$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/619deba8-10a4-4570-992e-49cf451e8d80.roa File: 619deba8-10a4-4570-992e-49cf451e8d80.roa (raw, json) Hash identifier: nJG39Q3sE0tm/bNPKbIdtfke0XZxsAzvTrAn+S7i+2Q= Subject key identifier: 6F:24:B1:0C:DD:F6:18:8B:E8:82:67:18:9C:A0:C4:CD:5D:1F:B0:54 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 436E112463A628E8A68663985A548108D0AF1E87 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/619deba8-10a4-4570-992e-49cf451e8d80.roa Signing time: Sun 19 Oct 2025 04:00:13 +0000 ROA not before: Sun 19 Oct 2025 04:00:13 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:6e:11:24:63:a6:28:e8:a6:86:63:98:5a:54:81:08:d0:af:1e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 04:00:13 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=691267e75944a8d4799224b5a960a76e229cb33d0eca5c8e480474aead088529, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:30:e5:e6:22:4c:be:40:b3:f2:95:d7:f4: ff:da:3b:71:cc:cf:9c:cf:d7:99:6a:6b:a8:c6:09: dc:76:c9:91:07:4b:ce:3f:dc:92:06:ac:38:83:8d: bb:ab:fb:93:79:f2:3b:29:39:b4:68:95:ca:ea:25: d4:f8:99:ff:9c:e1:7f:cf:15:0e:ef:0a:84:2f:a7: dd:7f:af:73:c7:b7:cf:81:e5:07:60:d2:80:5a:3f: 0f:45:45:aa:6c:ff:20:57:26:96:cc:3e:68:e6:14: c2:e6:5c:df:16:5e:ad:9d:ba:da:9b:5d:bf:65:33: 9a:ff:b4:c9:3c:52:3a:77:dc:a5:1f:f1:f8:09:fb: 16:4c:53:8e:09:ae:a4:ec:13:cf:2b:10:75:45:69: be:1d:c8:2c:18:a0:72:83:3a:c4:e8:be:ad:f4:38: e7:a3:5c:16:2d:67:67:ad:83:93:99:47:bc:e2:b5: bc:04:f5:f9:8f:dc:ce:a1:00:06:eb:59:6f:7a:9f: 67:8c:5c:cf:2b:69:39:09:27:3a:77:a3:3a:0a:56: eb:11:49:1b:8b:a4:f3:7e:df:3e:f5:17:3c:1c:2c: 05:0f:17:10:26:99:88:7b:bc:c8:d0:2c:83:ac:66: c0:94:13:9d:5d:4a:5a:04:cc:b9:bc:da:7c:e6:78: 6d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:24:B1:0C:DD:F6:18:8B:E8:82:67:18:9C:A0:C4:CD:5D:1F:B0:54 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/619deba8-10a4-4570-992e-49cf451e8d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.38.0/24 Signature Algorithm: sha256WithRSAEncryption 52:0a:7b:14:32:87:09:a8:19:94:e9:59:c9:8a:ee:f7:c8:35: 0b:b9:06:14:b3:53:7c:6c:13:f7:bd:34:93:1c:b0:ec:f5:80: 42:28:fa:e4:da:d5:a2:8e:31:41:67:ed:f2:6e:36:df:9a:08: 90:87:4a:66:d0:30:04:f8:3f:97:97:16:d9:b6:50:cd:f2:bd: 63:85:3c:a2:d7:9c:d7:b1:e4:8c:aa:1f:5a:4e:02:57:33:9f: 06:04:2f:f0:79:74:52:a5:16:f5:ff:fd:d3:6c:a9:c3:26:43: 70:e6:63:79:b4:50:eb:0d:78:ec:4a:35:2b:3d:26:7a:6b:49: b0:ff:b6:90:fd:7e:8f:bc:45:42:7b:12:88:04:f3:1e:ae:b0: ac:0f:48:6f:e4:90:31:f8:2a:1b:32:b4:e2:01:43:b9:fa:7c: 6c:bb:a6:01:60:05:bf:f4:16:86:d6:95:81:83:df:c3:24:2a: cd:a1:15:cc:bc:22:38:3f:6a:55:1f:52:aa:e1:a2:b5:5f:fb: 04:c3:26:52:eb:42:8a:3b:23:0b:c2:8b:6b:93:8d:49:c9:fd: 60:4b:e1:3f:ca:50:be:e3:fd:50:82:c2:3f:61:8d:12:f1:f0: fd:9b:01:69:ee:f2:7b:db:8b:fc:f3:02:2a:ed:a0:5e:4d:0e: 60:a4:e2:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ24RJGOmKOimhmOYWlSBCNCvHocwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDE5MDQwMDEzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTEyNjdlNzU5NDRhOGQ0Nzk5MjI0YjVhOTYwYTc2ZTIy OWNiMzNkMGVjYTVjOGU0ODA0NzRhZWFkMDg4NTI5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1TDDl5iJMvkCz8pXX9P/aO3HMz5zP15lqa6jGCdx2yZEH S84/3JIGrDiDjbur+5N58jspObRolcrqJdT4mf+c4X/PFQ7vCoQvp91/r3PHt8+B 5Qdg0oBaPw9FRaps/yBXJpbMPmjmFMLmXN8WXq2dutqbXb9lM5r/tMk8Ujp33KUf 8fgJ+xZMU44JrqTsE88rEHVFab4dyCwYoHKDOsTovq30OOejXBYtZ2etg5OZR7zi tbwE9fmP3M6hAAbrWW96n2eMXM8raTkJJzp3ozoKVusRSRuLpPN+3z71FzwcLAUP FxAmmYh7vMjQLIOsZsCUE51dSloEzLm82nzmeG2nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbySxDN32GIvogmcYnKDEzV0fsFQwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzYxOWRlYmE4LTEwYTQtNDU3MC05OTJlLTQ5Y2Y0NTFlOGQ4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCYwDQYJKoZIhvcNAQELBQADggEBAFIKexQyhwmoGZTpWcmK7vfINQu5 BhSzU3xsE/e9NJMcsOz1gEIo+uTa1aKOMUFn7fJuNt+aCJCHSmbQMAT4P5eXFtm2 UM3yvWOFPKLXnNex5IyqH1pOAlcznwYEL/B5dFKlFvX//dNsqcMmQ3DmY3m0UOsN eOxKNSs9JnprSbD/tpD9fo+8RUJ7EogE8x6usKwPSG/kkDH4KhsytOIBQ7n6fGy7 pgFgBb/0FobWlYGD38MkKs2hFcy8Ijg/alUfUqrhorVf+wTDJlLrQoo7IwvCi2uT jUnJ/WBL4T/KUL7j/VCCwj9hjRLx8P2bAWnu8nvbi/zzAirtoF5NDmCk4lc= -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:52 2025 by rpki-client