$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c6bb34b4-57ac-4e94-a9ab-40bdf2aa0a10.roa File: c6bb34b4-57ac-4e94-a9ab-40bdf2aa0a10.roa (raw, json) Hash identifier: M0LzKyYbfbuiCLFwqd+JjS/VnOk7VXNCPiLmY43chbY= Subject key identifier: 27:5E:2A:AB:59:47:1F:04:A3:46:BE:F6:92:7A:7A:91:E6:AC:0E:1A Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 79B008AA411FD8A6D65315C4DE2E244A45E16357 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c6bb34b4-57ac-4e94-a9ab-40bdf2aa0a10.roa Signing time: Sat 08 Nov 2025 00:10:04 +0000 ROA not before: Sat 08 Nov 2025 00:10:04 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b0:08:aa:41:1f:d8:a6:d6:53:15:c4:de:2e:24:4a:45:e1:63:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 8 00:10:04 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=058b491d0379f84807a24af1e38480b61a8d67a22eb02830ef5d6cd4ea15cf33, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:f2:5d:96:4a:fc:be:9a:16:20:b5:fa:58: c4:7a:ef:f2:c1:32:cb:a4:99:8b:d1:72:26:64:7b: ca:06:ad:00:f9:8a:96:14:b5:66:bd:c0:de:22:7e: 86:0e:dc:23:0c:51:f0:29:9b:e8:2e:41:86:b7:b3: b1:fd:ff:f4:4a:9e:de:aa:67:92:6a:c0:f9:b9:7f: 43:db:07:4a:80:e6:d3:35:ce:57:c4:fa:f2:e1:1d: 21:4a:e8:44:05:ea:3d:17:0e:da:77:b1:87:cf:23: 7a:fb:25:85:32:62:9b:92:ab:62:41:dc:f5:57:15: 27:1f:26:f3:ac:9a:bf:16:03:d3:d4:8b:6b:e9:94: cf:3b:b5:fc:64:04:1a:9e:d5:37:df:ab:f2:ac:0a: 7d:59:cb:15:82:57:a2:a7:72:de:96:19:e1:7d:9e: a2:96:d2:da:93:b6:93:e2:d6:44:f0:34:a7:0f:7e: 5c:e5:e7:bb:e1:d7:94:f2:75:9c:b4:4c:b0:03:4a: 5f:7c:00:23:d0:58:56:0c:c6:74:d7:5b:12:96:19: f3:c5:30:c6:04:a1:4d:88:9a:0e:fd:2b:14:67:00: 88:8d:a4:48:c2:9f:98:31:02:f0:02:ef:dd:9b:71: 97:c4:bc:80:8e:b5:45:0e:0c:4d:77:fe:73:2a:40: 41:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5E:2A:AB:59:47:1F:04:A3:46:BE:F6:92:7A:7A:91:E6:AC:0E:1A X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c6bb34b4-57ac-4e94-a9ab-40bdf2aa0a10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.50.0/24 Signature Algorithm: sha256WithRSAEncryption 14:83:f4:69:ed:07:fc:57:7a:94:c5:6c:3f:05:63:84:6b:da: 2d:7b:2b:87:5b:5e:a4:fd:25:84:37:2e:0c:06:b7:48:7b:c2: 08:96:f4:cc:f8:e0:99:6c:e6:98:ef:98:41:9c:99:45:80:bd: da:5f:a1:56:7a:4c:3e:c2:e1:85:3d:57:74:4b:40:82:24:ed: 51:2d:49:0f:ce:bb:87:cf:d9:09:27:ea:67:01:ad:15:43:4b: 03:8a:c0:47:8c:29:bf:42:f6:57:f5:b7:bc:2a:1a:9b:89:b9: 5c:4a:14:ea:29:ad:2c:8e:f5:ca:31:b0:95:a3:6d:c9:ca:05: 41:7a:f4:12:80:f0:68:70:3f:b3:20:f1:c5:15:8d:9b:85:40: f2:24:c8:a3:94:cd:ab:7f:16:01:cf:b2:c4:7e:66:69:bc:3a: 94:1d:24:dc:8f:a9:c6:78:ed:05:38:c4:f8:49:75:01:a9:e9: a2:21:30:cf:30:db:d6:38:c3:c2:94:2d:5f:3d:e5:86:6e:2f: 1a:66:1f:2a:b4:f0:5e:a1:4c:ef:2e:27:8e:a9:6e:64:38:8a: 03:04:e6:c0:2c:c5:eb:50:b1:b9:f7:f7:e2:e2:1e:d1:75:27: 49:5c:6c:1a:0d:7e:a3:0a:0f:a6:38:9c:34:1e:7f:f2:da:be: db:f6:84:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUebAIqkEf2KbWUxXE3i4kSkXhY1cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTA4MDAxMDA0WhcNMjUxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNThiNDkxZDAzNzlmODQ4MDdhMjRhZjFlMzg0ODBiNjFh OGQ2N2EyMmViMDI4MzBlZjVkNmNkNGVhMTVjZjMzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/8fJdlkr8vpoWILX6WMR67/LBMsukmYvRciZke8oGrQD5 ipYUtWa9wN4ifoYO3CMMUfApm+guQYa3s7H9//RKnt6qZ5JqwPm5f0PbB0qA5tM1 zlfE+vLhHSFK6EQF6j0XDtp3sYfPI3r7JYUyYpuSq2JB3PVXFScfJvOsmr8WA9PU i2vplM87tfxkBBqe1Tffq/KsCn1ZyxWCV6Knct6WGeF9nqKW0tqTtpPi1kTwNKcP flzl57vh15TydZy0TLADSl98ACPQWFYMxnTXWxKWGfPFMMYEoU2Img79KxRnAIiN pEjCn5gxAvAC792bcZfEvICOtUUODE13/nMqQEFTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ14qq1lHHwSjRr72knp6keasDhowHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2M2YmIzNGI0LTU3YWMtNGU5NC1hOWFiLTQwYmRmMmFhMGExMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDIwDQYJKoZIhvcNAQELBQADggEBABSD9GntB/xXepTFbD8FY4Rr2i17 K4dbXqT9JYQ3LgwGt0h7wgiW9Mz44Jls5pjvmEGcmUWAvdpfoVZ6TD7C4YU9V3RL QIIk7VEtSQ/Ou4fP2Qkn6mcBrRVDSwOKwEeMKb9C9lf1t7wqGpuJuVxKFOoprSyO 9coxsJWjbcnKBUF69BKA8GhwP7Mg8cUVjZuFQPIkyKOUzat/FgHPssR+Zmm8OpQd JNyPqcZ47QU4xPhJdQGp6aIhMM8w29Y4w8KULV895YZuLxpmHyq08F6hTO8uJ46p bmQ4igME5sAsxetQsbn39+LiHtF1J0lcbBoNfqMKD6Y4nDQef/Lavtv2hBI= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:13 2025 by rpki-client