$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa File: 8ac8d230-2c50-472b-aaac-384834352fef.roa (raw, json) Hash identifier: LCNG3GOxNy1ySnJEZnnq50ZO719kMAr52pO4aYucz3E= Subject key identifier: F7:76:00:1A:90:48:30:1B:3A:A7:1E:37:EC:52:E0:92:B0:A1:47:D9 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1168B40D9DB001F7CDC5F2BBB5A236AF4E401BB8 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa Signing time: Sun 19 Oct 2025 04:00:10 +0000 ROA not before: Sun 19 Oct 2025 04:00:10 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:68:b4:0d:9d:b0:01:f7:cd:c5:f2:bb:b5:a2:36:af:4e:40:1b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 04:00:10 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=0cce9df4cb40abcb06df47fdab35224f6048538b956d183279fa5e11d645b84e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a4:bc:fd:5b:7d:a0:40:10:1e:8b:fd:c9:f0: 73:68:5c:ed:83:0f:31:56:b8:23:23:fb:f5:5a:0e: 13:32:92:e5:77:17:e9:f2:f0:90:e1:88:ea:31:fa: 8e:b0:eb:fa:f4:b9:be:7f:c1:2e:c8:00:a6:37:fd: 72:c9:bf:0b:ca:70:24:be:b1:4b:93:e3:a4:79:bd: bd:3e:5c:82:28:3c:69:bc:ac:df:f1:30:1e:39:74: 49:a6:7c:29:b9:e1:0c:5f:e2:c2:13:ae:b2:9c:e3: 07:c8:8f:1b:0b:11:64:1a:02:37:6e:c1:2f:ed:19: 04:dd:fc:98:27:1d:f9:ed:d2:76:8b:43:fe:70:6d: 59:2b:5b:e1:de:90:d1:b8:1b:91:92:93:80:46:d5: 83:42:19:47:5c:3a:94:57:66:e7:e5:b6:5c:e3:e5: a0:07:6e:b5:c4:7f:18:34:df:18:ff:f4:ce:fd:5c: 5b:7c:c5:26:cd:15:d9:14:da:fc:b9:f7:c5:9c:1a: c0:c8:b9:e1:4b:df:3e:c4:82:d0:4a:6d:e6:6a:83: 63:0e:81:de:e5:9f:11:25:17:97:7c:15:82:4d:9f: 3a:c3:8a:2f:c3:5b:b5:ef:9f:35:f4:8b:36:71:10: 6b:30:50:63:df:e8:aa:74:b7:72:11:2a:a4:55:05: 8a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:76:00:1A:90:48:30:1B:3A:A7:1E:37:EC:52:E0:92:B0:A1:47:D9 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.36.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:ab:fb:3f:75:dc:80:a4:76:fa:fe:6a:85:33:51:4f:68:12: 05:09:8b:b5:01:8a:b9:69:6c:26:32:90:57:f2:e1:95:3b:4b: 63:0a:71:84:2a:0e:b0:ea:44:b5:8e:ce:14:3b:05:5f:94:d1: 71:4c:e5:3b:76:ec:e8:a2:b2:86:6c:04:1d:39:2f:27:d5:00: ca:ad:85:55:a0:c3:3c:51:6f:b2:df:32:d0:4e:79:b9:5d:97: d6:8c:34:b7:b8:ac:06:b4:4b:5f:6c:a8:11:ea:f5:b3:f7:8a: ce:16:8c:03:73:60:ff:9e:07:75:43:60:4a:6d:2a:34:52:13: cb:e0:7e:6d:de:cd:1e:8f:d6:74:c1:b9:13:b8:d3:a5:18:5c: d5:a3:80:b4:42:7d:9d:3b:ad:bf:66:8a:f9:fa:ef:10:e4:c6: f7:1e:cb:cc:39:34:47:f0:f1:8e:02:0a:aa:e1:6f:27:1c:f9: c8:e2:d8:f5:96:d5:4a:6e:2d:41:28:f8:2e:01:60:ee:ff:2e: 2b:63:72:8e:44:f8:92:d9:20:fe:3c:6e:e7:eb:f4:cb:99:03: ba:25:d0:11:8f:17:9a:c1:94:dc:04:43:ab:d2:6d:53:20:98: 9f:d7:57:9b:95:af:f8:b5:8b:f3:80:15:2c:b6:a6:2f:cb:48: eb:82:0f:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEWi0DZ2wAffNxfK7taI2r05AG7gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDE5MDQwMDEwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2NlOWRmNGNiNDBhYmNiMDZkZjQ3ZmRhYjM1MjI0ZjYw NDg1MzhiOTU2ZDE4MzI3OWZhNWUxMWQ2NDViODRlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOpLz9W32gQBAei/3J8HNoXO2DDzFWuCMj+/VaDhMykuV3 F+ny8JDhiOox+o6w6/r0ub5/wS7IAKY3/XLJvwvKcCS+sUuT46R5vb0+XIIoPGm8 rN/xMB45dEmmfCm54Qxf4sITrrKc4wfIjxsLEWQaAjduwS/tGQTd/JgnHfnt0naL Q/5wbVkrW+HekNG4G5GSk4BG1YNCGUdcOpRXZufltlzj5aAHbrXEfxg03xj/9M79 XFt8xSbNFdkU2vy598WcGsDIueFL3z7EgtBKbeZqg2MOgd7lnxElF5d8FYJNnzrD ii/DW7XvnzX0izZxEGswUGPf6Kp0t3IRKqRVBYqnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU93YAGpBIMBs6px437FLgkrChR9kwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhhYzhkMjMwLTJjNTAtNDcyYi1hYWFjLTM4NDgzNDM1MmZlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCQwDQYJKoZIhvcNAQELBQADggEBADyr+z913ICkdvr+aoUzUU9oEgUJ i7UBirlpbCYykFfy4ZU7S2MKcYQqDrDqRLWOzhQ7BV+U0XFM5Tt27OiisoZsBB05 LyfVAMqthVWgwzxRb7LfMtBOebldl9aMNLe4rAa0S19sqBHq9bP3is4WjANzYP+e B3VDYEptKjRSE8vgfm3ezR6P1nTBuRO406UYXNWjgLRCfZ07rb9mivn67xDkxvce y8w5NEfw8Y4CCqrhbycc+cji2PWW1UpuLUEo+C4BYO7/Litjco5E+JLZIP48bufr 9MuZA7ol0BGPF5rBlNwEQ6vSbVMgmJ/XV5uVr/i1i/OAFSy2pi/LSOuCD4Y= -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:10 2025 by rpki-client