$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa File: a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa (raw, json) Hash identifier: 4UOVR957cNTmcGiROVgYR/ZffdDvt8by7wXH53WyUmw= Subject key identifier: 60:B3:CB:3A:A8:53:D6:EF:D4:BE:87:88:05:45:E4:15:20:1F:41:8F Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 36FBFE47F2B5DC052C85517C6B4E0CC5A84ACBA9 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa Signing time: Sun 19 Oct 2025 04:00:16 +0000 ROA not before: Sun 19 Oct 2025 04:00:16 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fb:fe:47:f2:b5:dc:05:2c:85:51:7c:6b:4e:0c:c5:a8:4a:cb:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 04:00:16 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=f2074b2d67b2b04e3661ddd48b73991e8f497bc62fc1d02f75988ee00ed7074f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:49:9c:07:a0:eb:6c:4f:97:1c:5d:88:4e: 58:58:e1:99:66:bd:25:7f:df:d3:e0:45:4e:df:b8: 74:de:a6:8d:f9:b9:6d:62:fa:d4:fe:34:43:24:00: fb:87:39:3f:3c:72:90:45:29:1b:79:41:77:57:44: 23:96:6b:82:7b:26:88:f7:5f:b9:58:5a:5d:10:b1: 69:af:b7:b3:93:e1:d9:3a:6b:d5:45:72:4a:6f:df: c1:e9:f9:d9:60:e7:1f:27:20:3b:5d:6f:ba:51:56: 2e:4b:82:5b:4a:65:9e:b6:f7:0f:0b:76:58:2b:91: 28:c4:ab:0e:52:85:8f:d6:52:a4:27:5c:ca:51:1e: 47:8a:26:38:91:cf:ed:ba:99:cf:b0:c6:31:81:d4: e0:52:9a:0a:20:2b:3d:28:76:32:71:ee:f6:46:a3: 75:1f:ef:fd:33:0d:e1:c4:e5:75:35:14:6d:12:a6: e7:4b:8a:68:2b:18:6c:b0:15:b5:97:f5:92:a1:f0: 5e:5a:af:70:f2:37:64:7b:00:d1:00:ca:b3:d2:35: 4c:6e:2a:b7:f1:34:a9:91:ae:47:30:98:63:d0:cf: f5:3d:f2:6c:c0:d6:3d:04:16:b3:f5:30:f4:ef:2b: d7:3b:21:2f:80:7a:c0:92:7f:53:80:01:bf:e1:46: 84:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B3:CB:3A:A8:53:D6:EF:D4:BE:87:88:05:45:E4:15:20:1F:41:8F X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.40.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:90:83:c7:2b:ed:23:dc:4e:7a:df:a9:26:56:47:df:5a:c3: 78:c4:e2:93:d5:06:47:08:f0:f4:fd:06:9c:10:53:29:2b:92: 82:66:ba:96:4b:64:67:81:72:2b:ba:02:b0:51:66:34:6a:20: ad:42:8f:23:d3:4f:0b:3c:b2:40:71:3d:d6:09:57:f8:86:a7: 73:88:2c:0e:79:a0:cc:6a:fc:47:18:26:0f:db:c6:27:ea:34: b3:a3:a8:f1:3e:b0:3c:2e:c2:2d:f8:e9:7b:e0:63:9e:fb:f9: 4b:32:a3:af:8e:a4:31:43:04:f1:08:6b:62:5d:50:82:ad:b6: 31:65:ce:89:02:73:e5:0d:47:59:95:46:a4:17:da:ea:ff:8f: bd:fc:82:c9:f0:63:76:ce:3d:e8:f5:42:d8:51:2c:e0:95:16: a1:c1:9d:fb:75:be:60:17:3b:17:53:45:38:b6:9e:17:e1:c9: 44:6c:fc:cc:62:08:7a:b0:0c:db:37:5d:c8:41:18:69:13:22: f8:16:27:5d:85:bd:74:f9:fb:cc:af:1e:af:1f:c5:84:b5:34: 28:95:8e:af:70:9e:4f:f2:f3:1d:0d:a9:00:9b:9a:02:17:c9: 29:58:e3:d4:82:be:41:b0:12:20:2f:27:fe:b9:61:ad:d2:4c: 9a:71:a8:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNvv+R/K13AUshVF8a04MxahKy6kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDE5MDQwMDE2WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjA3NGIyZDY3YjJiMDRlMzY2MWRkZDQ4YjczOTkxZThm NDk3YmM2MmZjMWQwMmY3NTk4OGVlMDBlZDcwNzRmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0Y0mcB6DrbE+XHF2ITlhY4ZlmvSV/39PgRU7fuHTepo35 uW1i+tT+NEMkAPuHOT88cpBFKRt5QXdXRCOWa4J7Joj3X7lYWl0QsWmvt7OT4dk6 a9VFckpv38Hp+dlg5x8nIDtdb7pRVi5LgltKZZ629w8LdlgrkSjEqw5ShY/WUqQn XMpRHkeKJjiRz+26mc+wxjGB1OBSmgogKz0odjJx7vZGo3Uf7/0zDeHE5XU1FG0S pudLimgrGGywFbWX9ZKh8F5ar3DyN2R7ANEAyrPSNUxuKrfxNKmRrkcwmGPQz/U9 8mzA1j0EFrP1MPTvK9c7IS+AesCSf1OAAb/hRoRFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYLPLOqhT1u/UvoeIBUXkFSAfQY8wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E3MmViYjk5LWFlY2UtNDlhYS05ZjI5LTFmMDI4NmI4NGY0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCgwDQYJKoZIhvcNAQELBQADggEBAFqQg8cr7SPcTnrfqSZWR99aw3jE 4pPVBkcI8PT9BpwQUykrkoJmupZLZGeBciu6ArBRZjRqIK1CjyPTTws8skBxPdYJ V/iGp3OILA55oMxq/EcYJg/bxifqNLOjqPE+sDwuwi346XvgY577+Usyo6+OpDFD BPEIa2JdUIKttjFlzokCc+UNR1mVRqQX2ur/j738gsnwY3bOPej1QthRLOCVFqHB nft1vmAXOxdTRTi2nhfhyURs/MxiCHqwDNs3XchBGGkTIvgWJ12FvXT5+8yvHq8f xYS1NCiVjq9wnk/y8x0NqQCbmgIXySlY49SCvkGwEiAvJ/65Ya3STJpxqI4= -----END CERTIFICATE-----Generated at Sun Oct 19 23:34:01 2025 by rpki-client