$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ad8fff98-4abc-4324-8c36-b77778f66799.roa File: ad8fff98-4abc-4324-8c36-b77778f66799.roa (raw, json) Hash identifier: 0On9m9Vs6rDm7PXBXOIvdZxERdWrKwbAlaoEm1G54zA= Subject key identifier: D5:75:F2:C7:B1:33:09:F4:B2:6C:CE:1D:21:CA:0E:14:AC:DD:1A:4E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7A88CCEA74889A7E47ED02101A7C68FDCE296359 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ad8fff98-4abc-4324-8c36-b77778f66799.roa Signing time: Fri 10 Oct 2025 17:04:51 +0000 ROA not before: Fri 10 Oct 2025 17:04:51 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:88:cc:ea:74:88:9a:7e:47:ed:02:10:1a:7c:68:fd:ce:29:63:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 10 17:04:51 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=188b7393f509313de1fcafad1ba2c92062514e3dc36f086095ccb51ab2549b81, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:41:9d:15:a3:9e:b0:c0:16:fb:a6:3e:e2:10: 59:91:f2:ec:05:ae:83:58:b1:81:30:72:6a:2c:45: 14:01:96:9b:d4:2f:c5:66:77:15:8d:6e:e3:c2:ee: af:b3:8b:74:4a:5a:bf:3f:b4:c9:fd:f0:03:33:10: 7d:f4:97:87:c2:45:46:e4:d8:31:1e:a9:21:16:d6: 5e:07:16:11:2a:23:f6:33:75:1d:10:de:ca:ce:b9: 6d:e9:23:3a:62:8d:ee:8a:7d:ba:6b:f8:c8:2b:01: be:94:94:49:55:49:3d:07:ad:8d:89:a7:0e:f4:4c: 71:bf:2c:4f:e9:19:15:24:0b:df:cc:cf:52:68:b1: dc:34:35:df:37:74:10:aa:40:fc:10:8a:01:a4:c2: 2b:d1:57:61:c8:02:e2:34:e5:78:ec:eb:78:77:99: 15:3c:42:93:79:04:68:75:5b:1a:5b:5c:d1:fd:6d: 6e:a6:0c:d3:38:f2:7f:2f:db:a5:cc:b5:e2:cd:65: 62:bb:9a:32:00:b5:44:fc:9c:5d:1a:a7:19:73:eb: 77:4d:2a:49:e9:5d:d5:0f:81:c2:48:d5:36:cb:68: df:35:c7:49:d6:ab:6d:ec:0a:b8:14:3b:0d:38:b4: e2:98:c3:f2:ee:da:bd:98:19:70:16:78:55:e7:0d: 58:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:75:F2:C7:B1:33:09:F4:B2:6C:CE:1D:21:CA:0E:14:AC:DD:1A:4E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ad8fff98-4abc-4324-8c36-b77778f66799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.33.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:67:9b:0a:82:a7:cc:6c:a3:a3:d2:34:42:71:84:2e:48:e7: 33:0f:a6:04:7b:a6:96:5b:75:3d:ad:ba:82:55:57:aa:64:7e: 51:e2:48:65:ed:6b:1c:3c:73:22:20:ba:7f:45:7e:4f:b8:82: c3:45:4a:05:03:09:73:fd:18:11:e8:4d:3e:7a:b0:1e:ee:be: cc:9c:92:a4:2c:0a:ee:2d:45:38:33:ce:c4:da:d8:86:8c:29: 92:b0:4e:3f:9b:de:89:20:a6:f5:cd:43:a4:36:25:e6:60:52: bc:57:6c:92:c9:fe:20:38:44:e8:59:65:76:58:5c:a8:59:5a: f7:a6:c5:e6:9d:c1:32:a1:70:f3:47:86:65:37:99:4f:b6:d0: eb:f4:af:3e:11:6e:54:e4:00:0b:e1:5f:4a:e4:65:7d:92:bd: c1:7f:68:db:3e:bf:75:e9:66:69:46:95:a1:bf:f0:c4:44:c0: 75:4b:f6:2b:7e:2e:b9:8a:24:0d:59:bc:7f:0c:95:57:bf:8c: e4:f7:b4:01:15:73:5e:82:a8:83:28:ac:78:69:96:db:21:d9: 28:7e:ab:0a:31:9b:14:d6:5c:ff:86:e5:41:89:ea:c9:d3:26: 44:94:06:39:c9:6d:15:07:3d:23:10:b8:e9:c3:bc:c5:16:8e: f4:f3:50:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeojM6nSImn5H7QIQGnxo/c4pY1kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDEwMTcwNDUxWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxODhiNzM5M2Y1MDkzMTNkZTFmY2FmYWQxYmEyYzkyMDYy NTE0ZTNkYzM2ZjA4NjA5NWNjYjUxYWIyNTQ5YjgxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMQZ0Vo56wwBb7pj7iEFmR8uwFroNYsYEwcmosRRQBlpvU L8VmdxWNbuPC7q+zi3RKWr8/tMn98AMzEH30l4fCRUbk2DEeqSEW1l4HFhEqI/Yz dR0Q3srOuW3pIzpije6Kfbpr+MgrAb6UlElVST0HrY2Jpw70THG/LE/pGRUkC9/M z1Josdw0Nd83dBCqQPwQigGkwivRV2HIAuI05Xjs63h3mRU8QpN5BGh1WxpbXNH9 bW6mDNM48n8v26XMteLNZWK7mjIAtUT8nF0apxlz63dNKknpXdUPgcJI1TbLaN81 x0nWq23sCrgUOw04tOKYw/Lu2r2YGXAWeFXnDViNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1XXyx7EzCfSybM4dIcoOFKzdGk4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2FkOGZmZjk4LTRhYmMtNDMyNC04YzM2LWI3Nzc3OGY2Njc5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCEwDQYJKoZIhvcNAQELBQADggEBABtnmwqCp8xso6PSNEJxhC5I5zMP pgR7ppZbdT2tuoJVV6pkflHiSGXtaxw8cyIgun9Ffk+4gsNFSgUDCXP9GBHoTT56 sB7uvsyckqQsCu4tRTgzzsTa2IaMKZKwTj+b3okgpvXNQ6Q2JeZgUrxXbJLJ/iA4 ROhZZXZYXKhZWvemxeadwTKhcPNHhmU3mU+20Ov0rz4RblTkAAvhX0rkZX2SvcF/ aNs+v3XpZmlGlaG/8MREwHVL9it+LrmKJA1ZvH8MlVe/jOT3tAEVc16CqIMorHhp ltsh2Sh+qwoxmxTWXP+G5UGJ6snTJkSUBjnJbRUHPSMQuOnDvMUWjvTzUFI= -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:09 2025 by rpki-client