$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b6734f1-da06-49c7-bd16-471ce273276e.roa File: 3b6734f1-da06-49c7-bd16-471ce273276e.roa (raw, json) Hash identifier: elmYh8EwfseCP7FyPi18hStd1dEyt4IE9N1nweqU9q4= Subject key identifier: 85:16:DC:23:4E:63:66:F6:B0:44:1C:68:FE:3B:28:E8:76:F1:4D:3D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 480E1C41334C6FA04C1F4895CC2F00D28B44389F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b6734f1-da06-49c7-bd16-471ce273276e.roa Signing time: Tue 04 Nov 2025 00:40:12 +0000 ROA not before: Tue 04 Nov 2025 00:40:12 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.88.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0e:1c:41:33:4c:6f:a0:4c:1f:48:95:cc:2f:00:d2:8b:44:38:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 00:40:12 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=3a7c1103e51bfb10846167ae1c7afa5307fc613d4c5d230d10b82aeab158ef20, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:a2:74:07:a9:71:9a:ec:8f:63:5f:7f:e0: e0:6c:4b:c1:b1:75:7d:19:e3:7c:15:16:8a:ca:14: dc:c9:f4:ea:88:8a:dd:50:ad:28:6f:09:67:c1:cd: 8a:ff:88:01:fb:fc:4c:e3:e5:35:b1:48:f5:d9:e2: de:0b:a0:28:67:83:13:38:cc:ce:35:71:8f:d1:b7: 9a:e8:8c:2f:96:71:92:5d:7c:df:ff:21:cb:56:7a: 97:24:d4:c0:3c:81:2e:31:9e:80:59:d0:da:58:02: 92:b3:6a:c4:93:de:30:1a:c4:bc:2f:45:72:3c:2a: 91:5f:04:88:17:06:ec:35:76:31:14:d9:8f:51:8d: e3:30:a4:95:a5:2c:19:4f:be:45:12:59:c5:33:2f: 0e:fc:54:da:5e:3f:51:66:42:10:14:9c:82:c3:7d: f0:56:27:d1:07:f2:18:e4:38:1b:28:27:23:04:3e: 9d:9f:5c:4a:7f:b6:1e:55:97:ce:de:b3:19:24:a7: bc:7b:76:3e:9a:f6:be:81:ba:56:a0:3a:87:35:6c: 28:06:17:28:38:e0:4e:ec:7c:c6:a7:58:3a:ad:fa: 90:b2:1a:94:cf:13:e3:ab:db:2d:55:02:3a:26:d0: dd:25:bf:a7:8b:40:cd:cd:14:33:bb:d2:e4:82:20: 65:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:16:DC:23:4E:63:66:F6:B0:44:1C:68:FE:3B:28:E8:76:F1:4D:3D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b6734f1-da06-49c7-bd16-471ce273276e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.88.32.0/19 Signature Algorithm: sha256WithRSAEncryption 68:12:04:8a:c9:69:7c:e1:75:f4:c1:dd:4c:01:fb:98:65:97: 24:4a:05:6d:e6:83:1a:0f:18:40:19:b3:dd:94:05:91:9e:b1: 41:4b:a8:41:c2:fe:1f:c3:30:b2:93:c4:72:22:e6:ef:3b:65: 53:37:86:f0:57:28:d4:f3:6a:4c:c2:a9:58:02:aa:e4:16:bb: 53:96:6a:df:f1:22:6f:e5:80:46:12:57:4c:c7:25:13:4e:81: 0d:ae:9e:35:53:d7:37:d4:6a:e9:30:23:fc:f5:39:96:87:11: eb:b3:aa:fe:07:b6:80:f3:a9:8f:9f:a1:f9:1c:ea:4e:1f:b0: 11:cc:9a:22:0f:51:23:91:da:db:6a:c6:5f:53:ac:27:7d:38: 08:fa:55:7f:46:a2:24:a9:ef:dc:f1:77:a5:43:49:19:cb:8d: ea:de:56:e0:8f:bb:39:90:03:85:bd:87:3c:65:e3:62:cc:f8: 5d:02:66:31:02:48:73:f7:62:7e:bc:8a:8b:81:8b:13:9c:dc: 4a:9a:1b:39:cb:dd:c0:b1:77:f5:4f:55:73:a7:35:9d:e3:e0: 2c:6d:97:03:b9:0e:a6:35:55:d1:1e:25:56:79:d7:6f:66:d5: ce:00:38:9f:68:4b:4b:a7:97:f9:93:4c:fd:02:52:87:54:c3: 07:f7:a2:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSA4cQTNMb6BMH0iVzC8A0otEOJ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDA0MDEyWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTdjMTEwM2U1MWJmYjEwODQ2MTY3YWUxYzdhZmE1MzA3 ZmM2MTNkNGM1ZDIzMGQxMGI4MmFlYWIxNThlZjIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwUqJ0B6lxmuyPY19/4OBsS8GxdX0Z43wVForKFNzJ9OqI it1QrShvCWfBzYr/iAH7/Ezj5TWxSPXZ4t4LoChngxM4zM41cY/Rt5rojC+WcZJd fN//IctWepck1MA8gS4xnoBZ0NpYApKzasST3jAaxLwvRXI8KpFfBIgXBuw1djEU 2Y9RjeMwpJWlLBlPvkUSWcUzLw78VNpeP1FmQhAUnILDffBWJ9EH8hjkOBsoJyME Pp2fXEp/th5Vl87esxkkp7x7dj6a9r6BulagOoc1bCgGFyg44E7sfManWDqt+pCy GpTPE+Or2y1VAjom0N0lv6eLQM3NFDO70uSCIGVrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhRbcI05jZvawRBxo/jso6HbxTT0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiNjczNGYxLWRhMDYtNDljNy1iZDE2LTQ3MWNlMjczMjc2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUSWCAwDQYJKoZIhvcNAQELBQADggEBAGgSBIrJaXzhdfTB3UwB+5hllyRK BW3mgxoPGEAZs92UBZGesUFLqEHC/h/DMLKTxHIi5u87ZVM3hvBXKNTzakzCqVgC quQWu1OWat/xIm/lgEYSV0zHJRNOgQ2unjVT1zfUaukwI/z1OZaHEeuzqv4HtoDz qY+fofkc6k4fsBHMmiIPUSOR2ttqxl9TrCd9OAj6VX9GoiSp79zxd6VDSRnLjere VuCPuzmQA4W9hzxl42LM+F0CZjECSHP3Yn68iouBixOc3EqaGznL3cCxd/VPVXOn NZ3j4CxtlwO5DqY1VdEeJVZ5129m1c4AOJ9oS0unl/mTTP0CUodUwwf3oiY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:48:56 2025 by rpki-client