$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bfb9058-542a-4db0-bdcb-77e6a411688c.roa File: 3bfb9058-542a-4db0-bdcb-77e6a411688c.roa (raw, json) Hash identifier: Qm1dadVscGpqCe2L58/7BzWzOhAlmj29S1g3mA+9Rl8= Subject key identifier: D5:0F:54:C5:CF:12:8D:18:91:D3:C4:6A:C1:6F:C4:9B:63:11:50:B3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E33A0DE9094BF21D4EAB8577EFF7E9E6774AEBF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bfb9058-542a-4db0-bdcb-77e6a411688c.roa Signing time: Wed 24 Sep 2025 17:42:59 +0000 ROA not before: Wed 24 Sep 2025 17:42:59 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.33.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:33:a0:de:90:94:bf:21:d4:ea:b8:57:7e:ff:7e:9e:67:74:ae:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 17:42:59 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=e6eac34778344164ff2412be6424aabbb388ee45c30de35ae13de7954f7f4a5d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:77:e6:79:03:08:df:6f:4f:6c:13:19:f2: f9:21:c0:0b:fd:c0:20:2d:91:f6:d7:f4:ba:a9:5e: 44:9c:92:f4:86:6f:eb:0d:9f:1a:aa:56:23:41:fa: c4:8a:8c:19:6d:08:76:5a:85:18:ac:e4:5c:3f:88: a8:be:f1:a4:9b:50:90:4c:22:f1:57:98:bd:70:87: 36:d0:00:a7:25:6d:2a:83:fe:cb:21:09:70:6b:64: 86:a8:f7:00:0b:41:07:a8:dd:e3:dd:b3:1c:72:83: 9a:96:8a:6e:8d:ff:32:29:75:fd:d2:ce:d5:3a:e3: 75:1a:5c:ea:ff:2f:b7:fc:8a:d5:12:3b:af:c9:da: 5f:f1:0f:3e:fa:00:60:5c:d7:5a:92:6e:31:30:28: 92:f9:53:fc:77:60:76:0e:99:b0:42:7a:62:9b:03: e6:eb:2d:2d:e0:49:5e:ae:75:c0:b6:09:b5:fa:7f: 74:88:42:83:43:9a:ff:30:b1:e4:60:c4:84:b8:e8: 90:a9:dd:67:ca:d0:aa:66:87:3d:e0:f8:3f:b1:ce: a6:6e:4f:14:52:5b:6d:bf:46:32:71:63:e9:f7:5d: b3:da:1f:e4:10:0f:84:5f:04:ef:48:db:b4:66:4e: 91:6e:bb:53:92:53:07:28:af:a8:35:f9:55:50:80: 6b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0F:54:C5:CF:12:8D:18:91:D3:C4:6A:C1:6F:C4:9B:63:11:50:B3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bfb9058-542a-4db0-bdcb-77e6a411688c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.33.212.0/24 Signature Algorithm: sha256WithRSAEncryption ad:7f:9d:d5:3e:b9:a1:bd:a0:22:96:a0:a8:62:86:81:9c:83: df:d4:56:8d:3c:e1:f6:4d:d4:d0:e2:77:04:c4:6a:df:db:38: e9:25:25:2c:b6:bc:d9:47:f0:dc:6b:43:f6:0f:2f:34:cb:6c: db:32:db:7a:fc:de:f5:dd:06:a4:f5:65:4c:ab:20:15:fe:f1: a2:ab:52:3c:5e:27:a6:87:78:f9:a5:b6:83:52:b3:f0:45:01: 58:db:0b:35:c9:59:79:65:f3:e1:d6:3f:b5:60:22:5f:37:bd: 19:7c:4c:c3:99:0e:f0:52:74:c5:8d:50:64:41:ba:37:e5:58: a3:0f:f2:2b:a3:43:c8:69:7c:6c:cb:07:61:04:ca:9c:c9:3a: fa:e2:4d:f4:91:04:bb:c7:b4:28:6b:a0:9c:0b:fc:de:d6:b1: b0:48:46:60:48:33:05:17:de:7b:ba:50:5e:46:f2:73:f6:50: e4:fd:1a:28:74:20:96:fb:26:e6:b3:3a:08:78:64:fe:92:cb: 4e:dd:11:96:f2:da:9c:98:83:c2:de:3f:d2:84:c1:79:d6:38: 22:81:6a:08:ef:d6:78:f2:7d:54:da:15:6f:82:e2:ef:bf:52: e1:8a:15:6e:38:6d:15:83:2b:27:5d:fa:a8:ed:a2:8a:c7:09: ca:5d:e6:74 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfjOg3pCUvyHU6rhXfv9+nmd0rr8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTc0MjU5WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmVhYzM0Nzc4MzQ0MTY0ZmYyNDEyYmU2NDI0YWFiYmIz ODhlZTQ1YzMwZGUzNWFlMTNkZTc5NTRmN2Y0YTVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpvXfmeQMI329PbBMZ8vkhwAv9wCAtkfbX9LqpXkSckvSG b+sNnxqqViNB+sSKjBltCHZahRis5Fw/iKi+8aSbUJBMIvFXmL1whzbQAKclbSqD /sshCXBrZIao9wALQQeo3ePdsxxyg5qWim6N/zIpdf3SztU643UaXOr/L7f8itUS O6/J2l/xDz76AGBc11qSbjEwKJL5U/x3YHYOmbBCemKbA+brLS3gSV6udcC2CbX6 f3SIQoNDmv8wseRgxIS46JCp3WfK0Kpmhz3g+D+xzqZuTxRSW22/RjJxY+n3XbPa H+QQD4RfBO9I27RmTpFuu1OSUwcor6g1+VVQgGtfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1Q9Uxc8SjRiR08RqwW/Em2MRULMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiZmI5MDU4LTU0MmEtNGRiMC1iZGNiLTc3ZTZhNDExNjg4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAANIdQwDQYJKoZIhvcNAQELBQADggEBAK1/ndU+uaG9oCKWoKhihoGcg9/U Vo084fZN1NDidwTEat/bOOklJSy2vNlH8NxrQ/YPLzTLbNsy23r83vXdBqT1ZUyr IBX+8aKrUjxeJ6aHePmltoNSs/BFAVjbCzXJWXll8+HWP7VgIl83vRl8TMOZDvBS dMWNUGRBujflWKMP8iujQ8hpfGzLB2EEypzJOvriTfSRBLvHtChroJwL/N7WsbBI RmBIMwUX3nu6UF5G8nP2UOT9Gih0IJb7JuazOgh4ZP6Sy07dEZby2pyYg8LeP9KE wXnWOCKBagjv1njyfVTaFW+C4u+/UuGKFW44bRWDKydd+qjtoorHCcpd5nQ= -----END CERTIFICATE-----Generated at Sat Oct 18 05:12:33 2025 by rpki-client