$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9ce9096b-9364-4bb7-8d0f-cf108645dca8.roa File: 9ce9096b-9364-4bb7-8d0f-cf108645dca8.roa (raw, json) Hash identifier: j9ZJK3/hum7SWfMXNoPd5aRBgNgSNouaqgzZhFpIC8g= Subject key identifier: 4E:CD:66:C4:28:9B:16:37:1F:6C:1C:75:C2:63:FD:9E:93:59:5C:B7 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 35A1B7463852E625AC89B9C3D2AAD08977F8236C Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9ce9096b-9364-4bb7-8d0f-cf108645dca8.roa Signing time: Mon 13 Oct 2025 17:55:01 +0000 ROA not before: Mon 13 Oct 2025 17:55:01 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a1:b7:46:38:52:e6:25:ac:89:b9:c3:d2:aa:d0:89:77:f8:23:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 13 17:55:01 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=08f89b52d570d43b65b4cec27b6ff522c52d08d6198c12b42706ca027e2f762e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a6:eb:21:fb:4d:22:0f:cb:ed:9b:7f:1a:e1: 3f:cb:4e:92:5e:9e:24:ca:db:78:e8:68:38:1c:52: 3b:44:32:9d:8f:69:ba:98:24:d9:cc:bf:7e:02:dc: 69:59:79:3b:a2:9e:6a:1b:d0:77:53:f2:6e:8f:ce: 12:b3:d1:0c:c5:7b:58:ec:87:60:2b:5b:38:70:98: 15:30:af:77:dc:e7:72:ec:ef:64:50:e5:52:fd:9d: bb:f0:77:73:ed:0d:64:40:1d:fa:c5:a5:e4:ac:50: 7f:dc:04:d4:c4:60:3c:b7:0a:df:cd:06:91:fd:5c: 25:2c:19:ae:00:35:35:e8:c8:99:93:c7:65:1d:02: 45:c1:a1:7e:31:f1:6a:1d:12:9b:cf:38:03:0b:5d: 52:62:8f:f9:09:7a:e6:f5:19:09:b8:9e:ef:eb:55: 02:f9:9d:86:ad:dd:86:21:50:d4:39:36:7c:d7:1d: 21:49:f1:0e:44:b9:1c:02:41:2e:92:95:8f:17:28: 07:88:bb:67:60:e4:d5:43:ba:9a:57:f6:3d:a0:cf: f8:ba:c4:20:50:fa:d6:15:a7:78:6b:e4:c6:02:f1: 41:fa:6c:26:9d:5c:93:93:1c:d4:0e:66:10:fd:79: 33:2c:8d:c3:67:a5:c2:77:7d:c1:1b:24:18:20:21: dc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CD:66:C4:28:9B:16:37:1F:6C:1C:75:C2:63:FD:9E:93:59:5C:B7 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9ce9096b-9364-4bb7-8d0f-cf108645dca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.48.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:c4:91:5f:cd:1b:14:3d:8f:00:2c:29:9f:3e:dd:88:23:72: e9:a9:b1:4b:dd:86:8f:74:c1:84:fb:2c:3b:02:39:ae:8e:13: c2:fd:ac:65:f1:4e:97:02:53:91:12:8e:c7:c5:a2:64:84:44: e1:af:fd:8b:24:2c:de:a0:96:f8:c1:d8:d4:99:15:79:5e:1c: a8:16:b4:07:1d:6e:ee:1a:ca:d5:96:59:1e:2c:31:ed:a5:8c: 49:46:09:8b:d6:29:c2:2e:1b:f1:5f:c2:1e:cb:f4:35:98:3d: c7:e6:ea:a6:a4:e7:ac:dc:3a:07:a8:ca:4c:c9:e9:48:43:c7: b5:3d:f3:ed:db:63:ee:ab:4d:47:7f:0a:3d:b2:b3:91:32:87: 5d:77:da:0f:fa:38:70:0e:ad:15:95:3c:1f:3e:ec:52:51:cd: f1:2b:db:1a:a3:ba:8c:fb:8a:e0:2e:9f:8e:59:42:3e:eb:c0: 6c:9d:7d:62:98:df:d2:7b:04:49:76:f5:49:7e:78:40:7a:53: 47:de:d3:36:a6:55:03:9a:3e:6b:bb:d8:73:e5:08:84:88:4b: b0:89:a0:50:6e:70:48:8a:a2:45:33:ad:09:fb:b5:6b:3c:32: 95:aa:b6:90:a1:d6:e4:25:bd:86:c1:e2:1e:e1:2c:29:5c:1c: 65:c1:08:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNaG3RjhS5iWsibnD0qrQiXf4I2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDEzMTc1NTAxWhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGY4OWI1MmQ1NzBkNDNiNjViNGNlYzI3YjZmZjUyMmM1 MmQwOGQ2MTk4YzEyYjQyNzA2Y2EwMjdlMmY3NjJlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmpush+00iD8vtm38a4T/LTpJeniTK23joaDgcUjtEMp2P abqYJNnMv34C3GlZeTuinmob0HdT8m6PzhKz0QzFe1jsh2ArWzhwmBUwr3fc53Ls 72RQ5VL9nbvwd3PtDWRAHfrFpeSsUH/cBNTEYDy3Ct/NBpH9XCUsGa4ANTXoyJmT x2UdAkXBoX4x8WodEpvPOAMLXVJij/kJeub1GQm4nu/rVQL5nYat3YYhUNQ5NnzX HSFJ8Q5EuRwCQS6SlY8XKAeIu2dg5NVDuppX9j2gz/i6xCBQ+tYVp3hr5MYC8UH6 bCadXJOTHNQOZhD9eTMsjcNnpcJ3fcEbJBggIdxXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTs1mxCibFjcfbBx1wmP9npNZXLcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzljZTkwOTZiLTkzNjQtNGJiNy04ZDBmLWNmMTA4NjQ1ZGNhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDAwDQYJKoZIhvcNAQELBQADggEBAH/EkV/NGxQ9jwAsKZ8+3Ygjcump sUvdho90wYT7LDsCOa6OE8L9rGXxTpcCU5ESjsfFomSEROGv/YskLN6glvjB2NSZ FXleHKgWtAcdbu4aytWWWR4sMe2ljElGCYvWKcIuG/Ffwh7L9DWYPcfm6qak56zc OgeoykzJ6UhDx7U98+3bY+6rTUd/Cj2ys5Eyh1132g/6OHAOrRWVPB8+7FJRzfEr 2xqjuoz7iuAun45ZQj7rwGydfWKY39J7BEl29Ul+eEB6U0fe0zamVQOaPmu72HPl CISIS7CJoFBucEiKokUzrQn7tWs8MpWqtpCh1uQlvYbB4h7hLClcHGXBCLA= -----END CERTIFICATE-----Generated at Sun Oct 19 22:57:27 2025 by rpki-client