$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa File: 33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa (raw, json) Hash identifier: 3tSBeeXaD5oYiHDvq/zYSZSNNM2u0UfVoZF0FCKpN+Q= Subject key identifier: 96:13:32:BB:C7:AF:AF:D8:91:91:D6:FD:1E:97:A2:B6:84:15:DE:5A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2CCC23213BC392089A5A824377A111766951BA41 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa Signing time: Fri 26 Sep 2025 17:09:12 +0000 ROA not before: Fri 26 Sep 2025 17:09:12 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.94.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cc:23:21:3b:c3:92:08:9a:5a:82:43:77:a1:11:76:69:51:ba:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 17:09:12 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=a724bb970fe8bac22368502f596ed469375c15cc1356c0b24f02b259e977b83f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f5:dc:53:ec:d3:48:57:f5:86:76:65:df:c8: 0d:79:7e:80:f5:5a:00:1c:e9:0b:13:81:53:86:d0: ac:1d:cb:13:22:d2:f9:97:27:09:93:5b:43:16:d9: 3e:b7:d4:3d:39:0e:8c:39:15:7a:d6:87:c5:18:09: ec:48:b2:42:d3:27:87:e2:85:d0:ba:d7:e1:f3:16: ff:85:a6:34:63:0b:37:e8:96:5e:be:6c:f7:a9:be: 55:76:8c:17:98:1d:0c:a6:a7:de:d5:67:fe:bf:c5: fd:bd:b4:74:d9:b6:de:10:10:da:df:28:29:6b:47: b4:9b:fb:a9:92:0c:2e:94:2a:77:89:cd:10:23:df: 03:69:e4:13:19:57:86:30:ec:69:0d:91:f0:34:c2: 39:54:b4:68:7c:61:1d:72:bb:76:d9:0e:39:fa:85: 24:a9:70:24:b8:0a:7b:99:31:59:d5:ec:61:3c:99: f4:e5:bb:a0:6d:de:1c:fd:b4:fd:ba:db:9f:95:f1: b5:b7:83:c2:38:8c:06:eb:f8:44:da:2e:ae:3d:21: d1:6d:00:3f:a7:53:e1:2c:7b:c9:d5:63:aa:8e:1d: 25:ff:46:80:30:1d:3a:93:09:1f:5e:5e:17:f2:ad: c1:de:69:a1:45:6c:2c:6a:22:f1:dc:c8:31:28:05: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:13:32:BB:C7:AF:AF:D8:91:91:D6:FD:1E:97:A2:B6:84:15:DE:5A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.0.0/22 Signature Algorithm: sha256WithRSAEncryption 82:ee:bb:64:bb:e6:f0:ae:79:0d:3b:61:5a:dc:bc:e3:ff:f7: ca:d2:d4:74:96:61:b4:cc:14:e5:c4:0b:00:72:11:41:df:fc: a0:0e:64:10:6f:0e:af:35:e8:f6:08:ee:64:d7:b0:73:2e:d0: d9:e1:66:1f:2d:1b:da:4f:6e:56:d9:56:06:b4:f9:49:e7:ca: 7d:0c:16:c3:a0:61:09:dc:50:b2:c2:51:55:d9:47:b6:39:1f: 7d:8c:bd:d2:56:f2:51:6a:e7:b5:19:fa:fe:5a:9b:c7:a6:93: cb:01:0c:12:92:2c:b9:05:2e:b8:4c:ac:96:d5:fe:be:9c:7c: af:57:1b:56:ff:19:8a:08:35:fe:b4:5d:04:d5:74:92:0e:1d: 6b:0d:b0:0b:44:0a:6a:22:44:e2:4e:f8:8d:cf:59:ea:4a:c3: d5:7b:83:4a:e9:1f:a5:b6:3a:b9:97:50:f7:05:5c:40:72:54: 9f:09:34:d1:a2:35:d0:3c:f2:99:84:5f:16:cf:79:f6:4a:1b: 26:c7:a5:c0:f2:74:a7:68:c0:7d:fb:2a:37:4f:a3:b0:f0:19: 48:a6:3d:a9:0e:57:8f:d2:8a:24:6e:64:8b:fc:5c:5d:2f:6d: 94:77:7c:c7:4d:bc:95:21:86:cb:1f:7f:5e:27:13:f3:44:6f: 22:9e:37:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULMwjITvDkgiaWoJDd6ERdmlRukEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTcwOTEyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzI0YmI5NzBmZThiYWMyMjM2ODUwMmY1OTZlZDQ2OTM3 NWMxNWNjMTM1NmMwYjI0ZjAyYjI1OWU5NzdiODNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV9dxT7NNIV/WGdmXfyA15foD1WgAc6QsTgVOG0KwdyxMi 0vmXJwmTW0MW2T631D05Dow5FXrWh8UYCexIskLTJ4fihdC61+HzFv+FpjRjCzfo ll6+bPepvlV2jBeYHQymp97VZ/6/xf29tHTZtt4QENrfKClrR7Sb+6mSDC6UKneJ zRAj3wNp5BMZV4Yw7GkNkfA0wjlUtGh8YR1yu3bZDjn6hSSpcCS4CnuZMVnV7GE8 mfTlu6Bt3hz9tP2625+V8bW3g8I4jAbr+ETaLq49IdFtAD+nU+Ese8nVY6qOHSX/ RoAwHTqTCR9eXhfyrcHeaaFFbCxqIvHcyDEoBRD1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlhMyu8evr9iRkdb9HpeitoQV3lowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMzNjQxYjk3LWE3YjgtNDE4MC1iZDhhLWJiZGM3MzNiMGVjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XgAwDQYJKoZIhvcNAQELBQADggEBAILuu2S75vCueQ07YVrcvOP/98rS 1HSWYbTMFOXECwByEUHf/KAOZBBvDq816PYI7mTXsHMu0NnhZh8tG9pPblbZVga0 +Unnyn0MFsOgYQncULLCUVXZR7Y5H32MvdJW8lFq57UZ+v5am8emk8sBDBKSLLkF LrhMrJbV/r6cfK9XG1b/GYoINf60XQTVdJIOHWsNsAtECmoiROJO+I3PWepKw9V7 g0rpH6W2OrmXUPcFXEByVJ8JNNGiNdA88pmEXxbPefZKGybHpcDydKdowH37KjdP o7DwGUimPakOV4/SiiRuZIv8XF0vbZR3fMdNvJUhhssff14nE/NEbyKeN+U= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:16 2025 by rpki-client