$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37030111-31bc-4d4f-8ed4-12027c01dee2.roa File: 37030111-31bc-4d4f-8ed4-12027c01dee2.roa (raw, json) Hash identifier: v6IBoz325sAOXl8HOPdRtZ5x6wg6IkKnBwefkGCwCik= Subject key identifier: 0E:2D:41:91:24:16:2B:87:42:84:E6:A0:49:44:77:20:A9:83:E0:1B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 74DBB76A281E68B657883F75679B8D726ADFD6A3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37030111-31bc-4d4f-8ed4-12027c01dee2.roa Signing time: Fri 26 Sep 2025 03:00:25 +0000 ROA not before: Fri 26 Sep 2025 03:00:25 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:db:b7:6a:28:1e:68:b6:57:88:3f:75:67:9b:8d:72:6a:df:d6:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 03:00:25 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=da3da9b1a372b0aa926f72c7c16627489e9639f25e41adb635e1c4a2cae5af9b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:f3:c2:5b:18:bd:07:e0:5a:c3:de:3a:7c: 13:dd:71:29:8f:fe:f4:c3:1e:ba:44:d0:71:a2:b4: 51:dc:c4:17:00:c3:6e:85:90:f0:d5:02:39:23:24: cf:74:00:af:0e:8b:51:9c:3a:a9:63:25:1c:0b:14: 6f:09:b5:01:36:fd:ed:d7:2c:0b:43:2d:80:7a:b2: 9c:d0:be:e6:89:fe:a8:03:9a:07:98:46:f6:7f:76: ec:76:9c:f6:23:4b:b3:6a:6e:2f:3d:f7:88:02:44: 45:3d:7d:46:bc:78:5d:07:11:9c:10:99:70:79:6f: 8e:f8:82:42:dc:8e:aa:27:2a:46:96:8d:dc:db:37: b6:61:aa:18:93:f9:64:9c:94:2d:72:a8:96:91:d3: 87:d7:30:9d:e2:ca:bb:5e:33:4d:39:de:e5:f3:3f: ba:05:d6:2b:4f:1b:df:60:17:29:0e:2f:67:e8:76: 2e:05:54:64:22:ff:f8:5e:1b:18:a1:30:57:41:6d: 69:a5:51:dc:e6:ef:ed:09:75:ab:3a:b0:b2:7c:9f: 3c:f1:bc:16:d5:82:93:31:a0:e2:20:6d:43:05:71: 26:2b:16:c2:ca:10:9f:87:cb:0f:d1:56:93:09:18: ef:98:24:cf:73:74:d9:f5:0f:ae:91:dd:e0:87:8d: 50:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2D:41:91:24:16:2B:87:42:84:E6:A0:49:44:77:20:A9:83:E0:1B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37030111-31bc-4d4f-8ed4-12027c01dee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.72.0/22 Signature Algorithm: sha256WithRSAEncryption 40:22:28:b8:b3:76:fe:00:4b:d7:dc:12:17:2a:f9:dc:8f:38: 24:bf:0b:f9:be:96:e1:3b:e6:6f:8f:f0:31:86:0a:d8:b4:88: cf:c3:9e:52:9c:33:e7:d3:db:92:3e:c3:78:f9:af:f0:a9:35: d2:0b:52:b6:b5:2e:46:60:f0:cb:18:f4:5a:da:e2:66:b9:be: 36:94:05:ed:aa:13:46:68:a3:6e:83:d5:b1:53:6e:ef:d6:ad: 6e:da:89:a6:b1:eb:03:19:a2:a5:25:88:77:31:bf:19:16:56: 49:5e:aa:a0:5c:73:08:80:ad:ae:6a:a8:0f:eb:fe:70:d8:00: 77:a2:c7:72:80:5d:0d:98:8c:f5:7f:f2:18:27:ab:27:6a:29: d3:ad:9f:d9:a2:9b:50:a7:62:ca:b3:36:0d:ed:61:f5:87:7c: fc:53:dc:89:0d:df:cd:30:fb:fb:d6:38:bd:2d:0f:60:8e:b5: b4:2a:f7:12:97:ee:ff:3a:39:3c:7d:f6:24:55:cf:99:9d:04: 6c:cd:4f:97:bf:63:12:10:e8:14:50:ac:8c:12:c0:91:35:a5: 64:8f:d3:85:ae:c5:67:ad:f1:9d:99:c0:a5:07:50:1e:5b:c7: e3:bf:21:df:83:13:c7:44:7b:7b:fc:9c:f5:32:14:87:f2:60: 13:08:3b:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdNu3aigeaLZXiD91Z5uNcmrf1qMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDMwMDI1WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTNkYTliMWEzNzJiMGFhOTI2ZjcyYzdjMTY2Mjc0ODll OTYzOWYyNWU0MWFkYjYzNWUxYzRhMmNhZTVhZjliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCql/PCWxi9B+Baw946fBPdcSmP/vTDHrpE0HGitFHcxBcA w26FkPDVAjkjJM90AK8Oi1GcOqljJRwLFG8JtQE2/e3XLAtDLYB6spzQvuaJ/qgD mgeYRvZ/dux2nPYjS7Nqbi8994gCREU9fUa8eF0HEZwQmXB5b474gkLcjqonKkaW jdzbN7ZhqhiT+WSclC1yqJaR04fXMJ3iyrteM0053uXzP7oF1itPG99gFykOL2fo di4FVGQi//heGxihMFdBbWmlUdzm7+0Jdas6sLJ8nzzxvBbVgpMxoOIgbUMFcSYr FsLKEJ+Hyw/RVpMJGO+YJM9zdNn1D66R3eCHjVA9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDi1BkSQWK4dChOagSUR3IKmD4BswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM3MDMwMTExLTMxYmMtNGQ0Zi04ZWQ0LTEyMDI3YzAxZGVlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI25kgwDQYJKoZIhvcNAQELBQADggEBAEAiKLizdv4AS9fcEhcq+dyPOCS/ C/m+luE75m+P8DGGCti0iM/DnlKcM+fT25I+w3j5r/CpNdILUra1LkZg8MsY9Fra 4ma5vjaUBe2qE0Zoo26D1bFTbu/WrW7aiaax6wMZoqUliHcxvxkWVkleqqBccwiA ra5qqA/r/nDYAHeix3KAXQ2YjPV/8hgnqydqKdOtn9mim1CnYsqzNg3tYfWHfPxT 3IkN380w+/vWOL0tD2COtbQq9xKX7v86OTx99iRVz5mdBGzNT5e/YxIQ6BRQrIwS wJE1pWSP04WuxWet8Z2ZwKUHUB5bx+O/Id+DE8dEe3v8nPUyFIfyYBMIO4k= -----END CERTIFICATE-----Generated at Sat Oct 18 00:16:25 2025 by rpki-client