$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/78936c9f-053a-4a61-b707-43537071729b.roa File: 78936c9f-053a-4a61-b707-43537071729b.roa (raw, json) Hash identifier: DFN0m8QCo1kA7OpYq1WG6RnkwFk7QHThmDVTH+IErts= Subject key identifier: 0D:91:89:27:2C:20:61:79:15:88:2C:52:88:48:F1:F1:4E:4A:E3:B4 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0E683847CEDE5331A24F07C18FDF6CDB229B4003 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/78936c9f-053a-4a61-b707-43537071729b.roa Signing time: Fri 17 Oct 2025 20:36:39 +0000 ROA not before: Fri 17 Oct 2025 20:36:39 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:68:38:47:ce:de:53:31:a2:4f:07:c1:8f:df:6c:db:22:9b:40:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 17 20:36:39 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=68dc120e7704a19f276139a54d2f56d9fa0521bd8bb7db816302b7d9aa72aef4, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:27:24:63:af:a3:08:e3:b1:de:56:aa:65:72: 53:66:28:02:e3:39:1c:2f:56:af:8e:6e:5e:5e:d0: 7d:6e:d3:b4:1d:43:15:19:e0:92:ba:09:96:91:7d: 2f:f8:1c:79:04:1a:e1:23:84:58:8f:42:32:06:46: f0:48:94:2b:47:3f:29:bb:5b:e3:b1:59:38:08:63: d5:42:1c:e1:c6:da:0f:e5:b2:11:86:7f:d8:d0:9d: 0d:b9:e2:57:0d:3e:35:5b:9e:22:31:c5:e3:4e:dd: 6e:1b:d8:57:fc:e1:74:85:98:ef:36:9d:4e:07:e7: 7c:d6:99:8e:36:e1:16:c8:74:d9:36:88:0e:b0:63: 11:7c:89:46:e5:8f:91:dd:fd:9a:4c:f7:93:b1:f5: 50:db:68:54:b3:1a:6b:7c:1f:c4:6a:e2:95:82:8e: a7:98:6b:07:f4:a4:76:b4:eb:73:21:f6:64:10:ea: 75:ac:27:8b:03:56:d3:a1:1a:9f:8c:5f:e1:dc:72: 2d:ef:97:18:51:63:a3:20:a8:78:a1:cd:5d:d8:37: 80:9f:2c:e4:34:fd:27:1b:42:75:2d:f7:b4:d0:4d: c4:e6:4a:58:f0:bf:5d:63:60:4b:30:0a:87:21:29: a3:9e:41:89:2a:c1:14:80:51:d7:05:f3:e5:a3:b6: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:91:89:27:2C:20:61:79:15:88:2C:52:88:48:F1:F1:4E:4A:E3:B4 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/78936c9f-053a-4a61-b707-43537071729b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.48.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:f1:6c:ee:35:d5:1c:92:92:2e:9e:55:01:dd:6a:b8:76:3a: 06:25:81:af:fb:bc:f2:ac:0b:b0:aa:aa:a6:cd:41:84:37:29: 6b:d2:c5:c6:18:eb:6d:14:e2:3f:d5:48:c8:64:bf:05:a9:31: 16:57:f1:d7:d1:3a:42:64:dc:1c:48:e3:33:c4:60:75:e5:ba: 9d:45:b2:0a:0a:c7:85:9b:e2:5d:9e:07:bc:f4:97:f8:71:3a: cf:1d:44:1b:56:e2:79:13:ce:66:92:41:dc:09:38:55:6f:c4: f9:06:1d:6f:e7:e7:13:a8:90:95:d6:19:85:25:76:59:28:43: 1c:8b:b9:af:a4:36:47:b3:aa:a0:6a:27:92:7c:a8:51:c4:27: 15:9d:1e:06:98:2b:69:7c:2a:0b:14:04:4c:27:25:97:79:c6: cf:12:c3:55:33:82:74:11:41:ed:46:da:52:72:18:6b:e7:31: 91:ad:d9:64:71:fc:64:18:fe:8f:f5:f5:b9:69:0d:c2:06:b3: 89:4b:63:3b:1e:a2:5b:56:e1:2d:d9:cf:fc:59:b3:23:ef:2b: 3f:a5:32:6d:ae:40:c3:d5:60:43:c1:c4:2b:4f:3b:a3:4e:b3: ed:96:7b:59:aa:d2:6e:67:fd:bb:3a:0a:ea:9a:1d:a1:c9:29: 30:56:b6:46 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDmg4R87eUzGiTwfBj99s2yKbQAMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDE3MjAzNjM5WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OGRjMTIwZTc3MDRhMTlmMjc2MTM5YTU0ZDJmNTZkOWZh MDUyMWJkOGJiN2RiODE2MzAyYjdkOWFhNzJhZWY0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUJyRjr6MI47HeVqplclNmKALjORwvVq+Obl5e0H1u07Qd QxUZ4JK6CZaRfS/4HHkEGuEjhFiPQjIGRvBIlCtHPym7W+OxWTgIY9VCHOHG2g/l shGGf9jQnQ254lcNPjVbniIxxeNO3W4b2Ff84XSFmO82nU4H53zWmY424RbIdNk2 iA6wYxF8iUblj5Hd/ZpM95Ox9VDbaFSzGmt8H8Rq4pWCjqeYawf0pHa063Mh9mQQ 6nWsJ4sDVtOhGp+MX+Hcci3vlxhRY6MgqHihzV3YN4CfLOQ0/ScbQnUt97TQTcTm Sljwv11jYEswCochKaOeQYkqwRSAUdcF8+WjttQ3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDZGJJywgYXkViCxSiEjx8U5K47QwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzc4OTM2YzlmLTA1M2EtNGE2MS1iNzA3LTQzNTM3MDcxNzI5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYDAwDQYJKoZIhvcNAQELBQADggEBADvxbO411RySki6eVQHdarh2OgYl ga/7vPKsC7CqqqbNQYQ3KWvSxcYY620U4j/VSMhkvwWpMRZX8dfROkJk3BxI4zPE YHXlup1FsgoKx4Wb4l2eB7z0l/hxOs8dRBtW4nkTzmaSQdwJOFVvxPkGHW/n5xOo kJXWGYUldlkoQxyLua+kNkezqqBqJ5J8qFHEJxWdHgaYK2l8KgsUBEwnJZd5xs8S w1UzgnQRQe1G2lJyGGvnMZGt2WRx/GQY/o/19blpDcIGs4lLYzseoltW4S3Zz/xZ syPvKz+lMm2uQMPVYEPBxCtPO6NOs+2We1mq0m5n/bs6CuqaHaHJKTBWtkY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:28:03 2025 by rpki-client