$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c5f89b5-8f87-42e9-bd04-df3caba4dffc.roa File: 3c5f89b5-8f87-42e9-bd04-df3caba4dffc.roa (raw, json) Hash identifier: lQP88IwT481fOzTikEOtydKustG8e4hIaW9wUuv785Q= Subject key identifier: A3:EB:67:D4:57:86:2C:32:88:F4:CF:F3:8C:F5:84:AC:C3:FB:A6:68 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3AF01279C115C4A5D1565DB5C8A9E36F9D94AEAD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c5f89b5-8f87-42e9-bd04-df3caba4dffc.roa Signing time: Sun 19 Oct 2025 10:42:37 +0000 ROA not before: Sun 19 Oct 2025 10:42:37 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.35.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f0:12:79:c1:15:c4:a5:d1:56:5d:b5:c8:a9:e3:6f:9d:94:ae:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 10:42:37 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=e05cfc0c12d6b74adcd6531f43bd2af09c84fec0490abb7ecd6d30f192e81f06, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bd:fe:fb:ec:f7:d5:eb:a0:9b:d4:c8:8a:50: d6:9a:13:f0:84:26:ce:5d:24:ca:e6:7d:9e:d1:05: 35:3e:6b:70:e7:52:38:fd:b7:c3:f1:90:28:8c:1b: 86:0b:8a:ad:c7:ed:37:4b:bb:a5:de:1c:8e:29:ad: 20:af:8b:01:83:60:9c:59:3b:5f:f1:dc:83:82:10: 61:a5:d6:8a:be:06:14:20:e2:7b:d4:2e:13:8f:73: 53:b7:c7:f2:93:6e:36:d0:f6:b5:24:64:59:91:a5: 00:4f:56:58:08:12:67:0c:a2:77:15:ca:f8:56:ec: 10:0c:ae:27:8b:e8:6a:35:ca:26:9a:ed:34:41:70: b3:7c:4f:1a:c6:eb:70:df:54:f6:1e:2c:1b:23:85: 61:37:9d:e4:6f:c9:5c:d0:23:28:11:dc:80:96:25: 85:ee:dc:2d:dd:df:d9:90:4a:1e:9b:93:df:53:99: ce:1a:65:68:c8:0e:0a:56:22:96:68:22:e9:4a:b9: 63:77:53:a0:2e:db:70:c8:e0:66:97:39:d6:70:06: 71:7d:82:9a:cd:36:c4:91:65:22:a9:c2:de:e7:c2: 77:ba:49:70:15:76:9b:c5:6f:d3:52:63:38:b8:57: 38:7f:dd:2f:b0:cb:db:54:be:5d:84:52:83:3e:94: 49:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EB:67:D4:57:86:2C:32:88:F4:CF:F3:8C:F5:84:AC:C3:FB:A6:68 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c5f89b5-8f87-42e9-bd04-df3caba4dffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.35.32.0/21 Signature Algorithm: sha256WithRSAEncryption a8:02:1b:47:81:c3:a2:03:d4:85:d6:28:3a:a2:0d:99:2f:93: 22:47:b2:33:49:b7:2b:e8:c9:48:af:a5:61:95:69:53:32:1f: ca:28:fb:a6:f9:e9:e0:75:f9:0b:92:1b:ea:02:e2:4c:76:db: b4:8c:d0:8f:bd:56:60:74:22:52:2e:19:b8:1e:ab:f1:35:b8: 87:18:09:b7:33:0b:6c:dc:f2:22:fc:0c:be:d8:d3:27:de:ca: cb:d9:92:66:5c:3b:f1:db:ea:d9:97:77:98:a8:0d:71:6c:f7: d4:50:cf:d6:b5:f8:80:24:29:52:25:a4:22:e2:67:61:ca:19: 4a:33:e0:02:38:4a:59:2d:7f:50:12:3e:d0:23:2e:df:37:d2: cb:f5:de:01:64:4b:97:37:c2:78:d8:fc:0d:6e:04:06:59:ca: bb:8f:69:64:ff:eb:9d:b9:a8:b0:0e:2d:05:4e:ec:48:f7:ec: 93:ff:b2:35:93:47:bc:50:d7:d8:de:99:8f:10:ad:e4:5a:ac: 49:fd:82:7e:6c:ab:6e:7e:a1:bb:8a:c6:75:a9:c8:08:7d:28: eb:c5:1c:a1:46:58:23:fd:ac:39:29:c1:57:3e:66:c0:17:e4: a1:da:33:25:a9:75:27:77:00:e2:44:7a:1d:31:0a:4e:a2:39: b5:c1:ac:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOvASecEVxKXRVl21yKnjb52Urq0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTA0MjM3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDVjZmMwYzEyZDZiNzRhZGNkNjUzMWY0M2JkMmFmMDlj ODRmZWMwNDkwYWJiN2VjZDZkMzBmMTkyZTgxZjA2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTvf777PfV66Cb1MiKUNaaE/CEJs5dJMrmfZ7RBTU+a3Dn Ujj9t8PxkCiMG4YLiq3H7TdLu6XeHI4prSCviwGDYJxZO1/x3IOCEGGl1oq+BhQg 4nvULhOPc1O3x/KTbjbQ9rUkZFmRpQBPVlgIEmcMoncVyvhW7BAMrieL6Go1yiaa 7TRBcLN8TxrG63DfVPYeLBsjhWE3neRvyVzQIygR3ICWJYXu3C3d39mQSh6bk99T mc4aZWjIDgpWIpZoIulKuWN3U6Au23DI4GaXOdZwBnF9gprNNsSRZSKpwt7nwne6 SXAVdpvFb9NSYzi4Vzh/3S+wy9tUvl2EUoM+lEklAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUo+tn1FeGLDKI9M/zjPWErMP7pmgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNjNWY4OWI1LThmODctNDJlOS1iZDA0LWRmM2NhYmE0ZGZmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNIyAwDQYJKoZIhvcNAQELBQADggEBAKgCG0eBw6ID1IXWKDqiDZkvkyJH sjNJtyvoyUivpWGVaVMyH8oo+6b56eB1+QuSG+oC4kx227SM0I+9VmB0IlIuGbge q/E1uIcYCbczC2zc8iL8DL7Y0yfeysvZkmZcO/Hb6tmXd5ioDXFs99RQz9a1+IAk KVIlpCLiZ2HKGUoz4AI4Slktf1ASPtAjLt830sv13gFkS5c3wnjY/A1uBAZZyruP aWT/6525qLAOLQVO7Ej37JP/sjWTR7xQ19jemY8QreRarEn9gn5sq25+obuKxnWp yAh9KOvFHKFGWCP9rDkpwVc+ZsAX5KHaMyWpdSd3AOJEeh0xCk6iObXBrHo= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:55 2025 by rpki-client