$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f0a96265-a445-4e05-83b9-a3b3fd739677.roa File: f0a96265-a445-4e05-83b9-a3b3fd739677.roa (raw, json) Hash identifier: ElT4vt1q02fcgJhMNxFl1M9ulgghYQfaEIoTODoQqGg= Subject key identifier: 61:CB:37:70:5B:E1:E4:8B:18:99:9F:33:8E:65:EA:82:C1:8C:DF:7E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5F27FA0618A14E846F731FE1D9A8D9BA4E2CF48B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f0a96265-a445-4e05-83b9-a3b3fd739677.roa Signing time: Mon 06 Oct 2025 17:38:02 +0000 ROA not before: Mon 06 Oct 2025 17:38:02 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:27:fa:06:18:a1:4e:84:6f:73:1f:e1:d9:a8:d9:ba:4e:2c:f4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 6 17:38:02 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=665cebeeba658fab9ef730ea852fd7bd939d7852bff48a95df5d197ad284633a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0d:14:81:f5:37:48:51:c2:37:57:03:cf:d8: 41:2a:f6:21:42:f6:7b:37:cd:e4:d7:5d:23:9b:ed: 76:cd:4d:31:c9:11:ca:7b:b7:1c:0b:d5:16:d0:53: dc:70:48:30:3e:8f:5a:eb:01:a1:a5:8e:44:8a:01: e3:5e:a5:66:d3:fd:a5:85:87:d2:b6:9a:9a:bf:f3: f2:57:ab:0e:b4:92:18:58:97:14:ae:3c:13:77:28: ab:46:63:fb:03:7d:ab:56:c5:e3:01:45:19:0e:f9: 67:e5:79:d0:f1:8c:cc:d4:b4:a8:86:e4:00:2a:71: e0:70:f3:81:1e:56:74:b3:bd:96:b4:02:dd:cc:65: b5:64:a8:97:89:23:7a:4e:ec:6f:36:43:be:6e:70: 0a:95:60:51:ba:a2:62:1c:b4:18:3d:bf:16:3f:53: ed:cc:02:96:f7:dc:b7:72:89:bc:1c:ee:1b:1f:82: 7a:63:bb:53:d6:bd:2c:f2:48:de:2f:85:87:22:e9: 5f:cd:cf:6f:2f:7c:e2:0c:cc:87:96:c2:b6:5c:db: 44:e2:58:49:00:bc:2b:60:19:c0:f2:69:9e:6a:a1: f3:0b:90:6a:df:15:dd:1b:dc:45:cb:23:2a:51:53: 35:74:48:58:36:98:e2:fe:f3:02:1a:29:ed:2b:45: a3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CB:37:70:5B:E1:E4:8B:18:99:9F:33:8E:65:EA:82:C1:8C:DF:7E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f0a96265-a445-4e05-83b9-a3b3fd739677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.28.0/23 Signature Algorithm: sha256WithRSAEncryption 38:52:87:dc:20:e2:3d:f9:26:69:ea:2f:dc:57:81:d8:56:53: da:40:74:54:1c:f5:de:ff:46:57:23:12:8b:8a:dd:e4:4b:39: ca:d1:da:c9:1c:8e:d9:4e:f3:96:ac:33:2a:48:f5:e5:b9:cd: aa:a7:42:73:2a:7c:b6:f9:64:99:c0:62:d0:ac:50:ea:b3:29: 99:65:c0:8b:e9:42:f9:ad:19:17:f8:b1:5a:cd:59:bf:cc:8d: e1:5d:76:2d:c1:a1:a1:3a:a8:14:6d:ae:43:6e:2a:71:c2:eb: 10:a7:3c:55:d2:10:d7:6f:46:64:e1:0e:ef:34:55:4f:e6:71: 8e:c3:1b:1e:dd:7e:4a:b7:dd:ef:6e:bb:1d:31:b7:84:2e:f8: 15:75:19:d6:4b:52:2a:12:5e:32:e4:4f:0b:67:d5:5a:2d:91: b2:4e:e5:b3:cd:02:20:99:a6:e2:90:80:34:a9:d0:0f:e9:39: 16:7d:a2:97:62:70:71:d7:be:cd:80:fa:00:da:de:8d:f5:07: 84:74:e7:64:b8:96:76:e8:4e:44:88:25:f8:26:93:5b:66:f1: f4:54:ce:09:18:be:09:d8:f2:d2:1c:84:fd:5d:ec:f7:4b:1b: 01:6f:dc:7e:ae:28:eb:27:bb:26:f3:5c:f3:d1:6c:60:f7:fa: fb:73:18:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXyf6BhihToRvcx/h2ajZuk4s9IswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDA2MTczODAyWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjVjZWJlZWJhNjU4ZmFiOWVmNzMwZWE4NTJmZDdiZDkz OWQ3ODUyYmZmNDhhOTVkZjVkMTk3YWQyODQ2MzNhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQDRSB9TdIUcI3VwPP2EEq9iFC9ns3zeTXXSOb7XbNTTHJ Ecp7txwL1RbQU9xwSDA+j1rrAaGljkSKAeNepWbT/aWFh9K2mpq/8/JXqw60khhY lxSuPBN3KKtGY/sDfatWxeMBRRkO+WfledDxjMzUtKiG5AAqceBw84EeVnSzvZa0 At3MZbVkqJeJI3pO7G82Q75ucAqVYFG6omIctBg9vxY/U+3MApb33Ldyibwc7hsf gnpju1PWvSzySN4vhYci6V/Nz28vfOIMzIeWwrZc20TiWEkAvCtgGcDyaZ5qofML kGrfFd0b3EXLIypRUzV0SFg2mOL+8wIaKe0rRaOFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYcs3cFvh5IsYmZ8zjmXqgsGM334wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2YwYTk2MjY1LWE0NDUtNGUwNS04M2I5LWEzYjNmZDczOTY3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBwwDQYJKoZIhvcNAQELBQADggEBADhSh9wg4j35JmnqL9xXgdhWU9pA dFQc9d7/RlcjEouK3eRLOcrR2skcjtlO85asMypI9eW5zaqnQnMqfLb5ZJnAYtCs UOqzKZllwIvpQvmtGRf4sVrNWb/MjeFddi3BoaE6qBRtrkNuKnHC6xCnPFXSENdv RmThDu80VU/mcY7DGx7dfkq33e9uux0xt4Qu+BV1GdZLUioSXjLkTwtn1VotkbJO 5bPNAiCZpuKQgDSp0A/pORZ9opdicHHXvs2A+gDa3o31B4R052S4lnboTkSIJfgm k1tm8fRUzgkYvgnY8tIchP1d7PdLGwFv3H6uKOsnuybzXPPRbGD3+vtzGLw= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:28 2025 by rpki-client