$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/60632273-f232-4b3a-8142-9800e188da0c.roa File: 60632273-f232-4b3a-8142-9800e188da0c.roa (raw, json) Hash identifier: yDlFEesk1/ZQAUNr5KbmRCztBTO7iAECWmHjerfiCoQ= Subject key identifier: BE:33:C9:6D:14:09:2E:59:F1:BF:47:F1:A9:5E:A7:A7:D2:13:79:7B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4EE983CE5BE3441F5975327347D52E11087D9E47 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/60632273-f232-4b3a-8142-9800e188da0c.roa Signing time: Mon 06 Oct 2025 22:07:11 +0000 ROA not before: Mon 06 Oct 2025 22:07:11 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e9:83:ce:5b:e3:44:1f:59:75:32:73:47:d5:2e:11:08:7d:9e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 6 22:07:11 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=099f8bb1b7cbc4fe5be50dc8c904ad437a01c202ed3d13132f87b3f16fc1f613, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:e2:01:bc:29:10:4f:dd:ff:64:2e:28:ec: 17:3e:64:9e:7e:01:8d:85:ab:e3:1b:aa:8c:f9:a6: 59:22:bc:c1:2e:91:51:ea:ac:28:52:45:c3:37:61: 6d:24:23:d1:73:79:c1:5b:bf:f3:32:55:98:4d:2e: 43:43:e2:e3:e1:a5:1e:18:79:19:c5:e8:95:af:e6: a6:5d:7d:22:aa:d1:f7:cb:e4:b1:7b:8e:54:3f:61: 68:15:a9:bc:b9:1a:71:d3:90:a9:be:ef:ed:9a:9a: 1f:f9:64:c9:1f:56:f8:58:7c:fe:49:7c:02:10:07: b0:28:c2:3f:63:3a:f8:8f:8f:fe:18:be:21:24:a8: 95:b2:a0:3f:5a:3d:1c:c7:b6:e8:96:83:c4:8e:52: 8d:71:8e:fa:88:94:5d:14:25:8d:32:c8:44:44:27: 43:5b:57:df:07:c8:ec:b1:b5:8a:f4:bc:e7:a2:01: 8e:38:04:31:c4:27:09:22:87:e1:82:34:8d:5a:46: 14:62:3a:86:82:d5:d7:1f:9c:97:b5:9b:aa:be:d2: 49:2b:2c:d4:39:d4:cd:91:b0:a4:de:74:3e:9f:1f: 4d:d1:17:72:dd:9f:eb:0c:43:0e:43:40:88:7b:e6: 7b:f4:b0:97:b4:be:29:01:6d:cd:79:3b:56:8c:2b: df:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:33:C9:6D:14:09:2E:59:F1:BF:47:F1:A9:5E:A7:A7:D2:13:79:7B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/60632273-f232-4b3a-8142-9800e188da0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.51.0/24 Signature Algorithm: sha256WithRSAEncryption 66:b6:bd:17:d5:b1:bf:ba:bf:38:2e:26:3f:1e:ca:cf:2a:15: 52:fe:12:49:0f:c3:9e:ef:82:a9:0e:86:06:f3:e8:ef:1e:e9: ef:7a:74:5b:d7:fe:fd:48:3d:9d:e6:d7:12:f4:cf:69:52:7e: ee:32:15:fc:7f:d9:97:88:cc:6c:48:54:9f:db:4b:b6:7f:86: 2c:37:5e:d0:ca:d7:50:15:78:50:ec:7e:ae:8d:39:39:73:c4: 4b:e5:4b:01:78:95:b0:44:90:94:7f:18:71:9c:43:cc:c0:20: 74:38:3b:d3:68:83:97:7c:ca:f3:75:54:b4:db:d5:35:3d:d3: 6a:05:40:54:b7:88:e7:66:98:92:60:f9:c6:fe:36:ee:ed:3b: 9c:b4:05:17:3b:f5:a3:4b:77:be:0d:6d:a0:e6:1f:0b:2c:34: 38:75:87:a5:33:99:c2:c1:02:5e:f2:77:c5:89:fd:c2:a8:11: 52:a2:cf:5c:38:51:e6:8b:43:71:1e:99:34:73:b6:72:a6:78: 28:c4:35:e7:c4:bf:c5:05:75:63:8f:e8:d4:b5:50:78:84:3a: 37:f2:0e:52:59:08:80:d0:02:a2:ac:b4:24:b7:69:99:4d:fd: b5:4e:c9:b4:82:49:88:5c:39:cd:de:12:b2:78:f8:e5:b8:64: 84:3f:23:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTumDzlvjRB9ZdTJzR9UuEQh9nkcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDA2MjIwNzExWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTlmOGJiMWI3Y2JjNGZlNWJlNTBkYzhjOTA0YWQ0Mzdh MDFjMjAyZWQzZDEzMTMyZjg3YjNmMTZmYzFmNjEzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE5OIBvCkQT93/ZC4o7Bc+ZJ5+AY2Fq+Mbqoz5plkivMEu kVHqrChSRcM3YW0kI9FzecFbv/MyVZhNLkND4uPhpR4YeRnF6JWv5qZdfSKq0ffL 5LF7jlQ/YWgVqby5GnHTkKm+7+2amh/5ZMkfVvhYfP5JfAIQB7Aowj9jOviPj/4Y viEkqJWyoD9aPRzHtuiWg8SOUo1xjvqIlF0UJY0yyEREJ0NbV98HyOyxtYr0vOei AY44BDHEJwkih+GCNI1aRhRiOoaC1dcfnJe1m6q+0kkrLNQ51M2RsKTedD6fH03R F3Ldn+sMQw5DQIh75nv0sJe0vikBbc15O1aMK98TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvjPJbRQJLlnxv0fxqV6np9ITeXswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzYwNjMyMjczLWYyMzItNGIzYS04MTQyLTk4MDBlMTg4ZGEwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDMwDQYJKoZIhvcNAQELBQADggEBAGa2vRfVsb+6vzguJj8eys8qFVL+ EkkPw57vgqkOhgbz6O8e6e96dFvX/v1IPZ3m1xL0z2lSfu4yFfx/2ZeIzGxIVJ/b S7Z/hiw3XtDK11AVeFDsfq6NOTlzxEvlSwF4lbBEkJR/GHGcQ8zAIHQ4O9Nog5d8 yvN1VLTb1TU902oFQFS3iOdmmJJg+cb+Nu7tO5y0BRc79aNLd74NbaDmHwssNDh1 h6UzmcLBAl7yd8WJ/cKoEVKiz1w4UeaLQ3EemTRztnKmeCjENefEv8UFdWOP6NS1 UHiEOjfyDlJZCIDQAqKstCS3aZlN/bVOybSCSYhcOc3eErJ4+OW4ZIQ/I3Y= -----END CERTIFICATE-----Generated at Wed Oct 8 21:28:30 2025 by rpki-client