$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f1b3567-03ef-41ff-8743-807a621e0d27.roa File: 8f1b3567-03ef-41ff-8743-807a621e0d27.roa (raw, json) Hash identifier: WP6mBYLjP9TWsb8Xn/iZHEaVrveqeceFTk30x1JINIM= Subject key identifier: 00:EC:2C:ED:B2:60:40:17:5C:32:EE:C1:93:0C:4B:54:35:E3:04:D5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3FBD71E97D66489C7E2E3FF17520AF14F2C27CA5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f1b3567-03ef-41ff-8743-807a621e0d27.roa Signing time: Fri 31 Oct 2025 20:06:56 +0000 ROA not before: Fri 31 Oct 2025 20:06:56 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.2.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:bd:71:e9:7d:66:48:9c:7e:2e:3f:f1:75:20:af:14:f2:c2:7c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 20:06:56 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=a0b89baaede21ce90dc4b2da289660f70077f7f44b2df1fea0511eb5a54e921d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:56:b4:04:ea:dc:3a:7f:fd:09:87:40:3b:71: 41:b5:55:fc:7b:fc:27:0b:c0:e5:77:3c:08:be:0b: d4:ef:14:4b:63:ae:4d:42:c7:05:99:f5:90:1d:1b: 43:7b:12:f4:fb:87:6d:82:e0:16:ea:82:7b:1c:89: a0:1e:4a:ba:41:12:18:bf:7c:77:2c:0c:a3:40:74: 7d:f9:b5:8e:9f:8f:06:43:53:01:41:94:44:3f:ce: f5:16:88:2c:ba:b9:90:a5:a0:8e:c2:f3:ad:57:26: 32:30:6a:51:53:f1:f5:f6:06:80:44:56:fe:21:3b: f9:16:c4:f2:53:a6:fa:ec:ae:a6:7d:7a:18:5f:40: fa:ab:8a:2c:eb:19:66:df:be:ef:5e:34:56:59:9a: c1:f7:c1:83:70:9a:14:4f:f5:ab:10:6b:fe:61:c3: 21:c9:2f:85:58:a9:51:36:24:af:95:1f:30:95:2d: 1c:2c:0b:21:97:e7:c2:4f:1f:c0:31:41:7b:5c:ad: 0a:75:64:1c:1d:f2:0e:19:52:a4:41:ca:86:38:13: 8c:f8:db:05:34:c5:22:28:b5:4b:19:ad:ea:17:36: d9:68:74:05:90:c1:e6:70:af:04:3c:7d:97:30:82: 6c:77:97:94:83:26:fb:c6:e2:70:4e:de:af:bb:a6: f2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EC:2C:ED:B2:60:40:17:5C:32:EE:C1:93:0C:4B:54:35:E3:04:D5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f1b3567-03ef-41ff-8743-807a621e0d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.10.0/24 Signature Algorithm: sha256WithRSAEncryption 94:37:e7:0c:49:69:3d:56:88:0e:41:0b:7c:1b:34:48:ef:8a: 53:a5:c7:29:d7:6d:59:ee:0a:8f:d4:f0:d8:27:8e:68:29:06: aa:77:bc:0a:f1:ab:0a:ff:67:1d:b0:29:df:24:bd:0c:2c:1a: 25:84:b4:84:4c:43:75:e4:b7:34:98:ac:55:4e:5f:3e:02:81: 73:81:0b:b3:e2:94:d8:15:e1:3f:b6:30:6f:bc:60:4d:d8:fe: 43:72:82:48:a9:d6:fe:86:86:5a:51:4e:93:85:78:0a:e0:65: cf:0f:33:66:b0:2c:75:83:dc:5b:c8:44:49:57:d2:4d:7f:09: 2a:1e:e1:14:9b:5c:83:2d:2b:3e:00:58:88:29:26:c4:de:57: 9e:00:4a:0f:ce:cc:7d:7d:3e:08:c2:df:c4:6e:82:51:c9:d2: a7:e3:9f:87:62:44:22:df:f5:4c:71:00:95:65:f8:f9:b5:de: 9e:42:fc:5d:b4:f8:8e:5f:ca:58:7a:d7:f0:48:83:3f:b1:e0: 35:e8:89:05:9c:db:4c:08:38:5f:d8:90:59:18:3e:9a:e0:d9: de:66:6a:92:a7:c8:ce:d9:4e:16:2b:1b:15:4c:c0:c3:ab:d5: 4a:04:0c:23:8f:89:fb:7a:5a:ed:12:a5:c1:83:df:53:87:a0: 7e:10:a4:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP71x6X1mSJx+Lj/xdSCvFPLCfKUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMjAwNjU2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGI4OWJhYWVkZTIxY2U5MGRjNGIyZGEyODk2NjBmNzAw NzdmN2Y0NGIyZGYxZmVhMDUxMWViNWE1NGU5MjFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKVrQE6tw6f/0Jh0A7cUG1Vfx7/CcLwOV3PAi+C9TvFEtj rk1CxwWZ9ZAdG0N7EvT7h22C4BbqgnsciaAeSrpBEhi/fHcsDKNAdH35tY6fjwZD UwFBlEQ/zvUWiCy6uZCloI7C861XJjIwalFT8fX2BoBEVv4hO/kWxPJTpvrsrqZ9 ehhfQPqriizrGWbfvu9eNFZZmsH3wYNwmhRP9asQa/5hwyHJL4VYqVE2JK+VHzCV LRwsCyGX58JPH8AxQXtcrQp1ZBwd8g4ZUqRByoY4E4z42wU0xSIotUsZreoXNtlo dAWQweZwrwQ8fZcwgmx3l5SDJvvG4nBO3q+7pvKdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAOws7bJgQBdcMu7BkwxLVDXjBNUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhmMWIzNTY3LTAzZWYtNDFmZi04NzQzLTgwN2E2MjFlMGQyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAgowDQYJKoZIhvcNAQELBQADggEBAJQ35wxJaT1WiA5BC3wbNEjvilOl xynXbVnuCo/U8NgnjmgpBqp3vArxqwr/Zx2wKd8kvQwsGiWEtIRMQ3XktzSYrFVO Xz4CgXOBC7PilNgV4T+2MG+8YE3Y/kNygkip1v6GhlpRTpOFeArgZc8PM2awLHWD 3FvIRElX0k1/CSoe4RSbXIMtKz4AWIgpJsTeV54ASg/OzH19PgjC38RuglHJ0qfj n4diRCLf9UxxAJVl+Pm13p5C/F20+I5fylh61/BIgz+x4DXoiQWc20wIOF/YkFkY Pprg2d5mapKnyM7ZThYrGxVMwMOr1UoEDCOPift6Wu0SpcGD31OHoH4QpOk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:53:15 2025 by rpki-client