$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa File: 9820da12-0a89-4f05-a638-5ca08cc892e3.roa (raw, json) Hash identifier: O+mCBtns8bsiBJwdnKOCvZwiINrKk23UPJOnw9oQnjU= Subject key identifier: 7B:E0:6B:9F:60:7B:B2:16:04:D8:65:6C:74:DF:FA:35:0E:17:C6:9A Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 41A65287613C438A52DA25547E00E54B22200691 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa Signing time: Mon 06 Oct 2025 17:20:10 +0000 ROA not before: Mon 06 Oct 2025 17:20:10 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a6:52:87:61:3c:43:8a:52:da:25:54:7e:00:e5:4b:22:20:06:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 6 17:20:10 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=7d16681e8118c96337fe5da759a37b426702e715b495bfd6e3a3f2e6c3e420b6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:b0:2b:d7:33:de:6b:c1:f4:20:4f:e4:57: d0:7c:5a:ca:f5:a1:36:e4:f3:0a:23:7d:43:d8:74: 8a:96:e2:58:7d:d8:4e:50:70:70:d2:72:85:e3:27: 00:87:4c:72:32:3d:0f:87:18:a0:03:27:6c:f9:45: 7c:b2:72:ba:30:3e:18:44:0f:08:13:c4:62:46:e0: 3d:e6:02:ed:fe:6c:96:44:c6:f2:0e:dd:87:4c:75: 28:27:a0:9e:46:7e:05:c5:8d:fe:fe:0d:0d:a8:88: c7:a6:9e:4d:4b:2e:5e:34:c0:7e:4c:b9:ce:bc:69: 26:48:20:cb:80:bb:32:d0:cf:2a:2a:7a:41:e5:78: f7:9d:90:ac:22:b7:48:7a:49:f1:33:a0:8b:f0:5c: 49:87:9d:3c:e7:98:19:96:25:9c:17:e0:bc:fc:43: c8:73:bb:09:b4:ee:e9:12:b7:d1:fa:63:c1:76:31: ad:c6:ba:76:9b:e8:7f:dc:11:39:1d:62:6a:f6:8e: f4:a5:1d:3f:c7:66:57:19:2b:66:e1:e8:f2:68:23: d1:44:79:00:27:ba:cf:f8:99:b2:07:df:f3:b6:78: 14:2a:d3:15:74:99:df:ad:26:47:7a:4f:24:b6:75: 05:57:4b:bc:31:5a:d9:42:46:c3:1a:4b:f5:8c:9e: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E0:6B:9F:60:7B:B2:16:04:D8:65:6C:74:DF:FA:35:0E:17:C6:9A X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.253.0/24 Signature Algorithm: sha256WithRSAEncryption 22:33:60:eb:43:84:03:ce:e8:f6:e8:3c:44:51:01:56:36:30: bf:21:2c:96:84:dc:06:10:dc:a9:89:6d:70:ef:67:b5:61:67: 84:29:51:99:ac:78:71:84:c4:97:fa:53:df:cc:f6:df:db:6c: 3c:66:66:b1:5a:b5:ff:92:ee:0c:0d:07:07:22:0b:0e:ab:22: be:03:98:17:be:ab:02:d8:af:4e:18:73:f0:f4:ee:97:7f:f8: f9:58:5f:fd:74:a8:0c:34:70:47:a0:c8:16:63:5d:bd:7a:16: 77:7d:a3:e7:42:c1:24:1b:d0:01:33:96:fb:4c:54:ac:b4:65: 29:8a:cc:17:59:55:1b:93:82:3a:f8:be:20:3a:9c:55:a5:f9: 1b:45:0b:26:7b:69:a3:44:aa:6c:c3:99:4a:1b:f5:8b:92:6a: 9c:41:08:8f:0c:21:50:56:75:5c:68:38:c0:b1:2a:0e:ca:20: 72:b4:02:4e:e0:6c:04:ce:d9:f4:a4:2d:f1:24:a1:be:00:37: 42:aa:6a:04:4b:1f:df:51:38:6c:20:b4:62:47:c5:e6:f7:7b: 93:e0:4f:80:47:b9:60:bc:84:85:e5:68:1f:70:d6:b1:df:89: ec:9e:27:af:0d:17:96:ce:54:99:74:b3:6c:57:cd:7f:57:fe: 13:d3:71:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQaZSh2E8Q4pS2iVUfgDlSyIgBpEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDA2MTcyMDEwWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDE2NjgxZTgxMThjOTYzMzdmZTVkYTc1OWEzN2I0MjY3 MDJlNzE1YjQ5NWJmZDZlM2EzZjJlNmMzZTQyMGI2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCGrAr1zPea8H0IE/kV9B8Wsr1oTbk8wojfUPYdIqW4lh9 2E5QcHDScoXjJwCHTHIyPQ+HGKADJ2z5RXyycrowPhhEDwgTxGJG4D3mAu3+bJZE xvIO3YdMdSgnoJ5GfgXFjf7+DQ2oiMemnk1LLl40wH5Muc68aSZIIMuAuzLQzyoq ekHlePedkKwit0h6SfEzoIvwXEmHnTznmBmWJZwX4Lz8Q8hzuwm07ukSt9H6Y8F2 Ma3Gunab6H/cETkdYmr2jvSlHT/HZlcZK2bh6PJoI9FEeQAnus/4mbIH3/O2eBQq 0xV0md+tJkd6TyS2dQVXS7wxWtlCRsMaS/WMnt6lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUe+Brn2B7shYE2GVsdN/6NQ4XxpowHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzk4MjBkYTEyLTBhODktNGYwNS1hNjM4LTVjYTA4Y2M4OTJlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYP0wDQYJKoZIhvcNAQELBQADggEBACIzYOtDhAPO6PboPERRAVY2ML8h LJaE3AYQ3KmJbXDvZ7VhZ4QpUZmseHGExJf6U9/M9t/bbDxmZrFatf+S7gwNBwci Cw6rIr4DmBe+qwLYr04Yc/D07pd/+PlYX/10qAw0cEegyBZjXb16Fnd9o+dCwSQb 0AEzlvtMVKy0ZSmKzBdZVRuTgjr4viA6nFWl+RtFCyZ7aaNEqmzDmUob9YuSapxB CI8MIVBWdVxoOMCxKg7KIHK0Ak7gbATO2fSkLfEkob4AN0KqagRLH99ROGwgtGJH xeb3e5PgT4BHuWC8hIXlaB9w1rHfieyeJ68NF5bOVJl0s2xXzX9X/hPTcUs= -----END CERTIFICATE-----Generated at Sun Oct 19 23:21:43 2025 by rpki-client