$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d25e07b-3efe-406e-ba97-8ead992fb464.roa File: 8d25e07b-3efe-406e-ba97-8ead992fb464.roa (raw, json) Hash identifier: e1YmKubtsmkiff3ItHETcUyrRrNvP6hU3LhD7Gb/b5E= Subject key identifier: 00:3B:3B:EA:E7:6D:8A:37:E0:AB:FD:CF:F7:1B:5A:79:4E:54:79:C9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 15D8EDCAFEC13B06B7C41DACE305F428B1DE35D4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d25e07b-3efe-406e-ba97-8ead992fb464.roa Signing time: Sun 11 Oct 2026 14:20:12 +0000 ROA not before: Sun 11 Oct 2026 14:20:12 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 3.33.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d8:ed:ca:fe:c1:3b:06:b7:c4:1d:ac:e3:05:f4:28:b1:de:35:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 11 14:20:12 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=a240432a3b0f6d1b52933d298f3288f5e7e764ee680f548bf3ef4f52bd5687e1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9b:ee:3f:15:de:45:74:e8:6b:ee:f4:a9:3f: eb:0d:33:b6:6d:85:53:2b:88:d1:ad:c7:44:44:b2: 94:22:28:b0:3d:7e:19:bb:cb:0f:2d:fb:31:e5:ae: f4:ed:36:a5:55:04:3e:ae:e8:3d:ff:c7:a6:4c:aa: 38:83:58:9f:b9:49:2a:a6:48:b2:57:04:a7:25:28: fa:ad:8d:c9:60:eb:03:fc:a5:ef:79:7d:a8:80:68: 74:a6:01:1a:ce:1c:75:2b:69:86:e5:3e:09:3b:16: 5e:17:ef:66:38:5b:e2:6c:36:8c:64:ad:6a:f1:cd: 7d:71:25:84:8a:6c:29:0a:88:98:8f:6b:29:8b:eb: 65:95:7c:1b:59:73:3c:34:83:29:78:58:6f:ad:37: c3:5c:b0:aa:78:05:fa:4b:57:38:16:64:04:18:31: 4c:ac:87:2d:50:40:92:2e:c0:96:f5:37:0c:82:29: f8:0f:8b:1c:9d:0c:4f:ad:ee:be:42:75:0f:6c:97: 1e:2b:eb:31:9f:d1:bc:07:6c:61:59:2d:40:9d:d0: b7:89:27:a3:37:18:be:27:b1:f6:3e:8e:7e:33:58: 93:43:db:f8:64:b4:1d:39:ec:28:e1:d3:36:b7:f9: ec:df:d0:20:df:d8:c1:14:36:18:a5:59:29:ae:3a: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3B:3B:EA:E7:6D:8A:37:E0:AB:FD:CF:F7:1B:5A:79:4E:54:79:C9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d25e07b-3efe-406e-ba97-8ead992fb464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.33.240.0/20 Signature Algorithm: sha256WithRSAEncryption 83:7e:7a:0b:9e:7f:16:58:6a:41:4e:7c:80:77:85:25:9f:53: ee:71:c1:c1:f6:d7:9f:d1:6c:e5:33:71:98:e8:f4:6e:c6:3e: da:b3:1b:73:09:0d:23:f8:62:9a:a6:7a:b6:46:c5:01:2e:26: 83:50:db:db:c5:d7:68:25:2b:1f:d7:a1:f1:26:19:18:fa:7c: cd:1c:ce:1f:84:b7:b8:c1:7e:90:2f:4b:81:b8:07:b9:8b:35: 42:2b:7b:0e:eb:9c:91:26:87:3e:92:de:aa:65:c9:e9:70:5c: fc:2e:7b:c3:4d:e0:06:2e:7b:4f:4b:f6:e4:62:4c:45:02:5e: 73:c2:3a:71:23:69:65:c2:23:18:c9:ae:bd:10:18:2b:0c:21: 8e:82:76:84:3a:f3:e5:d9:4d:35:d3:52:9d:b0:12:b7:f6:3d: 3c:92:34:1b:2b:d4:04:8f:7b:88:1a:22:5d:ef:ec:78:1e:d3: 40:bd:53:34:ff:81:96:7d:95:d4:bb:63:76:e7:02:7f:c7:7d: ac:dd:b7:40:f5:ca:01:75:86:43:8d:f0:90:38:4f:76:91:b3: e7:de:72:22:a7:2f:13:56:50:b1:ab:37:b8:72:26:5e:f4:d9: e4:eb:23:31:43:fa:95:13:16:0d:9a:11:43:ed:8f:a0:dc:b7: ad:3c:1f:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFdjtyv7BOwa3xB2s4wX0KLHeNdQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDExMTQyMDEyWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjQwNDMyYTNiMGY2ZDFiNTI5MzNkMjk4ZjMyODhmNWU3 ZTc2NGVlNjgwZjU0OGJmM2VmNGY1MmJkNTY4N2UxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQm+4/Fd5FdOhr7vSpP+sNM7ZthVMriNGtx0REspQiKLA9 fhm7yw8t+zHlrvTtNqVVBD6u6D3/x6ZMqjiDWJ+5SSqmSLJXBKclKPqtjclg6wP8 pe95faiAaHSmARrOHHUraYblPgk7Fl4X72Y4W+JsNoxkrWrxzX1xJYSKbCkKiJiP aymL62WVfBtZczw0gyl4WG+tN8NcsKp4BfpLVzgWZAQYMUyshy1QQJIuwJb1NwyC KfgPixydDE+t7r5CdQ9slx4r6zGf0bwHbGFZLUCd0LeJJ6M3GL4nsfY+jn4zWJND 2/hktB057Cjh0za3+ezf0CDf2MEUNhilWSmuOrclAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUADs76udtijfgq/3P9xtaeU5UeckwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhkMjVlMDdiLTNlZmUtNDA2ZS1iYTk3LThlYWQ5OTJmYjQ2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDIfAwDQYJKoZIhvcNAQELBQADggEBAIN+eguefxZYakFOfIB3hSWfU+5x wcH215/RbOUzcZjo9G7GPtqzG3MJDSP4YpqmerZGxQEuJoNQ29vF12glKx/XofEm GRj6fM0czh+Et7jBfpAvS4G4B7mLNUIrew7rnJEmhz6S3qplyelwXPwue8NN4AYu e09L9uRiTEUCXnPCOnEjaWXCIxjJrr0QGCsMIY6CdoQ68+XZTTXTUp2wErf2PTyS NBsr1ASPe4gaIl3v7Hge00C9UzT/gZZ9ldS7Y3bnAn/Hfazdt0D1ygF1hkON8JA4 T3aRs+feciKnLxNWULGrN7hyJl702eTrIzFD+pUTFg2aEUPtj6Dct608H54= -----END CERTIFICATE-----Generated at Sat Nov 7 22:58:43 2026 by rpki-client