$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/04680ebe-26a9-4026-b39a-4013f87a31f2.roa File: 04680ebe-26a9-4026-b39a-4013f87a31f2.roa (raw, json) Hash identifier: Ur1i+GXXVwOdjB8tkwD4ZW/60yuar9QRrLgZfrvYz7s= Subject key identifier: 32:21:35:27:10:6E:52:07:C0:EA:ED:B3:A6:89:C6:E1:DB:A5:85:5B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6F2AB7AE8975B5C3C6ADB60400CA5189C8622F7E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/04680ebe-26a9-4026-b39a-4013f87a31f2.roa Signing time: Sun 19 Oct 2025 04:00:25 +0000 ROA not before: Sun 19 Oct 2025 04:00:25 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 7224 IP address blocks: 35.97.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2a:b7:ae:89:75:b5:c3:c6:ad:b6:04:00:ca:51:89:c8:62:2f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 04:00:25 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=c48c328a897ad02ee71279460d41c77b22dc7f9e3461852fbf43d6ed987265c4, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:81:cc:d9:2b:e8:65:7f:f3:1f:18:d9:d0:a5: ae:aa:88:a7:5c:0f:c2:cf:80:bb:22:28:30:ec:0e: c6:13:e0:18:1a:71:6d:4c:e3:4a:60:c1:98:48:c0: 81:ce:14:1e:b2:12:fc:4b:a5:1c:08:b4:87:26:ca: 89:cd:ab:eb:17:cc:f1:23:56:ff:2e:ee:c2:4a:f6: 51:7f:31:6d:37:2c:c0:d0:39:8a:1e:cd:17:b0:c3: 17:51:ba:27:29:bb:73:19:3e:c5:7e:92:41:13:1c: 0c:f9:7b:a0:3d:08:26:a8:fd:ad:81:77:6d:73:49: 93:23:ea:c5:47:66:b3:87:4a:d5:d0:0a:63:a2:a8: e2:22:61:16:1c:46:b6:e9:08:5e:2b:d2:97:95:a5: 5b:e5:0d:6c:4d:49:96:f3:dc:2e:85:87:4a:9c:f7: a5:bb:5f:f6:9d:d6:88:54:dd:0f:7a:d2:5b:5b:f3: f9:58:8d:71:f5:3a:11:bb:c5:41:c2:37:9c:39:81: 98:76:5b:b1:f9:e9:83:29:70:ef:a5:02:b2:94:7b: 1e:37:26:35:d9:6c:b9:39:87:ed:65:9d:67:9e:2c: 4b:94:57:3c:a5:83:af:45:4d:30:7d:41:b8:c4:93: 9c:db:f6:96:5d:d9:e6:7a:9c:c3:b2:6f:67:db:2f: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:21:35:27:10:6E:52:07:C0:EA:ED:B3:A6:89:C6:E1:DB:A5:85:5B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/04680ebe-26a9-4026-b39a-4013f87a31f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.97.126.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:55:a5:61:53:64:71:47:da:7c:31:ca:35:84:d6:fd:0d:ef: 9d:e1:8a:cf:b2:d7:ae:48:cc:ed:09:db:9b:f1:ef:49:f2:b4: fd:b6:19:d4:1b:61:c1:e8:79:9a:80:7e:ba:fa:6d:92:45:51: b1:99:39:d7:3b:cb:ba:46:7b:62:fb:f0:d1:0a:5c:ab:52:38: 3b:05:36:89:70:b9:f1:b8:29:e5:15:63:57:99:11:d4:9a:46: 1e:d0:d3:f9:7b:06:86:05:ac:c1:dc:27:f3:c2:a8:65:ed:d1: f6:34:ea:a1:da:8d:9c:cc:50:c9:08:2f:0e:e4:c8:12:33:72: 55:7a:14:3f:f5:77:c9:62:e7:8f:85:56:39:58:f7:32:8d:1c: ce:a7:63:8f:66:55:b3:c2:75:c0:23:c0:3c:dd:05:3b:7e:54: 90:2e:c2:91:57:45:f4:14:eb:7b:72:0e:c2:f1:64:71:d6:b5: 54:c5:89:12:f8:5b:64:f2:3c:40:e4:9b:13:2f:cc:43:06:d4: d3:d4:f5:90:b0:f4:bf:d6:52:6c:f6:29:07:64:bf:21:5e:fd: a4:a0:7c:48:17:fd:0e:cf:50:7f:34:8b:2d:5f:3c:d5:b8:6b: 2e:8b:3f:ca:94:a1:e7:61:46:94:48:e2:1a:0d:ba:dc:41:c4: 97:51:d1:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbyq3rol1tcPGrbYEAMpRichiL34wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDE5MDQwMDI1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDhjMzI4YTg5N2FkMDJlZTcxMjc5NDYwZDQxYzc3YjIy ZGM3ZjllMzQ2MTg1MmZiZjQzZDZlZDk4NzI2NWM0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVgczZK+hlf/MfGNnQpa6qiKdcD8LPgLsiKDDsDsYT4Bga cW1M40pgwZhIwIHOFB6yEvxLpRwItIcmyonNq+sXzPEjVv8u7sJK9lF/MW03LMDQ OYoezRewwxdRuicpu3MZPsV+kkETHAz5e6A9CCao/a2Bd21zSZMj6sVHZrOHStXQ CmOiqOIiYRYcRrbpCF4r0peVpVvlDWxNSZbz3C6Fh0qc96W7X/ad1ohU3Q960ltb 8/lYjXH1OhG7xUHCN5w5gZh2W7H56YMpcO+lArKUex43JjXZbLk5h+1lnWeeLEuU Vzylg69FTTB9QbjEk5zb9pZd2eZ6nMOyb2fbLynrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMiE1JxBuUgfA6u2zponG4dulhVswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA0NjgwZWJlLTI2YTktNDAyNi1iMzlhLTQwMTNmODdhMzFmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYX4wDQYJKoZIhvcNAQELBQADggEBAF9VpWFTZHFH2nwxyjWE1v0N753h is+y165IzO0J25vx70nytP22GdQbYcHoeZqAfrr6bZJFUbGZOdc7y7pGe2L78NEK XKtSODsFNolwufG4KeUVY1eZEdSaRh7Q0/l7BoYFrMHcJ/PCqGXt0fY06qHajZzM UMkILw7kyBIzclV6FD/1d8li54+FVjlY9zKNHM6nY49mVbPCdcAjwDzdBTt+VJAu wpFXRfQU63tyDsLxZHHWtVTFiRL4W2TyPEDkmxMvzEMG1NPU9ZCw9L/WUmz2KQdk vyFe/aSgfEgX/Q7PUH80iy1fPNW4ay6LP8qUoedhRpRI4hoNutxBxJdR0co= -----END CERTIFICATE-----Generated at Sun Oct 19 23:14:48 2025 by rpki-client