$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a2ca7e70-4b6e-43a6-93a2-5628eb545d13.roa File: a2ca7e70-4b6e-43a6-93a2-5628eb545d13.roa (raw, json) Hash identifier: V7mR2JypdgCrHD5l46JyDfj+Ek5MVqzG9rpKip3/SWk= Subject key identifier: FF:52:66:28:E5:E1:4F:14:E5:4B:13:9C:E5:62:36:D1:2A:95:AE:C7 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6F811B68D39CB1317AB3268F17148338EEACB54E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a2ca7e70-4b6e-43a6-93a2-5628eb545d13.roa Signing time: Fri 19 Sep 2025 18:00:35 +0000 ROA not before: Fri 19 Sep 2025 18:00:35 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:81:1b:68:d3:9c:b1:31:7a:b3:26:8f:17:14:83:38:ee:ac:b5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 19 18:00:35 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=90965cec172b069db80a57aaada7efbc7289245e085bba327e4c390d4228cf37, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:78:5b:ee:0b:fc:4d:7f:ee:cc:1f:a6:f3: 68:09:5f:8d:9c:57:3b:70:60:80:b6:6f:be:3a:2d: 03:59:4d:b8:8e:f9:42:cc:09:90:79:3b:5f:02:63: b2:b5:b3:98:75:29:22:9e:de:e2:50:dc:c7:ac:9a: 17:56:f3:74:b6:0b:45:eb:9d:36:83:03:8b:dc:05: b2:63:3b:57:7c:82:bd:3a:43:92:38:60:95:61:15: 1c:6f:9b:36:1a:3a:21:a0:14:14:1e:79:16:79:fd: 96:64:ef:fc:1b:f9:17:c1:e6:15:c3:27:52:b3:81: 0b:3f:4a:26:26:52:aa:67:4b:93:58:99:43:f2:f4: 5c:18:b4:19:86:ff:ce:68:12:9a:0f:df:02:c3:4c: 3a:f9:f7:52:c3:f6:fb:e7:84:99:7e:81:fb:a9:8f: 5a:2e:27:2d:36:ee:e3:33:34:14:12:3c:5d:45:f2: e1:b6:fb:64:72:5c:d1:06:3f:de:da:71:7f:0b:eb: e8:89:da:94:90:d2:41:32:31:6f:90:b0:6c:3f:00: 2d:dc:62:35:f4:56:ec:45:08:fd:6e:be:53:5a:dd: 87:d4:02:9d:6b:c5:27:74:96:a5:27:60:33:6e:be: f3:a9:a8:59:e1:6d:0c:aa:47:1c:a2:94:ff:35:1a: 82:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:52:66:28:E5:E1:4F:14:E5:4B:13:9C:E5:62:36:D1:2A:95:AE:C7 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a2ca7e70-4b6e-43a6-93a2-5628eb545d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.43.0/24 Signature Algorithm: sha256WithRSAEncryption 67:fd:e4:96:36:fb:75:1c:ed:01:2b:da:74:26:aa:06:ed:2d: 93:21:22:9e:27:07:8a:6b:9d:4f:ac:f4:1f:7a:80:d4:57:d4: e6:71:0d:3c:97:c8:84:a9:c5:d4:07:08:3d:dc:7f:85:7e:cb: 45:51:50:7a:5f:5c:c2:01:17:77:84:7b:06:7e:23:5b:6a:92: b3:ec:fc:41:78:6a:9c:97:a0:5f:a9:49:bd:37:6b:5d:b1:13: fd:1c:42:1f:e1:28:2b:7d:45:53:c8:89:c2:27:e2:90:94:8f: 95:1c:91:70:7c:d4:2b:b3:2e:f7:f3:d0:d5:29:10:f4:d1:d8: 97:c1:f1:65:4a:fd:fc:3c:ff:9e:be:2b:c5:5b:ea:9f:97:cf: a5:9d:e4:cd:18:bb:9b:cb:69:00:e9:41:1f:bc:9f:98:22:83: 94:3d:49:da:b9:eb:c8:c4:58:a7:39:63:e9:89:dd:9c:c2:f8: 1a:77:15:39:b2:2f:d6:78:40:3b:a5:55:23:41:f7:5c:29:0b: a8:84:c1:d1:25:91:46:08:82:40:98:66:8a:33:98:0d:36:05: 18:b1:63:e7:49:11:e8:e6:84:9c:0f:d9:33:99:c5:04:ef:a0: b3:be:1c:9a:0a:3c:91:cd:a6:4f:92:ef:7d:33:cd:72:66:e7: 9d:54:af:27 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb4EbaNOcsTF6syaPFxSDOO6stU4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTE5MTgwMDM1WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDk2NWNlYzE3MmIwNjlkYjgwYTU3YWFhZGE3ZWZiYzcy ODkyNDVlMDg1YmJhMzI3ZTRjMzkwZDQyMjhjZjM3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpFnhb7gv8TX/uzB+m82gJX42cVztwYIC2b746LQNZTbiO +ULMCZB5O18CY7K1s5h1KSKe3uJQ3MesmhdW83S2C0XrnTaDA4vcBbJjO1d8gr06 Q5I4YJVhFRxvmzYaOiGgFBQeeRZ5/ZZk7/wb+RfB5hXDJ1KzgQs/SiYmUqpnS5NY mUPy9FwYtBmG/85oEpoP3wLDTDr591LD9vvnhJl+gfupj1ouJy027uMzNBQSPF1F 8uG2+2RyXNEGP97acX8L6+iJ2pSQ0kEyMW+QsGw/AC3cYjX0VuxFCP1uvlNa3YfU Ap1rxSd0lqUnYDNuvvOpqFnhbQyqRxyilP81GoJ/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/1JmKOXhTxTlSxOc5WI20SqVrscwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2EyY2E3ZTcwLTRiNmUtNDNhNi05M2EyLTU2MjhlYjU0NWQxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCswDQYJKoZIhvcNAQELBQADggEBAGf95JY2+3Uc7QEr2nQmqgbtLZMh Ip4nB4prnU+s9B96gNRX1OZxDTyXyISpxdQHCD3cf4V+y0VRUHpfXMIBF3eEewZ+ I1tqkrPs/EF4apyXoF+pSb03a12xE/0cQh/hKCt9RVPIicIn4pCUj5UckXB81Cuz Lvfz0NUpEPTR2JfB8WVK/fw8/56+K8Vb6p+Xz6Wd5M0Yu5vLaQDpQR+8n5gig5Q9 Sdq568jEWKc5Y+mJ3ZzC+Bp3FTmyL9Z4QDulVSNB91wpC6iEwdElkUYIgkCYZooz mA02BRixY+dJEejmhJwP2TOZxQTvoLO+HJoKPJHNpk+S730zzXJm551Uryc= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:23 2025 by rpki-client