$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa File: dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa (raw, json) Hash identifier: WN/WNr8tOsFq6Y/9Iqe15NtPQpBF2dT1smO1Nx+cE7M= Subject key identifier: 1F:95:60:86:78:DD:56:25:A7:19:01:CE:F0:96:AA:A2:25:7A:FD:2C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0FDCFB6EFC648F6A496909D3DFCD07EAC9C4AE76 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa Signing time: Fri 26 Sep 2025 18:00:21 +0000 ROA not before: Fri 26 Sep 2025 18:00:21 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:dc:fb:6e:fc:64:8f:6a:49:69:09:d3:df:cd:07:ea:c9:c4:ae:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 26 18:00:21 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=0755875ca2e0b52b5047f660f8b7be9ce698e1ac3934e5c030b392a40d8ff4d6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:19:c5:fb:7e:9a:21:77:1c:b5:55:5c:64:de: a1:12:31:e8:d7:bb:0c:fd:12:1c:4e:b0:32:6b:71: df:a8:67:a8:b0:2b:e9:16:5e:b7:25:d4:4a:74:33: 31:dd:e4:59:4f:15:5b:6e:9d:2c:42:52:ae:74:dd: c2:88:10:94:fd:c3:a0:c0:58:9b:1b:e2:ad:b4:4f: 04:dc:50:5f:18:50:10:2b:57:e6:58:31:00:f1:7c: 36:7c:05:ce:50:ec:26:8b:59:51:db:26:f1:e4:4c: c3:39:c7:d6:de:9e:a0:4d:b4:62:99:e2:9a:c7:92: 41:fa:53:fc:fb:ca:5f:17:3e:6a:e1:c6:c0:37:2a: 02:9b:ed:f5:9d:e5:6e:e1:09:76:21:54:5f:12:2c: d7:28:3c:b6:3f:b9:17:ac:57:bc:12:ec:ca:42:d0: 0f:ca:e6:54:46:79:90:60:83:6f:fd:f0:14:dd:c7: 01:ed:af:15:fe:91:9e:5a:9e:2a:af:af:0b:4a:9f: fc:6a:39:73:75:80:de:f4:21:a6:2d:75:95:1c:4a: d4:93:bf:f4:d0:19:0e:a9:d8:2c:3b:9b:54:eb:17: 58:04:06:5b:8e:2a:8c:99:1c:68:0c:6e:5f:f6:67: 43:80:55:ad:cf:48:f6:c9:32:74:4c:5d:f8:ff:e2: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:95:60:86:78:DD:56:25:A7:19:01:CE:F0:96:AA:A2:25:7A:FD:2C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.14.0/24 Signature Algorithm: sha256WithRSAEncryption 28:da:20:6f:02:f3:2f:08:ef:4a:d9:3c:89:02:73:bd:bf:14: 8f:5a:35:4f:b0:69:bc:d6:e4:6c:8e:54:14:a1:85:3a:16:15: bc:8a:c8:e5:51:cd:15:d3:9c:26:b6:8d:dc:a6:73:74:d7:11: 20:67:b7:2d:fb:27:02:e7:c4:41:7e:43:f6:94:78:65:af:32: cc:50:8d:43:46:62:78:f3:20:d7:eb:56:62:e0:85:44:cc:23: 3e:24:fa:1e:3e:67:d2:2b:f6:8a:a3:69:52:b8:33:bc:ce:79: 2a:71:f7:12:56:22:94:a3:de:31:0c:ba:67:ff:a4:18:6f:46: 91:5a:54:35:6e:79:a3:0f:32:55:ea:da:26:0a:a6:9a:c3:14: 28:e4:61:21:9a:67:1e:4e:70:5d:69:10:51:ef:cb:03:0f:5e: f2:41:f5:e5:b6:ee:ea:74:00:e3:e3:75:f7:ce:b3:eb:8b:a0: 73:64:1d:79:37:01:f1:99:0e:54:5e:2f:02:67:df:5d:92:5a: ad:b8:58:0f:3e:9b:63:34:a5:54:c5:91:06:0a:8f:4d:53:64: 80:36:19:c0:b3:83:7b:2f:19:51:9f:d9:b4:c6:0e:36:29:ee: 64:c6:c7:43:da:bb:2c:4c:2c:14:8e:4a:b5:4e:43:27:65:23: 98:44:89:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD9z7bvxkj2pJaQnT380H6snErnYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTI2MTgwMDIxWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzU1ODc1Y2EyZTBiNTJiNTA0N2Y2NjBmOGI3YmU5Y2U2 OThlMWFjMzkzNGU1YzAzMGIzOTJhNDBkOGZmNGQ2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZGcX7fpohdxy1VVxk3qESMejXuwz9EhxOsDJrcd+oZ6iw K+kWXrcl1Ep0MzHd5FlPFVtunSxCUq503cKIEJT9w6DAWJsb4q20TwTcUF8YUBAr V+ZYMQDxfDZ8Bc5Q7CaLWVHbJvHkTMM5x9benqBNtGKZ4prHkkH6U/z7yl8XPmrh xsA3KgKb7fWd5W7hCXYhVF8SLNcoPLY/uResV7wS7MpC0A/K5lRGeZBgg2/98BTd xwHtrxX+kZ5aniqvrwtKn/xqOXN1gN70IaYtdZUcStSTv/TQGQ6p2Cw7m1TrF1gE BluOKoyZHGgMbl/2Z0OAVa3PSPbJMnRMXfj/4n/7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH5VghnjdViWnGQHO8JaqoiV6/SwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RkNzJiMWIzLWJmYzktNDViZi04N2RjLWIwZTkwOTM3ZjE5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYA4wDQYJKoZIhvcNAQELBQADggEBACjaIG8C8y8I70rZPIkCc72/FI9a NU+wabzW5GyOVBShhToWFbyKyOVRzRXTnCa2jdymc3TXESBnty37JwLnxEF+Q/aU eGWvMsxQjUNGYnjzINfrVmLghUTMIz4k+h4+Z9Ir9oqjaVK4M7zOeSpx9xJWIpSj 3jEMumf/pBhvRpFaVDVueaMPMlXq2iYKpprDFCjkYSGaZx5OcF1pEFHvywMPXvJB 9eW27up0AOPjdffOs+uLoHNkHXk3AfGZDlReLwJn312SWq24WA8+m2M0pVTFkQYK j01TZIA2GcCzg3svGVGf2bTGDjYp7mTGx0PauyxMLBSOSrVOQydlI5hEiQo= -----END CERTIFICATE-----Generated at Mon Oct 20 08:23:05 2025 by rpki-client