$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/adaf9344-781a-48cd-903a-098481f29a96.roa File: adaf9344-781a-48cd-903a-098481f29a96.roa (raw, json) Hash identifier: bq6PDR+Obu5/a6JluTuQJpfcCqLPWt0YCeFPkeoZcMU= Subject key identifier: 0C:BE:B4:69:DD:9D:85:D5:01:F2:9B:5E:77:24:38:27:1A:92:EC:0A Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 138A1A33125243D12BD21447E3B5D57CD0B9ADA3 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/adaf9344-781a-48cd-903a-098481f29a96.roa Signing time: Mon 06 Oct 2025 17:20:09 +0000 ROA not before: Mon 06 Oct 2025 17:20:09 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8a:1a:33:12:52:43:d1:2b:d2:14:47:e3:b5:d5:7c:d0:b9:ad:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 6 17:20:09 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=96def54e377f7b3b83f0aa093c7f56a24cad4cb2dac238c105afd6c6fc103261, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c5:92:55:b0:24:b4:2c:4c:57:cb:9d:2d:8c: a4:7b:9d:63:ae:b6:58:f2:96:05:18:58:2b:80:32: 20:86:cd:d8:b8:cb:dd:fe:42:32:8e:ae:d4:59:69: d4:ea:8a:cd:0e:89:bf:d3:e5:47:02:d3:37:e6:48: dc:11:0c:14:c8:4c:61:9e:ee:27:a6:84:23:23:6c: 90:5c:9e:94:25:30:1d:c2:11:f4:63:21:a1:27:0e: c4:42:cc:3b:45:59:80:4f:95:95:57:cc:49:27:78: c4:65:53:7c:86:22:dc:d4:11:ba:61:68:90:3d:a8: 69:47:49:8b:ed:74:93:5f:69:9d:08:4d:95:da:e2: 27:4c:81:9c:5a:04:9e:24:d1:85:1f:d8:c2:9f:a3: b7:39:36:e1:25:c0:dc:1d:3a:8b:d8:aa:2b:ef:24: 6c:4d:68:ec:94:5a:c0:cc:82:75:77:22:06:47:80: 32:18:92:a0:0c:c8:1e:35:ef:cd:e4:61:ee:dc:7b: c1:91:3b:49:a0:31:b3:a9:8f:2e:4f:78:c5:23:ca: 5b:aa:74:1a:a1:b2:97:d4:bf:ee:26:00:ec:86:57: 53:1f:59:32:87:76:ef:63:cb:56:72:db:cd:b5:5c: d2:05:3c:21:2f:ab:d5:2e:6c:be:35:f4:0f:cc:99: 45:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BE:B4:69:DD:9D:85:D5:01:F2:9B:5E:77:24:38:27:1A:92:EC:0A X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/adaf9344-781a-48cd-903a-098481f29a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.246.0/24 Signature Algorithm: sha256WithRSAEncryption 63:2d:f2:0b:60:90:91:55:bb:15:db:b0:f7:94:e2:4d:97:aa: 3d:8c:0a:a4:3f:76:d7:3e:f7:b5:cf:90:c3:aa:40:ce:88:ed: 2e:d4:32:9d:38:11:9b:53:4e:ae:43:98:ed:25:9b:06:8f:6e: aa:03:00:62:36:46:e8:d6:2e:ed:1d:cc:6f:3c:68:0b:f7:fc: c5:af:81:e0:0c:cf:43:3d:f2:8e:82:5d:36:de:5f:28:b9:ca: a8:64:68:a3:10:1e:65:1e:c1:47:99:a0:46:94:56:25:30:b9: 48:0b:3f:97:30:c4:47:20:08:3b:7a:f0:ef:b4:67:87:27:78: 19:25:ce:92:ca:92:63:9b:f9:37:43:f5:29:84:16:16:74:65: 97:01:b7:28:1b:df:53:c1:50:8f:27:88:e6:5a:58:81:7a:3c: ee:97:6a:d9:5a:a0:56:d0:db:ef:f8:5c:f1:fc:85:94:75:f0: 34:8e:48:c2:eb:35:e3:dd:e2:87:28:3e:6a:e9:ea:ee:f6:7f: 33:fb:cb:fc:55:3a:0b:34:6e:f5:ed:05:35:dd:48:96:2f:c9: 47:0a:40:f1:8c:d5:5e:a5:c4:96:1b:b9:f7:19:ea:4e:d9:8d: 1d:82:67:aa:5d:eb:3f:dc:74:a5:7e:f7:29:38:c3:9f:38:c5: f5:0d:14:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE4oaMxJSQ9Er0hRH47XVfNC5raMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDA2MTcyMDA5WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmRlZjU0ZTM3N2Y3YjNiODNmMGFhMDkzYzdmNTZhMjRj YWQ0Y2IyZGFjMjM4YzEwNWFmZDZjNmZjMTAzMjYxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOxZJVsCS0LExXy50tjKR7nWOutljylgUYWCuAMiCGzdi4 y93+QjKOrtRZadTqis0Oib/T5UcC0zfmSNwRDBTITGGe7iemhCMjbJBcnpQlMB3C EfRjIaEnDsRCzDtFWYBPlZVXzEkneMRlU3yGItzUEbphaJA9qGlHSYvtdJNfaZ0I TZXa4idMgZxaBJ4k0YUf2MKfo7c5NuElwNwdOovYqivvJGxNaOyUWsDMgnV3IgZH gDIYkqAMyB41783kYe7ce8GRO0mgMbOpjy5PeMUjyluqdBqhspfUv+4mAOyGV1Mf WTKHdu9jy1Zy2821XNIFPCEvq9UubL419A/MmUUtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDL60ad2dhdUB8ptedyQ4JxqS7AowHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2FkYWY5MzQ0LTc4MWEtNDhjZC05MDNhLTA5ODQ4MWYyOWE5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPYwDQYJKoZIhvcNAQELBQADggEBAGMt8gtgkJFVuxXbsPeU4k2Xqj2M CqQ/dtc+97XPkMOqQM6I7S7UMp04EZtTTq5DmO0lmwaPbqoDAGI2RujWLu0dzG88 aAv3/MWvgeAMz0M98o6CXTbeXyi5yqhkaKMQHmUewUeZoEaUViUwuUgLP5cwxEcg CDt68O+0Z4cneBklzpLKkmOb+TdD9SmEFhZ0ZZcBtygb31PBUI8niOZaWIF6PO6X atlaoFbQ2+/4XPH8hZR18DSOSMLrNePd4ocoPmrp6u72fzP7y/xVOgs0bvXtBTXd SJYvyUcKQPGM1V6lxJYbufcZ6k7ZjR2CZ6pd6z/cdKV+9yk4w584xfUNFD4= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:55 2025 by rpki-client