$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23313da4-ed8e-41d9-8d01-21eab1eb69d3.roa File: 23313da4-ed8e-41d9-8d01-21eab1eb69d3.roa (raw, json) Hash identifier: Ve/vfLmvv80ux6Bnvwoa6urnN9FVP0eMII9XUAWxlDs= Subject key identifier: 55:34:47:F1:E1:79:DB:C4:E8:36:DF:9D:DC:14:6E:ED:21:AF:37:74 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 38EA8A615C192461CF4155782028222F448A6D6A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23313da4-ed8e-41d9-8d01-21eab1eb69d3.roa Signing time: Thu 25 Sep 2025 16:37:08 +0000 ROA not before: Thu 25 Sep 2025 16:37:08 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ea:8a:61:5c:19:24:61:cf:41:55:78:20:28:22:2f:44:8a:6d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 16:37:08 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=c2e2015638894430dfd4c36976933b2adf81d93e13a4e92942a60631ce1a1a91, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:30:07:fd:12:65:fb:b3:e6:7e:2d:f2:ef: d5:c5:97:4b:ca:23:20:33:16:10:3f:d3:f3:d3:12: 07:12:00:76:76:83:15:84:1d:bd:a7:a8:05:6c:11: b4:a2:02:1d:86:06:a7:74:a5:cb:e4:b0:8e:79:81: 95:99:87:88:11:8d:59:b1:4e:5f:ee:ed:bd:6b:9b: 9c:25:28:6e:78:e7:e9:ba:f3:69:a7:81:e8:52:c1: ca:10:e5:33:53:9f:b6:3c:79:c7:75:c2:53:b5:be: 2f:6d:1b:fe:10:f8:91:e2:33:d3:4e:23:c4:fc:59: 0a:c7:b6:14:3b:7d:70:3d:c4:c5:12:8f:51:20:06: 91:3e:d8:50:1b:a0:60:58:3c:28:70:2d:8f:6b:26: 5f:3d:34:c3:7d:92:7d:47:6b:39:52:54:95:2c:c0: f4:7e:63:99:bd:5b:97:93:41:92:4f:3c:a0:88:da: de:be:8f:95:80:02:78:c3:64:eb:32:0d:f9:9a:0b: 13:9f:eb:e5:09:af:7e:6b:bd:0c:7a:b0:7c:65:44: 22:e5:74:cc:e6:dc:fc:d9:4d:7d:d5:ff:69:8f:80: b5:df:39:16:49:4a:d3:d4:91:ac:f1:ef:67:c7:17: b9:c3:d1:1c:78:26:aa:59:17:c2:14:f5:a2:9f:be: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:34:47:F1:E1:79:DB:C4:E8:36:DF:9D:DC:14:6E:ED:21:AF:37:74 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23313da4-ed8e-41d9-8d01-21eab1eb69d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.106.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:80:79:03:7a:8c:ba:6b:11:ca:9c:d6:75:94:fd:a5:d7:a2: a4:bb:01:e1:1e:a7:a3:86:eb:db:a2:27:14:20:a0:d5:3a:b9: 59:42:e5:0e:e7:ae:94:ef:8e:9c:65:a8:04:a2:4c:27:b3:af: 35:98:63:24:bd:e5:82:6d:ee:2c:c6:a2:6e:ad:65:d4:b3:92: 65:a3:63:c2:b3:46:f6:ce:37:44:56:6a:07:19:18:a6:97:48: 8c:71:8e:88:33:98:c5:78:d9:c2:71:b5:d8:57:36:b4:94:41: fa:2a:3a:53:0f:aa:69:57:65:8c:33:44:7e:e7:70:b0:3c:0f: 3e:28:65:81:82:96:f1:98:fc:74:8d:b8:a1:e4:db:8d:6c:72: 1a:b4:70:3c:0d:b0:35:66:f9:54:66:b6:07:87:f4:e4:15:e2: 3d:6f:7a:c7:8e:b2:ea:17:cb:98:40:4f:fe:85:82:22:11:4c: 0d:fd:72:ab:f5:be:4b:64:0f:cb:c6:82:a9:00:31:55:75:a6: 08:71:a4:7b:cf:b9:1a:74:5a:01:a7:2b:6f:a5:2b:71:56:bb: 27:ab:78:ad:b5:f2:57:3f:3e:15:06:7b:8e:c2:55:f0:32:ad: c6:79:5c:92:bb:bc:5e:ef:49:22:7e:6f:68:7a:a0:74:e3:03: 97:b2:00:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOOqKYVwZJGHPQVV4ICgiL0SKbWowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTYzNzA4WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMmUyMDE1NjM4ODk0NDMwZGZkNGMzNjk3NjkzM2IyYWRm ODFkOTNlMTNhNGU5Mjk0MmE2MDYzMWNlMWExYTkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq8zAH/RJl+7Pmfi3y79XFl0vKIyAzFhA/0/PTEgcSAHZ2 gxWEHb2nqAVsEbSiAh2GBqd0pcvksI55gZWZh4gRjVmxTl/u7b1rm5wlKG545+m6 82mngehSwcoQ5TNTn7Y8ecd1wlO1vi9tG/4Q+JHiM9NOI8T8WQrHthQ7fXA9xMUS j1EgBpE+2FAboGBYPChwLY9rJl89NMN9kn1HazlSVJUswPR+Y5m9W5eTQZJPPKCI 2t6+j5WAAnjDZOsyDfmaCxOf6+UJr35rvQx6sHxlRCLldMzm3PzZTX3V/2mPgLXf ORZJStPUkazx72fHF7nD0Rx4JqpZF8IU9aKfvo45AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVTRH8eF528ToNt+d3BRu7SGvN3QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIzMzEzZGE0LWVkOGUtNDFkOS04ZDAxLTIxZWFiMWViNjlkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoGowDQYJKoZIhvcNAQELBQADggEBAJ6AeQN6jLprEcqc1nWU/aXXoqS7 AeEep6OG69uiJxQgoNU6uVlC5Q7nrpTvjpxlqASiTCezrzWYYyS95YJt7izGom6t ZdSzkmWjY8KzRvbON0RWagcZGKaXSIxxjogzmMV42cJxtdhXNrSUQfoqOlMPqmlX ZYwzRH7ncLA8Dz4oZYGClvGY/HSNuKHk241schq0cDwNsDVm+VRmtgeH9OQV4j1v eseOsuoXy5hAT/6FgiIRTA39cqv1vktkD8vGgqkAMVV1pghxpHvPuRp0WgGnK2+l K3FWuyereK218lc/PhUGe47CVfAyrcZ5XJK7vF7vSSJ+b2h6oHTjA5eyAFI= -----END CERTIFICATE-----Generated at Fri Oct 17 22:14:57 2025 by rpki-client