$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa File: 5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa (raw, json) Hash identifier: b1MQ8Jai11R0U+TZJpSx6/DKOu50I60ziCg+zp7pz/I= Subject key identifier: CA:1B:8D:BE:A5:79:B2:5E:83:70:12:76:15:07:71:8C:CE:E5:6E:0D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 49220FBF612D508214455E7A0CB8F33C5034ACFC Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa Signing time: Fri 26 Sep 2025 18:00:18 +0000 ROA not before: Fri 26 Sep 2025 18:00:18 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:22:0f:bf:61:2d:50:82:14:45:5e:7a:0c:b8:f3:3c:50:34:ac:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 26 18:00:18 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=81dd78e2a34350d0cb769a95264a942a599964f53154a3533e55994eb7b593bf, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:cc:6e:b1:d1:53:22:2d:bc:74:54:1e:d0: e8:bf:cb:32:81:04:81:f6:68:a0:44:29:32:0e:38: 67:f1:04:f7:03:c6:68:89:2f:2b:bd:c2:9e:13:81: fb:cc:0b:d6:04:aa:18:13:82:66:ab:29:ea:d5:24: e2:19:f2:f9:13:60:e6:e6:df:27:b5:42:52:75:40: 9c:8f:ac:7d:e0:c1:ba:28:ba:a4:0b:95:ab:56:51: 23:f3:d7:cb:91:de:61:8a:ac:40:fe:02:63:5a:17: 69:7e:23:0b:f8:e2:e4:58:98:02:6e:6c:04:73:21: 17:b8:f0:65:d2:14:f7:b3:88:0f:6e:e0:d2:f3:bb: b8:22:72:f9:b2:2a:c6:a4:45:30:2b:44:bc:ca:51: e2:77:db:1d:3b:f9:37:93:00:5c:13:f3:ee:60:42: fd:db:94:be:59:95:0b:ec:f8:54:37:11:bf:68:d9: 96:98:84:67:26:29:92:4e:4f:f5:d4:74:41:4b:30: f1:8d:52:17:11:99:5f:82:85:18:f7:b0:08:d7:b6: 57:b6:f7:44:c2:ec:55:6c:a6:ef:5d:80:88:1f:0e: 71:ba:28:90:06:bc:cf:99:99:7d:5d:c8:c5:99:5c: 09:80:1b:01:41:6c:61:8b:06:db:62:ba:ef:26:72: 8a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1B:8D:BE:A5:79:B2:5E:83:70:12:76:15:07:71:8C:CE:E5:6E:0D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.2.0/24 Signature Algorithm: sha256WithRSAEncryption 50:29:72:c1:85:c9:57:ae:bf:58:e8:77:89:92:cf:89:00:d6: be:90:a3:c7:79:02:47:22:15:b6:78:94:7c:6c:0e:68:23:a2: af:e3:62:a2:84:e1:85:2d:77:82:79:3e:70:bf:5e:4c:2e:f9: e7:52:91:c4:ef:10:ba:48:e1:4e:db:57:49:79:0e:2c:2e:b2: 61:2a:86:93:f6:45:51:0d:d1:69:7c:fe:f7:79:8c:de:7d:11: 3d:21:49:16:f4:4f:c5:d8:bd:74:94:59:8b:c6:2c:33:89:e3: ef:3e:0b:bd:c1:5e:2e:1e:ad:5b:e3:1c:53:4b:62:af:c9:45: 17:32:f9:b0:5e:d4:e4:04:83:06:a9:ec:67:a1:9c:3c:61:32: ee:ad:8f:bf:25:f4:b6:cf:06:44:cf:57:3f:3c:2c:cd:8f:3d: 37:37:d8:00:47:ef:59:4a:b0:d1:f7:4c:a1:c5:5c:fd:5c:ef: 79:92:6b:8f:c6:e0:fc:ae:94:96:83:37:8d:27:af:e4:a2:3b: eb:6a:6e:ad:12:b5:49:08:3b:41:f6:39:0e:fd:b7:9c:55:ea: c1:df:e8:07:09:b8:4d:00:12:b5:50:54:1f:51:d6:45:8c:86: 86:36:63:1c:f2:f4:0e:2f:cf:08:90:cc:c2:29:89:48:8d:3a: 44:a2:80:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSSIPv2EtUIIURV56DLjzPFA0rPwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTI2MTgwMDE4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MWRkNzhlMmEzNDM1MGQwY2I3NjlhOTUyNjRhOTQyYTU5 OTk2NGY1MzE1NGEzNTMzZTU1OTk0ZWI3YjU5M2JmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn1MxusdFTIi28dFQe0Oi/yzKBBIH2aKBEKTIOOGfxBPcD xmiJLyu9wp4TgfvMC9YEqhgTgmarKerVJOIZ8vkTYObm3ye1QlJ1QJyPrH3gwboo uqQLlatWUSPz18uR3mGKrED+AmNaF2l+Iwv44uRYmAJubARzIRe48GXSFPeziA9u 4NLzu7gicvmyKsakRTArRLzKUeJ32x07+TeTAFwT8+5gQv3blL5ZlQvs+FQ3Eb9o 2ZaYhGcmKZJOT/XUdEFLMPGNUhcRmV+ChRj3sAjXtle290TC7FVspu9dgIgfDnG6 KJAGvM+ZmX1dyMWZXAmAGwFBbGGLBttiuu8mcoqzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyhuNvqV5sl6DcBJ2FQdxjM7lbg0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzVmZmFlYjZmLTIwNTYtNDJhZS1iMGRlLWQxZmZmMDUzYTY2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAIwDQYJKoZIhvcNAQELBQADggEBAFApcsGFyVeuv1jod4mSz4kA1r6Q o8d5AkciFbZ4lHxsDmgjoq/jYqKE4YUtd4J5PnC/Xkwu+edSkcTvELpI4U7bV0l5 DiwusmEqhpP2RVEN0Wl8/vd5jN59ET0hSRb0T8XYvXSUWYvGLDOJ4+8+C73BXi4e rVvjHFNLYq/JRRcy+bBe1OQEgwap7GehnDxhMu6tj78l9LbPBkTPVz88LM2PPTc3 2ABH71lKsNH3TKHFXP1c73mSa4/G4PyulJaDN40nr+SiO+tqbq0StUkIO0H2OQ79 t5xV6sHf6AcJuE0AErVQVB9R1kWMhoY2Yxzy9A4vzwiQzMIpiUiNOkSigDQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:41 2025 by rpki-client