$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2734e59f-75e9-4acd-9c51-fe2a0c9394f8.roa File: 2734e59f-75e9-4acd-9c51-fe2a0c9394f8.roa (raw, json) Hash identifier: Q6jWj4xcEXyWnZA3EZ0u32eutGw64kQhP/pg63ZVl0A= Subject key identifier: 66:1C:58:93:7B:3F:EE:41:80:47:A6:3B:22:57:4C:E2:4D:B5:47:11 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 23447C5BCDCC96A42F58EED05CE8EDF17CD06B1F Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2734e59f-75e9-4acd-9c51-fe2a0c9394f8.roa Signing time: Thu 09 Oct 2025 14:07:04 +0000 ROA not before: Thu 09 Oct 2025 14:07:04 +0000 ROA not after: Thu 13 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.111.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:44:7c:5b:cd:cc:96:a4:2f:58:ee:d0:5c:e8:ed:f1:7c:d0:6b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 9 14:07:04 2025 GMT Not After : Nov 13 23:59:59 2025 GMT Subject: serialNumber=49deca616ed6a3a5dbeb3964aafac83c5ef7a217a2589c4ff173d25a63604a1f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4d:67:39:9b:cd:b8:ef:54:ab:25:a0:1f:36: ef:cf:33:ff:17:d0:8b:48:da:27:e3:d4:71:39:1b: 8c:53:f8:26:2c:83:65:86:7b:63:24:49:c9:26:ef: e2:d8:e0:39:eb:b3:f8:11:ba:93:8f:7a:df:00:5f: 7e:28:e9:b8:02:ee:74:f3:8f:96:f7:7c:bd:4f:a1: 78:7f:53:43:7d:76:df:80:91:20:08:6d:4f:80:a3: 0e:c0:c9:e1:63:ad:1c:f9:8e:da:93:c3:85:63:62: c5:6c:2e:6c:df:ad:53:90:25:6d:76:50:85:79:ad: 31:20:c5:e6:a1:18:ee:56:86:68:90:69:b1:37:71: 76:09:ce:c5:b8:6d:f1:76:88:dd:0d:77:31:46:a3: dd:e2:d6:01:57:fc:7b:14:44:ee:11:4e:5b:65:2e: 92:02:25:f3:53:d6:3b:00:7f:1b:37:d2:e3:27:0c: 9b:86:8f:10:38:3f:f4:5b:84:93:e7:9c:68:de:a3: 4a:bd:49:11:d1:d7:ad:df:d7:86:d2:4c:3c:c4:48: 3c:78:4f:e8:27:cc:60:48:09:27:0f:d6:30:4f:b9: 1c:c5:a6:dd:d6:d8:10:69:3d:05:db:a7:fa:10:5a: ea:e2:88:db:db:27:82:bc:31:f5:8e:21:3c:61:fb: 55:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1C:58:93:7B:3F:EE:41:80:47:A6:3B:22:57:4C:E2:4D:B5:47:11 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2734e59f-75e9-4acd-9c51-fe2a0c9394f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1b:b2:1c:91:cd:d7:64:a4:25:d2:18:0b:1d:b3:27:c2:17:69: 06:2a:3a:47:44:86:56:94:ae:04:6a:a0:b9:78:e3:5d:dc:18: 41:b3:83:3d:6e:a3:81:ef:02:3c:34:e5:1e:d7:5a:f2:6c:8e: 19:d0:41:41:81:9a:05:f9:fb:21:cb:f2:5e:e3:5b:7e:87:a9: d5:b0:1c:9b:ee:7a:94:6d:11:63:0e:83:a7:55:49:e9:92:fa: 18:d1:0e:e6:8b:0d:d9:9b:a4:a1:ce:3f:92:b2:3a:2d:e9:70: 17:23:cd:62:0f:58:03:6c:a6:f9:b6:65:c9:54:6b:5f:34:1a: 4b:2c:5f:08:ae:eb:ad:9e:c2:4c:3c:ea:cc:7b:70:b9:98:58: e4:69:9f:aa:1b:6f:4c:18:09:18:b8:24:6b:89:c1:7d:3f:59: 57:e1:b5:b7:40:8a:be:42:bc:15:7e:2f:4a:8b:c0:e5:a8:83: 87:ce:e6:db:5d:cf:35:c9:d6:fc:61:6d:1f:80:c0:df:47:c0: 34:c9:4e:28:d2:7b:3a:29:19:5f:72:8e:a2:93:e9:5a:ee:56: a6:2b:07:f1:21:64:5b:0a:e7:84:70:e4:eb:24:59:cc:80:09: 48:39:95:3c:cd:bb:34:93:c3:49:1e:24:fa:0d:d3:79:36:7b: 8d:38:4a:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI0R8W83MlqQvWO7QXOjt8XzQax8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDA5MTQwNzA0WhcNMjUxMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OWRlY2E2MTZlZDZhM2E1ZGJlYjM5NjRhYWZhYzgzYzVl ZjdhMjE3YTI1ODljNGZmMTczZDI1YTYzNjA0YTFmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQTWc5m82471SrJaAfNu/PM/8X0ItI2ifj1HE5G4xT+CYs g2WGe2MkSckm7+LY4Dnrs/gRupOPet8AX34o6bgC7nTzj5b3fL1PoXh/U0N9dt+A kSAIbU+Aow7AyeFjrRz5jtqTw4VjYsVsLmzfrVOQJW12UIV5rTEgxeahGO5WhmiQ abE3cXYJzsW4bfF2iN0NdzFGo93i1gFX/HsURO4RTltlLpICJfNT1jsAfxs30uMn DJuGjxA4P/RbhJPnnGjeo0q9SRHR163f14bSTDzESDx4T+gnzGBICScP1jBPuRzF pt3W2BBpPQXbp/oQWuriiNvbJ4K8MfWOITxh+1XVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZhxYk3s/7kGAR6Y7IldM4k21RxEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzI3MzRlNTlmLTc1ZTktNGFjZC05YzUxLWZlMmEwYzkzOTRmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcjbwAwDQYJKoZIhvcNAQELBQADggEBABuyHJHN12SkJdIYCx2zJ8IXaQYq OkdEhlaUrgRqoLl4413cGEGzgz1uo4HvAjw05R7XWvJsjhnQQUGBmgX5+yHL8l7j W36HqdWwHJvuepRtEWMOg6dVSemS+hjRDuaLDdmbpKHOP5KyOi3pcBcjzWIPWANs pvm2ZclUa180GkssXwiu662ewkw86sx7cLmYWORpn6obb0wYCRi4JGuJwX0/WVfh tbdAir5CvBV+L0qLwOWog4fO5ttdzzXJ1vxhbR+AwN9HwDTJTijSezopGV9yjqKT 6VruVqYrB/EhZFsK54Rw5OskWcyACUg5lTzNuzSTw0keJPoN03k2e404Sls= -----END CERTIFICATE-----Generated at Mon Oct 20 15:28:50 2025 by rpki-client