$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa File: 07bd3aac-7c97-429a-9a81-6751e4001f6d.roa (raw, json) Hash identifier: r+iphIsurSLy1rjGDU2MaDMrnWS4kC1zQLTGeWyAI0s= Subject key identifier: 33:F2:B3:E7:7E:9A:70:FA:CD:44:39:74:2C:63:1D:A0:32:EF:12:2A Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 22915247838ADCAA8E4B624855F7064648533EFC Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa Signing time: Fri 26 Sep 2025 18:00:16 +0000 ROA not before: Fri 26 Sep 2025 18:00:16 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:91:52:47:83:8a:dc:aa:8e:4b:62:48:55:f7:06:46:48:53:3e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 26 18:00:16 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=7daf18c7fb86c70ace61db38fa89a470d16bdfffdccb00ce69f3f575f4e024ea, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:26:d1:80:d4:ea:71:3c:ef:c6:c3:76:fb:92: c1:34:2b:38:02:0c:50:c6:d7:bb:ed:db:31:02:fb: 6c:4d:6a:4b:af:df:54:ab:bd:87:91:ea:da:54:7d: a0:66:2e:57:a7:bd:bc:38:89:8d:1a:aa:82:2e:0a: 6b:d4:b6:23:21:f1:9f:49:c4:c9:2e:a6:8d:c1:b9: 9b:08:ec:02:f2:b0:92:cb:82:05:e1:5a:05:08:19: 48:5c:11:3f:10:eb:0c:dc:47:aa:cd:b2:b9:b0:62: 64:dc:66:13:35:68:b9:06:61:29:80:ba:e6:d9:0f: 8a:8d:30:48:6e:67:e6:d2:bc:4d:f7:fa:3b:f7:3b: ce:18:4f:d3:d8:07:6e:53:8b:4f:46:47:7e:d2:71: d6:4d:93:05:c2:cf:40:ee:0c:f5:bb:c9:55:89:78: 3b:ea:86:c9:cf:c3:60:83:1f:0f:ab:b2:fc:bd:94: 63:dc:cc:b1:96:46:db:3e:0b:6f:ef:cf:25:d0:84: e4:b4:f1:d1:5b:9d:49:33:3b:c9:7b:da:36:9a:86: 7c:fd:69:42:8c:e4:52:56:54:c3:fb:bb:47:48:ab: a0:48:41:49:81:19:ee:74:b0:82:34:5c:80:de:76: 4b:96:37:10:91:17:91:af:76:89:2f:81:c2:3f:72: d6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F2:B3:E7:7E:9A:70:FA:CD:44:39:74:2C:63:1D:A0:32:EF:12:2A X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.6.0/24 Signature Algorithm: sha256WithRSAEncryption 93:e3:a9:ba:6f:4c:e1:c6:03:d9:ed:ff:53:92:c4:17:f4:93: d4:6e:08:bc:2c:c4:67:91:31:d5:1b:da:93:50:41:b3:a0:9b: 6c:93:fb:ef:97:79:31:2c:9d:d8:a4:6c:f5:29:ea:e9:0a:5b: ee:f8:1e:1e:52:7e:62:1e:e2:a5:55:9c:a8:6d:52:9c:5b:39: 21:c8:7d:04:01:aa:8b:51:3d:e7:a1:5d:2e:95:f7:8c:32:83: 39:1a:cd:97:b9:04:94:b2:a5:06:97:c4:30:d7:71:a6:46:d4: 5c:9d:3d:18:b4:1d:da:a9:74:67:01:d2:b2:d0:34:a7:fa:67: b2:c4:c9:b0:bc:76:2b:e3:32:c4:02:be:6b:5c:94:fc:9f:90: b5:5b:b3:4e:1d:6d:70:28:82:07:f9:dd:1b:10:2c:05:7c:31: 01:34:c3:18:14:4b:f9:43:9d:c0:45:b8:3a:2f:d0:b3:9b:a0: 96:38:0d:70:43:d9:94:74:96:8b:71:5d:d6:25:29:cd:f5:2b: 5d:47:5b:50:dc:c0:88:9e:e0:c2:a7:2a:d7:15:e8:b6:0c:ad: 8a:eb:db:b2:c2:39:46:6c:40:92:25:51:a3:61:d2:74:77:fb: a3:15:98:f8:00:54:6f:31:73:3a:01:61:77:dd:1d:98:5b:fd: cc:e3:37:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIpFSR4OK3KqOS2JIVfcGRkhTPvwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTI2MTgwMDE2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZGFmMThjN2ZiODZjNzBhY2U2MWRiMzhmYTg5YTQ3MGQx NmJkZmZmZGNjYjAwY2U2OWYzZjU3NWY0ZTAyNGVhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMJtGA1OpxPO/Gw3b7ksE0KzgCDFDG17vt2zEC+2xNakuv 31SrvYeR6tpUfaBmLlenvbw4iY0aqoIuCmvUtiMh8Z9JxMkupo3BuZsI7ALysJLL ggXhWgUIGUhcET8Q6wzcR6rNsrmwYmTcZhM1aLkGYSmAuubZD4qNMEhuZ+bSvE33 +jv3O84YT9PYB25Ti09GR37ScdZNkwXCz0DuDPW7yVWJeDvqhsnPw2CDHw+rsvy9 lGPczLGWRts+C2/vzyXQhOS08dFbnUkzO8l72jaahnz9aUKM5FJWVMP7u0dIq6BI QUmBGe50sII0XIDedkuWNxCRF5GvdokvgcI/ctZHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM/Kz536acPrNRDl0LGMdoDLvEiowHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA3YmQzYWFjLTdjOTctNDI5YS05YTgxLTY3NTFlNDAwMWY2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAYwDQYJKoZIhvcNAQELBQADggEBAJPjqbpvTOHGA9nt/1OSxBf0k9Ru CLwsxGeRMdUb2pNQQbOgm2yT+++XeTEsndikbPUp6ukKW+74Hh5SfmIe4qVVnKht UpxbOSHIfQQBqotRPeehXS6V94wygzkazZe5BJSypQaXxDDXcaZG1FydPRi0Hdqp dGcB0rLQNKf6Z7LEybC8divjMsQCvmtclPyfkLVbs04dbXAoggf53RsQLAV8MQE0 wxgUS/lDncBFuDov0LOboJY4DXBD2ZR0lotxXdYlKc31K11HW1DcwIie4MKnKtcV 6LYMrYrr27LCOUZsQJIlUaNh0nR3+6MVmPgAVG8xczoBYXfdHZhb/czjN+4= -----END CERTIFICATE-----Generated at Mon Oct 20 11:18:19 2025 by rpki-client