$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcd84f9e-f7dd-4852-8dfd-d6e58e720e5d.roa File: fcd84f9e-f7dd-4852-8dfd-d6e58e720e5d.roa (raw, json) Hash identifier: a3gDg4OxwJffs6tiSvXRL4LTXqE4Z74kxmp5h8Hge7A= Subject key identifier: 91:28:87:2C:27:49:00:D5:80:05:62:CE:99:36:0D:00:46:F4:C8:12 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53644312AF4473982E78C4446EFACBF76AA45FEB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcd84f9e-f7dd-4852-8dfd-d6e58e720e5d.roa Signing time: Fri 26 Sep 2025 02:06:55 +0000 ROA not before: Fri 26 Sep 2025 02:06:55 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.166.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:64:43:12:af:44:73:98:2e:78:c4:44:6e:fa:cb:f7:6a:a4:5f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:06:55 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=0f4b8e5989c2df0e25aef6c8ee6545b1028e48248104882115f964b9349fd70b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:75:e9:f7:d2:35:82:12:f2:b2:77:55:4e: 66:18:16:5c:88:f1:80:b2:ee:6a:3e:be:98:ca:ab: 66:2d:33:3b:5d:16:08:56:0f:42:00:6a:74:68:00: 3b:11:aa:5f:aa:5e:00:d0:2d:81:74:63:22:18:7e: 69:c2:68:58:fc:82:80:a2:ca:48:34:66:e1:9e:d3: 84:91:70:75:83:05:c6:76:d5:45:97:00:61:fd:37: 5d:e0:9c:71:4b:30:ac:1e:64:22:57:10:02:dc:8e: bb:d5:f1:9b:c4:58:a5:b5:aa:63:d7:d6:f1:e9:9b: 7c:28:85:05:07:2a:36:4d:db:7b:6b:e5:f7:ba:10: 13:76:54:ee:20:21:0a:5e:79:01:fd:6b:82:f7:62: 40:9b:8d:b0:bf:05:81:69:7b:95:6f:3d:2f:25:98: 94:26:4d:d2:5d:ea:c2:bc:e6:6a:d3:97:01:3a:36: 1d:3e:95:33:a0:26:9c:02:20:f3:f4:09:51:5f:ce: bb:28:c9:4e:18:1c:41:a6:d5:80:f5:4a:b8:0e:02: c9:9a:04:b7:cd:37:48:c2:62:a1:f1:af:93:37:1e: 6a:0f:13:61:a3:83:6c:0b:1e:97:23:93:f7:01:a3: ad:12:bf:e2:36:85:fb:c1:68:ab:5f:ae:a5:b0:cd: 71:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:28:87:2C:27:49:00:D5:80:05:62:CE:99:36:0D:00:46:F4:C8:12 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcd84f9e-f7dd-4852-8dfd-d6e58e720e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.166.32.0/19 Signature Algorithm: sha256WithRSAEncryption 58:eb:ba:da:05:cc:09:2a:4d:dc:2a:23:1b:3b:0b:86:a7:e0: 58:cb:aa:ee:93:a8:dd:80:78:6b:22:2c:ad:77:4b:55:1d:80: d3:f4:05:5e:16:ed:74:83:06:5e:d9:89:8d:08:e5:12:a0:51: e4:3f:3c:87:2b:ea:4d:9a:81:ec:c4:5c:e5:b2:33:9d:7e:20: cc:36:4a:63:3f:27:aa:62:98:6f:c6:c3:6a:1d:b5:a9:27:94: 18:cd:87:5d:14:8f:22:ef:ad:a1:7d:d7:ea:b1:b1:c6:05:04: 0b:97:f9:cb:22:2e:cc:34:d6:eb:d1:64:e0:8a:12:12:96:58: 44:f7:1a:f6:2f:67:bd:7b:97:7c:07:08:31:93:12:e0:e0:46: 7e:1c:67:61:98:f6:24:83:72:c5:f7:2f:6f:78:cd:c2:ed:ee: dd:78:1d:b4:fa:33:1f:79:b3:95:c9:a4:30:89:69:da:e9:70: 0f:d0:c0:9b:47:78:41:9c:0c:b3:b7:de:cf:1d:3f:ed:fd:aa: db:d4:5a:68:45:c7:ab:94:ab:22:d7:1d:e6:b5:82:d3:39:4d: 6f:73:a0:44:3e:d3:f2:ea:fa:1a:3f:78:de:fc:8b:28:58:3f: ea:e4:08:59:08:38:65:90:9a:26:de:07:72:49:fd:23:78:0b: 53:9c:e7:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU2RDEq9Ec5gueMREbvrL92qkX+swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIwNjU1WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjRiOGU1OTg5YzJkZjBlMjVhZWY2YzhlZTY1NDViMTAy OGU0ODI0ODEwNDg4MjExNWY5NjRiOTM0OWZkNzBiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEaHXp99I1ghLysndVTmYYFlyI8YCy7mo+vpjKq2YtMztd FghWD0IAanRoADsRql+qXgDQLYF0YyIYfmnCaFj8goCiykg0ZuGe04SRcHWDBcZ2 1UWXAGH9N13gnHFLMKweZCJXEALcjrvV8ZvEWKW1qmPX1vHpm3wohQUHKjZN23tr 5fe6EBN2VO4gIQpeeQH9a4L3YkCbjbC/BYFpe5VvPS8lmJQmTdJd6sK85mrTlwE6 Nh0+lTOgJpwCIPP0CVFfzrsoyU4YHEGm1YD1SrgOAsmaBLfNN0jCYqHxr5M3HmoP E2Gjg2wLHpcjk/cBo60Sv+I2hfvBaKtfrqWwzXFLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkSiHLCdJANWABWLOmTYNAEb0yBIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZjZDg0ZjllLWY3ZGQtNDg1Mi04ZGZkLWQ2ZTU4ZTcyMGU1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUDpiAwDQYJKoZIhvcNAQELBQADggEBAFjrutoFzAkqTdwqIxs7C4an4FjL qu6TqN2AeGsiLK13S1UdgNP0BV4W7XSDBl7ZiY0I5RKgUeQ/PIcr6k2agezEXOWy M51+IMw2SmM/J6pimG/Gw2odtaknlBjNh10UjyLvraF91+qxscYFBAuX+csiLsw0 1uvRZOCKEhKWWET3GvYvZ717l3wHCDGTEuDgRn4cZ2GY9iSDcsX3L294zcLt7t14 HbT6Mx95s5XJpDCJadrpcA/QwJtHeEGcDLO33s8dP+39qtvUWmhFx6uUqyLXHea1 gtM5TW9zoEQ+0/Lq+ho/eN78iyhYP+rkCFkIOGWQmibeB3JJ/SN4C1Oc5/4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:58:49 2025 by rpki-client