$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f707ad54-c24d-4a4f-a4d7-a2aad3821000.roa File: f707ad54-c24d-4a4f-a4d7-a2aad3821000.roa (raw, json) Hash identifier: +KiP53SWRXoKyxGKEG2yJrKV/rJ9oM1HPFlRbq1QriY= Subject key identifier: 91:B0:3A:D8:0C:B4:DE:56:0C:6C:BC:9A:40:E8:5C:7B:4F:C6:D5:B3 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 57E1A993BCFB6CBB1AA9CB22F25703E9B90CE584 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f707ad54-c24d-4a4f-a4d7-a2aad3821000.roa Signing time: Sun 19 Oct 2025 04:00:15 +0000 ROA not before: Sun 19 Oct 2025 04:00:15 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e1:a9:93:bc:fb:6c:bb:1a:a9:cb:22:f2:57:03:e9:b9:0c:e5:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 04:00:15 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=0c9a9ac9d142efb9ba17a5054b44fffc6f64b7fdd6d0b2123f4914cdcc5ea01a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:33:31:39:f3:17:90:92:d4:b6:b0:ed:2b: 0c:7a:3d:06:a0:e8:ff:da:de:24:b4:12:c3:58:9d: 28:b0:a3:55:6d:c9:a1:63:50:38:9b:a8:e5:80:ac: ce:b1:36:ae:e5:a6:c1:06:e5:83:2c:37:99:e0:58: e2:1a:92:be:a3:a7:88:70:93:56:5b:8f:c8:9e:d2: 57:bf:bc:21:29:1f:ae:0c:e5:91:46:1e:6e:df:84: 37:72:cd:97:69:14:67:c2:a6:d9:b2:4f:1b:92:73: 81:d7:6b:df:76:33:93:70:49:ea:f2:64:d0:f2:ad: c7:46:c2:4e:1b:1d:05:13:97:1c:9a:bf:a5:d3:23: 3a:b8:64:3e:74:e3:e9:e7:aa:db:00:fe:cc:33:e9: 6e:23:b7:0c:28:81:24:1e:75:68:3e:66:ab:02:51: 6a:f4:32:3a:de:cd:d9:c3:32:83:00:cf:4e:21:35: 89:32:4e:0f:2a:3d:84:f6:de:cc:62:e1:c7:85:f2: 65:8d:f4:6d:d6:f6:47:9c:89:82:4d:cf:9e:d6:ac: 21:38:9d:28:42:26:47:2d:d8:af:a3:d5:a4:70:ba: 16:bd:13:ae:9e:2a:c0:4d:f7:b9:ae:ff:51:12:9e: 1e:3e:6e:0e:74:87:8c:99:3d:41:c2:cb:0c:13:c7: 53:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B0:3A:D8:0C:B4:DE:56:0C:6C:BC:9A:40:E8:5C:7B:4F:C6:D5:B3 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f707ad54-c24d-4a4f-a4d7-a2aad3821000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.39.0/24 Signature Algorithm: sha256WithRSAEncryption 74:2d:81:34:ca:17:f3:bd:4c:10:9e:04:20:42:df:e5:62:b6: eb:e6:ef:ac:25:c4:23:2a:36:d2:e6:f0:34:07:b2:6e:50:26: 44:ae:fa:cb:39:0f:6f:2a:fc:93:90:e6:ca:96:a7:30:a1:90: 2e:c2:78:12:6c:e4:f6:11:36:dc:9e:2e:26:c9:94:6c:1f:bf: 38:2d:3d:19:d6:36:91:f3:d9:d9:94:ed:87:58:f0:3d:46:99: 6d:77:a2:74:e1:36:9f:0b:89:fc:ae:2d:db:47:30:62:cf:cc: 74:d9:3c:36:1d:f4:cf:87:47:8e:f8:d1:c2:4c:fb:71:20:2b: 12:26:38:37:ff:0f:c4:6c:a7:40:9c:09:ab:22:5b:0a:f8:96: 67:e5:75:36:81:a8:a3:e9:30:c4:b2:e8:4c:da:44:f2:fa:7d: cc:91:e7:53:8a:d7:1c:95:7a:50:7c:76:9d:ea:bd:ac:99:d5: 8e:f7:33:b6:a3:00:f6:19:73:c4:41:55:e5:8f:d1:c4:45:00: d7:32:b3:59:56:da:21:15:77:c3:0c:c9:2f:2d:49:85:1d:b2: c2:7f:ef:9b:25:d2:3b:db:42:eb:1d:f4:23:0a:96:8d:62:26: 19:ef:78:64:2d:b1:f4:eb:18:df:47:e3:9f:da:64:6f:bc:5e: a4:45:76:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV+Gpk7z7bLsaqcsi8lcD6bkM5YQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDE5MDQwMDE1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzlhOWFjOWQxNDJlZmI5YmExN2E1MDU0YjQ0ZmZmYzZm NjRiN2ZkZDZkMGIyMTIzZjQ5MTRjZGNjNWVhMDFhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZjTMxOfMXkJLUtrDtKwx6PQag6P/a3iS0EsNYnSiwo1Vt yaFjUDibqOWArM6xNq7lpsEG5YMsN5ngWOIakr6jp4hwk1Zbj8ie0le/vCEpH64M 5ZFGHm7fhDdyzZdpFGfCptmyTxuSc4HXa992M5NwSeryZNDyrcdGwk4bHQUTlxya v6XTIzq4ZD504+nnqtsA/swz6W4jtwwogSQedWg+ZqsCUWr0MjrezdnDMoMAz04h NYkyTg8qPYT23sxi4ceF8mWN9G3W9keciYJNz57WrCE4nShCJkct2K+j1aRwuha9 E66eKsBN97mu/1ESnh4+bg50h4yZPUHCywwTx1OjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkbA62Ay03lYMbLyaQOhce0/G1bMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Y3MDdhZDU0LWMyNGQtNGE0Zi1hNGQ3LWEyYWFkMzgyMTAwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCcwDQYJKoZIhvcNAQELBQADggEBAHQtgTTKF/O9TBCeBCBC3+Vituvm 76wlxCMqNtLm8DQHsm5QJkSu+ss5D28q/JOQ5sqWpzChkC7CeBJs5PYRNtyeLibJ lGwfvzgtPRnWNpHz2dmU7YdY8D1GmW13onThNp8LifyuLdtHMGLPzHTZPDYd9M+H R4740cJM+3EgKxImODf/D8Rsp0CcCasiWwr4lmfldTaBqKPpMMSy6EzaRPL6fcyR 51OK1xyVelB8dp3qvayZ1Y73M7ajAPYZc8RBVeWP0cRFANcys1lW2iEVd8MMyS8t SYUdssJ/75sl0jvbQusd9CMKlo1iJhnveGQtsfTrGN9H45/aZG+8XqRFdn0= -----END CERTIFICATE-----Generated at Mon Oct 20 22:41:56 2025 by rpki-client