$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa File: decfa8a2-ad50-432e-96a7-cba83d9032f9.roa (raw, json) Hash identifier: Q/XVFP+RSk+oAm9kLVsY5d7UotiSyEw9xCqRygrZiJc= Subject key identifier: 71:E2:25:5B:D6:EC:CE:13:0B:03:2A:70:F7:80:B5:A3:88:0A:81:38 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7AFAAE47A28D8DF5F8F05FEA08180FF54565E7C0 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa Signing time: Sat 15 Nov 2025 05:00:05 +0000 ROA not before: Sat 15 Nov 2025 05:00:05 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fa:ae:47:a2:8d:8d:f5:f8:f0:5f:ea:08:18:0f:f5:45:65:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 15 05:00:05 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=58e050323825f12ea367acd9315e226f5511dc3843949e148db1f2f0ee39a77f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1e:6c:cf:78:f4:d2:0a:00:a7:ff:9b:8d:c7: d8:04:ee:98:1e:02:67:26:79:ed:99:e4:69:4c:86: 2b:61:b8:73:60:29:18:7e:5c:f4:7d:f9:7c:a6:a1: be:0c:6a:02:e4:8c:84:63:ec:f8:35:b8:5a:85:cc: a8:f6:8b:56:72:92:ac:b1:57:16:6f:6b:16:8d:48: 59:0b:0c:63:9e:9c:f1:e8:70:e1:26:c5:aa:bd:bb: bd:02:59:d0:40:6f:9d:46:cc:cf:0e:7a:a3:95:e9: 1d:90:c3:3a:13:96:cc:15:91:3d:f4:c1:07:65:22: 79:8e:b8:3b:5e:6a:94:a3:72:83:e4:c2:f4:68:4a: 8f:d8:4b:72:99:13:e6:2c:7b:07:b8:ae:32:50:f8: 31:b3:8b:39:45:73:a0:af:46:c3:26:3a:d0:41:82: 47:1f:f8:fb:fc:0b:c8:8a:62:a4:28:41:7f:83:6b: 8d:9f:79:a3:b7:4d:ca:0b:77:ed:b4:4d:a7:ad:14: 7e:bb:5a:6c:bb:f6:28:65:cd:8d:4e:91:d6:6f:63: 93:ec:72:53:a3:e5:4d:8b:3c:45:f2:ba:23:0a:4e: c2:47:14:db:ad:f8:36:a8:5e:4a:fb:76:db:41:13: 34:1b:a3:57:30:59:39:6a:ba:17:01:fc:fb:7a:a1: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E2:25:5B:D6:EC:CE:13:0B:03:2A:70:F7:80:B5:A3:88:0A:81:38 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.9.0/24 Signature Algorithm: sha256WithRSAEncryption 06:f0:ac:06:f5:d3:c2:a2:9b:04:d4:32:f2:3d:25:61:5d:7d: 19:89:39:64:f4:fd:15:49:7c:d8:09:65:f4:15:16:ab:65:d0: e8:5f:7f:49:29:7a:fa:29:ad:18:37:2c:08:4b:da:a8:b2:58: 71:a7:fe:f6:89:7b:fb:57:90:3a:cb:d4:53:46:ae:0a:84:98: 6c:48:63:a1:32:fd:9a:45:f8:36:da:ec:aa:1c:e8:41:62:32: e6:f9:e1:68:7a:b9:36:18:83:4f:13:7e:74:4d:39:65:c9:c7: 04:49:f7:30:9c:3b:10:79:bf:6e:ee:d4:56:26:cc:48:c8:75: f1:78:a0:60:e1:a7:19:2e:85:ae:b9:a8:3b:85:c6:b7:fa:42: 58:9f:39:7f:bf:c7:95:64:1e:e5:3c:8d:61:0b:d9:21:31:e9: b4:5d:a9:2c:84:8b:82:c4:de:f7:48:a9:b5:9c:20:bc:82:2c: be:4b:eb:fb:37:97:dd:09:f6:63:20:25:2a:36:eb:34:dc:3d: a0:56:be:d5:77:43:dc:5a:d6:f1:69:66:d0:23:d8:4b:f5:8e: b0:af:a3:53:42:48:b6:f5:ea:4d:ad:c2:15:0f:83:a9:3c:66: ed:20:63:15:9e:6c:5f:29:8c:eb:94:7e:12:26:c0:65:a3:c7: 1f:1e:ae:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUevquR6KNjfX48F/qCBgP9UVl58AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTE1MDUwMDA1WhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OGUwNTAzMjM4MjVmMTJlYTM2N2FjZDkzMTVlMjI2ZjU1 MTFkYzM4NDM5NDllMTQ4ZGIxZjJmMGVlMzlhNzdmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDyHmzPePTSCgCn/5uNx9gE7pgeAmcmee2Z5GlMhithuHNg KRh+XPR9+Xymob4MagLkjIRj7Pg1uFqFzKj2i1ZykqyxVxZvaxaNSFkLDGOenPHo cOEmxaq9u70CWdBAb51GzM8OeqOV6R2QwzoTlswVkT30wQdlInmOuDteapSjcoPk wvRoSo/YS3KZE+Ysewe4rjJQ+DGzizlFc6CvRsMmOtBBgkcf+Pv8C8iKYqQoQX+D a42feaO3TcoLd+20TaetFH67Wmy79ihlzY1OkdZvY5PsclOj5U2LPEXyuiMKTsJH FNut+DaoXkr7dttBEzQbo1cwWTlquhcB/Pt6oTh3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUceIlW9bszhMLAypw94C1o4gKgTgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RlY2ZhOGEyLWFkNTAtNDMyZS05NmE3LWNiYTgzZDkwMzJmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAkwDQYJKoZIhvcNAQELBQADggEBAAbwrAb108KimwTUMvI9JWFdfRmJ OWT0/RVJfNgJZfQVFqtl0Ohff0kpevoprRg3LAhL2qiyWHGn/vaJe/tXkDrL1FNG rgqEmGxIY6Ey/ZpF+Dba7Koc6EFiMub54Wh6uTYYg08TfnRNOWXJxwRJ9zCcOxB5 v27u1FYmzEjIdfF4oGDhpxkuha65qDuFxrf6QlifOX+/x5VkHuU8jWEL2SEx6bRd qSyEi4LE3vdIqbWcILyCLL5L6/s3l90J9mMgJSo26zTcPaBWvtV3Q9xa1vFpZtAj 2Ev1jrCvo1NCSLb16k2twhUPg6k8Zu0gYxWebF8pjOuUfhImwGWjxx8erls= -----END CERTIFICATE-----Generated at Tue Nov 18 08:23:57 2025 by rpki-client