$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/50c22e78-7f05-4b92-b53b-6653311aea7e.roa File: 50c22e78-7f05-4b92-b53b-6653311aea7e.roa (raw, json) Hash identifier: YdxzKeYQDssEuh/znXPHo0QjJvWKI2cbRzv8QlW2nqE= Subject key identifier: 02:8A:59:E8:E1:5A:D4:CC:CA:89:7A:03:AF:29:19:56:42:EC:FC:53 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0A49C7CB989386A7448EDA9C5A789AFCEBF41498 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/50c22e78-7f05-4b92-b53b-6653311aea7e.roa Signing time: Mon 06 Oct 2025 22:07:09 +0000 ROA not before: Mon 06 Oct 2025 22:07:09 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:49:c7:cb:98:93:86:a7:44:8e:da:9c:5a:78:9a:fc:eb:f4:14:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 6 22:07:09 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=513c5df1bdcb917edf2d86b250b3fb4ee13ebc3558d37ac4b6000751482a908b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:97:aa:0a:ba:0e:74:d6:0f:e7:f7:e8:a4:f3: 6b:34:5d:50:d0:14:c8:d4:2b:e1:0f:1c:da:b4:ca: 9f:48:7c:1c:f3:c5:51:5f:a7:ef:fe:fb:f8:9f:91: 4b:db:31:9e:bc:70:a4:35:74:b0:9e:8c:1a:37:15: d6:73:ef:48:d9:41:c7:9d:8c:f1:ff:15:eb:3e:9e: 83:2d:ba:71:78:c0:ac:f9:23:4a:29:d8:db:ca:9a: 25:f0:88:79:9f:f1:59:a7:29:9c:76:0e:3b:ee:a2: 4e:53:05:63:cf:52:e0:fa:a4:42:76:89:bb:07:b6: 85:50:0d:03:02:d7:c5:aa:df:2c:fb:d4:7a:b2:13: aa:e5:2e:16:f4:37:39:e6:d9:1e:c7:cf:1b:b0:57: c5:ad:66:8a:1f:24:40:6a:1f:7f:8a:33:5f:ff:c6: 17:12:31:41:02:c9:14:17:e5:9f:82:98:cd:a9:df: f7:65:91:92:48:af:76:8e:d3:23:8d:48:02:2c:f3: 85:74:ca:fb:45:b1:56:06:67:91:fe:ca:cd:cf:de: 10:37:19:f3:4f:db:55:3b:84:b8:be:4b:e8:98:b4: 1b:67:02:4c:e7:20:da:90:4a:74:d2:b4:26:f5:40: 2c:23:33:8a:40:1b:74:e7:d8:5d:8f:06:b2:fc:20: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8A:59:E8:E1:5A:D4:CC:CA:89:7A:03:AF:29:19:56:42:EC:FC:53 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/50c22e78-7f05-4b92-b53b-6653311aea7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.49.0/24 Signature Algorithm: sha256WithRSAEncryption 09:e8:9f:76:3a:5c:d7:b1:7a:63:a2:40:c9:64:1b:80:b0:b4: de:c3:7e:f0:95:43:6e:58:f9:b5:23:7b:5c:ce:88:4f:84:e1: d1:d0:10:ee:77:32:8c:bf:8f:d0:a4:3c:c4:40:f1:d3:5c:68: 7b:83:a4:63:fc:ec:e8:8c:0a:7a:2a:f8:7a:ee:53:0f:b7:49: ab:70:25:a8:b4:6d:6b:70:a1:28:d3:62:86:bc:16:9f:29:c5: cb:31:f8:3b:46:0a:c3:b0:e1:e5:0b:58:26:db:c0:66:ff:16: 8b:1c:bc:e1:4f:9f:e4:75:6d:05:28:b2:04:5c:dd:14:01:fd: 31:6a:bb:4e:e9:47:4a:8a:30:5e:34:7c:45:9e:32:ff:90:e4: ea:99:72:4e:e2:02:82:0a:ca:00:90:c9:d1:56:77:5a:c8:31: ae:ac:f6:a3:c4:42:2b:44:7d:b8:22:8f:cd:65:da:2a:74:fd: fb:9a:f1:43:72:84:58:06:26:09:5a:9b:b9:14:f2:61:73:e1: 3a:14:49:61:65:a2:78:3d:b8:36:da:f6:c1:4c:c5:b4:f4:7b: 91:57:b4:d5:ff:f0:d8:3f:d9:a0:90:c6:e5:44:0c:9e:4e:38: c5:dc:38:34:f2:84:75:c5:db:a5:f6:b2:6a:a6:d6:c0:7b:18: 21:94:29:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCknHy5iThqdEjtqcWnia/Ov0FJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDA2MjIwNzA5WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTNjNWRmMWJkY2I5MTdlZGYyZDg2YjI1MGIzZmI0ZWUx M2ViYzM1NThkMzdhYzRiNjAwMDc1MTQ4MmE5MDhiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUl6oKug501g/n9+ik82s0XVDQFMjUK+EPHNq0yp9IfBzz xVFfp+/++/ifkUvbMZ68cKQ1dLCejBo3FdZz70jZQcedjPH/Fes+noMtunF4wKz5 I0op2NvKmiXwiHmf8VmnKZx2Djvuok5TBWPPUuD6pEJ2ibsHtoVQDQMC18Wq3yz7 1HqyE6rlLhb0Nznm2R7HzxuwV8WtZoofJEBqH3+KM1//xhcSMUECyRQX5Z+CmM2p 3/dlkZJIr3aO0yONSAIs84V0yvtFsVYGZ5H+ys3P3hA3GfNP21U7hLi+S+iYtBtn AkznINqQSnTStCb1QCwjM4pAG3Tn2F2PBrL8IBDfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAopZ6OFa1MzKiXoDrykZVkLs/FMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzUwYzIyZTc4LTdmMDUtNGI5Mi1iNTNiLTY2NTMzMTFhZWE3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDEwDQYJKoZIhvcNAQELBQADggEBAAnon3Y6XNexemOiQMlkG4CwtN7D fvCVQ25Y+bUje1zOiE+E4dHQEO53Moy/j9CkPMRA8dNcaHuDpGP87OiMCnoq+Hru Uw+3SatwJai0bWtwoSjTYoa8Fp8pxcsx+DtGCsOw4eULWCbbwGb/FoscvOFPn+R1 bQUosgRc3RQB/TFqu07pR0qKMF40fEWeMv+Q5OqZck7iAoIKygCQydFWd1rIMa6s 9qPEQitEfbgij81l2ip0/fua8UNyhFgGJglam7kU8mFz4ToUSWFlong9uDba9sFM xbT0e5FXtNX/8Ng/2aCQxuVEDJ5OOMXcODTyhHXF26X2smqm1sB7GCGUKa8= -----END CERTIFICATE-----Generated at Wed Oct 8 21:28:33 2025 by rpki-client