$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b87b1635-006a-405d-b6c6-d32ebea9ae0f.roa File: b87b1635-006a-405d-b6c6-d32ebea9ae0f.roa (raw, json) Hash identifier: qsxy3EnnfmirGiqCrZ7Axh3pDCQnAsuo+5y31I0LBno= Subject key identifier: 43:00:5C:50:72:66:2F:B3:AC:D1:A3:97:C3:E9:01:38:38:CB:E2:6D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 47EB330B59F3B89198E0DC2CB9C5795B215E6BDC Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b87b1635-006a-405d-b6c6-d32ebea9ae0f.roa Signing time: Fri 10 Oct 2025 17:05:39 +0000 ROA not before: Fri 10 Oct 2025 17:05:39 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:eb:33:0b:59:f3:b8:91:98:e0:dc:2c:b9:c5:79:5b:21:5e:6b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 10 17:05:39 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=2cf0d2e9e86f07e3bbe38e2aee005220799a3cf3552a3ea888ab9fb11b2ece7d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:06:47:4b:51:ad:d9:70:e5:f3:63:e7:eb:a8: 03:a0:35:4f:35:12:7a:9a:37:bf:1c:eb:89:36:8e: 61:6c:9e:ac:2d:2a:8f:17:de:3b:dc:c6:1c:a6:b5: 93:e9:98:b2:f3:6a:76:75:f3:7a:af:7d:df:c9:d7: 18:d3:d6:02:23:47:40:d8:73:8c:87:82:24:60:a2: 68:0c:e3:95:60:96:4d:e5:07:a3:e9:f6:03:6b:6a: fc:4a:8b:2f:f8:d0:bf:28:07:2b:e8:55:b0:22:dd: a6:8e:56:55:8c:df:ac:95:f8:3c:c1:5e:02:d0:da: bf:39:10:60:a1:9d:b2:89:71:97:0e:d3:24:df:d5: 25:2a:fc:d9:92:c4:12:1e:dc:99:0d:36:1a:68:da: 42:06:2a:69:cd:02:ab:48:79:10:a1:a0:98:55:27: 62:5f:61:9e:f7:e2:68:94:4c:3c:e3:6e:78:fd:71: bf:9e:6b:a5:0e:77:78:fa:c7:3a:48:ed:a5:c6:3c: 6a:40:21:a3:e2:6e:a8:be:13:7a:1f:36:b7:4a:9d: 51:e8:00:ed:b5:65:88:0a:68:d7:96:56:29:06:97: c1:a2:48:27:68:eb:b9:f8:69:11:41:e1:1a:2a:44: 72:33:aa:30:96:c4:b3:54:b1:f0:05:3a:ca:51:eb: af:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:00:5C:50:72:66:2F:B3:AC:D1:A3:97:C3:E9:01:38:38:CB:E2:6D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b87b1635-006a-405d-b6c6-d32ebea9ae0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.112.0/22 Signature Algorithm: sha256WithRSAEncryption 65:ac:9d:63:a3:7a:ec:fb:50:08:e5:60:7b:10:82:3b:ba:38: ca:85:af:1b:a2:1a:d2:89:e7:ca:9d:5b:b8:86:71:0e:df:06: 1f:53:97:18:a4:dc:e9:c3:75:22:39:62:ec:3b:af:3d:51:79: c6:8e:46:1c:e4:79:73:d9:62:14:d9:39:16:75:07:f1:fe:82: 82:a5:7a:4f:67:76:23:9b:e9:5e:b7:a5:7f:f8:04:62:8f:38: 46:32:1a:bc:9e:b6:3f:6f:44:f2:12:cd:7b:ca:a1:5b:d2:59: e6:88:11:47:bf:51:44:ef:db:3c:fd:4b:a9:49:4e:53:1a:a4: 83:67:0d:ef:76:3e:82:4d:d6:3a:98:fd:6f:31:38:dd:d5:01: d9:19:b5:ea:c2:15:87:09:bf:6e:90:44:64:02:ee:fc:44:5d: 9c:19:f5:b7:e2:e7:fc:f2:04:d6:5e:38:35:b6:e8:a9:95:34: 80:71:1a:e0:87:c9:68:94:43:8f:0f:75:61:ed:1d:fc:8d:20: e0:ed:13:2f:49:b6:88:23:0c:1b:87:9c:b8:c8:b0:b3:be:3a: 01:3b:8c:0f:69:a8:39:c2:b9:dc:36:1c:30:22:5d:25:bf:89: a0:e8:6c:89:63:87:2b:de:f8:61:c2:a7:53:5e:63:78:fe:e7: b3:45:d0:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR+szC1nzuJGY4NwsucV5WyFea9wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDEwMTcwNTM5WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2YwZDJlOWU4NmYwN2UzYmJlMzhlMmFlZTAwNTIyMDc5 OWEzY2YzNTUyYTNlYTg4OGFiOWZiMTFiMmVjZTdkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcBkdLUa3ZcOXzY+frqAOgNU81EnqaN78c64k2jmFsnqwt Ko8X3jvcxhymtZPpmLLzanZ183qvfd/J1xjT1gIjR0DYc4yHgiRgomgM45Vglk3l B6Pp9gNravxKiy/40L8oByvoVbAi3aaOVlWM36yV+DzBXgLQ2r85EGChnbKJcZcO 0yTf1SUq/NmSxBIe3JkNNhpo2kIGKmnNAqtIeRChoJhVJ2JfYZ734miUTDzjbnj9 cb+ea6UOd3j6xzpI7aXGPGpAIaPibqi+E3ofNrdKnVHoAO21ZYgKaNeWVikGl8Gi SCdo67n4aRFB4RoqRHIzqjCWxLNUsfAFOspR66+LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQwBcUHJmL7Os0aOXw+kBODjL4m0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2I4N2IxNjM1LTAwNmEtNDA1ZC1iNmM2LWQzMmViZWE5YWUwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYHAwDQYJKoZIhvcNAQELBQADggEBAGWsnWOjeuz7UAjlYHsQgju6OMqF rxuiGtKJ58qdW7iGcQ7fBh9Tlxik3OnDdSI5Yuw7rz1RecaORhzkeXPZYhTZORZ1 B/H+goKlek9ndiOb6V63pX/4BGKPOEYyGryetj9vRPISzXvKoVvSWeaIEUe/UUTv 2zz9S6lJTlMapINnDe92PoJN1jqY/W8xON3VAdkZterCFYcJv26QRGQC7vxEXZwZ 9bfi5/zyBNZeODW26KmVNIBxGuCHyWiUQ48PdWHtHfyNIODtEy9JtogjDBuHnLjI sLO+OgE7jA9pqDnCudw2HDAiXSW/iaDobIljhyve+GHCp1NeY3j+57NF0AM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:36:23 2025 by rpki-client