$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b7d27d4-7a42-445c-a9c5-06fb9b01035a.roa File: 3b7d27d4-7a42-445c-a9c5-06fb9b01035a.roa (raw, json) Hash identifier: QSJIVkMgBFXPN/MIkgQqWqDQnzjub+aSPkbm8Iik7Jk= Subject key identifier: 3B:50:B7:21:E0:EF:40:D3:9A:F7:50:AF:55:77:C7:9A:E6:8C:61:53 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1914BE70BFAB0E7DE1D149F2DF74D8E2D433CE8E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b7d27d4-7a42-445c-a9c5-06fb9b01035a.roa Signing time: Thu 16 Oct 2025 16:28:07 +0000 ROA not before: Thu 16 Oct 2025 16:28:07 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:14:be:70:bf:ab:0e:7d:e1:d1:49:f2:df:74:d8:e2:d4:33:ce:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 16:28:07 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=72b2cc67d1e5c120c771ebca73b015bc844641b83e9661e7f3460bfcb6dabfc4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:20:40:cc:68:3e:82:e3:37:26:e9:7d:12:ef: 34:dc:3c:66:04:ac:38:64:70:3f:6b:41:cb:97:70: 34:0f:ba:b4:ba:6a:db:f2:72:24:2d:d3:94:11:b5: 68:29:7e:d0:ee:47:2f:a9:c2:d3:f9:4c:98:3a:fb: 78:df:a7:51:4a:c1:64:7d:30:18:ef:7c:a8:81:14: 88:16:8f:e4:55:9f:4e:f4:d8:c5:9a:c3:1c:6d:19: a0:3d:96:b8:f0:85:90:93:44:69:c0:a7:61:30:61: 8a:3e:e2:a7:3a:2f:90:63:84:97:ba:34:b9:2c:ee: f6:83:eb:1b:5c:f9:ae:d7:70:87:59:f5:d8:e6:c8: 14:da:2e:48:c9:81:ee:11:38:08:f3:0d:f7:8d:10: 29:64:2b:0c:a7:0d:5c:7b:55:86:07:9c:6f:e7:a1: d4:3f:db:1b:4f:66:a5:85:fb:58:ce:f1:26:67:a6: 00:1c:ff:19:f8:27:b4:b6:56:75:1e:32:fe:75:89: fd:82:50:60:7c:06:92:bc:85:68:25:d7:4b:8d:f4: 45:62:27:af:c1:c8:b9:d9:89:8b:4a:86:d5:20:fa: 6b:45:5f:7d:41:e3:32:c2:30:25:4f:f2:a0:b5:35: 8c:27:14:90:e0:f9:8d:e7:56:3f:86:54:1b:73:b1: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:50:B7:21:E0:EF:40:D3:9A:F7:50:AF:55:77:C7:9A:E6:8C:61:53 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b7d27d4-7a42-445c-a9c5-06fb9b01035a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.4.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:06:e5:8b:08:5a:19:f9:7f:ca:68:bd:64:65:ef:30:d0:56: 5e:fb:40:a1:97:39:80:1f:34:9f:c9:06:ba:68:18:08:0d:3b: 5d:cc:c6:97:55:19:2b:fe:eb:8a:22:a6:a9:b7:4b:28:de:29: d4:af:3a:97:a1:81:d7:59:95:da:dd:35:ce:2d:04:6d:92:05: f9:ae:b5:96:d6:bb:20:6d:65:7a:27:6d:24:4d:3b:53:19:4d: 33:28:a5:31:0d:cf:41:77:77:fe:cc:8b:bc:75:4f:c1:d5:39: aa:47:4c:a2:8c:93:db:9f:90:6b:4e:e6:db:bc:af:28:4b:c0: 4c:52:e0:68:06:3c:6c:c7:0a:89:df:b2:3c:21:a6:bf:4c:83: c6:77:e6:9c:35:46:c8:a3:61:49:f6:4c:88:e0:71:43:1e:bb: 30:5a:37:17:12:04:6e:31:79:a8:52:8f:08:c6:09:a9:c6:52: 04:75:ea:94:ea:c2:0a:d7:7d:cf:3d:05:4b:01:24:84:a4:cf: 04:8e:0f:02:b2:a7:b4:0f:52:5f:21:9d:06:65:4e:7b:1e:68: 2f:5a:e2:7a:6d:9c:9b:e7:f4:ed:59:c8:42:f7:b6:da:b2:05: 4f:8d:ba:94:92:4b:96:97:8f:e7:ed:db:48:60:e2:bf:1a:18: f9:34:35:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGRS+cL+rDn3h0Uny33TY4tQzzo4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTYyODA3WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MmIyY2M2N2QxZTVjMTIwYzc3MWViY2E3M2IwMTViYzg0 NDY0MWI4M2U5NjYxZTdmMzQ2MGJmY2I2ZGFiZmM0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGIEDMaD6C4zcm6X0S7zTcPGYErDhkcD9rQcuXcDQPurS6 atvyciQt05QRtWgpftDuRy+pwtP5TJg6+3jfp1FKwWR9MBjvfKiBFIgWj+RVn070 2MWawxxtGaA9lrjwhZCTRGnAp2EwYYo+4qc6L5BjhJe6NLks7vaD6xtc+a7XcIdZ 9djmyBTaLkjJge4ROAjzDfeNEClkKwynDVx7VYYHnG/nodQ/2xtPZqWF+1jO8SZn pgAc/xn4J7S2VnUeMv51if2CUGB8BpK8hWgl10uN9EViJ6/ByLnZiYtKhtUg+mtF X31B4zLCMCVP8qC1NYwnFJDg+Y3nVj+GVBtzsQ0pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO1C3IeDvQNOa91CvVXfHmuaMYVMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiN2QyN2Q0LTdhNDItNDQ1Yy1hOWM1LTA2ZmI5YjAxMDM1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISRAQwDQYJKoZIhvcNAQELBQADggEBAG4G5YsIWhn5f8povWRl7zDQVl77 QKGXOYAfNJ/JBrpoGAgNO13MxpdVGSv+64oipqm3SyjeKdSvOpehgddZldrdNc4t BG2SBfmutZbWuyBtZXonbSRNO1MZTTMopTENz0F3d/7Mi7x1T8HVOapHTKKMk9uf kGtO5tu8ryhLwExS4GgGPGzHConfsjwhpr9Mg8Z35pw1RsijYUn2TIjgcUMeuzBa NxcSBG4xeahSjwjGCanGUgR16pTqwgrXfc89BUsBJISkzwSODwKyp7QPUl8hnQZl TnseaC9a4nptnJvn9O1ZyEL3ttqyBU+NupSSS5aXj+ft20hg4r8aGPk0NYk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:21:42 2025 by rpki-client