$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb93e287-a1b4-4085-8deb-1d9e09fc0b0a.roa File: bb93e287-a1b4-4085-8deb-1d9e09fc0b0a.roa (raw, json) Hash identifier: q/oaZF+YDKs2zKirrQY3brcCUQ5WbU/6AK9ou1RTHcE= Subject key identifier: A1:C8:2E:92:CC:82:19:BD:B7:27:09:1D:F3:0A:95:A3:CC:3C:7B:C4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 632F6392F3AF3A21513972C241547DD2B19D5F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb93e287-a1b4-4085-8deb-1d9e09fc0b0a.roa Signing time: Thu 25 Sep 2025 16:57:30 +0000 ROA not before: Thu 25 Sep 2025 16:57:30 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2f:63:92:f3:af:3a:21:51:39:72:c2:41:54:7d:d2:b1:9d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 16:57:30 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=62e752285411dea844a16b125d7fcbf8b678e540e7bc30c2b4e4518e9d321f40, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:07:c6:21:c6:1a:c4:21:d9:64:55:84:59: cf:e5:3b:9d:a7:7d:85:21:cf:5b:7a:4b:fd:ef:ee: 85:0a:2f:04:f2:88:eb:ab:6c:c5:d8:de:b6:cb:77: 22:cb:04:4b:92:6e:f0:b5:13:80:a5:17:e9:50:ee: f7:d8:81:83:00:fc:48:e7:7c:84:f9:44:6f:8a:23: b8:7f:04:bb:5e:98:f9:13:95:37:e3:3b:9c:41:e5: bc:50:63:f6:ea:81:ed:67:b6:4e:3a:4a:9d:2e:d5: fb:4b:30:7d:0a:66:2f:63:59:69:be:7c:22:59:f2: 9c:b1:4d:dc:41:1f:cf:33:2d:35:df:0b:62:be:e8: 20:ac:e3:11:1e:64:83:da:e0:3e:8b:b7:c8:78:db: 82:40:83:14:d0:6c:9b:5b:fd:d1:85:cf:e9:8d:c1: 45:a7:7c:18:7b:29:20:60:c5:1f:ac:1a:37:61:11: 91:66:ef:e5:74:4f:88:1b:ad:2c:90:41:43:89:e0: 05:82:fa:c9:eb:69:cf:34:d2:e7:02:48:e9:4d:56: 80:db:7c:fe:70:0b:6b:f4:e8:f1:43:1e:6e:23:81: ca:02:ac:80:99:e3:48:16:f6:45:6e:19:15:22:8a: 11:de:34:fc:a9:4b:d5:9b:61:01:ee:87:ee:69:53: bc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C8:2E:92:CC:82:19:BD:B7:27:09:1D:F3:0A:95:A3:CC:3C:7B:C4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb93e287-a1b4-4085-8deb-1d9e09fc0b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.137.0/24 Signature Algorithm: sha256WithRSAEncryption 22:25:fa:61:ca:02:77:82:62:25:56:ff:16:72:b4:7c:88:0c: 16:36:e8:c4:5e:74:4a:c4:28:9c:f6:b1:3b:0e:a5:7e:d5:3c: e0:3a:2b:19:ec:6a:a3:67:80:16:e2:98:f9:ab:43:8c:e8:9f: 68:7c:bd:5c:45:8a:39:37:d0:0a:31:ed:2e:a5:31:bb:ff:15: 44:2b:f0:62:b1:ec:2c:74:1b:35:5a:e4:b2:dc:e8:29:c2:bd: da:74:a1:3c:39:03:18:c8:7c:af:ab:87:fd:76:3b:75:25:86: c1:30:0a:d8:a6:76:34:3c:34:e2:8b:71:a9:9e:59:79:ba:30: 20:da:86:80:87:ca:37:8a:01:b2:ff:d4:37:e3:d2:0f:ef:2d: df:ea:fa:b7:51:9b:9c:b5:b0:c3:93:48:e5:2c:04:c5:04:4c: 62:9b:30:9c:a1:e9:65:56:43:d3:20:1c:53:19:44:d3:58:2f: 31:78:5b:3f:7d:e3:f2:48:29:7d:c2:e9:b6:49:00:93:38:ce: f4:c3:95:77:b6:89:7c:26:66:bd:ba:70:0b:cf:2c:a7:f7:ca: 3c:03:23:f0:9d:64:73:ff:f5:c5:4f:1f:fd:4e:71:a7:cd:f0: 62:12:79:b8:33:97:09:00:b9:30:f7:4a:86:d1:99:0d:60:95: 90:35:e8:81 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITYy9jkvOvOiFROXLCQVR90rGdXzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjUxNjU3MzBaFw0yNTEwMzAyMzU5NTla MHoxSTBHBgNVBAUTQDYyZTc1MjI4NTQxMWRlYTg0NGExNmIxMjVkN2ZjYmY4YjY3 OGU1NDBlN2JjMzBjMmI0ZTQ1MThlOWQzMjFmNDAxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALA2B8YhxhrEIdlkVYRZz+U7nad9hSHPW3pL/e/uhQovBPKI 66tsxdjetst3IssES5Ju8LUTgKUX6VDu99iBgwD8SOd8hPlEb4ojuH8Eu16Y+ROV N+M7nEHlvFBj9uqB7We2TjpKnS7V+0swfQpmL2NZab58IlnynLFN3EEfzzMtNd8L Yr7oIKzjER5kg9rgPou3yHjbgkCDFNBsm1v90YXP6Y3BRad8GHspIGDFH6waN2ER kWbv5XRPiButLJBBQ4ngBYL6yetpzzTS5wJI6U1WgNt8/nALa/To8UMebiOBygKs gJnjSBb2RW4ZFSKKEd40/KlL1ZthAe6H7mlTvBUCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBShyC6SzIIZvbcnCR3zCpWjzDx7xDAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvYmI5M2UyODctYTFiNC00MDg1LThkZWItMWQ5ZTA5ZmMwYjBhLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAAOhiTANBgkqhkiG9w0BAQsFAAOCAQEAIiX6YcoCd4JiJVb/FnK0fIgMFjbo xF50SsQonPaxOw6lftU84DorGexqo2eAFuKY+atDjOifaHy9XEWKOTfQCjHtLqUx u/8VRCvwYrHsLHQbNVrkstzoKcK92nShPDkDGMh8r6uH/XY7dSWGwTAK2KZ2NDw0 4otxqZ5ZebowINqGgIfKN4oBsv/UN+PSD+8t3+r6t1GbnLWww5NI5SwExQRMYpsw nKHpZVZD0yAcUxlE01gvMXhbP33j8kgpfcLptkkAkzjO9MOVd7aJfCZmvbpwC88s p/fKPAMj8J1kc//1xU8f/U5xp83wYhJ5uDOXCQC5MPdKhtGZDWCVkDXogQ== -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:17 2025 by rpki-client