$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/56bfd5b7-3418-4344-a865-789d203e14b2.roa File: 56bfd5b7-3418-4344-a865-789d203e14b2.roa (raw, json) Hash identifier: /XZcO1vcCgHoswz+SQZLcehI7RzsOzJrqQhm7/FeIeQ= Subject key identifier: 6D:05:C9:92:E6:2E:10:BB:72:71:DF:3F:29:12:DC:36:C3:C9:5A:E5 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6B44D0BD739D2F7F8634466A448EDE8622E8A920 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/56bfd5b7-3418-4344-a865-789d203e14b2.roa Signing time: Mon 13 Oct 2025 17:55:02 +0000 ROA not before: Mon 13 Oct 2025 17:55:02 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:44:d0:bd:73:9d:2f:7f:86:34:46:6a:44:8e:de:86:22:e8:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 13 17:55:02 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=af638649e835d7115a5de653c8c20b57c056b10f70ba42566ab7ef8c9f1a44c7, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:27:9a:88:4e:20:d0:d8:d7:ec:b5:a4:e4:c2: 8b:85:d9:b2:9e:32:63:7f:26:e1:b2:47:68:a0:73: 4b:bb:ed:de:d2:09:d1:d4:a8:4a:ab:ed:b2:8f:91: 6f:01:6d:ed:46:6f:cb:6a:5b:55:4a:f1:87:70:57: 67:f5:33:d6:0f:6c:40:59:78:b6:ce:f6:76:28:f1: 2a:f0:08:1d:af:63:ba:a1:dc:a8:77:57:4a:87:c4: c1:22:02:15:bb:09:64:7c:7e:17:37:7c:d0:c2:69: 0c:8d:59:8c:e9:f3:8a:7b:da:ec:62:a8:ed:25:a1: 23:e4:e1:0e:f8:98:5f:fe:8b:5e:98:88:de:58:99: 26:9c:1b:39:4c:05:97:3c:bb:5d:c8:ce:9f:01:63: 4c:32:9b:b7:f7:ff:35:1f:b8:36:ae:b1:d3:25:cc: 98:04:a6:f7:16:6f:36:65:08:72:a3:4f:8c:96:fe: 50:c4:72:27:b3:03:b8:48:64:2d:44:97:f1:66:16: b3:7e:86:86:79:36:e5:be:d1:4e:26:d6:60:9b:a5: c4:1a:f6:36:70:c4:15:47:a0:e6:b8:64:c6:a1:20: cc:67:d8:6c:d5:e9:4f:c6:f3:5c:b6:93:d8:63:66: 30:c3:48:22:82:00:ba:97:0e:e8:3e:6a:ec:f7:92: f1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:05:C9:92:E6:2E:10:BB:72:71:DF:3F:29:12:DC:36:C3:C9:5A:E5 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/56bfd5b7-3418-4344-a865-789d203e14b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.48.0/24 Signature Algorithm: sha256WithRSAEncryption 90:d1:bb:42:e3:64:4a:2b:b2:76:31:e6:77:e1:da:da:9f:2f: 52:22:7a:cb:b7:37:d9:01:ff:51:e4:c7:24:ae:e4:51:7e:6a: e4:1b:2a:61:e6:47:1a:22:2d:f9:71:44:e3:32:e0:8c:ca:d8: 1b:06:ce:aa:6e:5b:50:cd:be:58:8d:9a:e2:09:d5:8b:fb:5c: 35:4e:5f:67:19:16:c9:d8:f4:65:57:57:1f:1a:14:82:4c:77: 7c:05:d8:03:a4:7c:2e:2b:02:00:54:d5:24:ec:89:31:d3:31: be:49:20:a8:2f:91:3c:96:01:e8:23:c6:95:7c:2e:bc:cb:d6: bc:a5:55:ca:57:2e:cc:0b:9e:8b:7a:ab:84:a3:64:d0:6d:06: c7:b7:d0:36:f6:f6:e7:5a:48:27:ba:2b:bb:55:c7:55:7e:cb: 80:0e:27:1b:d9:a7:7a:ee:a4:21:58:5f:d3:95:29:b5:9c:62: 5d:5a:42:36:7d:2d:27:7b:b3:81:4e:ee:1d:ef:95:ce:aa:b0: 68:4c:73:75:a3:1b:4d:51:1b:10:d4:88:dc:f0:04:b5:db:27: 89:bb:e9:da:93:dc:f1:b1:c0:8b:ef:4f:1d:80:6f:f8:e1:6d: 35:02:cb:c3:16:62:36:63:78:12:73:9e:e2:70:c2:fe:ca:71: fd:1f:57:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa0TQvXOdL3+GNEZqRI7ehiLoqSAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDEzMTc1NTAyWhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjYzODY0OWU4MzVkNzExNWE1ZGU2NTNjOGMyMGI1N2Mw NTZiMTBmNzBiYTQyNTY2YWI3ZWY4YzlmMWE0NGM3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMJ5qITiDQ2NfstaTkwouF2bKeMmN/JuGyR2igc0u77d7S CdHUqEqr7bKPkW8Bbe1Gb8tqW1VK8YdwV2f1M9YPbEBZeLbO9nYo8SrwCB2vY7qh 3Kh3V0qHxMEiAhW7CWR8fhc3fNDCaQyNWYzp84p72uxiqO0loSPk4Q74mF/+i16Y iN5YmSacGzlMBZc8u13Izp8BY0wym7f3/zUfuDausdMlzJgEpvcWbzZlCHKjT4yW /lDEciezA7hIZC1El/FmFrN+hoZ5NuW+0U4m1mCbpcQa9jZwxBVHoOa4ZMahIMxn 2GzV6U/G81y2k9hjZjDDSCKCALqXDug+auz3kvFvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbQXJkuYuELtycd8/KRLcNsPJWuUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzU2YmZkNWI3LTM0MTgtNDM0NC1hODY1LTc4OWQyMDNlMTRiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDAwDQYJKoZIhvcNAQELBQADggEBAJDRu0LjZEorsnYx5nfh2tqfL1Ii esu3N9kB/1HkxySu5FF+auQbKmHmRxoiLflxROMy4IzK2BsGzqpuW1DNvliNmuIJ 1Yv7XDVOX2cZFsnY9GVXVx8aFIJMd3wF2AOkfC4rAgBU1STsiTHTMb5JIKgvkTyW AegjxpV8LrzL1rylVcpXLswLnot6q4SjZNBtBse30Db29udaSCe6K7tVx1V+y4AO JxvZp3rupCFYX9OVKbWcYl1aQjZ9LSd7s4FO7h3vlc6qsGhMc3WjG01RGxDUiNzw BLXbJ4m76dqT3PGxwIvvTx2Ab/jhbTUCy8MWYjZjeBJznuJwwv7Kcf0fV8g= -----END CERTIFICATE-----Generated at Mon Oct 20 13:00:51 2025 by rpki-client