$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e29a881-fc73-4c64-ae2c-dda03555ffb4.roa File: 3e29a881-fc73-4c64-ae2c-dda03555ffb4.roa (raw, json) Hash identifier: ATmBOHX+J6GcDQNa2zKkWnHF/YY8XQMfzWxF9W3BXRE= Subject key identifier: 1F:57:52:00:26:D7:44:30:09:CE:5A:E5:C6:92:A9:0E:98:61:82:3D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D00EBD569EC5D872BF321D8767812474C95437C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e29a881-fc73-4c64-ae2c-dda03555ffb4.roa Signing time: Mon 22 Sep 2025 23:54:00 +0000 ROA not before: Mon 22 Sep 2025 23:54:00 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:00:eb:d5:69:ec:5d:87:2b:f3:21:d8:76:78:12:47:4c:95:43:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:54:00 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=ff80caa74b94caea1db748c0e838ddcdb9426bbb450761edc334549b96e7c5b2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:dc:2c:a7:30:fb:85:72:54:48:64:ff:0a: 57:86:3d:76:0a:ce:2f:7f:99:36:f6:ac:09:76:26: e1:cb:ba:ff:47:70:bb:13:74:09:fd:94:00:c5:5b: 0a:b6:b8:00:4b:77:2c:ee:8e:fc:fa:32:c6:40:14: aa:29:86:18:45:9b:d2:49:e9:76:50:27:9c:c6:b1: f4:79:56:5a:14:45:c3:01:91:71:d5:40:e9:fe:9f: 37:b7:7b:c4:43:9e:a7:5f:9c:5e:3e:65:97:28:0e: e4:65:58:36:50:8b:f6:f0:ce:99:86:4d:0e:ce:6f: d8:7d:70:ab:d9:b5:c3:51:20:b1:f4:c6:19:8c:f4: 60:68:35:2e:f2:4e:f1:a5:76:63:b1:82:fc:68:09: de:bc:36:dc:8e:d2:f3:da:bd:07:6d:fa:38:ce:9a: 2a:e1:1e:c5:81:f1:53:14:8d:a2:31:73:be:48:3b: 99:8f:4b:4d:8c:03:24:32:6b:b5:9f:7e:b9:6c:02: 9e:47:54:50:3e:be:b3:47:a2:2f:ac:da:70:cd:0c: eb:f8:97:e6:dc:8b:73:ed:c1:89:70:65:1c:a1:f3: 6a:75:03:10:31:64:5f:27:4f:09:51:60:a4:e4:e7: 7c:a3:49:41:83:9f:89:4a:e1:d8:06:d6:73:a1:bd: 22:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:57:52:00:26:D7:44:30:09:CE:5A:E5:C6:92:A9:0E:98:61:82:3D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e29a881-fc73-4c64-ae2c-dda03555ffb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.4.0/24 Signature Algorithm: sha256WithRSAEncryption 43:cb:3f:24:9f:51:d3:83:cc:0e:a1:bc:f1:f6:87:86:01:46: 26:9a:e9:4a:ef:4e:81:11:af:a1:cf:d9:d5:04:00:40:90:42: b5:d0:88:24:fe:c5:97:bc:26:47:49:d1:da:6b:d8:cd:78:ca: 89:15:50:9e:ff:01:01:b0:8c:2a:05:c2:e8:8b:bb:07:d6:b7: c3:17:07:01:bc:18:0b:8c:fe:eb:78:ae:f4:d1:5e:8d:0b:20: 1a:ec:9a:53:a6:11:87:56:b2:a1:35:93:72:ae:c0:96:55:09: b5:93:25:8c:12:a4:74:8e:48:ff:86:13:03:f7:3c:d9:88:4d: b6:12:4e:67:75:3d:7a:df:c5:f4:1b:23:be:06:dd:b4:26:25: 84:28:5e:c1:cd:86:82:2c:02:cc:01:ed:b6:e0:e1:e5:f1:3b: e8:1a:0a:cc:9c:1e:8f:e3:d5:6e:44:9d:65:35:06:f9:58:ed: f0:04:2a:9a:73:bc:ab:4c:da:40:8a:26:00:81:e3:7b:24:e8: 0e:05:07:a6:5c:40:df:51:39:54:d6:b7:ae:e5:79:62:b2:62: 54:e6:20:9e:dd:cb:78:6c:1d:95:17:65:f4:7c:39:5c:b6:06: 4b:3b:c8:61:ce:18:34:0f:0a:8f:be:fc:54:a2:62:b5:91:04: 7d:ac:af:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDQDr1WnsXYcr8yHYdngSR0yVQ3wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjM1NDAwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjgwY2FhNzRiOTRjYWVhMWRiNzQ4YzBlODM4ZGRjZGI5 NDI2YmJiNDUwNzYxZWRjMzM0NTQ5Yjk2ZTdjNWIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSItwspzD7hXJUSGT/CleGPXYKzi9/mTb2rAl2JuHLuv9H cLsTdAn9lADFWwq2uABLdyzujvz6MsZAFKophhhFm9JJ6XZQJ5zGsfR5VloURcMB kXHVQOn+nze3e8RDnqdfnF4+ZZcoDuRlWDZQi/bwzpmGTQ7Ob9h9cKvZtcNRILH0 xhmM9GBoNS7yTvGldmOxgvxoCd68NtyO0vPavQdt+jjOmirhHsWB8VMUjaIxc75I O5mPS02MAyQya7WffrlsAp5HVFA+vrNHoi+s2nDNDOv4l+bci3PtwYlwZRyh82p1 AxAxZF8nTwlRYKTk53yjSUGDn4lK4dgG1nOhvSJPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH1dSACbXRDAJzlrlxpKpDphhgj0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNlMjlhODgxLWZjNzMtNGM2NC1hZTJjLWRkYTAzNTU1ZmZiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VAQwDQYJKoZIhvcNAQELBQADggEBAEPLPySfUdODzA6hvPH2h4YBRiaa 6UrvToERr6HP2dUEAECQQrXQiCT+xZe8JkdJ0dpr2M14yokVUJ7/AQGwjCoFwuiL uwfWt8MXBwG8GAuM/ut4rvTRXo0LIBrsmlOmEYdWsqE1k3KuwJZVCbWTJYwSpHSO SP+GEwP3PNmITbYSTmd1PXrfxfQbI74G3bQmJYQoXsHNhoIsAswB7bbg4eXxO+ga CsycHo/j1W5EnWU1BvlY7fAEKppzvKtM2kCKJgCB43sk6A4FB6ZcQN9ROVTWt67l eWKyYlTmIJ7dy3hsHZUXZfR8OVy2Bks7yGHOGDQPCo++/FSiYrWRBH2sr14= -----END CERTIFICATE-----Generated at Sat Oct 18 04:12:47 2025 by rpki-client