$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cdd98de-08d3-411b-b5b8-da9e19940619.roa File: 3cdd98de-08d3-411b-b5b8-da9e19940619.roa (raw, json) Hash identifier: dGpTZRSmpkFSyE+mVDevkcRoVCBuBzpmu5Xnb2w9SKQ= Subject key identifier: 6E:29:06:80:D2:CC:04:6F:6E:C4:D3:27:9C:B9:8C:5A:1B:6F:C3:D9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4CFBEE353F9D28072FFF348E9D70DA5C389D9EBB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cdd98de-08d3-411b-b5b8-da9e19940619.roa Signing time: Tue 23 Sep 2025 00:27:38 +0000 ROA not before: Tue 23 Sep 2025 00:27:38 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fb:ee:35:3f:9d:28:07:2f:ff:34:8e:9d:70:da:5c:38:9d:9e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:27:38 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=6fdde46093c9b14f3b35a5cfdcb6f48c9407c7233d82b7f696802af88a0c9161, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:86:52:6f:b7:b9:5f:d1:97:18:8e:e0:c8: df:db:d9:75:9d:b0:db:8c:aa:f8:2e:9f:e6:ce:1c: 1a:ec:91:49:74:9f:4d:d9:c1:03:5c:ef:d2:7d:da: 8b:41:ad:0d:24:bb:d3:5b:8b:e7:a6:2a:e1:c6:df: 34:c2:af:55:4c:a4:e2:0d:13:17:06:b9:09:af:ff: 6d:28:6b:55:14:ac:05:18:15:b9:17:d2:93:37:b3: 0b:11:7e:46:a9:f1:df:40:5d:95:b5:77:04:64:b2: e8:5d:7b:c6:f2:b8:58:b7:fb:d3:82:43:bb:cb:20: 52:49:45:ed:9d:07:9f:51:16:6a:d7:96:2d:e0:59: 16:48:9e:b1:4b:6b:3f:02:12:c2:a7:f9:35:af:0f: 00:2c:07:b9:5f:82:b5:03:35:dd:0b:9a:4a:2c:3c: 3f:1e:ed:6a:0a:72:2f:eb:80:e1:14:f7:fd:2f:b4: 29:d8:6b:b8:79:7b:a9:a0:db:aa:a3:6e:d5:87:9e: 62:e0:a5:d8:84:a1:fd:3c:63:75:28:ff:49:65:e7: 06:ed:5f:15:ee:88:ae:11:f4:cb:6a:37:34:f3:cb: 00:a5:60:0b:de:80:11:80:d5:25:1a:06:8e:01:42: 0b:8a:ec:05:18:3d:0a:6e:91:93:7f:92:fe:1a:d8: 0a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:29:06:80:D2:CC:04:6F:6E:C4:D3:27:9C:B9:8C:5A:1B:6F:C3:D9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cdd98de-08d3-411b-b5b8-da9e19940619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.4.0/23 Signature Algorithm: sha256WithRSAEncryption 96:c0:b2:b6:70:e4:87:a2:07:32:c8:03:a0:7f:cd:06:00:19: 49:7c:61:68:4c:16:d7:eb:7b:e9:bd:52:46:c2:ad:3a:67:db: 5b:9e:8c:fa:16:43:38:a4:d7:52:10:7c:b8:3c:71:17:56:e0: e8:db:1e:2a:cf:d6:dc:87:90:66:ab:62:1d:be:c6:41:64:37: b9:f3:88:08:6a:2c:85:b3:1b:73:2c:de:7d:15:24:ea:8c:e2: 5f:0a:54:ff:88:82:8b:6c:7e:04:43:87:f2:c3:51:69:35:a9: 79:a4:5e:3a:41:45:a7:32:86:e3:66:01:0a:14:18:57:b6:e0: a3:dd:1f:d8:af:43:e8:4c:10:b7:7d:9e:62:e5:31:13:17:29: bd:c6:1b:fd:b5:04:b9:45:cc:a9:5a:be:d7:a4:cb:04:b3:a9: 47:ac:78:bf:b1:ea:1d:b7:cd:56:e7:55:61:4c:54:78:a1:3b: 2b:df:72:21:0b:50:37:90:52:6d:30:80:68:e0:8d:2b:20:91: d5:9c:d3:77:df:9c:df:27:72:1e:ba:89:c2:94:ad:dc:05:63: 8e:e7:23:cf:a7:f6:fb:12:25:8b:46:ae:74:40:23:0e:cc:25: 0d:6a:01:0f:b7:d5:0c:57:1d:54:27:ac:69:9c:f8:0c:89:dd: a3:35:5d:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTPvuNT+dKAcv/zSOnXDaXDidnrswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAyNzM4WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmRkZTQ2MDkzYzliMTRmM2IzNWE1Y2ZkY2I2ZjQ4Yzk0 MDdjNzIzM2Q4MmI3ZjY5NjgwMmFmODhhMGM5MTYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvZ4ZSb7e5X9GXGI7gyN/b2XWdsNuMqvgun+bOHBrskUl0 n03ZwQNc79J92otBrQ0ku9Nbi+emKuHG3zTCr1VMpOINExcGuQmv/20oa1UUrAUY FbkX0pM3swsRfkap8d9AXZW1dwRksuhde8byuFi3+9OCQ7vLIFJJRe2dB59RFmrX li3gWRZInrFLaz8CEsKn+TWvDwAsB7lfgrUDNd0LmkosPD8e7WoKci/rgOEU9/0v tCnYa7h5e6mg26qjbtWHnmLgpdiEof08Y3Uo/0ll5wbtXxXuiK4R9MtqNzTzywCl YAvegBGA1SUaBo4BQguK7AUYPQpukZN/kv4a2Ap/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbikGgNLMBG9uxNMnnLmMWhtvw9kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNjZGQ5OGRlLTA4ZDMtNDExYi1iNWI4LWRhOWUxOTk0MDYxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VQQwDQYJKoZIhvcNAQELBQADggEBAJbAsrZw5IeiBzLIA6B/zQYAGUl8 YWhMFtfre+m9UkbCrTpn21uejPoWQzik11IQfLg8cRdW4OjbHirP1tyHkGarYh2+ xkFkN7nziAhqLIWzG3Ms3n0VJOqM4l8KVP+IgotsfgRDh/LDUWk1qXmkXjpBRacy huNmAQoUGFe24KPdH9ivQ+hMELd9nmLlMRMXKb3GG/21BLlFzKlavtekywSzqUes eL+x6h23zVbnVWFMVHihOyvfciELUDeQUm0wgGjgjSsgkdWc03ffnN8nch66icKU rdwFY47nI8+n9vsSJYtGrnRAIw7MJQ1qAQ+31QxXHVQnrGmc+AyJ3aM1XYU= -----END CERTIFICATE-----Generated at Sat Oct 18 05:12:23 2025 by rpki-client