$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2c68a4-cc3c-4980-91fa-6889d2b3f78b.roa File: 3f2c68a4-cc3c-4980-91fa-6889d2b3f78b.roa (raw, json) Hash identifier: SeQGjV4AFgNIOJm1adwjzRZCSkIN6CHMsqgI7nkAwfk= Subject key identifier: 1C:3C:2E:8F:01:90:59:41:24:AB:50:88:EC:6E:D4:DF:6A:F3:B6:A8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6E1A52A63E0C248AB97CDABE20A828849F106035 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2c68a4-cc3c-4980-91fa-6889d2b3f78b.roa Signing time: Sat 18 Oct 2025 13:22:42 +0000 ROA not before: Sat 18 Oct 2025 13:22:42 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1a:52:a6:3e:0c:24:8a:b9:7c:da:be:20:a8:28:84:9f:10:60:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 13:22:42 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=f38ca16c0e223176204ab83ebc52ed02eef480862ec19c3c90321b5b7e4c6c42, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:ad:28:82:3b:f3:14:6e:56:46:3a:4b:c9: 21:83:84:19:b8:03:d0:2f:c0:6a:b4:79:b0:fa:a1: da:99:cb:de:8e:17:3b:d2:4b:6b:14:98:8c:f7:d8: 63:70:12:1b:91:d4:a2:5e:2b:1a:20:6f:0b:ac:7a: 02:85:f7:b5:1c:a7:f0:e0:b7:43:cf:bc:02:7e:96: e9:07:b0:81:df:13:68:03:a7:dd:0b:4f:52:7e:c0: 7f:09:ab:9a:e5:89:32:79:7d:6c:62:5b:aa:57:f9: f1:90:37:f3:81:9d:62:9e:38:b2:f9:07:bd:c9:f8: 32:d5:9f:07:54:57:0f:7f:f3:cf:12:b9:e5:7e:de: 46:f2:02:09:af:36:97:98:5b:d3:56:fc:da:c0:1b: 0b:24:2e:5d:9a:a9:c5:a6:c6:76:2a:22:ca:be:d9: 9f:ae:a2:ab:9f:ad:f0:c9:e0:00:53:56:f6:78:e8: c1:09:75:8f:3a:7b:5f:e2:83:34:4d:de:00:e5:2f: 14:29:61:ea:54:03:7e:7f:0a:88:37:d3:86:d0:4a: 59:46:2a:00:75:54:93:f2:1b:a1:bf:b6:83:69:5f: 71:a7:d1:62:c1:24:2d:19:e6:77:93:0d:8e:82:3d: f3:a1:fa:b6:03:c6:ab:5c:b3:08:bb:a8:7c:d1:f0: 3e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3C:2E:8F:01:90:59:41:24:AB:50:88:EC:6E:D4:DF:6A:F3:B6:A8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2c68a4-cc3c-4980-91fa-6889d2b3f78b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.240.0/21 Signature Algorithm: sha256WithRSAEncryption 1f:c3:cf:c0:d4:7b:7f:cb:c9:74:15:f9:89:75:6f:b7:c1:43: d0:fc:97:dd:9f:e6:d9:a0:de:7d:d2:71:68:80:fe:36:79:92: 48:cd:43:77:8b:8b:60:b8:e3:68:34:21:16:ef:8f:0f:65:d0: a4:09:84:ab:c0:d5:b2:c6:93:d6:81:e6:bb:25:e5:ea:80:12: 73:b1:c9:1d:8d:b4:d6:59:ed:31:d1:e1:9e:b2:49:10:b3:49: 77:fa:2b:1f:9b:48:42:42:12:d0:db:35:2e:6b:a9:1a:f3:73: f5:14:49:cd:8c:8d:51:52:94:54:62:12:ad:c0:37:17:aa:93: 4f:13:a4:f4:df:64:d9:12:39:32:68:91:69:57:4c:65:0d:19: e9:28:9e:6f:db:83:c8:5f:2a:bd:76:1e:54:0b:e6:c1:66:2e: 8f:65:67:82:59:47:36:fa:27:f1:4d:6b:4f:71:30:d4:6b:bf: 6f:87:09:1e:93:15:bd:fc:f8:ee:ea:9c:67:a5:99:8c:e6:b1: 32:d2:f8:7b:4f:9c:eb:f1:ba:29:25:7c:ad:d1:2b:81:7a:e8: 1a:1e:7d:83:a7:f7:59:f1:fe:da:37:f9:a9:33:8d:aa:c9:1f: 82:24:b1:c1:55:77:eb:c0:75:ea:16:19:bc:78:95:dc:df:6b: 0b:1a:36:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbhpSpj4MJIq5fNq+IKgohJ8QYDUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTMyMjQyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzhjYTE2YzBlMjIzMTc2MjA0YWI4M2ViYzUyZWQwMmVl ZjQ4MDg2MmVjMTljM2M5MDMyMWI1YjdlNGM2YzQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC21q0ogjvzFG5WRjpLySGDhBm4A9AvwGq0ebD6odqZy96O FzvSS2sUmIz32GNwEhuR1KJeKxogbwusegKF97Ucp/Dgt0PPvAJ+lukHsIHfE2gD p90LT1J+wH8Jq5rliTJ5fWxiW6pX+fGQN/OBnWKeOLL5B73J+DLVnwdUVw9/888S ueV+3kbyAgmvNpeYW9NW/NrAGwskLl2aqcWmxnYqIsq+2Z+uoqufrfDJ4ABTVvZ4 6MEJdY86e1/igzRN3gDlLxQpYepUA35/Cog304bQSllGKgB1VJPyG6G/toNpX3Gn 0WLBJC0Z5neTDY6CPfOh+rYDxqtcswi7qHzR8D5fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHDwujwGQWUEkq1CI7G7U32rztqgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNmMmM2OGE0LWNjM2MtNDk4MC05MWZhLTY4ODlkMmIzZjc4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMSpfAwDQYJKoZIhvcNAQELBQADggEBAB/Dz8DUe3/LyXQV+Yl1b7fBQ9D8 l92f5tmg3n3ScWiA/jZ5kkjNQ3eLi2C442g0IRbvjw9l0KQJhKvA1bLGk9aB5rsl 5eqAEnOxyR2NtNZZ7THR4Z6ySRCzSXf6Kx+bSEJCEtDbNS5rqRrzc/UUSc2MjVFS lFRiEq3ANxeqk08TpPTfZNkSOTJokWlXTGUNGekonm/bg8hfKr12HlQL5sFmLo9l Z4JZRzb6J/FNa09xMNRrv2+HCR6TFb38+O7qnGelmYzmsTLS+HtPnOvxuiklfK3R K4F66BoefYOn91nx/to3+akzjarJH4IkscFVd+vAdeoWGbx4ldzfawsaNvY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:50 2025 by rpki-client