$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd1eda66-9736-4ac4-8758-7be58e5ffcf9.roa File: dd1eda66-9736-4ac4-8758-7be58e5ffcf9.roa (raw, json) Hash identifier: 3OvqOcYoqZeJAkCbQTMw4LrwqmsI1k9613S47XzKOJA= Subject key identifier: CB:E1:33:19:75:35:9D:69:D8:EA:E4:77:2D:4B:C6:2B:7A:DF:03:DC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 07A4FB43B6C329872FE1382EC45B7678C99924 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd1eda66-9736-4ac4-8758-7be58e5ffcf9.roa Signing time: Tue 21 Oct 2025 05:52:40 +0000 ROA not before: Tue 21 Oct 2025 05:52:40 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a4:fb:43:b6:c3:29:87:2f:e1:38:2e:c4:5b:76:78:c9:99:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 05:52:40 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=1ee4dfca9d0fe58aa525e91b41aebb6996ab207f3c97eeca1d7a6507ddbae325, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:49:22:a5:13:3f:c7:58:9f:26:41:df:10:ff: 0e:7a:7b:fb:8f:c0:97:26:70:6e:96:32:64:1c:d1: f8:8b:d1:e8:c6:04:c2:7f:5a:64:80:83:c4:fd:6e: 09:b8:e5:bb:bc:1a:53:44:f8:4d:ec:73:46:c2:b2: 69:75:2a:02:1f:31:ce:87:c9:f3:dd:e5:ff:6d:b5: 80:dd:cc:0d:0c:a8:ee:08:e5:d5:3f:0e:45:2e:0f: e6:e1:c2:c6:67:2f:ea:cc:61:57:c3:86:e3:06:d9: df:23:20:5d:ef:e1:1f:87:40:80:b0:a6:c7:af:12: 67:d9:ac:1d:74:78:34:5a:05:73:9b:06:bc:e4:82: a7:bf:1a:3a:c5:9e:03:ca:a5:4d:e0:2f:b3:13:27: 4a:58:9c:6c:a9:aa:58:93:60:56:3e:a2:3a:de:48: 67:79:d5:68:11:29:e3:8f:53:54:04:c5:33:6a:7f: ec:c7:9b:3a:13:a4:32:fb:58:d0:3b:fc:be:81:3e: c4:90:bd:e5:62:e7:ff:f5:4a:2f:c1:dd:13:b3:41: 5f:7c:ac:1d:1f:08:0d:77:20:da:eb:4e:1f:f0:54: e5:4b:90:7a:f3:ce:46:87:15:e9:c2:b8:b2:1a:ec: a4:05:8c:e0:26:2f:e1:af:43:96:7a:88:0f:40:ed: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E1:33:19:75:35:9D:69:D8:EA:E4:77:2D:4B:C6:2B:7A:DF:03:DC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd1eda66-9736-4ac4-8758-7be58e5ffcf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.144.0/22 Signature Algorithm: sha256WithRSAEncryption 93:2b:b4:4b:af:3e:a9:a4:4c:64:44:aa:6b:ba:53:68:3e:46: f3:d5:eb:75:6d:f7:3a:85:d5:55:3a:c6:3a:f1:e1:60:9b:b3: 17:ed:d1:5b:72:a5:3d:48:a8:4c:8b:34:df:cf:2c:ef:85:8e: 1c:1f:7d:f5:1e:21:1e:e5:26:47:7a:32:cf:1d:fd:89:ae:06: bf:0b:3a:53:36:9c:0a:af:c5:93:94:41:04:fb:6b:f8:0f:0e: 66:3d:55:62:f7:d7:01:80:f4:a4:42:c9:93:f3:bf:18:e7:6f: 97:8f:f2:e5:a3:c0:8e:a8:10:3a:cc:3a:72:68:34:0e:d9:15: 00:8d:05:73:b9:9b:c9:3e:4f:b3:b1:3c:96:14:bc:bd:13:31: 53:1f:12:87:c5:90:9f:84:de:85:11:f4:a8:4e:26:84:57:c2: 55:cb:f9:41:37:a4:1f:41:6c:6e:22:a4:99:a3:f1:a5:b6:e1: 4d:50:40:12:80:df:fa:6c:c3:eb:f7:95:7b:d5:a3:f8:e1:72: 7f:d8:fd:48:99:cb:58:9e:83:3b:22:5c:2f:67:59:5d:de:eb: ce:bf:f3:c3:e0:c9:13:9e:98:b5:5d:8c:db:fe:77:07:cb:80: f2:d7:31:80:35:d7:a9:81:b5:ff:37:09:07:de:85:ad:78:db: 39:19:97:10 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITB6T7Q7bDKYcv4TguxFt2eMmZJDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEwMjEwNTUyNDBaFw0yNTExMjUyMzU5NTla MHoxSTBHBgNVBAUTQDFlZTRkZmNhOWQwZmU1OGFhNTI1ZTkxYjQxYWViYjY5OTZh YjIwN2YzYzk3ZWVjYTFkN2E2NTA3ZGRiYWUzMjUxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAORJIqUTP8dYnyZB3xD/Dnp7+4/AlyZwbpYyZBzR+IvR6MYE wn9aZICDxP1uCbjlu7waU0T4TexzRsKyaXUqAh8xzofJ893l/221gN3MDQyo7gjl 1T8ORS4P5uHCxmcv6sxhV8OG4wbZ3yMgXe/hH4dAgLCmx68SZ9msHXR4NFoFc5sG vOSCp78aOsWeA8qlTeAvsxMnSlicbKmqWJNgVj6iOt5IZ3nVaBEp449TVATFM2p/ 7MebOhOkMvtY0Dv8voE+xJC95WLn//VKL8HdE7NBX3ysHR8IDXcg2utOH/BU5UuQ evPORocV6cK4shrspAWM4CYv4a9DlnqID0Dt1XMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTL4TMZdTWdadjq5HctS8Yret8D3DAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvZGQxZWRhNjYtOTczNi00YWM0LTg3NTgtN2JlNThlNWZmY2Y5LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAgOtkDANBgkqhkiG9w0BAQsFAAOCAQEAkyu0S68+qaRMZESqa7pTaD5G89Xr dW33OoXVVTrGOvHhYJuzF+3RW3KlPUioTIs0388s74WOHB999R4hHuUmR3oyzx39 ia4Gvws6UzacCq/Fk5RBBPtr+A8OZj1VYvfXAYD0pELJk/O/GOdvl4/y5aPAjqgQ Osw6cmg0DtkVAI0Fc7mbyT5Ps7E8lhS8vRMxUx8Sh8WQn4TehRH0qE4mhFfCVcv5 QTekH0FsbiKkmaPxpbbhTVBAEoDf+mzD6/eVe9Wj+OFyf9j9SJnLWJ6DOyJcL2dZ Xd7rzr/zw+DJE56YtV2M2/53B8uA8tcxgDXXqYG1/zcJB96FrXjbORmXEA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:05:57 2025 by rpki-client