$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa File: f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa (raw, json) Hash identifier: F0eWNqe9VQ48NlE548aAcICfX288ejUx1tinYb3ByTI= Subject key identifier: D2:FB:60:0A:B7:4A:95:82:FD:51:B7:95:66:86:CC:05:30:0A:83:BA Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2510EC991C4CAA550A1674DF20538D44C3C849ED Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa Signing time: Mon 06 Oct 2025 17:38:01 +0000 ROA not before: Mon 06 Oct 2025 17:38:01 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:10:ec:99:1c:4c:aa:55:0a:16:74:df:20:53:8d:44:c3:c8:49:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 6 17:38:01 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=1ad98c3b76da5ca2395778bfb268dfed67a387ae317b7ee0e541d491170f6090, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fc:03:9c:21:1d:c3:9a:e0:b5:6a:eb:71:cc: 85:40:b0:aa:68:a0:cf:fa:70:2e:42:80:1d:db:e3: e8:c0:dc:92:07:96:d2:a4:b8:67:2b:6b:0b:c4:4c: 50:24:da:1a:97:79:6c:dc:20:2e:c6:e2:06:31:76: 67:9e:1f:17:7b:f6:ed:da:e9:47:4a:eb:6e:53:c4: b1:4b:8e:5d:18:17:cd:46:6a:9e:1c:f1:32:6e:58: ad:af:70:13:b7:19:4c:d9:44:81:8c:4b:59:9e:8e: 41:93:87:cb:73:c2:71:4b:a7:14:f2:99:48:22:53: 64:c0:ff:34:a2:de:89:5a:f9:7f:11:9a:c7:41:4b: a6:f6:09:b6:35:a0:b1:60:3c:0d:ed:ae:69:83:1c: 8e:bc:7a:d0:df:f4:f4:ef:1f:91:dd:14:b9:70:a5: c2:5b:cd:69:d0:ed:5b:4a:c1:41:1a:52:6a:9e:e6: 79:25:1c:b1:46:c7:a3:8c:ac:c6:e1:0b:cf:24:90: 88:99:31:fb:e9:f6:ae:96:69:07:d2:5f:af:9e:0b: 00:16:de:2f:2e:dc:77:42:d6:c3:1b:af:ba:6f:db: 20:90:98:d3:2a:71:ee:e2:aa:e3:a2:16:ad:2c:77: 7e:5f:ae:17:08:8c:ab:3e:a6:42:8c:69:c1:ff:5c: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FB:60:0A:B7:4A:95:82:FD:51:B7:95:66:86:CC:05:30:0A:83:BA X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.28.0/23 Signature Algorithm: sha256WithRSAEncryption 81:3c:7c:17:2d:84:a6:b7:cf:ff:59:cb:f0:f5:d4:c6:19:a1: ea:a5:1b:c6:d3:15:15:b7:eb:0e:a0:9d:52:35:41:b7:38:93: 54:4d:90:28:97:a4:bb:bb:96:04:a3:bf:9b:c1:07:0d:5c:f6: 95:4a:c2:9d:47:64:cc:5a:4c:b1:d7:1a:0a:9a:17:34:c4:8d: 23:55:78:61:8e:44:44:eb:3c:0c:31:ce:a9:00:2b:58:92:ee: 11:c3:48:bc:26:35:2c:eb:36:c3:b7:7f:14:d7:be:e4:91:cf: 28:cd:8c:ee:93:8c:7f:9b:1d:98:09:a8:3c:51:dc:2c:58:85: 85:6e:41:11:af:21:dc:a9:74:40:1d:15:a8:b4:bb:8a:3e:76: dc:5c:0a:3e:c9:23:97:5a:72:fa:48:2c:89:39:e8:1d:ec:f8: 0c:6d:39:e3:94:13:d2:d7:92:b4:e0:60:c1:16:18:af:bc:99: 39:b0:91:ea:22:67:8d:84:b9:8f:07:c2:8c:26:80:b7:e8:0f: 90:5d:82:bf:8b:23:f3:23:e6:da:a5:96:50:00:46:0b:31:60: c5:eb:1d:8c:a8:8b:48:3e:36:51:09:33:be:da:5e:2f:dc:a1: 92:10:90:bc:6a:50:8c:2d:eb:01:56:04:57:13:f7:3d:13:ef: 23:ac:3f:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJRDsmRxMqlUKFnTfIFONRMPISe0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDA2MTczODAxWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYWQ5OGMzYjc2ZGE1Y2EyMzk1Nzc4YmZiMjY4ZGZlZDY3 YTM4N2FlMzE3YjdlZTBlNTQxZDQ5MTE3MGY2MDkwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCT/AOcIR3DmuC1autxzIVAsKpooM/6cC5CgB3b4+jA3JIH ltKkuGcrawvETFAk2hqXeWzcIC7G4gYxdmeeHxd79u3a6UdK625TxLFLjl0YF81G ap4c8TJuWK2vcBO3GUzZRIGMS1mejkGTh8tzwnFLpxTymUgiU2TA/zSi3ola+X8R msdBS6b2CbY1oLFgPA3trmmDHI68etDf9PTvH5HdFLlwpcJbzWnQ7VtKwUEaUmqe 5nklHLFGx6OMrMbhC88kkIiZMfvp9q6WaQfSX6+eCwAW3i8u3HdC1sMbr7pv2yCQ mNMqce7iquOiFq0sd35frhcIjKs+pkKMacH/XMUrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0vtgCrdKlYL9UbeVZobMBTAKg7owHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Y3MjM2ZGYxLWQ2YWQtNGZjNy1iNjFjLTViNzBmY2RkOTAyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBwwDQYJKoZIhvcNAQELBQADggEBAIE8fBcthKa3z/9Zy/D11MYZoeql G8bTFRW36w6gnVI1Qbc4k1RNkCiXpLu7lgSjv5vBBw1c9pVKwp1HZMxaTLHXGgqa FzTEjSNVeGGORETrPAwxzqkAK1iS7hHDSLwmNSzrNsO3fxTXvuSRzyjNjO6TjH+b HZgJqDxR3CxYhYVuQRGvIdypdEAdFai0u4o+dtxcCj7JI5dacvpILIk56B3s+Axt OeOUE9LXkrTgYMEWGK+8mTmwkeoiZ42EuY8HwowmgLfoD5Bdgr+LI/Mj5tqlllAA RgsxYMXrHYyoi0g+NlEJM77aXi/coZIQkLxqUIwt6wFWBFcT9z0T7yOsP8E= -----END CERTIFICATE-----Generated at Sun Oct 19 23:20:50 2025 by rpki-client