$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44bfd9c3-cf8b-4f99-b10c-d93453aaa64b.roa File: 44bfd9c3-cf8b-4f99-b10c-d93453aaa64b.roa (raw, json) Hash identifier: 5BrsWL+0XgnN/C0ZuRlxAYktDvpIo+W808a0zp8soSc= Subject key identifier: 24:42:88:45:7C:AD:39:6C:2D:AA:44:73:75:55:B4:0F:1C:47:66:0D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0C4265E6E7FAC6D3176C5BF7C1FF0DA9D82444E2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44bfd9c3-cf8b-4f99-b10c-d93453aaa64b.roa Signing time: Fri 10 Oct 2025 15:10:16 +0000 ROA not before: Fri 10 Oct 2025 15:10:16 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.32.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:42:65:e6:e7:fa:c6:d3:17:6c:5b:f7:c1:ff:0d:a9:d8:24:44:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 15:10:16 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=c203243cee5ba61bc8efae85df288982b1ff7db3742c00a85155eb7413100e3c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:44:0d:07:94:3e:e8:95:a2:3b:67:ef:54:de: b7:f2:8c:84:86:33:c9:37:9f:c4:a0:6c:06:b2:fe: 5a:bd:f2:57:bb:99:91:9b:01:de:74:63:9b:4a:19: 1d:69:bf:0a:58:d0:eb:be:5e:43:89:fe:ad:2b:59: ce:a5:c0:7a:83:aa:4e:9d:b2:88:73:b4:14:26:95: 16:47:76:bf:20:b6:06:91:fe:6b:c4:c4:f7:d8:dc: f1:ac:f4:0a:77:0c:b1:be:18:82:d5:cb:3f:bf:52: 94:8b:28:a5:4d:6f:8e:b3:f6:a6:b2:dc:62:37:5f: 3e:b8:e1:ac:ac:4f:90:1c:83:0a:9e:b6:f3:2a:97: 27:fe:d3:16:dc:04:a9:96:f5:c0:e1:f5:3d:11:8a: 30:7b:fa:e4:6a:b9:ef:63:9c:c5:d0:f4:0c:2d:6d: 14:97:d3:a8:39:fb:b9:db:20:27:4a:34:47:55:5f: 73:e0:78:d0:97:d8:e3:0c:7f:61:60:09:43:6d:d1: 67:50:12:31:ce:1b:e8:5b:cf:91:19:9c:56:d9:da: 7e:14:4e:84:71:61:02:b3:19:31:d1:4e:0e:f5:4c: ba:db:e1:e6:9e:f1:73:fe:58:25:6b:30:0f:13:a0: 6e:50:e7:4a:28:88:de:3f:1c:a0:db:92:7a:52:35: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:42:88:45:7C:AD:39:6C:2D:AA:44:73:75:55:B4:0F:1C:47:66:0D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44bfd9c3-cf8b-4f99-b10c-d93453aaa64b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption 60:58:f5:20:3c:ab:ad:0a:be:c5:0a:aa:09:97:0e:27:84:df: 4e:86:18:e9:3e:9e:98:08:4d:1e:c1:eb:13:02:04:e6:31:56: df:25:8e:b7:f5:ad:5e:58:f1:52:6f:b9:8b:e0:ab:74:6a:74: 8a:c9:21:8e:a9:bd:12:c8:4b:ec:62:6f:cf:9f:23:db:e9:6b: aa:37:fd:77:93:b1:01:57:1b:73:77:d6:bc:1d:1c:04:6f:16: b0:d5:68:13:df:91:09:52:cd:98:99:da:74:7f:91:e6:ae:e9: 4d:80:28:68:35:12:ea:d5:8b:79:d7:f1:44:c1:29:af:4e:cb: 08:40:b8:e7:be:15:b4:1b:22:ef:61:5e:f1:e6:a6:d4:c9:fe: 1b:12:96:86:c3:27:ed:c0:7a:1a:b8:33:62:ad:bc:c1:18:c8: 2a:c4:1f:38:2f:54:78:33:03:b5:aa:58:92:9c:81:08:f0:ef: 2a:b9:9e:e9:89:71:81:44:ca:0c:83:93:d4:f1:02:25:90:95: 0e:41:1a:45:e8:6b:5f:ee:17:2c:4a:1d:31:ff:d0:1a:9a:ed: ab:22:40:19:f5:3c:09:63:e9:02:08:fb:46:4f:11:25:86:a3: 64:43:84:6b:48:5f:a6:d3:49:4a:fa:73:06:6f:c9:bf:5a:74: 9d:d0:18:21 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDEJl5uf6xtMXbFv3wf8NqdgkROIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTUxMDE2WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMjAzMjQzY2VlNWJhNjFiYzhlZmFlODVkZjI4ODk4MmIx ZmY3ZGIzNzQyYzAwYTg1MTU1ZWI3NDEzMTAwZTNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDRA0HlD7olaI7Z+9U3rfyjISGM8k3n8SgbAay/lq98le7 mZGbAd50Y5tKGR1pvwpY0Ou+XkOJ/q0rWc6lwHqDqk6dsohztBQmlRZHdr8gtgaR /mvExPfY3PGs9Ap3DLG+GILVyz+/UpSLKKVNb46z9qay3GI3Xz644aysT5Acgwqe tvMqlyf+0xbcBKmW9cDh9T0RijB7+uRque9jnMXQ9AwtbRSX06g5+7nbICdKNEdV X3PgeNCX2OMMf2FgCUNt0WdQEjHOG+hbz5EZnFbZ2n4UToRxYQKzGTHRTg71TLrb 4eae8XP+WCVrMA8ToG5Q50ooiN4/HKDbknpSNXVxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJEKIRXytOWwtqkRzdVW0DxxHZg0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ0YmZkOWMzLWNmOGItNGY5OS1iMTBjLWQ5MzQ1M2FhYTY0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwADIDANBgkqhkiG9w0BAQsFAAOCAQEAYFj1IDyrrQq+xQqqCZcOJ4TfToYY 6T6emAhNHsHrEwIE5jFW3yWOt/WtXljxUm+5i+CrdGp0iskhjqm9EshL7GJvz58j 2+lrqjf9d5OxAVcbc3fWvB0cBG8WsNVoE9+RCVLNmJnadH+R5q7pTYAoaDUS6tWL edfxRMEpr07LCEC4574VtBsi72Fe8eam1Mn+GxKWhsMn7cB6GrgzYq28wRjIKsQf OC9UeDMDtapYkpyBCPDvKrme6YlxgUTKDIOT1PECJZCVDkEaRehrX+4XLEodMf/Q GprtqyJAGfU8CWPpAgj7Rk8RJYajZEOEa0hfptNJSvpzBm/Jv1p0ndAYIQ== -----END CERTIFICATE-----Generated at Sat Oct 18 00:18:40 2025 by rpki-client