$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b397a4bc-52af-44ea-92ba-26ce6c10d042.roa File: b397a4bc-52af-44ea-92ba-26ce6c10d042.roa (raw, json) Hash identifier: h9yIHuifj5MLSFoW3ryHNbIMasC5ZSWVoxWqqIsG1GQ= Subject key identifier: D9:89:72:D9:06:65:BF:81:72:AD:25:DB:4F:E4:28:11:9D:BA:97:11 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0905D22947FA2DF4988598ABDAD9B823A8706205 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b397a4bc-52af-44ea-92ba-26ce6c10d042.roa Signing time: Mon 06 Oct 2025 22:07:10 +0000 ROA not before: Mon 06 Oct 2025 22:07:10 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:05:d2:29:47:fa:2d:f4:98:85:98:ab:da:d9:b8:23:a8:70:62:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 6 22:07:10 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=b34eb045ed6803838368ccebda4d21a862d9f841d57cb1d2f8ccf2b86f08e574, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:f7:ac:07:be:83:57:35:ef:3f:52:24:8c: 2d:3c:f3:fc:4f:ed:bd:79:f2:a4:83:0e:b6:ac:a0: 77:b9:c9:79:93:41:6c:a4:a5:0a:bc:84:13:0a:f2: 7c:f0:f3:e7:ce:be:f6:24:93:5b:b8:da:1b:52:62: 5f:31:88:69:e2:66:8e:18:b9:0b:b6:01:2e:91:28: 73:18:51:a6:5d:ae:7a:f9:86:7b:6f:37:f6:71:34: f7:7b:5e:ad:58:68:aa:ae:d9:ec:d0:65:4c:64:e9: ad:7f:4b:4f:eb:63:45:c5:cf:84:f7:07:65:8a:2a: b0:09:10:53:68:a1:9c:85:76:43:75:d4:ae:6b:11: eb:09:0c:e4:cd:a2:f4:66:99:3d:5b:40:f1:c3:00: 9f:49:b9:32:4c:a8:e4:26:d4:c1:d7:e9:32:75:6c: 1d:0d:a1:d4:2d:ea:3d:76:74:df:cf:fb:72:63:46: 8e:d7:e2:f9:ff:5a:26:f7:ef:9e:30:b7:14:11:02: b1:69:e5:b7:05:da:a1:50:e9:d7:1b:54:35:a6:06: 31:b9:fb:15:ca:69:f0:b9:98:f5:6e:ed:9c:b0:72: 23:d0:4c:2e:c0:f8:e6:4f:ff:e5:ba:84:27:45:91: 61:bc:20:d1:72:44:97:d1:48:a4:09:b3:7f:0d:8c: 52:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:89:72:D9:06:65:BF:81:72:AD:25:DB:4F:E4:28:11:9D:BA:97:11 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b397a4bc-52af-44ea-92ba-26ce6c10d042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.50.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:a1:26:5f:56:89:75:a5:52:0c:be:d7:80:70:3b:e7:5a:79: 7c:e9:e3:96:39:67:4f:19:dc:9e:30:db:15:85:73:73:98:51: 0c:fb:75:26:88:9c:44:45:26:03:cd:67:17:57:bd:e6:48:2d: 41:bd:cb:eb:6f:2f:14:c7:74:15:77:7f:04:af:69:4a:dc:58: 61:d1:d1:44:f7:b6:fe:f6:cd:d2:00:48:43:c6:b9:02:f5:21: c5:af:c9:c2:77:5d:93:50:8c:57:42:87:01:67:50:26:ba:b1: cb:8f:67:ad:d0:34:cb:11:ff:45:5c:9f:cf:de:0b:64:c7:bd: ae:cb:68:29:47:1a:e3:8b:24:80:6e:56:17:93:3c:19:fc:2c: 36:03:17:44:92:2b:79:ff:6b:79:d6:4e:81:b7:28:60:ab:55: 2f:19:f4:ed:87:05:47:3c:77:db:11:f9:0e:06:a3:2b:ed:73: 2a:0d:ba:c4:f4:8a:6d:b4:36:be:2a:32:76:2a:9e:e4:44:d3: 1c:1c:d8:3e:00:65:c9:c7:87:d9:cc:4d:c7:66:c7:84:68:ce: fa:8c:8c:75:a3:61:d9:e5:47:e3:da:d7:a7:c0:28:93:a4:42: 8e:dc:29:12:48:ba:72:61:53:66:6f:1a:75:94:01:62:dc:49: 5d:1c:ec:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCQXSKUf6LfSYhZir2tm4I6hwYgUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDA2MjIwNzEwWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzRlYjA0NWVkNjgwMzgzODM2OGNjZWJkYTRkMjFhODYy ZDlmODQxZDU3Y2IxZDJmOGNjZjJiODZmMDhlNTc0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnfPesB76DVzXvP1IkjC088/xP7b158qSDDrasoHe5yXmT QWykpQq8hBMK8nzw8+fOvvYkk1u42htSYl8xiGniZo4YuQu2AS6RKHMYUaZdrnr5 hntvN/ZxNPd7Xq1YaKqu2ezQZUxk6a1/S0/rY0XFz4T3B2WKKrAJEFNooZyFdkN1 1K5rEesJDOTNovRmmT1bQPHDAJ9JuTJMqOQm1MHX6TJ1bB0NodQt6j12dN/P+3Jj Ro7X4vn/Wib3754wtxQRArFp5bcF2qFQ6dcbVDWmBjG5+xXKafC5mPVu7ZywciPQ TC7A+OZP/+W6hCdFkWG8INFyRJfRSKQJs38NjFLBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2Yly2QZlv4FyrSXbT+QoEZ26lxEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2IzOTdhNGJjLTUyYWYtNDRlYS05MmJhLTI2Y2U2YzEwZDA0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDIwDQYJKoZIhvcNAQELBQADggEBAE2hJl9WiXWlUgy+14BwO+daeXzp 45Y5Z08Z3J4w2xWFc3OYUQz7dSaInERFJgPNZxdXveZILUG9y+tvLxTHdBV3fwSv aUrcWGHR0UT3tv72zdIASEPGuQL1IcWvycJ3XZNQjFdChwFnUCa6scuPZ63QNMsR /0Vcn8/eC2THva7LaClHGuOLJIBuVheTPBn8LDYDF0SSK3n/a3nWToG3KGCrVS8Z 9O2HBUc8d9sR+Q4GoyvtcyoNusT0im20Nr4qMnYqnuRE0xwc2D4AZcnHh9nMTcdm x4RozvqMjHWjYdnlR+Pa16fAKJOkQo7cKRJIunJhU2ZvGnWUAWLcSV0c7Ao= -----END CERTIFICATE-----Generated at Wed Oct 8 21:28:29 2025 by rpki-client