$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e472537-27de-4e61-8377-54a01ea83890.roa File: 3e472537-27de-4e61-8377-54a01ea83890.roa (raw, json) Hash identifier: l8RHoRjt9ZTHeXME9CJHB6vCiMAKOICUpEzQj5UiLxw= Subject key identifier: 93:7E:53:52:14:44:9F:AD:07:82:AD:E4:F7:37:0A:CB:7E:90:3D:8E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3FC22A2E461A2083B826343FD648DD982232D992 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e472537-27de-4e61-8377-54a01ea83890.roa Signing time: Sun 19 Oct 2025 07:00:08 +0000 ROA not before: Sun 19 Oct 2025 07:00:08 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c2:2a:2e:46:1a:20:83:b8:26:34:3f:d6:48:dd:98:22:32:d9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:00:08 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=63234beea2662eeca82e68cbee54f67ef5d53300d6408087e1111de2214d8c1c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:9f:73:a8:c3:48:8f:37:93:92:f5:25:70: ff:02:90:6d:e1:c8:8d:18:7e:d3:cc:fa:f1:e6:ca: ca:b1:12:bf:1e:00:b5:60:54:26:9f:f6:f2:64:f8: 05:b0:41:8e:f0:93:63:d9:d6:ad:56:12:e2:5e:b0: 2b:ad:8b:07:e9:e9:78:01:00:37:10:0d:58:4b:18: f7:ed:94:81:80:e7:97:91:9b:da:7a:ef:45:dd:c4: 19:62:5e:34:65:85:11:b6:7e:0c:1f:6f:4a:59:d1: 54:7c:e3:fa:3b:76:8d:fd:58:29:de:30:f5:b1:d3: 6e:f2:e1:21:e1:df:61:e4:3a:7d:7d:f5:3f:0a:8b: 2a:83:0a:4f:60:bc:8e:79:5a:c1:af:7a:a2:67:b9: ff:e2:87:7b:8b:4b:ba:2b:db:fc:1b:3a:81:64:8d: e5:d4:b2:60:29:c3:5e:ef:38:7e:4e:bb:bb:26:42: f0:ab:be:d6:dc:63:55:a5:8c:3e:f9:3b:4d:4d:eb: 77:13:15:25:d2:b1:6b:66:2e:f6:eb:a0:d8:e3:72: 13:74:df:f1:30:9b:a2:76:26:af:4f:46:db:06:b1: 2e:0f:6d:51:a4:85:84:2a:a5:c9:4b:e9:d8:5f:50: d9:3a:0d:24:0a:c7:26:fe:d5:2d:c7:79:84:f9:bb: ec:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7E:53:52:14:44:9F:AD:07:82:AD:E4:F7:37:0A:CB:7E:90:3D:8E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e472537-27de-4e61-8377-54a01ea83890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.12.0/23 Signature Algorithm: sha256WithRSAEncryption a0:5f:ef:b4:6f:a8:07:c0:5c:4c:00:c4:05:d9:bf:a8:a7:0d: 2c:5c:02:f2:5e:2a:38:8e:6a:c3:ea:7b:72:f9:22:d6:e4:b4: dd:22:9e:13:d0:0c:22:c0:4c:c6:5d:e3:64:21:8a:16:f1:37: 22:30:05:0c:bc:25:16:da:92:10:65:a6:c4:f5:0e:99:92:92: 55:36:35:b5:c6:b0:a1:e6:9d:26:59:5d:1b:1f:9b:3d:8e:b5: 56:fe:c7:23:b9:cf:cd:0c:b9:9a:60:0e:8e:a0:85:70:79:d7: 49:cb:94:4e:2b:25:59:f5:a7:eb:42:19:1b:06:19:4a:6c:b6: 0a:48:3e:6d:50:71:f0:77:b0:1c:ab:2d:9e:eb:8c:4b:af:66: 03:e3:30:6c:c0:c0:8a:b4:19:62:dc:7d:b8:4b:d9:fa:ab:a7: 9c:ee:f7:ee:6b:b5:71:57:f1:9c:c2:2b:8e:5f:d6:c0:43:2a: 45:d2:11:ff:4f:27:27:04:14:09:d3:cf:c6:72:5c:71:a4:b1: e0:57:0f:d1:c7:0e:82:f6:9c:53:ec:9f:e2:15:2a:e5:37:0a: 7f:63:11:ea:d1:8f:5c:58:73:56:f8:38:a2:4d:37:a8:1e:4f: 6b:30:e1:be:47:26:d5:7e:62:66:d0:b9:67:78:64:99:03:4b: 4c:dc:3b:74 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP8IqLkYaIIO4JjQ/1kjdmCIy2ZIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDcwMDA4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzIzNGJlZWEyNjYyZWVjYTgyZTY4Y2JlZTU0ZjY3ZWY1 ZDUzMzAwZDY0MDgwODdlMTExMWRlMjIxNGQ4YzFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuzJ9zqMNIjzeTkvUlcP8CkG3hyI0YftPM+vHmysqxEr8e ALVgVCaf9vJk+AWwQY7wk2PZ1q1WEuJesCutiwfp6XgBADcQDVhLGPftlIGA55eR m9p670XdxBliXjRlhRG2fgwfb0pZ0VR84/o7do39WCneMPWx027y4SHh32HkOn19 9T8KiyqDCk9gvI55WsGveqJnuf/ih3uLS7or2/wbOoFkjeXUsmApw17vOH5Ou7sm QvCrvtbcY1WljD75O01N63cTFSXSsWtmLvbroNjjchN03/Ewm6J2Jq9PRtsGsS4P bVGkhYQqpclL6dhfUNk6DSQKxyb+1S3HeYT5u+zRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUk35TUhREn60Hgq3k9zcKy36QPY4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNlNDcyNTM3LTI3ZGUtNGU2MS04Mzc3LTU0YTAxZWE4Mzg5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VQwwDQYJKoZIhvcNAQELBQADggEBAKBf77RvqAfAXEwAxAXZv6inDSxc AvJeKjiOasPqe3L5ItbktN0inhPQDCLATMZd42QhihbxNyIwBQy8JRbakhBlpsT1 DpmSklU2NbXGsKHmnSZZXRsfmz2OtVb+xyO5z80MuZpgDo6ghXB510nLlE4rJVn1 p+tCGRsGGUpstgpIPm1QcfB3sByrLZ7rjEuvZgPjMGzAwIq0GWLcfbhL2fqrp5zu 9+5rtXFX8ZzCK45f1sBDKkXSEf9PJycEFAnTz8ZyXHGkseBXD9HHDoL2nFPsn+IV KuU3Cn9jEerRj1xYc1b4OKJNN6geT2sw4b5HJtV+YmbQuWd4ZJkDS0zcO3Q= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:21 2025 by rpki-client