$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa File: 38682ae8-11e8-4bbd-9b5b-0703a469a802.roa (raw, json) Hash identifier: GRUc3PLRXwJ28mP5V9QhOYaaDD0huzqYrw745o5IA9c= Subject key identifier: 85:C7:42:70:23:54:14:4D:F5:12:E3:A7:C6:CA:DD:31:6A:D9:2B:A5 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 11D689DF3E697B47581CA50A535F26F4079F8C14 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa Signing time: Sat 15 Nov 2025 05:00:09 +0000 ROA not before: Sat 15 Nov 2025 05:00:09 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d6:89:df:3e:69:7b:47:58:1c:a5:0a:53:5f:26:f4:07:9f:8c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 15 05:00:09 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=3d8c74c2837aaced0b429ac85b0de585811485a3eb34f2788b4be97b1834df42, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:41:d0:bf:3e:0f:2e:85:a6:1b:63:35:49:62: 00:f5:b1:69:bb:be:8f:0c:d0:4a:51:2c:c8:cd:a6: 06:ab:08:8e:d1:16:00:51:39:98:a1:94:5c:15:86: 37:6c:a1:14:64:25:fb:4b:e4:25:90:97:ed:a1:b7: ea:96:a2:f8:03:99:dc:b2:ab:48:75:50:5a:6a:29: 59:99:01:50:ed:0b:b1:42:a0:bc:e1:4f:19:35:06: 93:e7:8c:39:89:f9:63:4f:aa:80:85:fe:b7:79:03: 28:ef:d5:83:e0:25:82:74:c3:9e:5a:b2:a5:e8:03: 29:23:41:4a:b7:42:aa:54:2b:b6:2c:fd:2b:7a:d6: 9c:ff:72:95:df:87:d6:9e:16:9b:b7:93:c0:e9:60: be:13:85:02:15:6e:41:b8:ad:8d:73:da:00:60:b2: 08:55:5d:b1:e3:fd:81:9e:fe:5a:66:86:05:4d:da: 16:5d:47:50:08:79:b0:1c:b9:a2:4b:e3:46:8c:39: 1e:f1:9c:6f:84:79:1f:e8:04:9a:7e:23:26:e6:fd: df:06:3f:52:e0:c8:be:91:cf:4a:b1:cb:2d:5f:40: f3:4c:c8:18:a2:88:98:07:4f:5b:4c:dd:74:91:bf: d9:92:4c:10:c6:4f:f2:20:19:fd:4b:3e:54:55:22: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C7:42:70:23:54:14:4D:F5:12:E3:A7:C6:CA:DD:31:6A:D9:2B:A5 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.46.0/24 Signature Algorithm: sha256WithRSAEncryption 42:09:73:79:f7:69:62:fc:e4:f6:55:40:10:4c:9c:c7:3c:ee: d5:fc:42:4a:71:ab:1a:cc:6d:1e:d6:fa:92:39:e3:c0:44:16: 4f:73:fd:15:60:97:9d:dc:98:4d:92:34:b3:6b:a4:37:f4:be: 8c:a1:21:83:71:03:7f:92:ed:75:8a:c1:84:b0:cb:78:24:ba: 0a:59:c1:18:1d:16:66:a3:fc:27:a4:ea:34:7b:cd:29:24:80: 34:28:46:6f:eb:99:6b:c9:81:02:5d:25:05:38:c3:0d:7c:9e: d1:b8:b2:e9:b4:fb:45:20:18:b2:f5:c0:6b:d9:56:19:50:fd: ce:f5:59:d8:8c:26:6e:a5:37:c0:5d:70:a8:bb:3a:a7:bf:e2: 7b:d9:19:91:0a:ab:14:95:c6:b5:8f:5a:cf:82:c1:48:b4:c2: 8d:50:77:76:aa:0b:53:37:2f:15:9d:d8:76:12:9c:6f:fb:ee: 77:2e:e1:19:d7:cf:3b:98:93:f7:e6:ac:54:98:37:bf:91:ec: 35:ff:b5:49:27:5c:f2:2a:50:33:f7:8b:e5:3f:2a:88:df:14: 8d:e7:66:ce:de:49:ca:da:ac:b1:04:30:10:fe:6f:fe:41:0a: 55:15:8e:21:d6:ab:80:e7:01:b5:2c:49:ca:2e:35:1e:66:df: f4:12:3c:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEdaJ3z5pe0dYHKUKU18m9AefjBQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTE1MDUwMDA5WhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDhjNzRjMjgzN2FhY2VkMGI0MjlhYzg1YjBkZTU4NTgx MTQ4NWEzZWIzNGYyNzg4YjRiZTk3YjE4MzRkZjQyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHQdC/Pg8uhaYbYzVJYgD1sWm7vo8M0EpRLMjNpgarCI7R FgBROZihlFwVhjdsoRRkJftL5CWQl+2ht+qWovgDmdyyq0h1UFpqKVmZAVDtC7FC oLzhTxk1BpPnjDmJ+WNPqoCF/rd5Ayjv1YPgJYJ0w55asqXoAykjQUq3QqpUK7Ys /St61pz/cpXfh9aeFpu3k8DpYL4ThQIVbkG4rY1z2gBgsghVXbHj/YGe/lpmhgVN 2hZdR1AIebAcuaJL40aMOR7xnG+EeR/oBJp+Iybm/d8GP1LgyL6Rz0qxyy1fQPNM yBiiiJgHT1tM3XSRv9mSTBDGT/IgGf1LPlRVImzDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhcdCcCNUFE31EuOnxsrdMWrZK6UwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzM4NjgyYWU4LTExZTgtNGJiZC05YjViLTA3MDNhNDY5YTgwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC4wDQYJKoZIhvcNAQELBQADggEBAEIJc3n3aWL85PZVQBBMnMc87tX8 QkpxqxrMbR7W+pI548BEFk9z/RVgl53cmE2SNLNrpDf0voyhIYNxA3+S7XWKwYSw y3gkugpZwRgdFmaj/Cek6jR7zSkkgDQoRm/rmWvJgQJdJQU4ww18ntG4sum0+0Ug GLL1wGvZVhlQ/c71WdiMJm6lN8BdcKi7Oqe/4nvZGZEKqxSVxrWPWs+CwUi0wo1Q d3aqC1M3LxWd2HYSnG/77ncu4RnXzzuYk/fmrFSYN7+R7DX/tUknXPIqUDP3i+U/ KojfFI3nZs7eScrarLEEMBD+b/5BClUVjiHWq4DnAbUsScouNR5m3/QSPM8= -----END CERTIFICATE-----Generated at Tue Nov 18 05:47:56 2025 by rpki-client