$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ee7c9031-c441-40e5-ab76-ea41562c6c6e.roa File: ee7c9031-c441-40e5-ab76-ea41562c6c6e.roa (raw, json) Hash identifier: LppSzixdhGU9WtlD5E+Oliy5RoDf539wmyb65FuocZU= Subject key identifier: F9:8B:10:1C:3B:DA:C7:1F:01:83:8E:87:20:49:E7:FE:91:62:E0:DB Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 56A8608DEFA1E20285B080DD27C4D6BD7FCE4115 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ee7c9031-c441-40e5-ab76-ea41562c6c6e.roa Signing time: Sun 19 Oct 2025 04:00:24 +0000 ROA not before: Sun 19 Oct 2025 04:00:24 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a8:60:8d:ef:a1:e2:02:85:b0:80:dd:27:c4:d6:bd:7f:ce:41:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 04:00:24 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=a766279ef42cb6addf2d36c5c369e0b2cb7aa27c91fba935b6b74caa6a3c8b44, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:5a:e4:6d:59:ae:6b:2f:23:a7:bc:3c:53: 53:6c:e3:04:b8:be:6e:62:9b:c9:86:90:74:99:27: 4e:13:7f:2e:5e:34:60:d0:02:fa:64:37:42:de:e4: c1:0d:ee:98:99:1f:f1:8e:24:7a:6f:0e:87:a5:0f: 84:a0:08:8d:7f:83:34:18:eb:5e:6e:ba:72:af:48: e5:72:ad:38:40:b1:79:5f:dd:b8:f4:95:48:3c:39: 4e:72:a4:36:84:91:07:c3:c8:97:a7:b3:db:12:73: 4d:d7:56:97:af:49:1f:ee:3e:89:68:61:bb:af:37: 5c:26:4c:0a:47:8e:2e:e1:32:ba:06:fc:d7:f1:46: 11:9f:92:67:b5:3d:81:b0:75:68:78:9b:b5:bb:53: ce:a5:75:38:33:65:16:9c:44:f9:4e:d6:65:f1:83: 6a:2b:cd:b8:95:09:67:4b:90:79:a8:d3:d6:90:50: d7:b7:64:81:d7:5c:7e:ba:ed:13:c1:51:4a:43:32: 9c:69:24:07:0d:75:73:92:e4:3f:b8:fd:0a:54:39: 54:86:f2:34:93:7c:f9:a6:7d:49:9b:5f:d9:9a:b5: 8d:a9:bd:c9:5b:c5:75:09:7a:ab:10:3e:36:3d:a6: 36:32:93:88:1d:81:b7:47:6a:00:13:ef:1a:31:b8: dc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8B:10:1C:3B:DA:C7:1F:01:83:8E:87:20:49:E7:FE:91:62:E0:DB X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ee7c9031-c441-40e5-ab76-ea41562c6c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.45.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:d1:4f:6a:36:34:a6:dd:b1:f7:47:5d:52:05:01:1f:2a:56: 05:bd:9e:b9:9c:64:5f:05:36:b6:ad:1c:57:b1:ad:f3:65:10: 85:5c:dd:9d:f8:f6:84:bd:92:3b:9b:ff:e0:7b:95:a0:fa:b2: 15:d0:e4:1c:5d:23:b4:d4:86:e7:86:e1:e1:b8:06:cf:d2:4d: 57:39:71:af:c9:df:99:bb:4f:82:13:9f:60:37:e6:60:16:01: 16:06:44:e9:f1:5b:96:03:c2:93:b1:06:9f:14:0d:f9:09:19: a5:f8:e9:0c:d7:96:59:3a:08:1c:e8:8a:63:30:89:02:38:2d: fb:90:69:e3:d7:26:0e:6d:83:73:44:06:22:9a:39:91:2f:80: 0e:38:68:9e:54:af:d4:98:f7:d3:38:29:c8:a5:4f:cf:8c:39: bf:00:ef:9c:ee:67:df:e2:5a:20:6a:ec:e5:7b:04:05:df:f7: 64:4e:09:0f:54:b1:85:06:50:de:e8:cd:25:1f:fe:de:0d:5d: 90:2c:46:b5:f8:75:8b:51:fd:ea:f6:be:49:c4:07:e7:2d:ea: 1d:eb:9e:9c:8c:5f:3c:3f:4d:14:a6:63:c7:a3:45:51:e8:bc: fe:12:19:ed:61:71:4d:17:4f:a1:a1:20:05:94:e6:0b:5d:85: ee:0a:eb:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVqhgje+h4gKFsIDdJ8TWvX/OQRUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDE5MDQwMDI0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzY2Mjc5ZWY0MmNiNmFkZGYyZDM2YzVjMzY5ZTBiMmNi N2FhMjdjOTFmYmE5MzViNmI3NGNhYTZhM2M4YjQ0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9IlrkbVmuay8jp7w8U1Ns4wS4vm5im8mGkHSZJ04Tfy5e NGDQAvpkN0Le5MEN7piZH/GOJHpvDoelD4SgCI1/gzQY615uunKvSOVyrThAsXlf 3bj0lUg8OU5ypDaEkQfDyJens9sSc03XVpevSR/uPoloYbuvN1wmTApHji7hMroG /NfxRhGfkme1PYGwdWh4m7W7U86ldTgzZRacRPlO1mXxg2orzbiVCWdLkHmo09aQ UNe3ZIHXXH667RPBUUpDMpxpJAcNdXOS5D+4/QpUOVSG8jSTfPmmfUmbX9matY2p vclbxXUJeqsQPjY9pjYyk4gdgbdHagAT7xoxuNz/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+YsQHDvaxx8Bg46HIEnn/pFi4NswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2VlN2M5MDMxLWM0NDEtNDBlNS1hYjc2LWVhNDE1NjJjNmM2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC0wDQYJKoZIhvcNAQELBQADggEBAD/RT2o2NKbdsfdHXVIFAR8qVgW9 nrmcZF8FNratHFexrfNlEIVc3Z349oS9kjub/+B7laD6shXQ5BxdI7TUhueG4eG4 Bs/STVc5ca/J35m7T4ITn2A35mAWARYGROnxW5YDwpOxBp8UDfkJGaX46QzXllk6 CBzoimMwiQI4LfuQaePXJg5tg3NEBiKaOZEvgA44aJ5Ur9SY99M4KcilT8+MOb8A 75zuZ9/iWiBq7OV7BAXf92ROCQ9UsYUGUN7ozSUf/t4NXZAsRrX4dYtR/er2vknE B+ct6h3rnpyMXzw/TRSmY8ejRVHovP4SGe1hcU0XT6GhIAWU5gtdhe4K6w8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:52:50 2025 by rpki-client