$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa File: 724c8337-ea3c-48d0-aa37-5e55be799b4e.roa (raw, json) Hash identifier: s72Ur13ofAEfTzBjR8isnQlcty791Dr6+cZ8rZi1+gc= Subject key identifier: 1B:B1:43:1F:AA:F6:18:B1:D0:23:D8:4A:EE:3D:DC:B7:68:85:E1:75 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 428CA072CF1333B70893DB2B6EF0CEB2AF6091B1 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa Signing time: Mon 06 Oct 2025 17:20:05 +0000 ROA not before: Mon 06 Oct 2025 17:20:05 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8c:a0:72:cf:13:33:b7:08:93:db:2b:6e:f0:ce:b2:af:60:91:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 6 17:20:05 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=40ac4529e7d6327b68dd72cd2751771636fb6a00216a33b42f725e01062b07d5, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:1d:12:93:79:5d:2b:2b:92:b8:45:5e:29: fd:c0:dd:a5:6c:a8:92:43:b5:54:a7:82:78:26:ac: a6:64:93:96:bd:4b:15:b5:a4:9a:0c:50:1f:55:ec: 35:1b:6d:f5:39:8a:88:7a:a5:82:e2:07:9b:88:26: 32:58:88:7a:4e:09:cd:31:c5:30:d8:71:61:3f:4b: f0:4c:fe:c1:e5:65:d7:ae:f1:7d:5d:96:cf:63:26: 71:49:36:40:88:94:c3:86:ea:d8:04:56:d4:e6:ef: c0:a0:69:78:b5:db:5d:af:06:5e:ff:25:b8:df:e1: c4:ac:69:2c:47:d5:90:0c:19:12:19:d9:c2:cd:7b: ad:39:f6:89:88:c1:99:72:a0:db:da:4f:be:17:23: c2:c5:0f:c4:8d:cc:99:10:b5:2d:f6:01:9b:a0:b3: 3a:17:75:01:48:ae:f6:80:b3:3a:08:c3:7b:0d:87: c6:14:25:19:26:03:69:a9:98:a7:73:5c:16:80:d8: 2d:4e:f3:af:82:b2:aa:22:f5:ff:7a:fd:84:02:cf: dd:38:e3:c4:7d:89:01:19:3d:29:b4:ed:f6:27:b1: 86:ce:e0:4a:2c:f4:a9:fe:fe:11:b8:8e:a0:23:d9: 18:cc:3d:57:08:ea:87:c3:f0:b9:95:52:ae:0f:e2: e7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B1:43:1F:AA:F6:18:B1:D0:23:D8:4A:EE:3D:DC:B7:68:85:E1:75 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.247.0/24 Signature Algorithm: sha256WithRSAEncryption 44:6d:31:03:84:69:90:49:3e:2a:fa:11:00:ad:68:a8:e9:d4: a2:04:a4:cd:54:a5:e0:e6:43:cc:0a:3d:48:f9:cf:06:1b:01: 30:73:4e:13:6b:4b:f0:f7:e8:95:1a:fd:7f:74:b0:4c:95:0e: 0d:f8:aa:3f:ee:3f:cf:db:5e:62:d5:11:55:1c:ae:01:1e:8b: 8f:53:b7:c9:6b:10:7c:4c:26:57:d5:e1:cb:fa:d5:6e:14:44: 57:77:7c:bf:59:00:53:37:eb:18:0a:36:60:22:7a:3b:eb:ad: 8f:04:47:91:8b:84:34:59:f3:df:03:b7:73:c1:a1:54:2f:c4: 98:f1:83:4f:3b:e7:80:b6:8c:e0:f9:b6:39:3a:54:62:50:31: d3:b9:70:35:82:01:d0:5b:b5:32:4d:2a:e9:1b:b5:c4:81:d8: dd:7e:74:95:11:1b:06:8b:f5:37:56:43:fe:0b:0a:2b:80:9f: d1:d0:1d:45:d8:44:9b:2c:3e:f9:c5:db:b8:55:62:74:54:ff: 94:c6:cd:50:75:37:a7:6a:e8:6e:52:12:3d:cc:21:69:b4:ee: 2f:bd:b6:f8:5b:86:0f:8e:c3:51:46:8d:ab:6e:45:cd:b7:99: 57:52:f0:a9:6e:5c:23:36:f5:38:a8:3b:6f:0f:f6:90:b6:de: 54:32:68:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQoygcs8TM7cIk9srbvDOsq9gkbEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDA2MTcyMDA1WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGFjNDUyOWU3ZDYzMjdiNjhkZDcyY2QyNzUxNzcxNjM2 ZmI2YTAwMjE2YTMzYjQyZjcyNWUwMTA2MmIwN2Q1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCreR0Sk3ldKyuSuEVeKf3A3aVsqJJDtVSngngmrKZkk5a9 SxW1pJoMUB9V7DUbbfU5ioh6pYLiB5uIJjJYiHpOCc0xxTDYcWE/S/BM/sHlZdeu 8X1dls9jJnFJNkCIlMOG6tgEVtTm78CgaXi1212vBl7/Jbjf4cSsaSxH1ZAMGRIZ 2cLNe6059omIwZlyoNvaT74XI8LFD8SNzJkQtS32AZugszoXdQFIrvaAszoIw3sN h8YUJRkmA2mpmKdzXBaA2C1O86+Csqoi9f96/YQCz90448R9iQEZPSm07fYnsYbO 4Eos9Kn+/hG4jqAj2RjMPVcI6ofD8LmVUq4P4ufJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUG7FDH6r2GLHQI9hK7j3ct2iF4XUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzcyNGM4MzM3LWVhM2MtNDhkMC1hYTM3LTVlNTViZTc5OWI0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPcwDQYJKoZIhvcNAQELBQADggEBAERtMQOEaZBJPir6EQCtaKjp1KIE pM1UpeDmQ8wKPUj5zwYbATBzThNrS/D36JUa/X90sEyVDg34qj/uP8/bXmLVEVUc rgEei49Tt8lrEHxMJlfV4cv61W4URFd3fL9ZAFM36xgKNmAiejvrrY8ER5GLhDRZ 898Dt3PBoVQvxJjxg08754C2jOD5tjk6VGJQMdO5cDWCAdBbtTJNKukbtcSB2N1+ dJURGwaL9TdWQ/4LCiuAn9HQHUXYRJssPvnF27hVYnRU/5TGzVB1N6dq6G5SEj3M IWm07i+9tvhbhg+Ow1FGjatuRc23mVdS8KluXCM29TioO28P9pC23lQyaH4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:12 2025 by rpki-client