$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a19d99e-a1d9-4e66-8c8a-729cffefd9d7.roa File: 3a19d99e-a1d9-4e66-8c8a-729cffefd9d7.roa (raw, json) Hash identifier: Z17n9GETQUY5A/lxmNzgTvsIlnRZiQuo21cj0LYOtmw= Subject key identifier: D6:B8:85:DE:E8:5C:57:36:43:8D:31:5D:6C:90:8D:5F:31:90:7E:72 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 337A4A86E693EC23F782D4C6AC74FD9DC38C301D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a19d99e-a1d9-4e66-8c8a-729cffefd9d7.roa Signing time: Fri 26 Sep 2025 02:52:27 +0000 ROA not before: Fri 26 Sep 2025 02:52:27 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:7a:4a:86:e6:93:ec:23:f7:82:d4:c6:ac:74:fd:9d:c3:8c:30:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:52:27 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=492b0bfc287b1153ea98650825206b534cc8d876048b1ae0c0ddf6bff1910232, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c2:26:84:8e:21:a9:82:fe:2b:ee:af:70:99: 6e:f3:f5:4f:32:49:37:d2:24:ad:5c:97:ee:ea:c5: 2d:36:c9:74:a9:03:a4:f6:5b:ac:e4:11:2d:3d:6d: 58:a4:41:d5:27:32:22:89:c3:eb:35:3d:c2:87:c7: d2:eb:15:97:21:31:85:a3:ce:21:44:f1:69:84:8f: 6e:38:43:34:29:1a:58:5a:88:df:49:c9:39:dd:b2: fa:12:96:21:d6:88:93:4a:81:61:49:5b:a7:c0:60: df:b0:da:a8:52:96:0f:58:cb:16:f8:63:d5:c6:9f: e1:8c:93:05:9a:f5:07:2e:51:5d:a0:74:f5:61:18: 4f:ba:99:f1:65:db:1e:9c:55:db:e9:1c:03:4e:fe: 21:8e:a8:26:96:a4:27:9e:37:c5:ae:30:3f:6d:a2: 1e:b9:b7:86:04:56:48:94:a8:41:27:d0:0f:6c:7b: fe:94:fa:d6:28:8e:50:7d:75:b7:8f:b7:20:79:35: 64:c9:29:e5:d4:93:ea:81:22:fd:fb:ef:a3:a2:ac: aa:6a:b2:99:27:18:89:66:53:8b:de:0e:2f:d5:8e: 7c:da:fd:2f:0c:ce:49:01:42:3f:e9:0b:0d:27:2c: 5b:09:18:0c:5d:16:b8:e0:46:10:52:2b:d5:14:d9: 4b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B8:85:DE:E8:5C:57:36:43:8D:31:5D:6C:90:8D:5F:31:90:7E:72 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a19d99e-a1d9-4e66-8c8a-729cffefd9d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.84.0/23 Signature Algorithm: sha256WithRSAEncryption 18:6d:fe:59:27:1e:c0:58:50:1b:88:aa:37:9e:dd:67:95:85: 81:a5:45:0f:52:dc:09:73:9f:41:44:a1:6b:b5:e0:ac:23:0c: c1:5a:d2:0d:04:cb:84:31:5c:46:ac:2a:5c:30:79:50:53:93: 52:06:1b:24:85:56:e8:23:3e:c2:ea:a3:f4:ba:88:d4:59:a9: 4b:69:16:9b:02:56:a7:4a:44:1e:50:72:4a:77:67:05:c0:9e: bc:59:ff:71:b3:8a:9f:86:16:54:28:0d:0e:e6:3a:c3:c0:4d: 25:fc:b3:a5:5e:24:ca:d5:85:a7:69:ce:f5:93:99:ef:d3:da: 6b:63:0a:69:67:7f:b3:5f:d2:5f:cc:08:14:54:64:1c:ce:a5: ed:94:4d:b7:51:da:72:8d:2e:9e:af:93:61:37:d2:ff:8b:d5: d7:c7:bc:a3:25:f6:70:9b:20:91:22:c2:2e:12:03:c7:9d:a5: f9:85:a2:c7:10:d2:4d:af:13:a5:ff:f1:84:b5:93:9a:3a:7c: 60:a7:3f:ea:75:32:c0:37:fb:df:c9:5e:66:d3:f4:08:9c:cd: cb:c8:12:f9:0d:2e:e5:29:da:a3:a4:9a:7c:09:8d:07:1a:e9: 32:de:2b:b8:64:f4:bc:2e:82:89:f2:16:2f:7b:71:26:52:56: ac:a9:70:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM3pKhuaT7CP3gtTGrHT9ncOMMB0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDI1MjI3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTJiMGJmYzI4N2IxMTUzZWE5ODY1MDgyNTIwNmI1MzRj YzhkODc2MDQ4YjFhZTBjMGRkZjZiZmYxOTEwMjMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCswiaEjiGpgv4r7q9wmW7z9U8ySTfSJK1cl+7qxS02yXSp A6T2W6zkES09bVikQdUnMiKJw+s1PcKHx9LrFZchMYWjziFE8WmEj244QzQpGlha iN9JyTndsvoSliHWiJNKgWFJW6fAYN+w2qhSlg9Yyxb4Y9XGn+GMkwWa9QcuUV2g dPVhGE+6mfFl2x6cVdvpHANO/iGOqCaWpCeeN8WuMD9toh65t4YEVkiUqEEn0A9s e/6U+tYojlB9dbePtyB5NWTJKeXUk+qBIv3776OirKpqspknGIlmU4veDi/Vjnza /S8MzkkBQj/pCw0nLFsJGAxdFrjgRhBSK9UU2UszAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1riF3uhcVzZDjTFdbJCNXzGQfnIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNhMTlkOTllLWExZDktNGU2Ni04YzhhLTcyOWNmZmVmZDlkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE25lQwDQYJKoZIhvcNAQELBQADggEBABht/lknHsBYUBuIqjee3WeVhYGl RQ9S3Alzn0FEoWu14KwjDMFa0g0Ey4QxXEasKlwweVBTk1IGGySFVugjPsLqo/S6 iNRZqUtpFpsCVqdKRB5Qckp3ZwXAnrxZ/3Gzip+GFlQoDQ7mOsPATSX8s6VeJMrV hadpzvWTme/T2mtjCmlnf7Nf0l/MCBRUZBzOpe2UTbdR2nKNLp6vk2E30v+L1dfH vKMl9nCbIJEiwi4SA8edpfmFoscQ0k2vE6X/8YS1k5o6fGCnP+p1MsA3+9/JXmbT 9AiczcvIEvkNLuUp2qOkmnwJjQca6TLeK7hk9LwugonyFi97cSZSVqypcOs= -----END CERTIFICATE-----Generated at Sat Oct 18 02:10:50 2025 by rpki-client