$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa File: a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa (raw, json) Hash identifier: 7GVD3IBBu9DcjQ6HvoUeYPBxAKdXc3EuSZ6qDsB9xJo= Subject key identifier: AA:D7:34:45:2D:5C:30:3F:B8:25:BF:69:65:EF:DF:97:16:7B:EF:8E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 31A04ECBAE6BA5E12DA2BE088991EBC220B5575B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa Signing time: Fri 19 Sep 2025 18:00:47 +0000 ROA not before: Fri 19 Sep 2025 18:00:47 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a0:4e:cb:ae:6b:a5:e1:2d:a2:be:08:89:91:eb:c2:20:b5:57:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 19 18:00:47 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=6c132bfe94d8e61fe36fb74f9bcc826d76f9ec88985142daae6d3e60e4021b55, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:6e:57:dc:d3:5b:00:f6:2a:25:58:30:d0: f2:20:c9:73:c8:d0:da:64:eb:28:42:e1:60:63:d7: c6:ba:5b:4d:76:6b:39:29:83:0c:05:4e:73:4a:70: a9:e9:8a:05:a6:38:40:03:d2:96:5e:6b:d8:be:9a: a7:5c:0b:96:2c:8b:e0:40:b9:90:54:c1:bd:1f:d4: a1:18:66:16:e5:31:9d:bd:36:9b:60:e6:a8:9e:95: e2:7a:4d:16:55:6b:03:aa:00:ff:d4:d3:e5:f4:e0: 76:2a:60:11:5d:9d:20:3c:be:66:6e:e8:31:9e:be: 1c:b8:ea:3a:d8:9f:00:ef:76:65:12:87:95:6a:d0: e1:35:f6:f9:12:2d:e3:46:9a:54:11:63:df:71:1a: de:f5:c1:9a:4f:28:5d:0e:a7:33:f7:81:c2:94:6b: 9a:a6:10:6a:ad:68:56:ff:d8:6d:4c:ac:b2:39:95: 81:12:14:9a:5e:9a:77:1e:5a:4a:38:bb:be:db:72: cf:30:29:e9:dc:14:9f:7f:4a:6a:a8:0d:a8:1f:a8: ec:8b:ee:c3:44:66:35:9d:e9:70:8a:24:65:12:ec: 39:82:2c:7f:a7:2c:76:83:ac:b9:f5:47:20:2b:89: 62:2d:ee:ff:c0:ed:a0:d6:3b:d4:0d:a3:95:d6:64: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D7:34:45:2D:5C:30:3F:B8:25:BF:69:65:EF:DF:97:16:7B:EF:8E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.41.0/24 Signature Algorithm: sha256WithRSAEncryption 61:a8:9a:16:71:72:64:0b:3d:86:f6:53:29:a2:e2:0b:c4:4d: 08:1f:b6:04:77:ad:5f:4b:c8:e8:58:c2:61:83:3a:8e:6d:87: 86:b5:5e:78:a6:ae:c1:01:58:d7:a5:d6:97:a7:1f:5d:8c:61: 40:4d:8c:87:cc:0e:7b:ce:0a:77:3f:81:e1:92:c5:30:9c:77: fa:be:30:87:13:77:62:ab:80:8b:cf:4b:58:10:e6:0e:63:5c: fd:b9:63:fb:c0:e6:24:ef:01:9a:c2:73:77:9f:e4:39:91:ec: b4:3d:fb:19:26:8c:24:e2:7e:c9:2d:2b:8f:6d:74:ef:a5:43: ab:70:f9:d9:e4:c3:cc:22:2a:d3:06:f4:7b:da:62:f4:7b:62: 66:06:ea:87:f6:07:46:51:92:d2:23:f7:9a:17:f4:27:05:fa: c4:34:c3:6e:01:3b:fd:de:63:d4:c4:ee:b1:ac:ba:13:fd:a5: da:eb:ef:fb:3c:36:eb:3e:8e:44:b0:be:24:ee:e6:92:67:d1: 56:47:66:0c:da:3e:f8:aa:0a:d4:e6:4a:69:b7:30:c0:70:e9: af:b4:a6:12:b0:cd:c8:eb:9e:cc:31:2a:41:df:07:19:27:55: 0b:af:8c:81:ae:57:b7:50:7f:82:41:bb:f9:00:0a:81:6b:3d: af:be:c4:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMaBOy65rpeEtor4IiZHrwiC1V1swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTE5MTgwMDQ3WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzEzMmJmZTk0ZDhlNjFmZTM2ZmI3NGY5YmNjODI2ZDc2 ZjllYzg4OTg1MTQyZGFhZTZkM2U2MGU0MDIxYjU1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxJm5X3NNbAPYqJVgw0PIgyXPI0Npk6yhC4WBj18a6W012 azkpgwwFTnNKcKnpigWmOEAD0pZea9i+mqdcC5Ysi+BAuZBUwb0f1KEYZhblMZ29 Nptg5qieleJ6TRZVawOqAP/U0+X04HYqYBFdnSA8vmZu6DGevhy46jrYnwDvdmUS h5Vq0OE19vkSLeNGmlQRY99xGt71wZpPKF0OpzP3gcKUa5qmEGqtaFb/2G1MrLI5 lYESFJpemnceWko4u77bcs8wKencFJ9/SmqoDagfqOyL7sNEZjWd6XCKJGUS7DmC LH+nLHaDrLn1RyAriWIt7v/A7aDWO9QNo5XWZHz7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqtc0RS1cMD+4Jb9pZe/flxZ7744wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E3ZjZlMGFjLTgxMGEtNGU0MC1hMjg2LWQwNTM5N2ExM2U0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCkwDQYJKoZIhvcNAQELBQADggEBAGGomhZxcmQLPYb2Uymi4gvETQgf tgR3rV9LyOhYwmGDOo5th4a1XnimrsEBWNel1penH12MYUBNjIfMDnvOCnc/geGS xTCcd/q+MIcTd2KrgIvPS1gQ5g5jXP25Y/vA5iTvAZrCc3ef5DmR7LQ9+xkmjCTi fsktK49tdO+lQ6tw+dnkw8wiKtMG9HvaYvR7YmYG6of2B0ZRktIj95oX9CcF+sQ0 w24BO/3eY9TE7rGsuhP9pdrr7/s8Nus+jkSwviTu5pJn0VZHZgzaPviqCtTmSmm3 MMBw6a+0phKwzcjrnswxKkHfBxknVQuvjIGuV7dQf4JBu/kACoFrPa++xEk= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:51 2025 by rpki-client