$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa File: 040e375f-0cc8-46f8-8435-facc3d4d127e.roa (raw, json) Hash identifier: IZSGGbyMZxI0db3UsCtCwbNTSE5JIDlTHE05hF/oOwI= Subject key identifier: DC:5F:E5:56:17:90:F2:C1:76:46:18:23:DB:9A:BE:2E:BD:75:40:9B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5D30DBDDA5C8D8851DFC5B4E3B7A957D53B1CDBD Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa Signing time: Sun 19 Oct 2025 04:00:25 +0000 ROA not before: Sun 19 Oct 2025 04:00:25 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:30:db:dd:a5:c8:d8:85:1d:fc:5b:4e:3b:7a:95:7d:53:b1:cd:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 04:00:25 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=2a82ee81179f3d348ab143f2a033862f3c88a8a2e09c4e670d7d942cc1821fc8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b2:4c:36:34:5c:e2:92:21:10:da:37:d0:1d: d4:d6:1b:16:24:a9:92:b9:30:1b:d1:72:a9:ca:d0: ea:cd:32:06:95:7c:11:b0:a7:f4:29:4b:e8:ca:01: 58:15:95:ab:36:dd:83:06:d0:41:2f:0e:f4:ba:88: 9b:23:0b:92:95:82:70:79:86:a8:45:36:a5:a2:4b: a4:84:7d:08:e5:b0:9e:1d:0f:45:10:fd:5a:44:fd: a4:52:f0:3e:d4:82:9e:9d:6f:b6:0c:6b:a3:0d:86: 0f:bb:32:2d:a1:4e:bf:87:3a:95:1e:5a:8f:f2:e3: 19:90:fc:96:48:04:ed:40:02:f9:fd:59:e4:e1:96: 80:e8:64:41:67:9e:a2:1b:06:01:a6:ae:ef:0e:6e: b7:1e:79:93:74:1f:69:da:3b:f2:9a:23:40:b1:c7: be:11:c2:ea:d6:cb:33:e8:5b:c0:ac:13:d6:3f:19: f4:91:2b:e2:92:59:b2:5a:1a:ce:88:52:3f:9a:d6: 9a:d4:a0:01:41:b8:37:3d:c0:6c:1a:03:6f:7f:32: eb:b2:19:1d:91:2b:f4:c9:12:ca:18:ca:52:de:3e: b2:67:34:d4:63:8e:25:63:c6:d4:67:d7:62:74:f8: 81:eb:24:7f:88:a0:77:a4:e9:aa:23:77:30:c4:7d: c0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5F:E5:56:17:90:F2:C1:76:46:18:23:DB:9A:BE:2E:BD:75:40:9B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.45.0/24 Signature Algorithm: sha256WithRSAEncryption 41:08:9d:c6:8a:20:b6:bc:d1:99:94:c7:f5:3a:f1:48:b1:21: e0:2f:a4:7f:36:2e:e7:3d:97:7f:0f:a6:62:c0:41:9d:18:6b: b8:bb:c6:e4:23:a2:cd:cf:4b:77:7d:50:5c:b3:76:5c:a3:43: d3:23:52:5c:5a:dd:8d:d4:7c:e3:01:68:56:ed:1a:75:4e:e9: 97:bc:c9:4b:6c:c8:54:37:90:f2:2e:bc:cc:75:1a:14:54:90: 85:a1:e0:5b:98:70:f6:14:e0:9a:d1:b5:1a:75:d6:d4:be:ef: 9d:4b:f5:ac:2e:df:28:85:53:9c:e4:94:6d:f9:17:f7:35:26: 00:ca:81:36:e7:a1:e9:04:ba:61:ea:e9:b8:06:2f:ee:3e:b0: 7d:dd:e7:eb:20:75:2d:4e:84:b1:67:7a:d9:2c:03:0f:bf:e4: 11:79:cd:db:f9:28:bf:53:74:be:7a:48:6d:a9:91:85:45:5e: 41:00:c4:40:5f:44:66:5f:0b:94:49:39:41:21:1e:02:d7:be: a4:51:4a:f7:d9:3f:8d:50:cd:63:af:0f:52:0a:33:ac:3a:83: 1c:f8:10:1d:f9:4a:0d:26:45:85:09:31:a9:b6:14:22:76:66: 37:76:63:d3:1b:c3:5f:ec:2a:9b:40:cc:a0:91:f4:49:e8:ae: 8a:c1:26:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXTDb3aXI2IUd/FtOO3qVfVOxzb0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDE5MDQwMDI1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTgyZWU4MTE3OWYzZDM0OGFiMTQzZjJhMDMzODYyZjNj ODhhOGEyZTA5YzRlNjcwZDdkOTQyY2MxODIxZmM4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtskw2NFzikiEQ2jfQHdTWGxYkqZK5MBvRcqnK0OrNMgaV fBGwp/QpS+jKAVgVlas23YMG0EEvDvS6iJsjC5KVgnB5hqhFNqWiS6SEfQjlsJ4d D0UQ/VpE/aRS8D7Ugp6db7YMa6MNhg+7Mi2hTr+HOpUeWo/y4xmQ/JZIBO1AAvn9 WeThloDoZEFnnqIbBgGmru8ObrceeZN0H2naO/KaI0Cxx74RwurWyzPoW8CsE9Y/ GfSRK+KSWbJaGs6IUj+a1prUoAFBuDc9wGwaA29/MuuyGR2RK/TJEsoYylLePrJn NNRjjiVjxtRn12J0+IHrJH+IoHek6aojdzDEfcC/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3F/lVheQ8sF2Rhgj25q+Lr11QJswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA0MGUzNzVmLTBjYzgtNDZmOC04NDM1LWZhY2MzZDRkMTI3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC0wDQYJKoZIhvcNAQELBQADggEBAEEIncaKILa80ZmUx/U68UixIeAv pH82Luc9l38PpmLAQZ0Ya7i7xuQjos3PS3d9UFyzdlyjQ9MjUlxa3Y3UfOMBaFbt GnVO6Ze8yUtsyFQ3kPIuvMx1GhRUkIWh4FuYcPYU4JrRtRp11tS+751L9awu3yiF U5zklG35F/c1JgDKgTbnoekEumHq6bgGL+4+sH3d5+sgdS1OhLFnetksAw+/5BF5 zdv5KL9TdL56SG2pkYVFXkEAxEBfRGZfC5RJOUEhHgLXvqRRSvfZP41QzWOvD1IK M6w6gxz4EB35Sg0mRYUJMam2FCJ2Zjd2Y9Mbw1/sKptAzKCR9EnororBJlA= -----END CERTIFICATE-----Generated at Mon Oct 20 21:41:36 2025 by rpki-client