$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa File: 38682ae8-11e8-4bbd-9b5b-0703a469a802.roa (raw, json) Hash identifier: LiiRF7oxjvy5W5HvSwXWVQiuk7fyV6UoMIC+mkqisR8= Subject key identifier: 64:9B:23:91:91:83:8E:E3:91:DD:40:A2:43:95:11:59:4A:C1:95:FC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7DE1460CA87D0ADF12C1D43CE69C01ECC02FAB78 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa Signing time: Fri 26 Sep 2025 18:00:14 +0000 ROA not before: Fri 26 Sep 2025 18:00:14 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e1:46:0c:a8:7d:0a:df:12:c1:d4:3c:e6:9c:01:ec:c0:2f:ab:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 26 18:00:14 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=2fe31e08786a332904c6b30e2a17800df7584f32d94534d351b9e20bcc6d6b7a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:aa:da:7a:64:9d:0e:52:f5:1b:c6:b1:f5:1e: 18:aa:33:ae:13:16:a6:62:ef:13:9d:7c:56:5d:8b: a1:2d:a7:89:9d:44:cb:15:54:1d:42:90:7e:a6:23: 24:0f:cd:9d:51:67:75:09:af:7d:74:0d:c1:74:e1: 85:fa:10:75:5a:bf:65:44:05:3e:ad:3c:95:05:42: 94:6f:f1:64:be:a7:76:17:3b:b5:7c:f4:32:7d:4e: e7:ee:4c:1d:91:41:dd:5c:ae:f6:40:ae:61:6c:31: e4:cd:47:0b:e1:bc:0c:c6:c0:f9:e8:f5:80:53:95: 17:56:83:4d:69:ad:cd:62:da:e0:22:fe:1a:99:44: 84:3d:f9:f5:db:dc:4f:a6:a4:68:78:97:39:7c:bb: c3:61:0e:27:2a:2b:59:6b:af:18:5a:df:ff:bd:4b: 2f:f9:8f:ea:f8:84:7e:a3:6b:33:43:f2:4f:c9:ae: 8c:dc:a1:a7:3c:ca:6f:7e:93:7a:7e:e3:8e:12:f8: 90:18:54:51:8f:11:5f:d0:38:15:f9:cd:3a:cb:ae: 2b:85:eb:84:78:b8:02:8a:71:e7:9e:a3:2a:c6:c5: 7a:30:90:3b:14:b8:81:79:00:08:05:2c:15:4d:88: 9a:cf:26:aa:5e:9a:cb:d0:d7:79:8e:95:e6:fd:de: 2c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9B:23:91:91:83:8E:E3:91:DD:40:A2:43:95:11:59:4A:C1:95:FC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.46.0/24 Signature Algorithm: sha256WithRSAEncryption 16:97:df:30:e3:d5:75:a4:c4:e9:5f:75:71:b8:df:3b:54:dd: 72:af:1c:1f:96:46:ad:5b:e9:c7:97:1e:81:da:9f:9c:bd:08: 35:81:16:3b:ca:cd:48:4c:13:05:84:c3:6b:bc:61:9f:42:4b: f6:95:9c:bf:c7:2c:78:e9:c1:e1:fe:f5:b9:60:ee:02:83:55: 92:a5:8b:c9:b0:d7:43:63:8f:66:0f:16:34:2f:23:02:64:3f: 78:77:34:8f:c7:dc:f0:41:c0:34:3c:e7:e1:61:a5:ec:fd:32: 68:e4:78:c1:8f:6b:15:c7:c7:40:f6:df:e3:8d:4d:c8:a7:1d: 35:8c:09:a2:bb:e9:d5:b2:37:81:d8:e3:cc:a7:ca:fa:e7:3c: a0:1f:d0:9d:c3:59:c3:18:81:8a:97:26:ed:73:a6:1b:0e:22: 3c:89:fc:3b:6c:89:d3:11:fa:a7:f8:b0:b9:2a:31:25:ea:e1: f6:43:58:40:5d:6f:ca:7f:d0:3b:99:3a:9e:d9:8e:c3:5f:f0: b9:79:1d:a0:b8:c1:7e:8a:f7:36:9c:b5:f7:81:e8:2b:84:57: 13:e1:e7:d5:5b:7b:3c:e6:c7:e9:5f:2b:44:ae:cd:06:a5:1a: 40:ba:27:46:7c:87:83:31:dc:30:fb:3e:bc:16:2a:f7:40:2c: f3:00:a9:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfeFGDKh9Ct8SwdQ85pwB7MAvq3gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTI2MTgwMDE0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmUzMWUwODc4NmEzMzI5MDRjNmIzMGUyYTE3ODAwZGY3 NTg0ZjMyZDk0NTM0ZDM1MWI5ZTIwYmNjNmQ2YjdhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0qtp6ZJ0OUvUbxrH1HhiqM64TFqZi7xOdfFZdi6Etp4md RMsVVB1CkH6mIyQPzZ1RZ3UJr310DcF04YX6EHVav2VEBT6tPJUFQpRv8WS+p3YX O7V89DJ9TufuTB2RQd1crvZArmFsMeTNRwvhvAzGwPno9YBTlRdWg01prc1i2uAi /hqZRIQ9+fXb3E+mpGh4lzl8u8NhDicqK1lrrxha3/+9Sy/5j+r4hH6jazND8k/J rozcoac8ym9+k3p+444S+JAYVFGPEV/QOBX5zTrLriuF64R4uAKKceeeoyrGxXow kDsUuIF5AAgFLBVNiJrPJqpemsvQ13mOleb93iytAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZJsjkZGDjuOR3UCiQ5URWUrBlfwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzM4NjgyYWU4LTExZTgtNGJiZC05YjViLTA3MDNhNDY5YTgwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC4wDQYJKoZIhvcNAQELBQADggEBABaX3zDj1XWkxOlfdXG43ztU3XKv HB+WRq1b6ceXHoHan5y9CDWBFjvKzUhMEwWEw2u8YZ9CS/aVnL/HLHjpweH+9blg 7gKDVZKli8mw10Njj2YPFjQvIwJkP3h3NI/H3PBBwDQ85+Fhpez9MmjkeMGPaxXH x0D23+ONTcinHTWMCaK76dWyN4HY48ynyvrnPKAf0J3DWcMYgYqXJu1zphsOIjyJ /DtsidMR+qf4sLkqMSXq4fZDWEBdb8p/0DuZOp7ZjsNf8Ll5HaC4wX6K9zactfeB 6CuEVxPh59Vbezzmx+lfK0SuzQalGkC6J0Z8h4Mx3DD7PrwWKvdALPMAqRo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:47:57 2025 by rpki-client