$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa File: 5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa (raw, json) Hash identifier: DKDp2RLJoUWYwkE5S1XbULCZoTpM5ccHeoaYKBQOPfM= Subject key identifier: 6C:34:CF:38:6B:3D:CC:DE:7C:C1:9C:4A:CE:6F:14:A6:EF:28:0A:8E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0FD7E4B67CDDB1DE77FD51AA27FB90CBF968F2B5 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa Signing time: Mon 06 Oct 2025 22:07:12 +0000 ROA not before: Mon 06 Oct 2025 22:07:12 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d7:e4:b6:7c:dd:b1:de:77:fd:51:aa:27:fb:90:cb:f9:68:f2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 6 22:07:12 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=dc02c30df34cdaa25943e796da273f2ad88cebb0d59468fd3cf5feff8c0e044f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:b1:32:2a:c0:66:a6:9c:67:80:ad:ca:9d: 8d:c5:8d:9f:0d:c6:c2:29:4f:0c:60:e1:65:49:24: 0b:7f:4a:d7:9c:b5:6b:5a:71:a1:7e:b9:d4:6b:24: 86:d2:74:48:18:31:46:09:5f:a3:44:39:35:d9:23: e4:8f:a9:c1:cb:ea:86:9a:73:1f:97:86:36:b3:ef: b2:f8:e8:f1:67:4a:ff:7b:ba:b2:68:70:22:0d:f8: 6d:e3:9a:4b:f0:9b:94:9c:47:dd:03:23:74:ed:85: 7a:e2:45:af:bd:3b:7f:a5:5a:c9:ba:c4:49:df:ce: c1:60:f5:3c:4f:89:d7:dc:f7:4b:bf:4c:5b:82:94: 09:be:90:0a:a5:57:0c:45:bd:95:cc:07:b1:f1:e3: c0:3c:3c:70:ad:5e:bd:b1:78:c0:8a:3c:34:3d:f3: 4e:fd:e8:9c:8c:1d:b5:be:70:50:cd:f0:04:d4:85: 24:44:95:a8:47:35:1e:11:a9:2d:e6:5c:0c:3a:05: 3f:fa:bb:90:9d:49:61:b5:45:2e:40:c2:b6:09:75: 2a:76:75:51:9c:3c:6c:ec:1a:45:db:20:45:6a:67: 68:d5:4d:d2:71:86:ad:7f:13:3d:b9:11:6e:a5:e4: be:3e:7e:55:60:1f:f1:89:42:a8:8d:0b:17:4a:f0: b3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:34:CF:38:6B:3D:CC:DE:7C:C1:9C:4A:CE:6F:14:A6:EF:28:0A:8E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.52.0/24 Signature Algorithm: sha256WithRSAEncryption 49:c9:9f:03:06:8a:22:00:27:f8:d1:b3:ee:4e:50:96:76:91: e1:d1:cd:a1:e0:71:13:e1:43:d5:f0:b4:7d:02:5a:bb:f0:dc: 9a:a8:52:cb:0e:00:99:8e:d5:64:48:1a:2c:57:0e:1e:6b:aa: 65:fc:8e:02:fa:0d:1f:d8:e7:ac:30:35:04:34:49:0d:cf:d5: 5f:50:55:34:84:0e:0f:83:dd:ec:7d:ad:c5:d2:77:ff:82:ed: d3:a5:e4:87:bd:1a:6d:a9:9f:ea:fc:32:03:b9:3f:f0:08:9f: fa:0a:3a:f5:f9:e2:3b:ea:70:97:6f:55:cf:48:11:a8:22:ee: 5e:c2:4f:f7:82:7a:7f:06:f4:8d:1c:57:30:3a:7b:d3:61:4c: 9a:ad:62:29:94:8d:f9:77:1d:2d:ec:04:e2:ff:bc:d7:ac:5e: dd:1b:7d:cb:ea:7e:29:e9:44:59:b2:c0:d1:b9:7b:b2:85:09: b6:f6:06:38:54:71:69:b9:4a:2e:da:80:ce:2f:09:39:68:ad: a3:31:61:ed:b3:37:64:c9:39:14:b1:e3:11:d8:3b:3c:65:7e: 18:2a:6e:9e:ad:b4:40:e8:5e:08:5e:f7:8d:8a:50:e4:b2:6f: 94:eb:d5:81:27:6b:f3:66:8e:bc:19:27:e2:05:91:2d:9a:14: 5b:00:70:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD9fktnzdsd53/VGqJ/uQy/lo8rUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDA2MjIwNzEyWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzAyYzMwZGYzNGNkYWEyNTk0M2U3OTZkYTI3M2YyYWQ4 OGNlYmIwZDU5NDY4ZmQzY2Y1ZmVmZjhjMGUwNDRmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuSLEyKsBmppxngK3KnY3FjZ8NxsIpTwxg4WVJJAt/Stec tWtacaF+udRrJIbSdEgYMUYJX6NEOTXZI+SPqcHL6oaacx+Xhjaz77L46PFnSv97 urJocCIN+G3jmkvwm5ScR90DI3TthXriRa+9O3+lWsm6xEnfzsFg9TxPidfc90u/ TFuClAm+kAqlVwxFvZXMB7Hx48A8PHCtXr2xeMCKPDQ980796JyMHbW+cFDN8ATU hSRElahHNR4RqS3mXAw6BT/6u5CdSWG1RS5AwrYJdSp2dVGcPGzsGkXbIEVqZ2jV TdJxhq1/Ez25EW6l5L4+flVgH/GJQqiNCxdK8LNHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbDTPOGs9zN58wZxKzm8Upu8oCo4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzVmNjRmZDI2LTFkOWEtNDg1OC05OGYwLTgwYzZlODg0YmNlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDQwDQYJKoZIhvcNAQELBQADggEBAEnJnwMGiiIAJ/jRs+5OUJZ2keHR zaHgcRPhQ9XwtH0CWrvw3JqoUssOAJmO1WRIGixXDh5rqmX8jgL6DR/Y56wwNQQ0 SQ3P1V9QVTSEDg+D3ex9rcXSd/+C7dOl5Ie9Gm2pn+r8MgO5P/AIn/oKOvX54jvq cJdvVc9IEagi7l7CT/eCen8G9I0cVzA6e9NhTJqtYimUjfl3HS3sBOL/vNesXt0b fcvqfinpRFmywNG5e7KFCbb2BjhUcWm5Si7agM4vCTloraMxYe2zN2TJORSx4xHY Ozxlfhgqbp6ttEDoXghe942KUOSyb5Tr1YEna/NmjrwZJ+IFkS2aFFsAcDQ= -----END CERTIFICATE-----Generated at Wed Oct 8 21:28:34 2025 by rpki-client