2f:79:55:e2:a3:c3:32:0d:46:70:6e:0f:8f:ad: 43:10:9d:b1:b3:51:f6:8e:24:e8:72:c7:6b:3f:e2:51:0b:c8: 23:fd:2f:92:0a:7f:a0:a3:f4:7c:47:7f:5c:d5:28:30:f7:89: 67:7c:51:22:39:17:29:9f:d0:b0:49:ba:25:17:97:c0:2a:04: d1:bf:f5:a4:75:1d:46:fd:c0:56:5e:91:04:8a:c7:f9:e1:de: ee:d2:d5:4b:e7:bb:6c:a9:46:fe:fb:f2:2b:1e:65:9b:f0:ee: 6b:42:df:e4:bd:9f:4f:21:2e:ca:01:ee:bc:5f:38:58:f4:6b: e1:00:37:de:6e:2f:6a:b1:7f:f4:31:62:ac:df:2b:18:ea:18: 69:d0:5d:f2:5e:70:3a:08:ec:88:6c:90:4e:37:3b:e2:3f:ca: 38:61:a0:63:0b:f4:d2:b4:9e:4a:59:f8:63:1c:b1:1a:2e:b0: 78:8c:5d:9e:b1:9a:2a:b5:30:7c:ac:b9:c7:69:0a:ca:97:f6: 94:29:87:62:1e:cd:10:39:2f:63:ac:28:b1:07:6c:c7:7e:73: 6d:cb:58:b4:de:f2:b1:a3:74:3f:49:5d:75:b2:b4:33:9b:97: 73:3b:1c:f5:c0:b0:9e:44:87:de:12:00:a9:91:6e:5c:3a:df: f6:6d:1f:d0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO0L74COeoRLR6XRQ+uJRM5dTqkMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTczOTEzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NGEzNzVmNmQ5YTFiY2NmM2JmYWY3ODQwOGRlMjg1YTBj NjJiYThiYzRjYmNkOTg1Y2VmNjI5Mzk5YWVkNjVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0ewuRaZP0Qu5EjbJBG/DQGVCMC+nvAK2l1gHZchRowUcS IDMNPgbVkerTOpJmtyqL+nTXNhz0Ye9wbay2RmNHVMyc+075ZAxS93FyJhghCzST Hl6rTC2FqBSR2HMK5AIZJxaXnNK9oVmNDDEWufhssQxP8LT7nrFdPqkhFKj07dUQ +xaL74keGpHXPXIESAdEUwraRlI4jwvWw0yjKJpXqLzZrtUWIJVmyONYHBlYMsC8 DDtSUgw8gtqAFaggtKIT9gi7rNsgzJjtZH8Y3PxZ2Uobj7zOlcx5KNwK1doVLpHP McMnzhE5D/qb/us9SHdCkoztPQC/u6YZyfY4R4bLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFCh/3CntJM8U0hLvOrOs9ANkSCIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YyOTYzNWVmLTU2NGMtNDI2MC1iNjk0LWQ2MTdlODYwYzg3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADo7AwDQYJKoZIhvcNAQELBQADggEBAIiDHUoveVXio8MyDUZwbg+PrUMQ nbGzUfaOJOhyx2s/4lELyCP9L5IKf6Cj9HxHf1zVKDD3iWd8USI5Fymf0LBJuiUX l8AqBNG/9aR1HUb9wFZekQSKx/nh3u7S1Uvnu2ypRv778iseZZvw7mtC3+S9n08h LsoB7rxfOFj0a+EAN95uL2qxf/QxYqzfKxjqGGnQXfJecDoI7IhskE43O+I/yjhh oGML9NK0nkpZ+GMcsRousHiMXZ6xmiq1MHysucdpCsqX9pQph2IezRA5L2OsKLEH bMd+c23LWLTe8rGjdD9JXXWytDObl3M7HPXAsJ5Eh94SAKmRblw63/ZtH9A= -----END CERTIFICATE-----Generated at Mon Oct 20 11:13:32 2025 by rpki-client