$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cd157d6-eead-4bc8-a3f2-e1f61767fa14.roa File: 5cd157d6-eead-4bc8-a3f2-e1f61767fa14.roa (raw, json) Hash identifier: FAjj2uWQlWhN7DTX7x/yO9mHjcW2yHX0/832sBJXmdQ= Subject key identifier: FB:83:C5:BA:D7:FC:CD:6C:C6:2E:D3:E8:43:E0:32:E8:10:45:42:05 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 69B966D24B52DF3EC9601AB4E2DDEEA9A5149F2F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cd157d6-eead-4bc8-a3f2-e1f61767fa14.roa Signing time: Thu 25 Sep 2025 16:46:41 +0000 ROA not before: Thu 25 Sep 2025 16:46:41 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.160.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b9:66:d2:4b:52:df:3e:c9:60:1a:b4:e2:dd:ee:a9:a5:14:9f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 16:46:41 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=87e211ab69c4a53457991e81a954ee09c26ccf7bcfaef437d71b876a8309a32f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:d2:16:5a:63:39:b8:c4:46:b0:37:87:c1: 06:2f:95:d8:25:eb:0a:05:b9:aa:7d:15:de:b1:15: 9e:9c:f5:c3:4b:3a:cd:8f:6b:15:af:d0:20:5d:86: 3f:c2:7f:1f:e5:a2:2e:0d:f7:42:f4:ae:1c:80:59: f4:8e:0a:aa:c3:99:e8:d8:22:53:06:82:1e:77:ca: c4:1b:f6:7d:17:78:7f:28:ac:91:ed:84:2a:5b:0b: f8:9a:a5:6b:6f:eb:a2:21:0b:e2:77:ce:3b:03:48: 62:4a:1b:ca:98:6f:d2:ef:c3:d5:11:6b:67:98:ad: 09:73:7d:1a:74:3c:35:5e:bc:38:76:14:1f:4c:f7: 44:a6:26:d0:2e:a8:fc:28:03:9b:f5:c6:06:1b:fb: e9:f3:7f:ac:34:42:c7:06:50:5f:2c:d6:eb:08:66: 61:f3:44:a9:5a:00:e7:e1:c1:c6:3d:a0:4d:4a:15: f9:31:d6:68:cf:02:35:2a:6b:6a:e1:da:d1:a2:af: 67:52:a5:47:b7:15:dd:40:1f:00:3c:23:8d:3d:4a: 2a:ea:7c:fb:f3:9d:6e:a0:7f:23:65:b0:09:04:77: bb:be:84:c7:eb:0e:24:1d:e5:35:9e:4a:87:01:12: 45:cd:ba:44:4f:56:97:37:3a:03:a9:f7:aa:9b:fb: 36:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:83:C5:BA:D7:FC:CD:6C:C6:2E:D3:E8:43:E0:32:E8:10:45:42:05 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cd157d6-eead-4bc8-a3f2-e1f61767fa14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.160.242.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:8b:d5:03:5d:fa:fd:39:7e:43:fc:49:56:59:5e:95:9f:0f: 3d:e0:be:de:5e:58:aa:3e:8d:98:a1:e4:43:d6:9b:d4:f1:07: 9d:76:71:f8:2a:bc:56:64:86:df:22:57:7d:08:97:0a:8d:25: d4:50:61:d1:80:b8:b1:8f:a5:d2:bb:c3:48:28:e1:70:8c:8c: 66:a2:2e:f8:b0:3a:3f:37:74:6b:0c:15:0a:16:d8:7a:4a:22: 60:2a:45:86:b1:80:6f:33:c2:35:5c:58:ff:9b:14:01:00:d7: 84:3b:5c:31:2d:2c:56:1f:53:c6:0e:88:85:89:2c:9f:b4:c4: 39:e0:9d:14:02:31:b7:70:73:1d:89:66:50:3b:2c:56:c5:c2: cc:af:65:23:dd:6a:9e:27:b6:42:aa:da:75:99:33:fa:ab:3d: 24:b3:c9:91:30:ff:ab:05:e4:cc:d5:ce:96:aa:8a:b7:ba:1a: 8e:d7:bd:b0:04:2d:08:4a:27:e6:91:dc:50:e0:f0:2d:6c:3b: 9f:2b:d2:6a:c0:65:f1:d4:20:9f:62:bc:4b:0f:35:1b:e1:31: e2:64:85:03:af:02:b1:67:f9:9b:35:46:bc:89:9a:32:b8:a2: 45:c2:b2:92:14:a7:87:60:16:5d:87:81:c6:df:ef:2e:24:39: 6b:aa:57:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUablm0ktS3z7JYBq04t3uqaUUny8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTY0NjQxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2UyMTFhYjY5YzRhNTM0NTc5OTFlODFhOTU0ZWUwOWMy NmNjZjdiY2ZhZWY0MzdkNzFiODc2YTgzMDlhMzJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHLNIWWmM5uMRGsDeHwQYvldgl6woFuap9Fd6xFZ6c9cNL Os2PaxWv0CBdhj/Cfx/loi4N90L0rhyAWfSOCqrDmejYIlMGgh53ysQb9n0XeH8o rJHthCpbC/iapWtv66IhC+J3zjsDSGJKG8qYb9Lvw9URa2eYrQlzfRp0PDVevDh2 FB9M90SmJtAuqPwoA5v1xgYb++nzf6w0QscGUF8s1usIZmHzRKlaAOfhwcY9oE1K Ffkx1mjPAjUqa2rh2tGir2dSpUe3Fd1AHwA8I409SirqfPvznW6gfyNlsAkEd7u+ hMfrDiQd5TWeSocBEkXNukRPVpc3OgOp96qb+za5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+4PFutf8zWzGLtPoQ+Ay6BBFQgUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVjZDE1N2Q2LWVlYWQtNGJjOC1hM2YyLWUxZjYxNzY3ZmExNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADoPIwDQYJKoZIhvcNAQELBQADggEBAC+L1QNd+v05fkP8SVZZXpWfDz3g vt5eWKo+jZih5EPWm9TxB512cfgqvFZkht8iV30IlwqNJdRQYdGAuLGPpdK7w0go 4XCMjGaiLviwOj83dGsMFQoW2HpKImAqRYaxgG8zwjVcWP+bFAEA14Q7XDEtLFYf U8YOiIWJLJ+0xDngnRQCMbdwcx2JZlA7LFbFwsyvZSPdap4ntkKq2nWZM/qrPSSz yZEw/6sF5MzVzpaqire6Go7XvbAELQhKJ+aR3FDg8C1sO58r0mrAZfHUIJ9ivEsP NRvhMeJkhQOvArFn+Zs1RryJmjK4okXCspIUp4dgFl2Hgcbf7y4kOWuqV/I= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:15 2025 by rpki-client