$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/906a4434-ef79-4be5-917c-827859a9939a.roa File: 906a4434-ef79-4be5-917c-827859a9939a.roa (raw, json) Hash identifier: W43xkGtpGZxIV0r6QFzmokgGvm4TVvhduZJZWNYWaP4= Subject key identifier: 4A:B5:7A:BD:C6:62:1E:17:00:B0:86:75:13:AB:54:A1:3C:2E:6B:64 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6BC67E349531345D5B5A91ADFD872BD6D5D08683 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/906a4434-ef79-4be5-917c-827859a9939a.roa Signing time: Mon 06 Oct 2025 17:20:09 +0000 ROA not before: Mon 06 Oct 2025 17:20:09 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c6:7e:34:95:31:34:5d:5b:5a:91:ad:fd:87:2b:d6:d5:d0:86:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 6 17:20:09 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=029ff40268a27b8399f508bc5e7afabe47aa55e194138265154e03f7ed3cda08, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:de:0c:19:19:1d:73:cf:a7:48:6a:dd:c1:3e: 22:79:18:04:db:de:17:ef:b4:52:ce:e4:3d:5e:c0: 76:c4:9c:94:2f:7c:8f:02:64:37:c3:1f:8f:5f:31: d7:2b:64:d0:34:42:18:e0:0f:38:08:c7:db:f7:5e: cd:5d:26:11:e7:fe:e1:1e:24:dc:2a:99:f7:54:2c: 54:06:0c:35:1e:23:d8:01:30:7d:49:70:6a:57:b2: 16:54:a0:29:d6:5c:8b:0f:27:0e:37:a4:c1:9a:d6: 5d:fa:27:7d:bc:ee:1d:b3:eb:7f:72:c0:29:4b:41: 2c:04:aa:1c:5b:bf:85:3b:28:95:2b:65:f6:85:3b: 18:20:26:df:f1:9e:44:2b:82:3f:c3:db:d6:af:74: f3:1d:92:7d:b6:ad:88:d6:be:e7:42:bc:87:69:a1: f0:c0:95:18:14:26:d7:ba:78:60:79:fc:0a:78:b6: 87:55:70:e0:c2:94:01:a7:9c:f2:b0:db:1a:9f:b6: d6:80:9a:86:0f:2a:b1:48:53:37:5b:a4:79:96:f5: bd:62:67:37:e8:a1:41:f9:d4:3f:a3:49:e6:d6:bd: 18:22:2f:5c:f8:35:19:25:d8:73:08:84:19:fc:8e: d5:79:77:3b:17:76:ee:c1:05:74:0a:7a:f2:f8:33: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B5:7A:BD:C6:62:1E:17:00:B0:86:75:13:AB:54:A1:3C:2E:6B:64 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/906a4434-ef79-4be5-917c-827859a9939a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.246.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:78:2d:8d:da:9c:a4:f6:b9:68:dd:cf:19:05:2b:66:f1:d4: 02:5c:6b:10:da:e1:8f:d4:18:a6:02:fb:ad:10:10:b2:09:81: f0:c2:c3:fb:e7:28:f4:36:37:57:37:82:e1:39:fb:72:55:ad: ad:45:a6:fc:1d:eb:a0:29:8c:6d:5e:3c:d0:a1:3c:bd:a4:33: 1b:fd:c7:ef:c2:54:18:ff:48:e9:6c:57:de:52:ea:75:ed:8a: bd:8d:bc:a0:42:7d:5b:7f:5b:44:d0:7c:56:d2:94:a2:a0:11: 83:6a:09:27:56:46:8f:18:16:07:ea:61:25:5e:b8:53:82:5d: 3e:71:af:e4:71:fc:9b:16:9f:8f:18:16:76:d7:e8:74:fb:cb: 16:f6:77:dc:1c:22:ae:9a:0e:a9:c5:1e:d6:ad:17:8e:15:e4: ea:5d:84:96:b3:88:fe:ca:57:26:3f:b4:8e:50:8d:2b:15:e7: ca:11:47:85:f7:26:a5:f8:06:da:50:d5:bf:5a:fa:eb:cd:83: 3f:02:53:9a:f4:2f:79:fd:f3:20:3e:2e:be:49:90:07:16:35: 2d:76:d3:59:09:53:27:25:87:67:68:8a:31:8a:cd:b5:8b:b0: b6:00:fe:ee:11:a9:77:e4:f8:bf:97:b3:90:c0:d4:0e:de:78: 51:3e:17:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa8Z+NJUxNF1bWpGt/Ycr1tXQhoMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDA2MTcyMDA5WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjlmZjQwMjY4YTI3YjgzOTlmNTA4YmM1ZTdhZmFiZTQ3 YWE1NWUxOTQxMzgyNjUxNTRlMDNmN2VkM2NkYTA4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK3gwZGR1zz6dIat3BPiJ5GATb3hfvtFLO5D1ewHbEnJQv fI8CZDfDH49fMdcrZNA0QhjgDzgIx9v3Xs1dJhHn/uEeJNwqmfdULFQGDDUeI9gB MH1JcGpXshZUoCnWXIsPJw43pMGa1l36J3287h2z639ywClLQSwEqhxbv4U7KJUr ZfaFOxggJt/xnkQrgj/D29avdPMdkn22rYjWvudCvIdpofDAlRgUJte6eGB5/Ap4 todVcODClAGnnPKw2xqfttaAmoYPKrFIUzdbpHmW9b1iZzfooUH51D+jSebWvRgi L1z4NRkl2HMIhBn8jtV5dzsXdu7BBXQKevL4MwwDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSrV6vcZiHhcAsIZ1E6tUoTwua2QwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzkwNmE0NDM0LWVmNzktNGJlNS05MTdjLTgyNzg1OWE5OTM5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPYwDQYJKoZIhvcNAQELBQADggEBAGp4LY3anKT2uWjdzxkFK2bx1AJc axDa4Y/UGKYC+60QELIJgfDCw/vnKPQ2N1c3guE5+3JVra1Fpvwd66ApjG1ePNCh PL2kMxv9x+/CVBj/SOlsV95S6nXtir2NvKBCfVt/W0TQfFbSlKKgEYNqCSdWRo8Y FgfqYSVeuFOCXT5xr+Rx/JsWn48YFnbX6HT7yxb2d9wcIq6aDqnFHtatF44V5Opd hJaziP7KVyY/tI5QjSsV58oRR4X3JqX4BtpQ1b9a+uvNgz8CU5r0L3n98yA+Lr5J kAcWNS1201kJUyclh2doijGKzbWLsLYA/u4RqXfk+L+Xs5DA1A7eeFE+F/A= -----END CERTIFICATE-----Generated at Mon Oct 20 08:36:04 2025 by rpki-client