$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa File: dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa (raw, json) Hash identifier: DbXn/0C97IZxAF+7AJew32el5ki6gzCecqBiC97jRw0= Subject key identifier: 20:E1:77:8F:61:B1:B7:14:36:94:A1:94:A3:87:7F:C6:FF:1E:DF:7D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3F643DB46D6A4BFE17146935B1B911F2F1763793 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa Signing time: Tue 21 Oct 2025 12:20:01 +0000 ROA not before: Tue 21 Oct 2025 12:20:01 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:64:3d:b4:6d:6a:4b:fe:17:14:69:35:b1:b9:11:f2:f1:76:37:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 21 12:20:01 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=63d2ab3309c2aef1fc22c0060ce98b5d85ce46dd115e1917f4c128e3a0523beb, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:dd:e2:f8:ae:2b:82:c3:e7:72:6f:b9:b7:f1: 18:cf:e3:f0:03:dc:c2:6d:50:91:2b:a5:08:c1:3a: f4:01:79:20:81:14:88:44:ab:35:ad:cb:6c:fe:d3: 1b:ce:4d:b7:88:35:bc:e6:82:7a:1a:64:5e:4a:51: 3e:b5:7f:e6:b9:e8:cf:d9:e6:53:e1:21:7d:74:44: b1:46:0f:7a:39:8b:8d:1a:e7:6b:0d:44:fc:d1:a8: 88:d0:a2:fb:53:4e:7b:cd:b2:61:fb:f3:a0:b7:37: bd:c5:a2:40:ea:b8:a9:64:1a:c6:16:69:45:76:5b: aa:d0:e0:14:c7:66:fa:10:24:8a:b2:00:fa:89:3a: 1c:d3:b1:a1:35:d8:10:88:44:d5:07:25:a8:cd:d8: 62:e8:e2:e5:93:0e:6f:01:82:30:47:dc:6b:96:0a: 82:e7:b8:4a:5f:c1:0c:72:fb:95:04:7a:8d:ec:fa: 34:82:8c:a9:1e:a7:82:da:69:5d:3c:82:27:06:d2: 7c:71:fb:71:ff:3c:3e:2a:d4:15:98:f4:bb:a9:cf: 2b:a4:c0:c2:64:03:ea:44:8f:83:14:74:3a:41:a4: 0e:8f:87:1d:4f:63:84:54:6a:7b:4e:1e:4f:d3:96: a2:85:8a:27:92:7b:b6:2d:94:1b:28:10:c7:48:c6: aa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E1:77:8F:61:B1:B7:14:36:94:A1:94:A3:87:7F:C6:FF:1E:DF:7D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.14.0/24 Signature Algorithm: sha256WithRSAEncryption 94:74:06:92:29:70:b0:89:c2:7a:e3:dd:7d:fa:42:1a:85:fa: 98:42:95:7f:30:6b:24:ca:72:7e:35:c1:a1:2f:be:3c:d9:f0: 89:49:ef:ae:3e:32:3d:f9:4b:0a:67:b9:ef:6f:7e:0f:93:c3: 4a:88:39:6b:69:a0:d5:04:38:b5:29:ab:38:6b:03:87:f4:04: 5f:1a:42:51:0e:32:aa:e2:c2:ba:20:29:25:20:de:0f:38:1f: 4d:10:d2:96:a8:7b:ff:98:36:22:0b:5f:03:d7:a7:92:f8:a4: 10:99:76:5a:b2:a7:a1:bd:23:8a:53:15:83:d7:29:60:d7:e1: c7:1c:c3:b8:a3:45:ac:86:7f:f1:8b:35:31:e6:be:06:79:9c: 05:ea:b5:e1:b8:ef:07:04:18:75:05:a9:1e:8c:dd:3d:10:ca: 39:fb:4e:94:d0:0d:84:aa:70:32:44:d0:39:8a:d2:60:bb:11: e4:e5:15:9c:8e:fb:3b:cb:4c:ef:8a:78:97:8d:02:ce:48:85: 58:f4:07:c3:79:be:70:ba:19:20:9c:62:02:b6:81:fb:cc:86: 61:69:9b:d5:df:ff:0e:b3:1b:f5:7d:17:44:6e:ce:a0:af:8b: b1:98:20:19:d8:29:0b:38:70:97:1f:c0:02:2a:fc:70:89:d5: 4a:f3:47:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP2Q9tG1qS/4XFGk1sbkR8vF2N5MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDIxMTIyMDAxWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2M2QyYWIzMzA5YzJhZWYxZmMyMmMwMDYwY2U5OGI1ZDg1 Y2U0NmRkMTE1ZTE5MTdmNGMxMjhlM2EwNTIzYmViMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDz3eL4riuCw+dyb7m38RjP4/AD3MJtUJErpQjBOvQBeSCB FIhEqzWty2z+0xvOTbeINbzmgnoaZF5KUT61f+a56M/Z5lPhIX10RLFGD3o5i40a 52sNRPzRqIjQovtTTnvNsmH786C3N73FokDquKlkGsYWaUV2W6rQ4BTHZvoQJIqy APqJOhzTsaE12BCIRNUHJajN2GLo4uWTDm8BgjBH3GuWCoLnuEpfwQxy+5UEeo3s +jSCjKkep4LaaV08gicG0nxx+3H/PD4q1BWY9LupzyukwMJkA+pEj4MUdDpBpA6P hx1PY4RUantOHk/TlqKFiieSe7YtlBsoEMdIxqqzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIOF3j2GxtxQ2lKGUo4d/xv8e330wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RkNzJiMWIzLWJmYzktNDViZi04N2RjLWIwZTkwOTM3ZjE5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYA4wDQYJKoZIhvcNAQELBQADggEBAJR0BpIpcLCJwnrj3X36QhqF+phC lX8wayTKcn41waEvvjzZ8IlJ764+Mj35Swpnue9vfg+Tw0qIOWtpoNUEOLUpqzhr A4f0BF8aQlEOMqriwrogKSUg3g84H00Q0paoe/+YNiILXwPXp5L4pBCZdlqyp6G9 I4pTFYPXKWDX4cccw7ijRayGf/GLNTHmvgZ5nAXqteG47wcEGHUFqR6M3T0Qyjn7 TpTQDYSqcDJE0DmK0mC7EeTlFZyO+zvLTO+KeJeNAs5IhVj0B8N5vnC6GSCcYgK2 gfvMhmFpm9Xf/w6zG/V9F0RuzqCvi7GYIBnYKQs4cJcfwAIq/HCJ1UrzR9w= -----END CERTIFICATE-----Generated at Fri Oct 31 20:56:08 2025 by rpki-client