$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/53bb6c44-c850-4982-8e2f-551c668d57af.roa File: 53bb6c44-c850-4982-8e2f-551c668d57af.roa (raw, json) Hash identifier: MqvbrPKQ1t3JZYB9AA94M1DXXGBLYBkvYIi1nnqtJtc= Subject key identifier: 0C:D9:98:9D:F3:A8:1E:FB:35:30:3D:97:49:11:B5:40:24:E2:EA:6D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3990EDA3F5A2122D77216900A9C6F98A8532FFD9 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/53bb6c44-c850-4982-8e2f-551c668d57af.roa Signing time: Fri 10 Oct 2025 17:05:09 +0000 ROA not before: Fri 10 Oct 2025 17:05:09 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:90:ed:a3:f5:a2:12:2d:77:21:69:00:a9:c6:f9:8a:85:32:ff:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 10 17:05:09 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=89d0a96c158ad8316dbb7cb6ad3ca3c8c2f24d3baaf3f09b0e942b2ea83b1470, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:15:37:da:11:56:8c:fc:d1:78:56:5f:6c: 11:19:00:8a:2d:c5:13:b4:e4:7d:5a:44:9a:b8:07: bf:93:fa:3b:db:d5:fd:fd:9b:ff:87:0a:ff:8b:02: d2:58:75:e5:5b:d1:a7:25:59:2b:42:1d:e6:83:f6: e9:11:83:85:aa:ae:d7:89:4e:9e:63:2a:39:31:6a: 52:d1:6c:6a:7c:54:98:8f:f4:cb:b2:03:2d:71:c0: 08:0b:d7:02:11:48:f3:3a:53:6a:8c:b5:58:4e:d6: 13:aa:c2:86:79:76:58:ba:84:64:b2:e9:1d:63:46: d3:db:bf:a8:fa:f6:60:e4:9c:c2:7d:81:7a:d4:65: e8:24:18:35:a4:2a:76:87:0a:fb:bf:ba:07:9a:ad: f7:71:9e:a1:bc:2a:fd:c1:d9:dc:d2:e3:a7:ed:e4: 6b:c6:d3:b7:ae:b1:fc:12:e7:88:11:dd:2d:8f:2d: aa:91:b5:28:49:50:e6:d9:31:a0:98:0c:4a:b1:90: e9:c2:15:c0:db:e9:37:d9:a9:5e:82:e1:b4:fc:55: 7d:a9:96:a0:5a:57:64:98:89:c4:40:f3:a9:74:22: a4:51:c3:57:79:55:89:2c:89:23:b4:48:c2:83:a6: 11:10:0b:26:5b:00:a1:bd:b8:f7:e0:df:9e:e7:55: 43:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D9:98:9D:F3:A8:1E:FB:35:30:3D:97:49:11:B5:40:24:E2:EA:6D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/53bb6c44-c850-4982-8e2f-551c668d57af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.240.0/20 Signature Algorithm: sha256WithRSAEncryption 9c:70:0e:5e:75:ab:64:c1:cb:cb:e2:04:e2:81:2f:1d:58:17: 76:34:c9:f9:2c:6f:9c:66:88:69:9f:27:0f:58:ed:e0:10:2f: 41:db:92:9d:d9:69:79:ec:ff:54:51:9c:45:f1:bf:f3:1b:98: 16:b6:15:1e:b7:1e:c7:b7:16:b7:d0:3e:47:15:77:62:12:5d: a0:26:3b:9f:5b:65:d3:ca:1c:07:22:5e:f4:70:1f:21:20:f2: b0:a7:ce:17:f1:5d:c4:21:7a:c4:e8:dc:36:fd:fa:24:f1:da: 43:68:63:0c:5d:37:64:13:ad:df:5f:76:0f:fe:24:79:a9:c0: 55:37:db:6d:40:48:eb:70:38:8e:b0:47:42:05:7a:60:27:74: af:99:e6:ab:6e:47:d6:4e:19:3c:6f:aa:ab:df:2c:90:fa:48: 77:5b:c8:96:e6:d3:57:64:f4:96:cf:32:24:b9:aa:4d:20:17: a6:03:f6:02:98:d4:9d:8b:5d:cc:6a:fd:79:cc:02:f4:9d:2e: 0d:af:34:3c:db:5d:cd:55:1b:84:b5:40:f7:18:a9:78:59:19: 88:4c:4d:b5:6e:da:4b:b3:99:c9:bd:4e:9e:19:18:70:2c:be: 9f:87:b5:54:7a:0c:74:71:9c:bb:46:11:ae:34:ec:8e:7b:b3: 77:13:ff:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOZDto/WiEi13IWkAqcb5ioUy/9kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDEwMTcwNTA5WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OWQwYTk2YzE1OGFkODMxNmRiYjdjYjZhZDNjYTNjOGMy ZjI0ZDNiYWFmM2YwOWIwZTk0MmIyZWE4M2IxNDcwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDT6xU32hFWjPzReFZfbBEZAIotxRO05H1aRJq4B7+T+jvb 1f39m/+HCv+LAtJYdeVb0aclWStCHeaD9ukRg4WqrteJTp5jKjkxalLRbGp8VJiP 9MuyAy1xwAgL1wIRSPM6U2qMtVhO1hOqwoZ5dli6hGSy6R1jRtPbv6j69mDknMJ9 gXrUZegkGDWkKnaHCvu/ugearfdxnqG8Kv3B2dzS46ft5GvG07eusfwS54gR3S2P LaqRtShJUObZMaCYDEqxkOnCFcDb6TfZqV6C4bT8VX2plqBaV2SYicRA86l0IqRR w1d5VYksiSO0SMKDphEQCyZbAKG9uPfg357nVUP9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDNmYnfOoHvs1MD2XSRG1QCTi6m0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzUzYmI2YzQ0LWM4NTAtNDk4Mi04ZTJmLTU1MWM2NjhkNTdhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYPAwDQYJKoZIhvcNAQELBQADggEBAJxwDl51q2TBy8viBOKBLx1YF3Y0 yfksb5xmiGmfJw9Y7eAQL0Hbkp3ZaXns/1RRnEXxv/MbmBa2FR63Hse3FrfQPkcV d2ISXaAmO59bZdPKHAciXvRwHyEg8rCnzhfxXcQhesTo3Db9+iTx2kNoYwxdN2QT rd9fdg/+JHmpwFU3221ASOtwOI6wR0IFemAndK+Z5qtuR9ZOGTxvqqvfLJD6SHdb yJbm01dk9JbPMiS5qk0gF6YD9gKY1J2LXcxq/XnMAvSdLg2vNDzbXc1VG4S1QPcY qXhZGYhMTbVu2kuzmcm9Tp4ZGHAsvp+HtVR6DHRxnLtGEa407I57s3cT/7k= -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:17 2025 by rpki-client