$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b326c7a6-462a-48ed-a5a5-2dd5652bb7dd.roa File: b326c7a6-462a-48ed-a5a5-2dd5652bb7dd.roa (raw, json) Hash identifier: HJ3Q9M8yLuGc5uS0zRZm9ZWALQpAvqo4wGHPjolXVRI= Subject key identifier: EE:BF:00:C0:8E:D0:DE:13:58:3B:8D:39:1F:DF:13:09:0B:35:6B:B4 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 07A2EBF627D790BE21CC0104AD439A1E9403F629 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b326c7a6-462a-48ed-a5a5-2dd5652bb7dd.roa Signing time: Sat 15 Nov 2025 05:00:07 +0000 ROA not before: Sat 15 Nov 2025 05:00:07 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a2:eb:f6:27:d7:90:be:21:cc:01:04:ad:43:9a:1e:94:03:f6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 15 05:00:07 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=ec2404467a5d80c5591f1d3781f5c429b193b7324b0f89ce00d293b76a234625, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:9a:96:54:57:6d:67:93:c1:ba:71:29:34: 00:be:88:42:55:ab:a7:65:6e:a2:78:20:18:0d:db: 6d:aa:5c:12:ce:56:07:3a:0d:52:76:62:ec:9a:ad: c2:c5:c0:51:15:e0:68:10:41:8e:8c:93:ea:72:e8: 43:fb:02:1e:1d:a0:35:1b:a5:74:69:ae:af:27:ef: aa:b5:c9:8b:45:9b:b8:44:7e:fa:13:d6:8d:e5:8f: b1:0b:9d:d1:25:57:e3:21:d5:74:f3:2f:a3:9b:08: ca:f4:00:7e:4d:e6:b3:ba:24:fc:b7:38:7d:88:1b: 7e:e8:b2:40:50:67:da:ec:f0:cf:fe:7a:05:97:3c: 37:fb:fc:64:09:24:d9:f6:e2:3c:af:ca:4a:a3:96: 71:ea:74:75:8f:1c:78:49:ca:3a:2a:d8:9b:7d:ec: 28:74:f5:a3:02:c4:66:be:af:4b:5c:90:87:78:cf: 14:07:a2:98:0a:c9:98:d8:ba:2a:e7:c1:5f:52:82: 20:9e:28:17:62:42:8d:9a:44:a4:ec:a2:6e:69:c9: 4c:3a:7a:6e:50:86:9a:14:bc:74:20:74:94:aa:d6: 35:1b:d5:c8:c4:d7:b7:96:f3:2b:de:aa:50:95:12: 5b:87:62:b2:92:b2:d4:d4:9b:ed:df:c9:4b:93:2c: 07:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BF:00:C0:8E:D0:DE:13:58:3B:8D:39:1F:DF:13:09:0B:35:6B:B4 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b326c7a6-462a-48ed-a5a5-2dd5652bb7dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.47.0/24 Signature Algorithm: sha256WithRSAEncryption 81:11:47:04:75:8f:23:17:14:0a:35:62:39:0c:c7:0f:ab:97: bc:3f:32:e4:9f:5d:10:ee:c3:aa:ab:6b:05:67:70:aa:fb:d5: 6b:95:00:2c:a0:18:eb:d5:90:2e:25:64:00:30:58:1b:29:16: c2:d5:db:9f:19:35:70:c4:ae:d4:1d:90:b8:83:07:61:7e:f4: 69:ef:cf:92:e7:6b:1b:15:e1:db:b4:7c:29:d8:96:e0:57:ca: 19:c3:91:0f:84:c7:79:73:25:5b:cf:94:aa:ce:bc:56:e5:a6: 3a:40:fa:43:8f:96:26:0e:7c:31:df:b2:84:64:ec:b6:20:40: 06:5c:e0:4d:84:41:04:2b:3e:f6:70:22:d9:89:4a:9d:4b:e2: 33:d3:97:38:ed:f0:4f:41:55:51:52:74:fe:c5:2a:00:a2:ac: 48:be:ec:ad:9d:aa:55:e8:77:c1:09:8f:da:72:29:df:8a:6d: b5:22:a6:46:24:dd:c3:52:43:d6:10:a5:4f:9c:62:f2:b3:58: ba:e7:69:7a:8f:ad:3b:e3:e5:5e:a9:1c:80:9b:90:25:40:3c: 88:99:eb:93:cd:9e:18:75:73:59:00:4a:0d:cd:16:2e:4c:39: 2b:47:f4:22:e4:7f:e6:41:8d:66:13:8e:ca:9b:25:34:2b:e4: 2d:fc:21:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB6Lr9ifXkL4hzAEErUOaHpQD9ikwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTE1MDUwMDA3WhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzI0MDQ0NjdhNWQ4MGM1NTkxZjFkMzc4MWY1YzQyOWIx OTNiNzMyNGIwZjg5Y2UwMGQyOTNiNzZhMjM0NjI1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAKZqWVFdtZ5PBunEpNAC+iEJVq6dlbqJ4IBgN222qXBLO Vgc6DVJ2YuyarcLFwFEV4GgQQY6Mk+py6EP7Ah4doDUbpXRprq8n76q1yYtFm7hE fvoT1o3lj7ELndElV+Mh1XTzL6ObCMr0AH5N5rO6JPy3OH2IG37oskBQZ9rs8M/+ egWXPDf7/GQJJNn24jyvykqjlnHqdHWPHHhJyjoq2Jt97Ch09aMCxGa+r0tckId4 zxQHopgKyZjYuirnwV9SgiCeKBdiQo2aRKTsom5pyUw6em5QhpoUvHQgdJSq1jUb 1cjE17eW8yveqlCVEluHYrKSstTUm+3fyUuTLAeHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7r8AwI7Q3hNYO405H98TCQs1a7QwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2IzMjZjN2E2LTQ2MmEtNDhlZC1hNWE1LTJkZDU2NTJiYjdkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC8wDQYJKoZIhvcNAQELBQADggEBAIERRwR1jyMXFAo1YjkMxw+rl7w/ MuSfXRDuw6qrawVncKr71WuVACygGOvVkC4lZAAwWBspFsLV258ZNXDErtQdkLiD B2F+9Gnvz5LnaxsV4du0fCnYluBXyhnDkQ+Ex3lzJVvPlKrOvFblpjpA+kOPliYO fDHfsoRk7LYgQAZc4E2EQQQrPvZwItmJSp1L4jPTlzjt8E9BVVFSdP7FKgCirEi+ 7K2dqlXod8EJj9pyKd+KbbUipkYk3cNSQ9YQpU+cYvKzWLrnaXqPrTvj5V6pHICb kCVAPIiZ65PNnhh1c1kASg3NFi5MOStH9CLkf+ZBjWYTjsqbJTQr5C38IZo= -----END CERTIFICATE-----Generated at Tue Nov 18 07:03:29 2025 by rpki-client