$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa File: 8ac8d230-2c50-472b-aaac-384834352fef.roa (raw, json) Hash identifier: Gh+CSo34fsMcLmdfcVVCi4TJChBVLpDU3q4hyAgY1Vk= Subject key identifier: 6F:C7:6F:27:85:BD:68:AC:42:59:4B:53:CB:DD:B1:0E:79:1C:30:B7 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 753150CEEB8BD3D6F9219D994DDFE718A09CD26C Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa Signing time: Fri 19 Sep 2025 18:00:22 +0000 ROA not before: Fri 19 Sep 2025 18:00:22 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:31:50:ce:eb:8b:d3:d6:f9:21:9d:99:4d:df:e7:18:a0:9c:d2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 19 18:00:22 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=1b3e2be7fd2c9fa35d4bc94e2c33f5012064591ce8280f14c85ffc5241296866, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:98:27:48:be:0c:0f:51:95:79:55:48:ba: ef:16:c9:41:51:89:9c:65:bc:39:3b:c2:d4:b4:72: 6a:27:ef:f7:6a:08:04:b5:d3:1d:27:b8:da:e8:61: 44:be:a8:0e:47:f6:b9:39:0b:ce:b8:d1:f6:36:1a: 6a:d9:14:40:8d:b4:1f:40:2a:bc:6b:44:ed:86:1c: 7d:01:d0:75:e6:aa:49:a5:e5:ad:8a:ef:6a:f2:7a: 66:3c:2d:00:60:3e:b0:66:36:53:b1:bb:27:3a:38: f9:cc:fe:86:af:7c:7e:5e:43:c8:98:13:71:5c:98: 3b:30:91:58:61:d8:64:c9:d5:df:fd:7f:bc:54:2f: 88:21:d3:b8:6a:a9:92:09:62:f5:4e:26:d4:2a:79: 8e:0d:fc:aa:4b:8d:28:2f:a4:64:c1:af:ff:0f:c9: 1d:95:e5:24:aa:19:2d:33:c0:6a:49:89:6b:91:fd: 24:4e:57:7c:2f:8a:55:90:67:2e:ee:f0:e8:a6:02: e0:4b:4b:58:a5:00:8d:d1:77:2d:ca:ed:7b:f8:d7: 8d:de:a4:24:74:b7:8d:f7:9b:2b:86:a5:3f:64:92: 87:04:f7:5f:b9:a0:1e:50:f0:66:cf:ef:3e:20:53: 9a:58:16:22:09:be:15:72:23:96:52:12:41:72:0f: 07:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C7:6F:27:85:BD:68:AC:42:59:4B:53:CB:DD:B1:0E:79:1C:30:B7 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.36.0/24 Signature Algorithm: sha256WithRSAEncryption 30:fa:35:06:e0:17:b8:a0:81:67:c1:ed:c9:f8:18:08:36:fd: e0:f6:9e:91:37:02:15:83:7a:3c:db:43:78:5b:c9:0c:ab:e2: 05:74:84:f8:05:b2:aa:06:7e:97:df:f3:8c:bf:54:bd:4c:20: 44:d3:c2:1a:56:4f:9c:7f:31:1c:25:3e:d9:81:5c:08:dc:d4: ca:bb:e4:84:c8:55:c0:b1:1e:e0:ef:f5:3f:e3:8a:ea:c9:79: 6a:a8:ac:8a:72:b9:94:09:71:8f:6e:2b:d1:fa:5b:a6:0f:55: 03:c5:92:00:05:b3:f6:61:95:d7:bc:66:f5:e8:b3:71:69:d9: 56:93:95:0d:98:ba:dc:ce:3f:a6:e1:86:2d:f2:5f:6b:4b:10: a4:8b:28:ce:f8:e4:2c:0f:93:3f:5d:b6:d0:d0:f1:d3:7e:2e: 43:ab:68:2f:36:d2:19:b8:5c:d2:b7:74:1c:e3:fa:63:ad:19: 03:7b:65:06:7d:c4:07:68:97:33:9a:57:b3:4d:30:ff:95:93: 75:cc:9f:f8:4c:39:1d:39:b8:c7:95:76:bd:fb:76:e8:dd:07: ad:4c:51:2b:83:fe:1e:2a:fe:98:8d:f7:44:66:86:06:2e:2f: f7:53:00:a9:2a:4c:28:20:c6:0e:73:7b:cd:94:c7:e2:23:a6: 21:9c:7a:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdTFQzuuL09b5IZ2ZTd/nGKCc0mwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTE5MTgwMDIyWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjNlMmJlN2ZkMmM5ZmEzNWQ0YmM5NGUyYzMzZjUwMTIw NjQ1OTFjZTgyODBmMTRjODVmZmM1MjQxMjk2ODY2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7tZgnSL4MD1GVeVVIuu8WyUFRiZxlvDk7wtS0cmon7/dq CAS10x0nuNroYUS+qA5H9rk5C8640fY2GmrZFECNtB9AKrxrRO2GHH0B0HXmqkml 5a2K72ryemY8LQBgPrBmNlOxuyc6OPnM/oavfH5eQ8iYE3FcmDswkVhh2GTJ1d/9 f7xUL4gh07hqqZIJYvVOJtQqeY4N/KpLjSgvpGTBr/8PyR2V5SSqGS0zwGpJiWuR /SROV3wvilWQZy7u8OimAuBLS1ilAI3Rdy3K7Xv4143epCR0t433myuGpT9kkocE 91+5oB5Q8GbP7z4gU5pYFiIJvhVyI5ZSEkFyDwfRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb8dvJ4W9aKxCWUtTy92xDnkcMLcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhhYzhkMjMwLTJjNTAtNDcyYi1hYWFjLTM4NDgzNDM1MmZlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCQwDQYJKoZIhvcNAQELBQADggEBADD6NQbgF7iggWfB7cn4GAg2/eD2 npE3AhWDejzbQ3hbyQyr4gV0hPgFsqoGfpff84y/VL1MIETTwhpWT5x/MRwlPtmB XAjc1Mq75ITIVcCxHuDv9T/jiurJeWqorIpyuZQJcY9uK9H6W6YPVQPFkgAFs/Zh lde8ZvXos3Fp2VaTlQ2YutzOP6bhhi3yX2tLEKSLKM745CwPkz9dttDQ8dN+LkOr aC820hm4XNK3dBzj+mOtGQN7ZQZ9xAdolzOaV7NNMP+Vk3XMn/hMOR05uMeVdr37 dujdB61MUSuD/h4q/piN90RmhgYuL/dTAKkqTCggxg5ze82Ux+IjpiGceqg= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:42 2025 by rpki-client