$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35f1ee89-1e13-4bbd-9c74-ce0dbef3005b.roa File: 35f1ee89-1e13-4bbd-9c74-ce0dbef3005b.roa (raw, json) Hash identifier: Zbq3+8QQmOpanYfrTLxiH76+m8Xw77qQWMC/WNMEMUc= Subject key identifier: 47:6D:7D:CD:10:60:94:CF:39:16:5B:2F:FF:E5:EC:07:46:B2:1B:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 134BD8C5368138437060F35C39AAD536738E64E8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35f1ee89-1e13-4bbd-9c74-ce0dbef3005b.roa Signing time: Mon 15 Sep 2025 16:21:09 +0000 ROA not before: Mon 15 Sep 2025 16:21:09 +0000 ROA not after: Mon 20 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.2.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4b:d8:c5:36:81:38:43:70:60:f3:5c:39:aa:d5:36:73:8e:64:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 15 16:21:09 2025 GMT Not After : Oct 20 23:59:59 2025 GMT Subject: serialNumber=161a035fe19e2540013d1a0171a183b79e76b724000d5e89abc1fdb0d7638ad9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:1e:b2:e8:71:86:ad:78:6f:f5:98:4b:a3: 4b:f8:02:f2:82:9c:2b:80:9a:26:b8:ab:9b:f9:e4: fb:4e:e8:65:90:4c:5d:93:52:7d:79:f3:08:1a:c7: ed:f9:a3:f3:fe:9d:8f:05:17:4c:09:38:1c:2f:b9: c8:b5:68:1f:95:39:9f:1d:a0:22:f0:92:63:63:7d: 5e:7b:8f:27:93:4f:18:9a:cf:69:1b:33:81:e5:1d: 74:61:e1:d8:e4:d2:b1:2c:47:77:78:0d:f9:d7:68: a4:7f:6a:e3:99:58:a6:46:76:ef:3e:f8:e8:7e:ea: 18:c3:2c:f5:ce:e3:cb:9b:5d:fc:94:df:b0:b9:fc: 4b:8a:fa:31:22:d5:b2:58:03:5c:d0:9a:e7:49:89: c2:2e:f5:74:69:d1:20:f8:4a:51:3b:e0:43:4c:1d: 93:db:e6:e6:5d:b0:b9:d0:d7:d1:c7:ef:c9:27:2d: ff:66:8f:f6:37:89:32:df:65:da:3c:52:7c:c5:4c: c3:d9:11:26:9f:d8:ed:f5:2d:57:c3:d1:86:47:56: f9:3e:4f:1a:a4:4e:39:e8:cc:98:27:73:ea:b0:62: db:00:af:6c:45:ac:52:d1:f3:9e:26:e4:9a:00:52: 08:e6:35:82:c4:e8:45:9f:69:65:a8:67:8f:db:8e: ad:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6D:7D:CD:10:60:94:CF:39:16:5B:2F:FF:E5:EC:07:46:B2:1B:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35f1ee89-1e13-4bbd-9c74-ce0dbef3005b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.98.0/24 Signature Algorithm: sha256WithRSAEncryption 02:a5:20:75:05:9f:44:3b:1c:b7:4a:07:7a:c5:b1:38:f7:5d: bd:69:b1:b8:df:f4:48:fc:85:66:7c:da:ef:d7:f6:f6:73:c7: 90:6d:fd:0a:aa:f8:20:78:cb:17:8d:eb:ee:f3:d2:c6:82:8f: 85:33:a2:b7:3c:56:72:f8:11:c4:ac:7f:62:9e:bb:61:a7:07: 09:f6:4b:9a:05:0c:81:31:89:6c:da:2b:3f:18:b4:5e:f1:36: 03:d7:76:6e:00:6a:09:7f:fc:c5:19:08:ca:95:c8:82:2a:bc: 5a:36:f4:ce:bb:7f:72:61:76:b1:cc:93:ff:95:f4:5d:88:29: a7:52:b2:14:f2:63:ed:6b:2c:76:56:57:df:e6:9f:99:4d:64: 33:f6:66:bd:76:1c:78:d1:fa:c4:e1:4a:41:50:63:cb:d4:b9: 5d:d6:d6:28:2d:0e:4e:6d:e8:a8:c7:c6:9d:4f:bf:8b:79:47: 00:9f:23:63:82:91:7f:56:ae:e0:4e:20:52:8d:f3:af:98:55: db:3b:0a:f3:1d:74:4a:58:6a:cc:0b:6a:25:bb:b0:f9:f8:28: f3:7f:00:a9:06:3c:1c:cf:38:a0:d8:41:0c:19:83:d2:c8:61: 8a:4a:19:07:f1:8f:d7:6f:ab:6e:24:fa:28:8d:a8:a1:d6:9d: c2:01:dd:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE0vYxTaBOENwYPNcOarVNnOOZOgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE1MTYyMTA5WhcNMjUxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjFhMDM1ZmUxOWUyNTQwMDEzZDFhMDE3MWExODNiNzll NzZiNzI0MDAwZDVlODlhYmMxZmRiMGQ3NjM4YWQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4PB6y6HGGrXhv9ZhLo0v4AvKCnCuAmia4q5v55PtO6GWQ TF2TUn158wgax+35o/P+nY8FF0wJOBwvuci1aB+VOZ8doCLwkmNjfV57jyeTTxia z2kbM4HlHXRh4djk0rEsR3d4DfnXaKR/auOZWKZGdu8++Oh+6hjDLPXO48ubXfyU 37C5/EuK+jEi1bJYA1zQmudJicIu9XRp0SD4SlE74ENMHZPb5uZdsLnQ19HH78kn Lf9mj/Y3iTLfZdo8UnzFTMPZESaf2O31LVfD0YZHVvk+TxqkTjnozJgnc+qwYtsA r2xFrFLR854m5JoAUgjmNYLE6EWfaWWoZ4/bjq3VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUR219zRBglM85Flsv/+XsB0ayGwEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1ZjFlZTg5LTFlMTMtNGJiZC05Yzc0LWNlMGRiZWYzMDA1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAmIwDQYJKoZIhvcNAQELBQADggEBAAKlIHUFn0Q7HLdKB3rFsTj3Xb1p sbjf9Ej8hWZ82u/X9vZzx5Bt/Qqq+CB4yxeN6+7z0saCj4Uzorc8VnL4EcSsf2Ke u2GnBwn2S5oFDIExiWzaKz8YtF7xNgPXdm4Aagl//MUZCMqVyIIqvFo29M67f3Jh drHMk/+V9F2IKadSshTyY+1rLHZWV9/mn5lNZDP2Zr12HHjR+sThSkFQY8vUuV3W 1igtDk5t6KjHxp1Pv4t5RwCfI2OCkX9WruBOIFKN86+YVds7CvMddEpYaswLaiW7 sPn4KPN/AKkGPBzPOKDYQQwZg9LIYYpKGQfxj9dvq24k+iiNqKHWncIB3ZM= -----END CERTIFICATE-----Generated at Tue Sep 16 07:06:40 2025 by rpki-client