$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3edb19-9dc8-4fb1-80a7-e7d90b77a937.roa File: bb3edb19-9dc8-4fb1-80a7-e7d90b77a937.roa (raw, json) Hash identifier: 0cu0LhEc8weJ5Gi7A0PFNjXIVkol+qwLfFq0sldxQSI= Subject key identifier: 42:E9:3C:66:40:F6:AE:AD:13:66:B3:2D:DE:95:44:6F:5B:56:32:E8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D6B455122AED0EAA7D0DCF3CE2A17BDF0F89507 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3edb19-9dc8-4fb1-80a7-e7d90b77a937.roa Signing time: Fri 26 Sep 2025 16:22:25 +0000 ROA not before: Fri 26 Sep 2025 16:22:25 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.208.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6b:45:51:22:ae:d0:ea:a7:d0:dc:f3:ce:2a:17:bd:f0:f8:95:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 16:22:25 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=5b746c8160f8a25d6c6d92045c13bd30ca14966f9a492b0d72e553aee1427f25, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:3d:09:c0:78:8a:4b:0f:1b:2e:b4:34:e9: ca:c0:78:3a:79:a0:31:7e:fb:23:dc:5f:02:10:c4: 3a:a3:7e:96:ac:46:35:9a:b0:82:66:4f:83:94:e9: bd:d5:7c:dc:fd:5d:a8:5d:56:12:ad:6a:56:de:2f: 2f:62:58:6e:17:71:c3:d4:91:03:5b:40:85:49:b1: cb:f4:2b:e1:de:ab:c3:5b:1a:8d:3c:53:7f:e3:48: a8:96:aa:24:a1:d9:7d:0a:c8:84:84:24:81:76:11: 21:ed:e7:f4:ac:f1:87:54:bb:45:c4:f8:82:11:8d: 4f:e6:9c:27:d8:db:14:b8:46:59:84:ec:3f:51:1d: 2b:90:4a:18:22:41:ff:eb:dc:bc:3d:a8:8e:e0:f1: c7:19:fb:95:18:bf:76:c9:81:07:cf:a6:40:18:a7: e8:a1:47:ca:e1:ce:1f:ae:00:48:01:0b:b4:2b:50: 23:4c:c5:f0:f3:bb:20:38:54:2a:9b:9e:d3:54:aa: 4d:fd:84:06:b2:fe:82:3b:38:c5:9f:ec:89:59:23: 3a:c0:d2:33:3d:ed:41:32:75:7c:0b:f1:63:88:b6: 9c:91:07:34:5a:a2:c2:d9:d9:d7:b1:fd:25:bc:f5: bb:8f:bc:a0:89:35:d1:9c:fa:d5:83:a8:83:bb:76: 03:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E9:3C:66:40:F6:AE:AD:13:66:B3:2D:DE:95:44:6F:5B:56:32:E8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3edb19-9dc8-4fb1-80a7-e7d90b77a937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.208.0.0/13 Signature Algorithm: sha256WithRSAEncryption ad:ac:12:6b:8b:0a:84:d8:6c:f5:fd:3f:c0:7c:5c:d7:4e:dc: 1c:8a:5c:1c:c8:38:9f:e4:0e:6f:9d:91:94:55:52:dd:c0:c8: b6:39:65:d6:84:27:9a:21:ac:a1:e4:0a:16:3e:96:25:d0:6d: 5d:10:d4:cb:19:78:23:10:be:37:ab:bc:e2:67:a6:25:eb:c7: 26:44:3d:95:99:20:9c:c7:8c:5d:29:5c:ad:7d:94:f7:d3:7e: 50:32:2f:37:1d:61:e2:e6:a9:ef:19:37:f8:9c:46:bc:1d:8f: 30:e6:69:5b:59:db:6b:c6:53:3d:a8:67:cf:65:02:e8:59:46: 0f:79:49:32:aa:b5:b4:89:ff:d4:ef:5f:e3:45:95:bf:86:80: bc:c1:9a:99:5d:0c:6b:7c:9c:55:49:7a:70:52:46:9f:ac:8d: d2:05:4c:03:ad:fc:d8:2d:ed:c9:63:bb:f5:9b:70:fb:a8:ec: 72:09:fd:44:5f:75:e7:ff:76:7e:a6:07:4c:26:4d:7a:bb:5c: 95:bf:f6:dc:ce:7a:3d:3a:84:d8:0d:63:3c:7c:f3:74:cd:85: db:cb:ff:b0:e4:42:0a:29:f4:f7:79:d9:14:f2:6e:84:f3:f3: c7:2e:2c:24:a4:a2:6a:be:c4:ab:52:57:43:23:76:64:21:1e: 98:72:3b:fe -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPWtFUSKu0Oqn0NzzzioXvfD4lQcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTYyMjI1WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Yjc0NmM4MTYwZjhhMjVkNmM2ZDkyMDQ1YzEzYmQzMGNh MTQ5NjZmOWE0OTJiMGQ3MmU1NTNhZWUxNDI3ZjI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN1j0JwHiKSw8bLrQ06crAeDp5oDF++yPcXwIQxDqjfpas RjWasIJmT4OU6b3VfNz9XahdVhKtalbeLy9iWG4XccPUkQNbQIVJscv0K+Heq8Nb Go08U3/jSKiWqiSh2X0KyISEJIF2ESHt5/Ss8YdUu0XE+IIRjU/mnCfY2xS4RlmE 7D9RHSuQShgiQf/r3Lw9qI7g8ccZ+5UYv3bJgQfPpkAYp+ihR8rhzh+uAEgBC7Qr UCNMxfDzuyA4VCqbntNUqk39hAay/oI7OMWf7IlZIzrA0jM97UEydXwL8WOItpyR BzRaosLZ2dex/SW89buPvKCJNdGc+tWDqIO7dgMFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQuk8ZkD2rq0TZrMt3pVEb1tWMugwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JiM2VkYjE5LTlkYzgtNGZiMS04MGE3LWU3ZDkwYjc3YTkzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMS0DANBgkqhkiG9w0BAQsFAAOCAQEArawSa4sKhNhs9f0/wHxc107cHIpc HMg4n+QOb52RlFVS3cDItjll1oQnmiGsoeQKFj6WJdBtXRDUyxl4IxC+N6u84mem JevHJkQ9lZkgnMeMXSlcrX2U99N+UDIvNx1h4uap7xk3+JxGvB2PMOZpW1nba8ZT Pahnz2UC6FlGD3lJMqq1tIn/1O9f40WVv4aAvMGamV0Ma3ycVUl6cFJGn6yN0gVM A6382C3tyWO79Ztw+6jscgn9RF915/92fqYHTCZNertclb/23M56PTqE2A1jPHzz dM2F28v/sORCCin093nZFPJuhPPzxy4sJKSiar7Eq1JXQyN2ZCEemHI7/g== -----END CERTIFICATE-----Generated at Mon Oct 20 03:03:53 2025 by rpki-client