$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/898b4557-ed43-42cb-99fe-3cd21033edf4.roa File: 898b4557-ed43-42cb-99fe-3cd21033edf4.roa (raw, json) Hash identifier: 5XUNq8Ctts/7V8Q7NuhlpHhxcSWCyRxqtlrGjqRtZdY= Subject key identifier: 1E:D5:4B:6B:4D:3A:D8:08:42:21:99:1B:1F:76:89:DD:3A:38:23:E8 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 67AF832EBBAF804917E6FB0DF3F5A9D12D668A44 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/898b4557-ed43-42cb-99fe-3cd21033edf4.roa Signing time: Sun 19 Oct 2025 04:00:13 +0000 ROA not before: Sun 19 Oct 2025 04:00:13 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:af:83:2e:bb:af:80:49:17:e6:fb:0d:f3:f5:a9:d1:2d:66:8a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 04:00:13 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=8dc62d4d4b77909f7fd6a79f37252662bef60ec5fd103dc5538449ba663ad6bd, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:98:f6:b1:dc:9e:96:1c:f0:f1:d3:08:71:28: 0f:0a:60:d2:f0:20:65:69:70:e9:2e:dc:84:33:52: c6:24:3a:3e:48:d9:91:74:7d:b4:40:8d:4f:3f:55: 93:39:de:e8:e4:7e:36:0c:57:b5:b8:3d:29:33:95: 21:7a:ba:f4:93:47:a9:9e:36:06:50:79:ff:c7:12: 8d:86:2a:e0:6d:79:23:8e:d6:18:9c:15:e4:bd:a7: f1:83:e1:8e:72:9e:9b:85:7d:1c:ac:cd:63:48:84: ad:4b:00:08:0a:91:0a:f9:03:bf:86:97:d7:5f:a9: 58:87:fe:16:eb:32:64:46:4c:04:f6:34:3c:f1:e9: d9:26:13:ed:74:97:87:ac:65:81:6b:66:c0:c5:07: b2:9a:c3:ac:c4:b8:ff:f5:82:d9:e8:dd:5b:17:77: d9:a7:ed:5f:6c:3a:ab:2c:e2:43:15:c3:72:56:c0: a1:be:0d:c2:f4:51:c8:ac:5d:01:d0:bc:f4:f3:93: 9c:1e:d0:d4:e8:48:2e:db:16:8d:1d:ec:d1:7d:31: 26:f0:e5:d1:cb:7a:b4:c9:7a:4e:ec:34:76:91:c2: 03:b0:53:3f:12:cd:51:01:d6:98:b5:93:6f:f9:1f: 38:e0:d6:b3:82:80:a6:26:25:38:7c:2f:2d:34:34: 28:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D5:4B:6B:4D:3A:D8:08:42:21:99:1B:1F:76:89:DD:3A:38:23:E8 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/898b4557-ed43-42cb-99fe-3cd21033edf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.37.0/24 Signature Algorithm: sha256WithRSAEncryption 24:2b:27:bf:4b:6d:a7:77:6b:14:32:04:d9:21:3c:39:76:e9: d7:43:be:bd:16:cb:23:32:55:90:29:b5:15:0d:87:90:05:4b: 84:db:ea:07:83:94:22:16:4d:93:83:05:7b:d2:7b:b8:1e:e0: e8:e5:94:d0:22:96:11:d9:a6:28:7a:14:8d:5b:f5:30:cf:ed: 0f:4f:c0:b4:12:f8:b5:7b:13:6e:d5:18:3f:c9:88:db:34:55: ab:7b:11:db:ea:2b:af:ad:d4:5a:8f:46:9a:8d:b4:23:37:91: 2a:2e:63:0a:0f:10:e5:9a:8e:97:cc:f9:72:c2:65:3d:8d:3b: e5:af:13:84:1f:ed:c0:12:42:9d:78:87:3b:b9:93:f1:a5:87: de:d7:e2:50:b5:1d:cf:c4:89:10:5f:27:76:b0:b8:05:79:93: d7:09:b7:53:b9:87:55:91:a4:d9:5b:1c:f3:0b:36:50:2b:a5: f8:38:18:96:1c:f9:cc:e0:08:4d:9f:68:4c:cf:70:91:a0:e0: 2f:56:2f:e8:b6:89:30:c4:57:09:a5:cc:6f:b7:0c:76:1b:ee: 1f:b2:29:7b:95:7e:39:f5:4d:bc:76:2c:80:e1:b7:37:88:08: 13:9a:a5:37:fa:98:af:47:9d:4b:f1:0a:83:dd:61:dd:87:e7: 85:4b:c3:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ6+DLruvgEkX5vsN8/Wp0S1mikQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDE5MDQwMDEzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGM2MmQ0ZDRiNzc5MDlmN2ZkNmE3OWYzNzI1MjY2MmJl ZjYwZWM1ZmQxMDNkYzU1Mzg0NDliYTY2M2FkNmJkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSmPax3J6WHPDx0whxKA8KYNLwIGVpcOku3IQzUsYkOj5I 2ZF0fbRAjU8/VZM53ujkfjYMV7W4PSkzlSF6uvSTR6meNgZQef/HEo2GKuBteSOO 1hicFeS9p/GD4Y5ynpuFfRyszWNIhK1LAAgKkQr5A7+Gl9dfqViH/hbrMmRGTAT2 NDzx6dkmE+10l4esZYFrZsDFB7Kaw6zEuP/1gtno3VsXd9mn7V9sOqss4kMVw3JW wKG+DcL0UcisXQHQvPTzk5we0NToSC7bFo0d7NF9MSbw5dHLerTJek7sNHaRwgOw Uz8SzVEB1pi1k2/5Hzjg1rOCgKYmJTh8Ly00NCjZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHtVLa0062AhCIZkbH3aJ3To4I+gwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzg5OGI0NTU3LWVkNDMtNDJjYi05OWZlLTNjZDIxMDMzZWRmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCUwDQYJKoZIhvcNAQELBQADggEBACQrJ79Lbad3axQyBNkhPDl26ddD vr0WyyMyVZAptRUNh5AFS4Tb6geDlCIWTZODBXvSe7ge4OjllNAilhHZpih6FI1b 9TDP7Q9PwLQS+LV7E27VGD/JiNs0Vat7EdvqK6+t1FqPRpqNtCM3kSouYwoPEOWa jpfM+XLCZT2NO+WvE4Qf7cASQp14hzu5k/Glh97X4lC1Hc/EiRBfJ3awuAV5k9cJ t1O5h1WRpNlbHPMLNlArpfg4GJYc+czgCE2faEzPcJGg4C9WL+i2iTDEVwmlzG+3 DHYb7h+yKXuVfjn1Tbx2LIDhtzeICBOapTf6mK9HnUvxCoPdYd2H54VLw40= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:24 2025 by rpki-client