$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa File: 9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa (raw, json) Hash identifier: KkJ4WTHwJRLmdOO9wCWh3aZgwgcMc8OiUacAtJHlPTA= Subject key identifier: 80:52:E6:F6:04:C1:22:35:87:D0:52:D4:75:FE:41:99:58:CC:6A:DC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 20A1643BBCA68DD5DB8DD7F4D24FA179CF410633 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa Signing time: Fri 19 Sep 2025 18:00:10 +0000 ROA not before: Fri 19 Sep 2025 18:00:10 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a1:64:3b:bc:a6:8d:d5:db:8d:d7:f4:d2:4f:a1:79:cf:41:06:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 19 18:00:10 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=9f851f3fe46bd5fc2ecba637635d91a0851db89c66fa4690910dd5969981fd19, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:85:e2:34:87:ed:2e:b7:13:62:55:ad:10: 73:a3:9e:43:a8:93:84:3c:89:1b:18:98:48:3e:58: c6:0d:2f:33:92:bb:e3:71:1d:45:83:1b:63:0e:12: 7a:9d:28:14:30:f6:de:0f:b5:75:d5:66:61:7d:a7: a1:7b:61:98:ff:45:72:cd:fb:be:53:ba:ac:59:3a: db:33:21:cd:3c:0c:ca:11:06:85:8e:45:51:e7:7b: e4:4d:e6:8d:3d:d2:3f:c2:d9:50:e1:69:be:64:bd: 01:fc:65:a4:f1:49:df:41:e8:18:fc:29:48:86:2c: a3:2a:0c:df:0d:5c:c9:99:da:f0:c4:e2:6f:1c:d3: 5c:1b:82:f2:c3:38:e8:87:0c:a2:c1:b7:9b:13:2c: 3b:ba:43:36:b1:60:a1:54:31:0e:78:34:d1:5c:c0: 34:1e:a8:6d:9b:c9:50:37:a6:83:13:a7:47:58:63: 09:93:c8:ff:66:10:95:c6:9d:0b:c8:47:cb:97:3c: 31:a5:d9:b7:01:bb:6b:0a:6f:b0:d1:37:5d:bf:53: fc:ed:68:85:e4:c0:dd:45:8d:78:37:dc:a5:8e:c3: 1a:d7:73:19:88:ba:62:e5:cb:8a:46:bc:6b:68:3e: be:c3:49:1d:12:80:17:e3:ad:d3:73:45:98:a1:30: 62:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:52:E6:F6:04:C1:22:35:87:D0:52:D4:75:FE:41:99:58:CC:6A:DC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.45.0/24 Signature Algorithm: sha256WithRSAEncryption 07:a7:f4:dd:43:c7:7e:ef:1f:5b:fe:0d:e2:f0:54:49:cc:8d: 5e:12:63:5c:4e:95:b5:d5:60:37:38:46:ba:07:f0:2e:5e:17: 06:44:13:a3:2c:5d:5d:52:7b:1e:da:a1:17:1a:ba:96:a5:44: ae:48:aa:2c:bf:e3:e9:56:d9:07:d9:cf:f9:2f:d4:2e:8e:b1: 3f:5e:f7:61:ef:34:3c:d8:a1:6b:d6:96:f4:48:64:35:1f:97: b2:c2:ec:3a:d3:25:53:65:d2:3e:15:22:35:90:c8:9d:13:99: 18:64:f1:a1:df:d8:b3:72:5d:85:ed:df:40:9a:46:ba:a1:06: fb:76:ea:7f:8e:e5:ee:45:5f:3c:4e:89:47:a6:69:68:10:dc: b5:47:0c:9d:25:37:df:04:ef:92:5d:43:03:fb:38:30:54:fe: e7:83:e0:ee:ce:9f:99:f6:69:9e:5e:14:c9:b3:93:e3:50:d5: fd:38:83:37:98:9d:f2:7d:31:97:83:84:57:78:bf:2a:f8:65: 51:b3:21:84:e9:43:84:cb:48:63:33:29:39:29:4d:3d:41:c8: db:6b:dd:93:78:1a:74:da:78:44:a4:d7:d5:59:55:a4:08:1b: 17:d0:81:de:3c:5e:e4:6c:32:04:c1:9e:ff:34:e3:f1:dd:7d: 27:c6:ce:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIKFkO7ymjdXbjdf00k+hec9BBjMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTE5MTgwMDEwWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Zjg1MWYzZmU0NmJkNWZjMmVjYmE2Mzc2MzVkOTFhMDg1 MWRiODljNjZmYTQ2OTA5MTBkZDU5Njk5ODFmZDE5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2JoXiNIftLrcTYlWtEHOjnkOok4Q8iRsYmEg+WMYNLzOS u+NxHUWDG2MOEnqdKBQw9t4PtXXVZmF9p6F7YZj/RXLN+75TuqxZOtszIc08DMoR BoWORVHne+RN5o090j/C2VDhab5kvQH8ZaTxSd9B6Bj8KUiGLKMqDN8NXMmZ2vDE 4m8c01wbgvLDOOiHDKLBt5sTLDu6QzaxYKFUMQ54NNFcwDQeqG2byVA3poMTp0dY YwmTyP9mEJXGnQvIR8uXPDGl2bcBu2sKb7DRN12/U/ztaIXkwN1FjXg33KWOwxrX cxmIumLly4pGvGtoPr7DSR0SgBfjrdNzRZihMGJrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgFLm9gTBIjWH0FLUdf5BmVjMatwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzljYWY1MGQ3LTE1MTEtNDhhNy1hYmNmLWQyNjFkZWQ3ZjdjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC0wDQYJKoZIhvcNAQELBQADggEBAAen9N1Dx37vH1v+DeLwVEnMjV4S Y1xOlbXVYDc4RroH8C5eFwZEE6MsXV1Sex7aoRcaupalRK5Iqiy/4+lW2QfZz/kv 1C6OsT9e92HvNDzYoWvWlvRIZDUfl7LC7DrTJVNl0j4VIjWQyJ0TmRhk8aHf2LNy XYXt30CaRrqhBvt26n+O5e5FXzxOiUemaWgQ3LVHDJ0lN98E75JdQwP7ODBU/ueD 4O7On5n2aZ5eFMmzk+NQ1f04gzeYnfJ9MZeDhFd4vyr4ZVGzIYTpQ4TLSGMzKTkp TT1ByNtr3ZN4GnTaeESk19VZVaQIGxfQgd48XuRsMgTBnv804/HdfSfGztE= -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:26 2025 by rpki-client