$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3525d695-f24e-4501-8b6c-e5aca5746b23.roa File: 3525d695-f24e-4501-8b6c-e5aca5746b23.roa (raw, json) Hash identifier: ZkBoHq7g/tzuzXxcwUgY5/dpIjy7UQuBC2hZQX78amA= Subject key identifier: 6A:9D:AC:56:88:F5:BF:87:55:4E:8A:ED:A1:28:19:0B:53:34:48:81 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 03F1EA5F5BA8424E47C1CE0000C2C9999A43DFD7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3525d695-f24e-4501-8b6c-e5aca5746b23.roa Signing time: Sun 19 Oct 2025 10:21:31 +0000 ROA not before: Sun 19 Oct 2025 10:21:31 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f1:ea:5f:5b:a8:42:4e:47:c1:ce:00:00:c2:c9:99:9a:43:df:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 10:21:31 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=9a73e727717feef1b135f02803dfb0a6fc2e76c327de22e5fff12efe67c29464, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:82:bd:95:03:5c:3c:5f:bd:5a:77:28:18: 10:0b:86:8b:71:36:6b:cc:61:5a:33:30:8e:2a:e6: 88:c8:02:c3:4b:37:05:0e:0d:7e:da:a8:08:4c:cb: b6:d8:b0:06:d4:7d:eb:66:64:0e:00:57:30:c6:d2: 10:75:30:4b:98:cd:09:d3:78:4d:f5:e0:b5:5d:b8: 3a:f6:04:7a:b9:a9:a7:bf:6d:8a:c7:0d:3a:77:ec: 50:f7:0b:57:74:43:a6:ab:91:93:de:31:15:eb:13: d2:ee:74:93:72:75:bb:14:69:da:0d:e1:c1:44:00: 21:38:a8:ba:5a:4b:3d:dc:a9:f3:ca:ba:ca:53:82: 89:58:64:7e:05:38:4e:3a:b3:94:ef:4c:a3:ce:52: 29:52:44:32:ba:61:e9:ab:f2:f5:ee:4b:4a:cf:3c: b1:d9:62:04:4d:0c:b8:b2:5a:9b:e0:2f:7f:ed:22: 25:38:d7:f6:ef:90:f6:b6:47:f4:47:a9:c8:cc:af: 14:71:1a:4c:fa:d7:3d:eb:4c:0f:d5:85:fd:8f:90: 50:9a:f3:0f:ad:c4:84:4c:74:9b:ea:76:0a:b6:07: 2c:d9:9b:a1:93:bd:03:b8:79:68:87:b7:97:ad:fc: c3:8b:4f:5b:88:ec:bd:70:a4:7f:87:7e:b0:75:d5: aa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9D:AC:56:88:F5:BF:87:55:4E:8A:ED:A1:28:19:0B:53:34:48:81 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3525d695-f24e-4501-8b6c-e5aca5746b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.97.0/24 Signature Algorithm: sha256WithRSAEncryption 64:60:a7:86:a6:1d:e8:ee:49:fd:69:c5:9b:bf:60:3c:78:58: d5:86:da:24:fd:d4:d7:65:99:26:a1:bc:39:f9:bc:3c:2a:0e: 86:91:50:4e:55:3a:70:e4:11:4b:5d:2e:6c:c1:2d:bb:3a:fc: 0f:aa:7f:9f:9e:43:7a:19:be:03:78:2b:8d:f5:ac:95:63:b4: 26:b2:9c:ed:4d:f7:4c:ae:c7:ed:0d:c5:ef:e5:7c:43:e6:a5: be:bd:fe:27:68:41:af:72:76:68:3e:b6:c9:d1:6f:ca:20:1d: 2b:d0:e2:8d:1e:2d:31:46:3f:57:dc:bb:8f:a7:e5:55:60:3b: 5d:5a:8a:3b:fe:52:cf:f9:4e:88:c8:38:5b:af:08:c6:d9:40: 89:be:ca:f2:76:0e:31:2d:27:f5:0f:9d:33:6b:fc:d8:4b:41: 5e:58:7b:a4:c6:99:07:27:2c:62:e7:cb:dd:55:5d:39:f8:d2: 6e:c8:db:0e:61:9c:7b:3b:ef:75:4a:7b:a8:b2:d1:a2:de:90: 5a:e8:9e:91:60:ae:e4:51:34:11:9e:d8:b0:1f:cf:6e:86:08: 8b:4e:4f:d1:ac:c1:70:43:c3:52:2b:70:ab:de:46:85:4e:cf: 3e:0e:d7:ad:2a:c7:77:d9:58:d6:c4:ec:34:66:bf:24:fd:28: e4:6e:cc:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA/HqX1uoQk5Hwc4AAMLJmZpD39cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTAyMTMxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTczZTcyNzcxN2ZlZWYxYjEzNWYwMjgwM2RmYjBhNmZj MmU3NmMzMjdkZTIyZTVmZmYxMmVmZTY3YzI5NDY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCr8oK9lQNcPF+9WncoGBALhotxNmvMYVozMI4q5ojIAsNL NwUODX7aqAhMy7bYsAbUfetmZA4AVzDG0hB1MEuYzQnTeE314LVduDr2BHq5qae/ bYrHDTp37FD3C1d0Q6arkZPeMRXrE9LudJNydbsUadoN4cFEACE4qLpaSz3cqfPK uspTgolYZH4FOE46s5TvTKPOUilSRDK6Yemr8vXuS0rPPLHZYgRNDLiyWpvgL3/t IiU41/bvkPa2R/RHqcjMrxRxGkz61z3rTA/Vhf2PkFCa8w+txIRMdJvqdgq2ByzZ m6GTvQO4eWiHt5et/MOLT1uI7L1wpH+HfrB11aqtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUap2sVoj1v4dVTortoSgZC1M0SIEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1MjVkNjk1LWYyNGUtNDUwMS04YjZjLWU1YWNhNTc0NmIyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQ2EwDQYJKoZIhvcNAQELBQADggEBAGRgp4amHejuSf1pxZu/YDx4WNWG 2iT91NdlmSahvDn5vDwqDoaRUE5VOnDkEUtdLmzBLbs6/A+qf5+eQ3oZvgN4K431 rJVjtCaynO1N90yux+0Nxe/lfEPmpb69/idoQa9ydmg+tsnRb8ogHSvQ4o0eLTFG P1fcu4+n5VVgO11aijv+Us/5TojIOFuvCMbZQIm+yvJ2DjEtJ/UPnTNr/NhLQV5Y e6TGmQcnLGLny91VXTn40m7I2w5hnHs773VKe6iy0aLekFronpFgruRRNBGe2LAf z26GCItOT9GswXBDw1IrcKveRoVOzz4O160qx3fZWNbE7DRmvyT9KORuzBw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:06:36 2025 by rpki-client