$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52658376-e908-4c25-9b5b-26263414d787.roa File: 52658376-e908-4c25-9b5b-26263414d787.roa (raw, json) Hash identifier: /m3krosSlCD6oYJUjzh2U6ylpLT/5Pdw9/ifSj+lsCY= Subject key identifier: 07:0D:A1:F1:25:2E:37:7D:2A:DF:3F:B1:45:16:4D:7E:6F:84:20:19 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 750C5443248EFC6512508E92BE3D38522EE391F6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52658376-e908-4c25-9b5b-26263414d787.roa Signing time: Mon 20 Oct 2025 08:10:09 +0000 ROA not before: Mon 20 Oct 2025 08:10:09 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0c:54:43:24:8e:fc:65:12:50:8e:92:be:3d:38:52:2e:e3:91:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 08:10:09 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=dadbfe2eb48a21e59f7c01f1f2529506e308a7f4c8899bb4878c247c6231961d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:5f:11:1d:f2:22:fe:9f:e6:a9:ff:ad:a1: c1:88:3e:73:32:4f:6d:0d:1a:f8:f4:10:c8:60:92: 96:24:98:d6:e7:26:8d:b8:27:3c:88:94:26:c8:e9: 1c:13:92:1a:5d:b0:b0:97:56:b0:0a:72:53:81:1e: 47:3e:17:2f:74:71:9b:92:d5:d8:5b:15:6e:38:ed: d6:cd:fd:9f:cf:04:1b:25:ba:ba:c5:4a:25:ff:b0: b4:94:75:e9:02:92:54:1c:a0:4c:ad:93:ae:ad:14: 18:f3:e8:e1:7f:fc:bb:52:a6:2b:29:77:94:31:78: d5:84:5e:0a:14:87:a3:e0:ac:0f:4a:11:bd:ab:74: 28:fe:e4:74:fa:58:c5:bc:9d:64:50:43:03:ec:50: 85:43:67:1b:fa:15:b7:b5:77:a0:3d:57:dc:ce:2e: 0f:09:b5:8c:8d:ae:a0:3f:03:1c:fe:c2:21:36:9c: 36:2b:64:40:c8:9c:74:01:aa:08:af:c0:61:d5:d7: 0d:2b:3c:50:3d:7d:ff:6e:fa:48:33:93:be:74:7f: c7:81:12:0a:d8:ec:97:fa:33:44:53:80:47:ff:b5: fb:aa:14:75:0a:52:26:8f:9f:0c:45:00:c6:2f:4d: 0c:46:6a:0f:79:f2:3f:f2:94:d4:f4:f9:98:c1:c8: f9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0D:A1:F1:25:2E:37:7D:2A:DF:3F:B1:45:16:4D:7E:6F:84:20:19 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52658376-e908-4c25-9b5b-26263414d787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.226.0/23 Signature Algorithm: sha256WithRSAEncryption 08:65:2b:1b:bd:7c:1a:0a:c8:62:3d:ac:4f:00:95:c5:fb:ad: c7:eb:d8:40:4e:87:ed:20:0e:38:43:f9:e6:8a:30:f8:6e:d9: e6:39:aa:b5:82:9d:4e:b3:7a:a1:b6:22:62:0f:33:d9:d7:d2: f8:cb:18:e9:8c:0e:87:54:a0:75:51:d7:46:70:bb:a3:26:33: 78:9d:f5:23:a7:5b:63:e1:77:64:20:67:84:0f:0a:2f:d0:78: d9:ad:ae:93:ef:0a:fc:32:c0:bc:8f:66:46:2a:cb:97:96:b2: 42:9f:1b:76:bf:44:22:91:5a:f0:3f:c1:de:4d:9e:ef:3f:d7: 5d:fa:8c:9b:64:8d:2f:92:c0:06:88:2b:ec:20:76:c4:16:15: 2b:c4:2d:16:87:63:8f:1a:b2:92:b2:24:47:9a:2d:66:f8:65: dc:32:e0:ec:7f:dd:bf:8a:dc:f7:8b:b9:f0:86:7c:5d:9f:66: 7a:82:15:47:6b:51:21:d0:1f:21:57:f0:97:36:13:26:e6:5b: 40:ba:d7:38:bb:e0:dd:64:d5:97:71:29:7d:98:c1:8e:f6:15: df:da:50:d7:44:41:17:e2:33:65:2a:aa:77:da:ea:50:c0:6b: 66:14:09:cb:da:19:bc:cc:86:ef:ca:ba:4b:57:3f:95:5b:df: b9:1d:ec:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdQxUQySO/GUSUI6Svj04Ui7jkfYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMDgxMDA5WhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWRiZmUyZWI0OGEyMWU1OWY3YzAxZjFmMjUyOTUwNmUz MDhhN2Y0Yzg4OTliYjQ4NzhjMjQ3YzYyMzE5NjFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLfV8RHfIi/p/mqf+tocGIPnMyT20NGvj0EMhgkpYkmNbn Jo24JzyIlCbI6RwTkhpdsLCXVrAKclOBHkc+Fy90cZuS1dhbFW447dbN/Z/PBBsl urrFSiX/sLSUdekCklQcoEytk66tFBjz6OF//LtSpispd5QxeNWEXgoUh6PgrA9K Eb2rdCj+5HT6WMW8nWRQQwPsUIVDZxv6Fbe1d6A9V9zOLg8JtYyNrqA/Axz+wiE2 nDYrZEDInHQBqgivwGHV1w0rPFA9ff9u+kgzk750f8eBEgrY7Jf6M0RTgEf/tfuq FHUKUiaPnwxFAMYvTQxGag958j/ylNT0+ZjByPlnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBw2h8SUuN30q3z+xRRZNfm+EIBkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUyNjU4Mzc2LWU5MDgtNGMyNS05YjViLTI2MjYzNDE0ZDc4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqOIwDQYJKoZIhvcNAQELBQADggEBAAhlKxu9fBoKyGI9rE8AlcX7rcfr 2EBOh+0gDjhD+eaKMPhu2eY5qrWCnU6zeqG2ImIPM9nX0vjLGOmMDodUoHVR10Zw u6MmM3id9SOnW2Phd2QgZ4QPCi/QeNmtrpPvCvwywLyPZkYqy5eWskKfG3a/RCKR WvA/wd5Nnu8/1136jJtkjS+SwAaIK+wgdsQWFSvELRaHY48aspKyJEeaLWb4Zdwy 4Ox/3b+K3PeLufCGfF2fZnqCFUdrUSHQHyFX8Jc2EybmW0C61zi74N1k1ZdxKX2Y wY72Fd/aUNdEQRfiM2Uqqnfa6lDAa2YUCcvaGbzMhu/KuktXP5Vb37kd7KM= -----END CERTIFICATE-----Generated at Mon Oct 20 11:13:37 2025 by rpki-client