$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd5ea03a-9fbb-45d2-a8c6-2e235352551d.roa File: bd5ea03a-9fbb-45d2-a8c6-2e235352551d.roa (raw, json) Hash identifier: IkwWU9rkso98fbcqj5WP8mMls7VFf8BrL3GxeXgcyGs= Subject key identifier: 75:53:07:D5:12:BD:F8:0B:83:48:D2:23:8D:E6:EB:1D:F6:48:CF:C2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 62D6A37FDED85E996B5B2D0CE2C72AA9CE3AC416 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd5ea03a-9fbb-45d2-a8c6-2e235352551d.roa Signing time: Thu 25 Sep 2025 23:57:13 +0000 ROA not before: Thu 25 Sep 2025 23:57:13 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.161.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d6:a3:7f:de:d8:5e:99:6b:5b:2d:0c:e2:c7:2a:a9:ce:3a:c4:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 23:57:13 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=6faac8d9d939dc1bcb1c7f66e7bc108785bdfcb6a19948e776d3a85aa88f8b19, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fb:a9:b9:1d:11:2b:2a:c0:65:6d:fc:e2:4d: 35:db:0a:b8:06:9a:e1:9c:e3:6b:dc:bd:d3:d7:93: 4e:d0:4e:b2:11:bf:7a:08:9b:97:e0:c2:08:c8:7e: ea:a5:22:04:db:01:54:0e:f5:02:61:e9:f8:18:52: f1:71:b0:94:1d:35:98:db:6e:0a:c3:c2:bb:11:65: 94:2b:fa:ba:0a:d4:ed:1e:be:7f:36:26:c7:01:cc: 3e:e5:38:6e:0e:99:d1:30:58:e6:80:4e:ad:30:13: 82:1c:6e:e1:bd:23:f6:f1:bc:9c:2d:a9:df:11:74: ca:14:76:db:c7:ba:e9:34:ab:82:60:4b:25:5f:4e: 5d:b5:0f:fe:ec:d6:e4:c4:5c:aa:a8:6a:80:7e:7c: 74:40:42:cd:c2:49:9b:f0:45:17:49:07:cf:ac:94: f9:01:79:60:fb:17:58:7f:8f:2f:3d:72:8c:fa:15: 51:96:49:15:8c:bb:39:c6:7a:ef:8e:bf:bb:df:eb: b5:50:e8:d1:7f:65:18:b3:1b:53:a6:a6:13:6f:0b: 1a:f5:9c:d9:c4:0f:48:b0:bf:68:46:d0:ff:f5:3b: f4:49:e5:7e:b8:c6:58:91:63:9b:1d:20:cf:7d:0f: af:db:a8:49:f5:ba:ef:6c:ed:3a:fb:00:27:cf:0b: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:53:07:D5:12:BD:F8:0B:83:48:D2:23:8D:E6:EB:1D:F6:48:CF:C2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd5ea03a-9fbb-45d2-a8c6-2e235352551d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.161.100.0/22 Signature Algorithm: sha256WithRSAEncryption 98:dc:5f:78:4c:a4:cd:8e:02:ae:93:f4:2b:7c:75:cd:3c:e2: e5:01:d5:2e:19:99:ba:50:b8:62:3c:90:67:06:9e:ca:c8:a3: 63:8e:d8:ad:9d:09:91:bc:f1:e1:bf:39:6f:37:1f:24:50:52: cc:e8:bb:b5:95:c9:28:65:23:97:83:a6:99:38:3f:46:3f:3f: 32:70:40:58:38:f7:0f:5e:f4:bc:13:11:54:3c:a3:c7:b7:cc: b3:b2:12:dd:31:22:fb:a3:32:e9:af:12:ea:9e:27:8b:c0:ac: 43:aa:04:d0:35:c8:23:99:85:45:33:66:41:ba:a2:07:02:9a: f8:f8:c0:c9:0f:b0:86:fc:24:86:59:ac:fe:6b:95:31:48:dc: 36:39:56:10:5c:af:1b:06:22:c1:a3:a7:d8:c8:71:58:dd:a0: 2d:8a:1d:4d:5a:d0:0e:ba:4c:9e:d7:d0:bb:16:e5:a8:c1:35: 1c:43:60:ac:b3:9f:50:8e:2d:e6:b9:d8:ee:93:88:39:04:03: 0f:d7:f3:bf:b7:fb:2b:ee:7b:27:97:68:1b:e5:3b:00:0b:05: eb:f2:7b:0e:de:77:49:97:28:21:c7:e5:80:43:b4:27:4a:df: 83:0e:86:fe:f4:7d:95:84:d3:93:e0:aa:91:58:91:8b:02:56: 7f:aa:3b:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYtajf97YXplrWy0M4scqqc46xBYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjM1NzEzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmFhYzhkOWQ5MzlkYzFiY2IxYzdmNjZlN2JjMTA4Nzg1 YmRmY2I2YTE5OTQ4ZTc3NmQzYTg1YWE4OGY4YjE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs+6m5HRErKsBlbfziTTXbCrgGmuGc42vcvdPXk07QTrIR v3oIm5fgwgjIfuqlIgTbAVQO9QJh6fgYUvFxsJQdNZjbbgrDwrsRZZQr+roK1O0e vn82JscBzD7lOG4OmdEwWOaATq0wE4IcbuG9I/bxvJwtqd8RdMoUdtvHuuk0q4Jg SyVfTl21D/7s1uTEXKqoaoB+fHRAQs3CSZvwRRdJB8+slPkBeWD7F1h/jy89coz6 FVGWSRWMuznGeu+Ov7vf67VQ6NF/ZRizG1OmphNvCxr1nNnED0iwv2hG0P/1O/RJ 5X64xliRY5sdIM99D6/bqEn1uu9s7Tr7ACfPC6FLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdVMH1RK9+AuDSNIjjebrHfZIz8IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkNWVhMDNhLTlmYmItNDVkMi1hOGM2LTJlMjM1MzUyNTUxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDoWQwDQYJKoZIhvcNAQELBQADggEBAJjcX3hMpM2OAq6T9Ct8dc084uUB 1S4ZmbpQuGI8kGcGnsrIo2OO2K2dCZG88eG/OW83HyRQUszou7WVyShlI5eDppk4 P0Y/PzJwQFg49w9e9LwTEVQ8o8e3zLOyEt0xIvujMumvEuqeJ4vArEOqBNA1yCOZ hUUzZkG6ogcCmvj4wMkPsIb8JIZZrP5rlTFI3DY5VhBcrxsGIsGjp9jIcVjdoC2K HU1a0A66TJ7X0LsW5ajBNRxDYKyzn1COLea52O6TiDkEAw/X87+3+yvueyeXaBvl OwALBevyew7ed0mXKCHH5YBDtCdK34MOhv70fZWE05PgqpFYkYsCVn+qO+w= -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:16 2025 by rpki-client