$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85de4340-56d9-4dff-8141-755ba2ff016f.roa File: 85de4340-56d9-4dff-8141-755ba2ff016f.roa (raw, json) Hash identifier: Vj3GLj+bd04bhmACM2keXh4yHkWrm2e8DP7iULLEbT0= Subject key identifier: 8A:28:5E:FE:ED:99:33:0B:8A:81:FF:2C:98:6B:CE:18:EC:44:8F:20 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E0E0DF2D937E68131E4C38F8A57D00F6B79A495 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85de4340-56d9-4dff-8141-755ba2ff016f.roa Signing time: Tue 15 Jul 2025 17:51:59 +0000 ROA not before: Tue 15 Jul 2025 17:51:59 +0000 ROA not after: Tue 19 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.102.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0e:0d:f2:d9:37:e6:81:31:e4:c3:8f:8a:57:d0:0f:6b:79:a4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 15 17:51:59 2025 GMT Not After : Aug 19 23:59:59 2025 GMT Subject: serialNumber=fe99512aa3ddc240dbe7727f0f637244a126b2825dea6188cecb15c77d38e7f8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ed:7b:1a:d6:26:ba:96:d4:ab:e2:b9:d9:f4: 56:90:f6:d6:3a:2c:45:b0:cb:be:f1:f7:28:a9:21: f0:ad:1d:c5:f9:0e:9a:87:53:2b:3f:20:f3:74:1a: 20:96:17:66:68:7e:2a:cf:39:c6:06:3f:0d:df:e2: 5f:f7:4c:42:f1:4f:c3:21:9f:2c:7e:10:6c:1b:95: ab:70:d5:9b:7c:6c:53:9f:6a:6b:4b:f0:39:37:16: 42:e4:e3:73:f0:54:3c:54:60:ec:3f:04:6a:05:33: fc:0a:44:ce:2f:19:12:23:b5:f7:29:b3:f2:c6:14: 2d:68:3d:10:ae:69:e8:57:6b:75:96:d7:cb:37:64: b7:16:ba:e7:fd:18:94:5d:53:ac:05:33:6b:ad:5a: 2e:f6:11:c2:28:bb:c2:51:16:5f:91:a8:87:f4:41: 92:2d:b2:56:02:da:8d:83:a7:df:e4:1e:a5:fb:05: d8:34:41:a4:e2:c6:dd:6f:64:cf:2a:61:85:2d:41: dd:b6:74:2b:b6:10:6f:d5:e5:7f:23:05:0b:82:88: bb:45:93:d7:a5:02:ad:be:23:74:fc:b8:49:d4:4b: 10:f3:ba:07:af:39:46:86:a9:95:3b:99:50:c0:48: a5:25:e3:7a:ce:e5:e9:c8:9f:74:74:62:e1:b5:03: d0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:28:5E:FE:ED:99:33:0B:8A:81:FF:2C:98:6B:CE:18:EC:44:8F:20 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85de4340-56d9-4dff-8141-755ba2ff016f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.102.88.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:79:85:29:45:f6:f1:1a:5d:21:be:0f:bd:3f:fc:2a:3e:0e: df:f1:f4:0d:77:3d:38:0b:10:90:0c:78:1a:57:f4:0a:3d:8f: b8:2d:15:53:70:2b:ab:87:18:19:71:ed:e3:2f:7c:17:3d:64: 38:a1:e7:68:4f:d4:b5:7a:8f:96:9a:d2:9a:9e:4e:72:a6:ad: 29:18:81:39:66:34:79:cf:51:0d:7c:f6:53:6a:1a:3a:e5:a5: 1d:cb:22:72:54:a5:d8:82:16:61:a6:82:80:c4:55:aa:0b:85: 4a:0a:e9:db:85:00:2c:85:06:4b:e6:3e:d4:e0:73:40:39:a0: d7:af:fd:8f:86:9a:55:d8:f0:98:f8:11:bb:f4:ff:c7:30:b7: 23:19:32:eb:ce:df:8d:48:2d:79:1b:4c:ca:56:be:cf:ab:dc: b4:03:ae:24:8f:42:9b:2b:67:a7:e3:f2:38:b2:f1:e5:6d:9a: 28:ad:c5:26:e4:e7:35:15:c1:67:7c:f3:0d:2f:58:af:d0:03: d2:d8:8d:8c:e8:50:01:65:fa:fb:2f:de:fb:dd:d2:2a:4f:34: 0f:89:96:34:e4:34:dc:df:29:f2:da:1b:c4:2e:3a:36:05:2e: 45:45:4e:2e:6c:2d:92:c4:8b:5f:4e:df:b9:ab:f9:7d:5e:83: 9b:1b:16:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDg4N8tk35oEx5MOPilfQD2t5pJUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzE1MTc1MTU5WhcNMjUwODE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTk5NTEyYWEzZGRjMjQwZGJlNzcyN2YwZjYzNzI0NGEx MjZiMjgyNWRlYTYxODhjZWNiMTVjNzdkMzhlN2Y4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCN7Xsa1ia6ltSr4rnZ9FaQ9tY6LEWwy77x9yipIfCtHcX5 DpqHUys/IPN0GiCWF2ZofirPOcYGPw3f4l/3TELxT8Mhnyx+EGwblatw1Zt8bFOf amtL8Dk3FkLk43PwVDxUYOw/BGoFM/wKRM4vGRIjtfcps/LGFC1oPRCuaehXa3WW 18s3ZLcWuuf9GJRdU6wFM2utWi72EcIou8JRFl+RqIf0QZItslYC2o2Dp9/kHqX7 Bdg0QaTixt1vZM8qYYUtQd22dCu2EG/V5X8jBQuCiLtFk9elAq2+I3T8uEnUSxDz ugevOUaGqZU7mVDASKUl43rO5enIn3R0YuG1A9BJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiihe/u2ZMwuKgf8smGvOGOxEjyAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg1ZGU0MzQwLTU2ZDktNGRmZi04MTQxLTc1NWJhMmZmMDE2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADZlgwDQYJKoZIhvcNAQELBQADggEBABt5hSlF9vEaXSG+D70//Co+Dt/x 9A13PTgLEJAMeBpX9Ao9j7gtFVNwK6uHGBlx7eMvfBc9ZDih52hP1LV6j5aa0pqe TnKmrSkYgTlmNHnPUQ189lNqGjrlpR3LInJUpdiCFmGmgoDEVaoLhUoK6duFACyF BkvmPtTgc0A5oNev/Y+GmlXY8Jj4Ebv0/8cwtyMZMuvO341ILXkbTMpWvs+r3LQD riSPQpsrZ6fj8jiy8eVtmiitxSbk5zUVwWd88w0vWK/QA9LYjYzoUAFl+vsv3vvd 0ipPNA+JljTkNNzfKfLaG8QuOjYFLkVFTi5sLZLEi19O37mr+X1eg5sbFvQ= -----END CERTIFICATE-----Generated at Tue Aug 5 17:18:50 2025 by rpki-client