$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/726fa469-52cd-401e-9774-a65a0cb366d2.roa File: 726fa469-52cd-401e-9774-a65a0cb366d2.roa (raw, json) Hash identifier: tSb6PjUAD68qDGrff9hr2XaW/9FEFb99tej57oW3Fyw= Subject key identifier: 37:95:B9:EE:1D:6A:AC:D2:F8:41:E9:C8:7E:A8:8B:5F:91:D5:C4:71 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 421707942FC5772015C2B534ED3B0042F7E99E2A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/726fa469-52cd-401e-9774-a65a0cb366d2.roa Signing time: Tue 21 Oct 2025 02:50:10 +0000 ROA not before: Tue 21 Oct 2025 02:50:10 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.153.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:17:07:94:2f:c5:77:20:15:c2:b5:34:ed:3b:00:42:f7:e9:9e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 02:50:10 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=8e8852bb933a0b7840b7912bb2836b9aca69630e6d54a609dd10e53f7b93bca8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f2:4a:e9:cb:30:8e:fd:d9:d2:92:45:58:d6: b2:16:1b:9f:03:7e:5a:8e:71:f6:33:0f:a8:59:78: 80:28:e2:5e:b5:a9:a7:5a:3e:a5:a5:18:31:34:39: 81:8d:3e:c4:a8:b2:74:85:96:a1:09:72:32:1a:39: 59:75:ee:48:1d:29:79:81:53:87:13:e6:a5:d3:c7: c8:bb:fa:b0:bf:9c:d1:72:ab:10:f5:57:7d:a3:8d: 60:0e:33:72:08:c1:43:a4:a5:e7:49:ac:30:75:df: 9b:13:1c:f2:95:ca:e0:24:6f:7a:5b:33:7b:51:16: 83:88:b0:69:f9:ef:3a:b6:8e:69:1b:55:21:f6:c2: 27:cd:41:a8:28:56:ae:e0:74:10:d7:fc:3c:09:7c: 20:14:de:9b:f8:3e:30:ca:41:ee:18:77:a7:29:01: 85:fd:fc:7b:d6:00:0e:e8:00:63:8a:d8:95:80:8c: 5c:65:b4:df:5c:38:ae:cc:20:1d:ff:55:58:74:da: de:d1:46:6d:5a:f9:3d:22:2d:23:59:e2:4a:e9:a8: 6a:84:1f:1d:62:98:f3:66:a8:d5:26:fe:6b:b2:e6: 36:55:11:ed:22:cc:b7:9e:f5:38:37:23:dd:52:11: 64:1b:72:ba:3d:21:f6:68:85:36:95:69:f6:97:f4: 38:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:95:B9:EE:1D:6A:AC:D2:F8:41:E9:C8:7E:A8:8B:5F:91:D5:C4:71 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/726fa469-52cd-401e-9774-a65a0cb366d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.153.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8f:45:63:cd:37:34:e9:b2:d2:d4:f6:49:11:42:20:68:a8:b6: 2b:09:07:b1:43:10:29:d7:b9:bd:2a:a6:29:03:67:2a:94:7d: 19:84:a5:27:0a:1b:39:51:2e:3c:1c:37:e4:57:d1:43:3b:4e: d5:c6:08:41:1e:66:01:c1:ba:91:25:e7:c9:f7:04:a7:11:71: 1d:7f:12:94:31:c4:cf:b7:5f:3d:c5:6c:0f:68:46:ad:cb:09: 1e:9a:3f:8d:17:b3:5d:6d:ef:74:e7:9d:00:ef:30:a1:68:97: 2d:c5:19:cd:b9:68:74:44:a3:01:ca:ab:c7:6f:53:d5:e0:d3: 59:87:4e:49:d8:d4:c1:e5:e4:73:70:17:e7:5a:89:52:2b:1c: 7f:8b:b4:ec:8e:2f:34:d3:c4:75:30:24:af:a1:c2:17:c1:ce: 4d:40:b9:ba:6f:c1:42:09:13:bd:7f:75:aa:1f:f6:c1:9e:c8: 30:14:01:79:61:0b:76:2e:86:8c:6e:10:ad:d5:f0:ec:3b:96: 51:e4:09:aa:85:bb:56:ef:59:5a:b9:41:40:a9:25:3c:76:9b: 4f:06:98:5d:01:2b:42:e7:e1:21:dc:72:bf:21:d0:62:4a:3b: e9:51:69:f0:fc:33:24:73:c5:25:6a:fa:45:88:9e:ab:1a:54: fc:44:52:5b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQhcHlC/FdyAVwrU07TsAQvfpniowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDI1MDEwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTg4NTJiYjkzM2EwYjc4NDBiNzkxMmJiMjgzNmI5YWNh Njk2MzBlNmQ1NGE2MDlkZDEwZTUzZjdiOTNiY2E4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl8krpyzCO/dnSkkVY1rIWG58DflqOcfYzD6hZeIAo4l61 qadaPqWlGDE0OYGNPsSosnSFlqEJcjIaOVl17kgdKXmBU4cT5qXTx8i7+rC/nNFy qxD1V32jjWAOM3IIwUOkpedJrDB135sTHPKVyuAkb3pbM3tRFoOIsGn57zq2jmkb VSH2wifNQagoVq7gdBDX/DwJfCAU3pv4PjDKQe4Yd6cpAYX9/HvWAA7oAGOK2JWA jFxltN9cOK7MIB3/VVh02t7RRm1a+T0iLSNZ4krpqGqEHx1imPNmqNUm/muy5jZV Ee0izLee9Tg3I91SEWQbcro9IfZohTaVafaX9DjNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUN5W57h1qrNL4QenIfqiLX5HVxHEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcyNmZhNDY5LTUyY2QtNDAxZS05Nzc0LWE2NWEwY2IzNjZkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjmTANBgkqhkiG9w0BAQsFAAOCAQEAj0VjzTc06bLS1PZJEUIgaKi2KwkH sUMQKde5vSqmKQNnKpR9GYSlJwobOVEuPBw35FfRQztO1cYIQR5mAcG6kSXnyfcE pxFxHX8SlDHEz7dfPcVsD2hGrcsJHpo/jRezXW3vdOedAO8woWiXLcUZzblodESj Acqrx29T1eDTWYdOSdjUweXkc3AX51qJUiscf4u07I4vNNPEdTAkr6HCF8HOTUC5 um/BQgkTvX91qh/2wZ7IMBQBeWELdi6GjG4QrdXw7DuWUeQJqoW7Vu9ZWrlBQKkl PHabTwaYXQErQufhIdxyvyHQYko76VFp8PwzJHPFJWr6RYieqxpU/ERSWw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:50:11 2025 by rpki-client