$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3541ea2c-784f-4cbe-b441-92b652e155de.roa File: 3541ea2c-784f-4cbe-b441-92b652e155de.roa (raw, json) Hash identifier: O5hjU0JK+ZxRounmuLmH57afN3fVDFYTkIeKum6srOc= Subject key identifier: 07:6F:7F:F9:B7:D9:8B:82:C5:2A:8C:89:D9:92:3D:C4:1C:93:70:BC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 22710CEBD16DE7E81AC46AA1C036F34365FE336B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3541ea2c-784f-4cbe-b441-92b652e155de.roa Signing time: Thu 16 Oct 2025 19:48:21 +0000 ROA not before: Thu 16 Oct 2025 19:48:21 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.144.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:71:0c:eb:d1:6d:e7:e8:1a:c4:6a:a1:c0:36:f3:43:65:fe:33:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 19:48:21 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=ff8d21279bffdb7f9056a5dc4ab777fead1ea048445fdf27060c6b51551d3d0d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:8d:61:89:99:ed:8d:56:4d:2b:a9:c2:03: a1:68:91:25:78:07:72:30:00:6b:02:6a:04:e6:33: 50:a1:f0:d2:f1:38:fb:3a:b8:f7:62:a2:c3:6d:f1: 09:ec:34:92:ac:80:4f:a0:a5:2c:94:5a:56:ac:c9: 73:18:db:f7:b6:a9:9d:c7:27:ea:f6:37:03:72:fd: 98:68:08:9f:36:95:aa:de:ba:b1:be:55:d8:95:51: 10:52:53:b0:0d:6e:44:4f:ba:4e:36:84:fb:d2:8c: 2d:a2:08:63:d6:10:aa:ae:ef:3b:f0:a7:c8:ad:4a: f6:7c:4c:6a:16:70:e1:32:d7:94:8c:46:ff:1a:e3: 11:b5:64:e5:de:09:8d:0c:b9:35:42:f0:10:f3:0a: db:0d:cf:cb:4a:42:f1:cc:6d:d1:2f:91:fa:78:f4: 06:b3:de:3f:9e:d1:83:9a:3d:e5:34:ed:45:ed:c4: dc:20:db:f0:07:39:94:2c:07:20:9a:83:b9:d4:eb: 35:77:6f:e4:f2:ea:66:46:84:02:f1:9e:b2:7a:72: 58:f5:b8:68:5e:c6:a1:3c:9f:42:d2:03:97:32:d0: 2a:6b:5d:ef:6d:d9:a3:0c:ae:70:e3:4c:67:33:d9: c9:2a:bb:07:80:12:12:e5:27:85:e3:f4:e4:94:84: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6F:7F:F9:B7:D9:8B:82:C5:2A:8C:89:D9:92:3D:C4:1C:93:70:BC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3541ea2c-784f-4cbe-b441-92b652e155de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.144.0.0/18 Signature Algorithm: sha256WithRSAEncryption 9e:ac:57:d0:72:97:f0:a6:d0:19:7d:0c:ed:84:2d:e1:2d:7e: 75:68:c9:af:47:cd:66:70:92:a0:d0:09:25:05:d9:5b:0f:cd: 15:29:49:56:6f:97:0e:91:62:3e:f5:60:6f:79:0c:c0:f3:77: 0d:cc:bf:4f:9f:74:5f:24:0a:4a:3c:9f:27:b7:a2:e6:ba:58: 78:d5:c8:49:e7:64:6f:18:0d:06:d7:76:9a:c5:fe:cd:2c:6d: 8f:d2:6d:c1:15:5d:63:20:a7:76:cb:9b:57:cf:c7:4b:b8:16: 2e:9c:68:b4:4e:b8:8e:16:ea:c6:94:ac:bf:8f:64:58:92:71: 5e:fd:4b:3f:87:2e:b5:c1:1e:93:c7:91:d9:4e:24:c3:58:5a: e3:83:b9:cb:1f:d7:8a:0f:16:38:0f:11:7e:f7:d4:35:31:02: 3a:bb:7d:71:7a:77:e0:47:e1:ab:64:89:dd:18:ea:82:8e:08: 4a:1a:19:14:d5:5b:e1:52:8e:6e:de:34:c7:fd:70:72:15:00: 16:a1:95:4a:ae:56:3d:55:3a:27:61:28:97:ec:6a:6b:a3:32: c1:02:f6:e4:4e:16:4e:3b:3f:40:77:b2:49:e2:11:f2:1e:ae: 24:6d:16:d6:a4:52:54:90:fa:82:5f:b0:eb:8e:fc:78:dc:91: 38:04:b3:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUInEM69Ft5+gaxGqhwDbzQ2X+M2swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTk0ODIxWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjhkMjEyNzliZmZkYjdmOTA1NmE1ZGM0YWI3NzdmZWFk MWVhMDQ4NDQ1ZmRmMjcwNjBjNmI1MTU1MWQzZDBkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8cI1hiZntjVZNK6nCA6FokSV4B3IwAGsCagTmM1Ch8NLx OPs6uPdiosNt8QnsNJKsgE+gpSyUWlasyXMY2/e2qZ3HJ+r2NwNy/ZhoCJ82lare urG+VdiVURBSU7ANbkRPuk42hPvSjC2iCGPWEKqu7zvwp8itSvZ8TGoWcOEy15SM Rv8a4xG1ZOXeCY0MuTVC8BDzCtsNz8tKQvHMbdEvkfp49Aaz3j+e0YOaPeU07UXt xNwg2/AHOZQsByCag7nU6zV3b+Ty6mZGhALxnrJ6clj1uGhexqE8n0LSA5cy0Cpr Xe9t2aMMrnDjTGcz2ckquweAEhLlJ4Xj9OSUhE6/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB29/+bfZi4LFKoyJ2ZI9xByTcLwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1NDFlYTJjLTc4NGYtNGNiZS1iNDQxLTkyYjY1MmUxNTVkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2kAAwDQYJKoZIhvcNAQELBQADggEBAJ6sV9Byl/Cm0Bl9DO2ELeEtfnVo ya9HzWZwkqDQCSUF2VsPzRUpSVZvlw6RYj71YG95DMDzdw3Mv0+fdF8kCko8nye3 oua6WHjVyEnnZG8YDQbXdprF/s0sbY/SbcEVXWMgp3bLm1fPx0u4Fi6caLROuI4W 6saUrL+PZFiScV79Sz+HLrXBHpPHkdlOJMNYWuODucsf14oPFjgPEX731DUxAjq7 fXF6d+BH4atkid0Y6oKOCEoaGRTVW+FSjm7eNMf9cHIVABahlUquVj1VOidhKJfs amujMsEC9uROFk47P0B3skniEfIeriRtFtakUlSQ+oJfsOuO/HjckTgEs/Q= -----END CERTIFICATE-----Generated at Sat Oct 18 02:42:13 2025 by rpki-client