$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1b6bed08-b7ec-4d0c-ba65-9858e8225560.roa File: 1b6bed08-b7ec-4d0c-ba65-9858e8225560.roa (raw, json) Hash identifier: sMyJawtmHMxSsZYoSScXyklJfFiB4+bhWZ85pCLvgyY= Subject key identifier: BB:56:62:33:30:53:8A:B9:1E:72:A8:2B:A5:D5:FE:87:5D:F7:77:A6 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3006AD0DA938847DBE6E63C2EA580D972773A212 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1b6bed08-b7ec-4d0c-ba65-9858e8225560.roa Signing time: Fri 10 Oct 2025 17:05:14 +0000 ROA not before: Fri 10 Oct 2025 17:05:14 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:06:ad:0d:a9:38:84:7d:be:6e:63:c2:ea:58:0d:97:27:73:a2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 10 17:05:14 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=2d896662134c05e69a9bebc5b62615dea8e9bfbe853130577f5a5a84a55faee9, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:af:95:ce:64:d9:08:42:78:95:cb:27:1b: 16:b5:20:23:e4:d4:c0:ff:68:24:c3:1f:df:0b:df: b5:55:bd:06:9e:f5:55:09:89:75:fc:1d:f3:37:c7: 9e:11:45:85:1c:9c:fd:82:1b:55:0f:56:cb:a6:44: e1:7e:fb:6f:4d:d3:28:ab:8d:dd:8f:f5:89:e9:c1: 25:9c:10:c5:fc:37:7c:03:f3:34:e8:14:f7:7f:e0: 45:f8:8c:00:68:e7:d5:4a:c8:02:7a:97:ad:3f:dc: 4a:03:dc:e9:d8:e2:17:35:68:8f:0f:d7:b1:9f:8c: 86:7c:6b:e6:93:f9:8a:b0:83:a2:81:72:6c:b6:bc: 53:0b:57:6a:5b:90:ce:dc:e7:1c:d3:f9:83:56:a1: 95:57:61:1c:45:27:cc:0b:01:ea:98:da:53:83:49: 7e:a4:c2:6f:97:2c:1d:17:71:aa:18:d4:e9:ef:bb: 3d:3a:2f:cb:86:c0:37:98:04:92:aa:7a:99:86:47: 28:59:e8:b6:72:ea:6a:74:b9:df:1f:4a:b1:4c:18: f2:b9:8c:6f:eb:34:ad:7d:f1:aa:55:81:de:94:bc: 1a:10:80:28:99:5a:25:49:58:a8:51:9b:c2:cf:65: 7f:b4:d9:e7:b4:8d:cc:67:1e:dd:1a:f3:bd:b9:d7: a7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:56:62:33:30:53:8A:B9:1E:72:A8:2B:A5:D5:FE:87:5D:F7:77:A6 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1b6bed08-b7ec-4d0c-ba65-9858e8225560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.251.0/24 Signature Algorithm: sha256WithRSAEncryption 65:e2:a8:2b:73:a5:7f:09:56:8d:88:f1:43:32:ce:dd:d0:95: e1:bb:3e:2c:e9:16:93:2f:a7:c9:45:f6:e5:05:f3:3d:a9:21: c5:58:38:6e:20:a1:e0:95:de:e5:75:3a:83:7f:dd:70:8e:d9: fb:91:95:d9:77:c1:48:53:fa:dd:fc:13:95:da:47:3c:1d:a3: 27:ee:37:3e:aa:51:1f:7d:1e:ae:71:3f:ca:b9:81:26:c8:2d: bd:6b:0a:c5:db:79:52:17:b9:8c:81:93:dc:39:fc:f6:10:4d: bd:cf:9c:31:cc:12:77:1e:08:ef:0c:47:a0:ab:33:fd:e2:92: 69:46:66:49:58:ec:2b:a3:d6:35:fc:4e:ed:4e:b5:b1:29:cd: a5:35:0b:8c:ca:5a:26:47:b2:c2:04:ae:00:d8:44:85:c8:ec: 25:ad:f5:1a:5e:bb:49:2d:c6:42:eb:02:3a:4d:b8:62:19:9b: 0c:3a:e7:0a:58:28:fe:4a:8e:11:3c:dd:06:d1:25:5e:ff:8d: b1:77:a5:6e:d6:48:01:c8:46:fa:2e:e9:fa:b3:ba:77:0b:2a: 5b:90:61:ab:5c:12:ce:6e:0f:f9:39:7e:49:ee:a3:57:82:a9: 3c:57:d7:ae:3c:e5:1a:97:bb:19:a9:95:c6:1b:44:97:17:8b: 54:5e:2a:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMAatDak4hH2+bmPC6lgNlydzohIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDEwMTcwNTE0WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDg5NjY2MjEzNGMwNWU2OWE5YmViYzViNjI2MTVkZWE4 ZTliZmJlODUzMTMwNTc3ZjVhNWE4NGE1NWZhZWU5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6Ua+VzmTZCEJ4lcsnGxa1ICPk1MD/aCTDH98L37VVvQae 9VUJiXX8HfM3x54RRYUcnP2CG1UPVsumROF++29N0yirjd2P9YnpwSWcEMX8N3wD 8zToFPd/4EX4jABo59VKyAJ6l60/3EoD3OnY4hc1aI8P17GfjIZ8a+aT+Yqwg6KB cmy2vFMLV2pbkM7c5xzT+YNWoZVXYRxFJ8wLAeqY2lODSX6kwm+XLB0XcaoY1Onv uz06L8uGwDeYBJKqepmGRyhZ6LZy6mp0ud8fSrFMGPK5jG/rNK198apVgd6UvBoQ gCiZWiVJWKhRm8LPZX+02ee0jcxnHt0a872516eDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu1ZiMzBTirkecqgrpdX+h133d6YwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzFiNmJlZDA4LWI3ZWMtNGQwYy1iYTY1LTk4NThlODIyNTU2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPswDQYJKoZIhvcNAQELBQADggEBAGXiqCtzpX8JVo2I8UMyzt3QleG7 PizpFpMvp8lF9uUF8z2pIcVYOG4goeCV3uV1OoN/3XCO2fuRldl3wUhT+t38E5Xa RzwdoyfuNz6qUR99Hq5xP8q5gSbILb1rCsXbeVIXuYyBk9w5/PYQTb3PnDHMEnce CO8MR6CrM/3ikmlGZklY7Cuj1jX8Tu1OtbEpzaU1C4zKWiZHssIErgDYRIXI7CWt 9Rpeu0ktxkLrAjpNuGIZmww65wpYKP5KjhE83QbRJV7/jbF3pW7WSAHIRvou6fqz uncLKluQYatcEs5uD/k5fknuo1eCqTxX16485RqXuxmplcYbRJcXi1ReKvQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:28 2025 by rpki-client