$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cbeb8f06-bf9f-439c-ab1a-d61e5c2b6028.roa File: cbeb8f06-bf9f-439c-ab1a-d61e5c2b6028.roa (raw, json) Hash identifier: 9DBro5uHKCuQjoFf0NZ9wSFQg3RXzZ4ppfyakTtHaW0= Subject key identifier: A9:0F:74:4F:2C:0A:5B:DD:E9:5D:48:26:2D:7F:92:DB:10:EB:4A:E9 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0B7A11E44AAA93BD825F3A61417FAA283954DC17 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cbeb8f06-bf9f-439c-ab1a-d61e5c2b6028.roa Signing time: Fri 10 Oct 2025 17:05:17 +0000 ROA not before: Fri 10 Oct 2025 17:05:17 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7a:11:e4:4a:aa:93:bd:82:5f:3a:61:41:7f:aa:28:39:54:dc:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 10 17:05:17 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=e4656a8f12ce6b268f57f11547ff605da29e5aaee9ae9b5ccccfddc991079b31, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:18:63:19:21:8e:4a:ab:ff:72:ba:25:68: e9:26:ed:6b:eb:00:65:72:96:bd:c7:8f:32:f1:27: c6:4c:13:e9:6f:3f:9f:15:a5:1e:03:1d:38:0f:71: 68:0d:89:be:f4:3e:d7:c0:d4:c4:14:dd:33:9d:60: 3d:55:b2:91:31:96:c3:02:76:81:0e:1f:23:28:b4: e7:e3:6a:fd:ce:6e:c4:71:ba:0a:68:68:8a:04:a5: 3a:6a:49:dd:96:00:1a:a8:7b:c9:a5:5a:4e:77:97: 4f:ea:83:69:c1:7d:7f:94:d0:d9:e5:10:0a:f5:03: 2d:30:c8:d7:e3:8c:5f:da:6e:04:5b:04:62:dd:90: 3d:50:99:47:b6:f2:09:34:1d:8e:7e:52:94:91:f6: f0:70:23:d2:14:52:5a:21:35:c7:c7:89:f1:ef:9b: 2b:d1:53:96:9f:1a:92:60:7b:50:6b:9e:03:91:46: 58:d1:89:fa:92:36:c1:16:6d:d8:a3:4a:4b:15:32: 5d:35:e7:e7:0a:0e:a8:6d:c4:b6:9a:33:cc:f9:0e: b9:c5:83:99:d7:ce:72:6c:ba:f7:7f:d3:a8:b0:be: 3f:1a:9c:3d:61:7f:6c:9a:71:d6:ee:d4:de:41:18: f4:86:fb:87:65:dc:1a:11:24:a0:3e:87:92:96:91: 2b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0F:74:4F:2C:0A:5B:DD:E9:5D:48:26:2D:7F:92:DB:10:EB:4A:E9 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cbeb8f06-bf9f-439c-ab1a-d61e5c2b6028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.144.0/22 Signature Algorithm: sha256WithRSAEncryption 46:72:0f:a5:29:d9:78:a5:c7:b3:22:c0:39:0e:58:23:45:55: 96:f4:13:0f:32:5d:7d:d8:c8:38:73:55:f6:b9:90:9b:e3:a5: c9:1c:34:44:44:ac:79:d0:b2:c2:49:a9:0f:9a:66:82:d9:2d: a2:39:5a:39:13:8b:cf:1b:84:3c:4a:48:1e:2a:1e:0f:fb:92: 67:b3:e7:ae:ea:65:d6:c4:98:3c:51:a7:a2:bc:7f:15:9f:7e: 87:bd:e9:2b:7d:37:a6:7e:75:fe:db:dc:ab:b3:0c:21:80:ca: b9:b8:b7:ab:05:9d:f0:7e:a3:8b:05:4f:d4:0c:c9:d1:35:ad: 47:99:2d:a6:8e:cc:16:0f:38:ba:11:a3:a2:92:dc:9c:c3:13: 3f:db:a6:54:39:48:02:b6:91:f9:20:87:4d:20:a1:72:be:68: 5c:3d:d3:49:a8:01:86:0d:a5:fe:b5:9c:61:3a:5c:ed:e6:2a: 05:d7:ef:06:81:fc:35:e6:47:1c:62:6a:06:68:37:8c:dd:6b: 2d:5c:47:10:c4:0f:47:fc:80:34:89:70:da:d6:9e:99:0b:b9: cb:ae:46:af:9a:68:96:fb:7a:19:75:71:9a:29:7a:5d:07:50: 1d:c0:2f:c8:a6:68:f0:e9:bd:9d:9e:c6:ae:b3:92:3c:a6:71: a7:cc:f3:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC3oR5Eqqk72CXzphQX+qKDlU3BcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDEwMTcwNTE3WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDY1NmE4ZjEyY2U2YjI2OGY1N2YxMTU0N2ZmNjA1ZGEy OWU1YWFlZTlhZTliNWNjY2NmZGRjOTkxMDc5YjMxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1sRhjGSGOSqv/crolaOkm7WvrAGVylr3HjzLxJ8ZME+lv P58VpR4DHTgPcWgNib70PtfA1MQU3TOdYD1VspExlsMCdoEOHyMotOfjav3ObsRx ugpoaIoEpTpqSd2WABqoe8mlWk53l0/qg2nBfX+U0NnlEAr1Ay0wyNfjjF/abgRb BGLdkD1QmUe28gk0HY5+UpSR9vBwI9IUUlohNcfHifHvmyvRU5afGpJge1BrngOR RljRifqSNsEWbdijSksVMl015+cKDqhtxLaaM8z5DrnFg5nXznJsuvd/06iwvj8a nD1hf2yacdbu1N5BGPSG+4dl3BoRJKA+h5KWkStXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqQ90TywKW93pXUgmLX+S2xDrSukwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2NiZWI4ZjA2LWJmOWYtNDM5Yy1hYjFhLWQ2MWU1YzJiNjAyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYJAwDQYJKoZIhvcNAQELBQADggEBAEZyD6Up2Xilx7MiwDkOWCNFVZb0 Ew8yXX3YyDhzVfa5kJvjpckcNERErHnQssJJqQ+aZoLZLaI5WjkTi88bhDxKSB4q Hg/7kmez567qZdbEmDxRp6K8fxWffoe96St9N6Z+df7b3KuzDCGAyrm4t6sFnfB+ o4sFT9QMydE1rUeZLaaOzBYPOLoRo6KS3JzDEz/bplQ5SAK2kfkgh00goXK+aFw9 00moAYYNpf61nGE6XO3mKgXX7waB/DXmRxxiagZoN4zday1cRxDED0f8gDSJcNrW npkLucuuRq+aaJb7ehl1cZopel0HUB3AL8imaPDpvZ2exq6zkjymcafM8+U= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:04 2025 by rpki-client