$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/619deba8-10a4-4570-992e-49cf451e8d80.roa File: 619deba8-10a4-4570-992e-49cf451e8d80.roa (raw, json) Hash identifier: TVkFu6dgUltlx78CI+ytd3vwOIFSr49eZTGpKDMfjms= Subject key identifier: A0:1B:9C:79:33:1F:A9:5F:77:4B:33:41:58:04:93:9A:B1:44:4A:E9 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 12C429CEB6EC4BD2C87D9C40A70144DE0231837A Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/619deba8-10a4-4570-992e-49cf451e8d80.roa Signing time: Fri 19 Sep 2025 18:00:50 +0000 ROA not before: Fri 19 Sep 2025 18:00:50 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c4:29:ce:b6:ec:4b:d2:c8:7d:9c:40:a7:01:44:de:02:31:83:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 19 18:00:50 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=2d549cc11c85dad319ef1feb3205f70d690e614eb04a0a60aff87fa492cec559, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f9:fa:6f:d4:16:86:60:65:bc:7d:15:9e:9b: d2:b7:b4:a0:35:46:76:d4:df:af:18:df:9f:07:18: fd:0b:e4:df:22:38:38:95:22:3d:77:db:16:ca:86: 32:10:89:af:ee:34:e9:5f:82:81:d9:dd:44:37:dc: 5c:71:1b:a8:17:5f:cc:4d:33:96:51:5e:f0:4b:0e: 03:c5:f2:32:6c:e5:e6:04:c3:ca:4c:1e:45:93:ab: 22:27:5e:9f:00:81:0c:2b:66:87:c0:29:46:0b:18: e0:30:a1:81:da:14:46:68:34:ab:4b:e6:e6:55:a6: aa:5a:7f:48:b6:24:b3:5c:b1:8e:b2:aa:5a:e6:27: 69:2a:6b:41:ee:0d:4a:11:a0:b2:60:b7:36:3d:08: 5a:4b:7a:a1:b7:68:c2:9e:8d:5f:ce:25:5d:af:53: 1a:b4:5c:a5:f4:85:1a:80:2b:0b:fb:c5:25:d8:3b: e7:07:5f:3f:a1:6a:7d:e3:92:41:0e:56:78:ac:92: eb:77:07:b9:ab:0e:d9:f3:6c:75:0f:6f:bb:6e:a3: d9:44:9a:2e:03:c7:32:cd:ec:f2:4a:6e:a3:84:ed: 26:82:46:47:7d:07:ed:f5:f5:5c:c4:0f:79:85:c2: 12:95:d0:1a:41:40:70:57:19:e1:b1:5f:e8:f4:05: ee:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1B:9C:79:33:1F:A9:5F:77:4B:33:41:58:04:93:9A:B1:44:4A:E9 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/619deba8-10a4-4570-992e-49cf451e8d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.38.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:e1:41:c6:2a:b7:f7:f8:64:5d:f3:b1:ee:f7:47:ea:75:e0: 13:70:4c:a2:1a:94:41:c4:82:19:89:29:7a:2a:55:27:a3:b8: f3:eb:43:9b:73:4a:ad:d0:21:78:82:89:14:12:a5:5c:64:db: 14:3f:3f:f0:39:79:f3:ab:73:ef:04:d8:3b:da:63:a5:b0:15: f1:66:bf:b1:fc:29:bd:3d:79:1b:99:72:ec:52:a4:8e:2e:47: 48:27:9a:b6:e1:fa:96:5c:7c:f2:14:64:86:6f:e7:d6:df:c1: 53:b6:f7:ea:a1:1a:92:18:d2:df:01:f9:e3:e3:bf:c7:65:d1: c1:af:72:30:64:93:51:c4:10:59:96:8a:01:a5:16:f8:1c:57: 2f:4a:b9:b3:58:e7:95:6f:1a:74:07:aa:30:09:f2:a5:44:49: 4f:31:7d:7f:f9:d3:b8:70:b0:0c:c6:bd:ae:a5:9b:30:49:76: a1:9f:81:31:32:1d:63:9e:96:99:6d:66:5b:eb:53:bb:d2:ba: 57:61:1a:d7:bb:55:bf:e3:69:c3:f7:11:ab:65:01:d0:c9:31: b7:50:d9:1a:6a:ec:b8:69:74:be:0c:07:48:22:7a:77:88:e6: ad:fa:1b:85:9c:52:a4:31:a2:61:24:3e:f0:b4:3b:e4:fd:e7: 36:bd:04:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEsQpzrbsS9LIfZxApwFE3gIxg3owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTE5MTgwMDUwWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDU0OWNjMTFjODVkYWQzMTllZjFmZWIzMjA1ZjcwZDY5 MGU2MTRlYjA0YTBhNjBhZmY4N2ZhNDkyY2VjNTU5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG+fpv1BaGYGW8fRWem9K3tKA1RnbU368Y358HGP0L5N8i ODiVIj132xbKhjIQia/uNOlfgoHZ3UQ33FxxG6gXX8xNM5ZRXvBLDgPF8jJs5eYE w8pMHkWTqyInXp8AgQwrZofAKUYLGOAwoYHaFEZoNKtL5uZVpqpaf0i2JLNcsY6y qlrmJ2kqa0HuDUoRoLJgtzY9CFpLeqG3aMKejV/OJV2vUxq0XKX0hRqAKwv7xSXY O+cHXz+han3jkkEOVniskut3B7mrDtnzbHUPb7tuo9lEmi4DxzLN7PJKbqOE7SaC Rkd9B+319VzED3mFwhKV0BpBQHBXGeGxX+j0Be5JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoBuceTMfqV93SzNBWASTmrFESukwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzYxOWRlYmE4LTEwYTQtNDU3MC05OTJlLTQ5Y2Y0NTFlOGQ4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCYwDQYJKoZIhvcNAQELBQADggEBADvhQcYqt/f4ZF3zse73R+p14BNw TKIalEHEghmJKXoqVSejuPPrQ5tzSq3QIXiCiRQSpVxk2xQ/P/A5efOrc+8E2Dva Y6WwFfFmv7H8Kb09eRuZcuxSpI4uR0gnmrbh+pZcfPIUZIZv59bfwVO29+qhGpIY 0t8B+ePjv8dl0cGvcjBkk1HEEFmWigGlFvgcVy9KubNY55VvGnQHqjAJ8qVESU8x fX/507hwsAzGva6lmzBJdqGfgTEyHWOelpltZlvrU7vSuldhGte7Vb/jacP3Eatl AdDJMbdQ2Rpq7LhpdL4MB0gieneI5q36G4WcUqQxomEkPvC0O+T95za9BHo= -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:07 2025 by rpki-client