$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f106bd1f-1175-4eda-af94-f788dab09805.roa File: f106bd1f-1175-4eda-af94-f788dab09805.roa (raw, json) Hash identifier: HdyZfzXrqp0AWHvXJm9gX3J1DCxhycOzQi9HAf7JPo8= Subject key identifier: 44:BC:B9:D2:C9:9C:2F:6B:A6:8A:4F:72:C1:B5:83:CF:7D:D1:55:D2 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 42330BE078380F3714F48D319D740BAE93594297 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f106bd1f-1175-4eda-af94-f788dab09805.roa Signing time: Fri 19 Sep 2025 18:00:41 +0000 ROA not before: Fri 19 Sep 2025 18:00:41 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:33:0b:e0:78:38:0f:37:14:f4:8d:31:9d:74:0b:ae:93:59:42:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 19 18:00:41 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=b8e70e1e4f728d0705a9fe46989cb5abeb9ada6f031bd64b3a957211a9f5cfe5, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:d5:5f:f0:e1:11:33:27:e2:61:8d:27:bd: eb:2e:80:bd:1a:78:dd:7b:9c:fe:6f:7c:85:fc:f7: ab:6d:08:7b:21:35:ec:ea:0d:84:a1:14:2d:07:87: 11:ff:09:42:a6:e6:e4:93:7d:42:40:5a:f7:dd:cf: 3f:93:f0:66:3a:c4:e7:1a:c2:f2:79:bc:b3:30:07: 96:04:9e:c6:b5:30:2e:3a:d1:4f:40:fb:5c:dd:88: 92:0a:5a:d4:2a:84:54:53:d7:5f:f8:c5:e9:63:ba: 12:1c:b6:f7:ff:08:c4:41:73:0b:8b:1e:45:bb:b5: 71:0f:4e:7e:17:bc:9b:f2:37:dd:aa:fd:ed:95:ac: a5:c0:0d:ec:73:ea:44:38:d8:71:85:4b:a6:70:a6: 08:31:78:94:f2:2b:53:a5:69:b6:46:25:d2:c8:af: 27:72:ab:d4:07:9a:31:c6:df:b3:ed:77:c0:04:34: ae:86:5c:c0:6a:f2:7f:1d:57:aa:6d:95:cd:5e:ac: eb:77:9d:c1:eb:41:1e:7e:dc:21:ae:80:19:cc:af: d1:6d:25:a2:7e:c1:09:a1:bc:ef:29:48:dc:00:f4: 04:8b:3e:0f:7b:22:0d:b4:18:ff:9e:52:a0:65:f4: 4d:1d:95:ae:16:f9:39:43:d0:78:41:d7:dc:d0:4c: fc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BC:B9:D2:C9:9C:2F:6B:A6:8A:4F:72:C1:B5:83:CF:7D:D1:55:D2 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f106bd1f-1175-4eda-af94-f788dab09805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.37.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:75:ff:7c:7b:d5:df:69:de:76:12:b4:e3:15:70:17:e3:0c: 54:6c:21:3e:c3:2e:67:6a:f7:0c:49:4c:79:a4:8b:fd:63:3a: bd:25:19:0c:db:4f:9d:3c:3a:aa:19:0c:13:31:41:ff:0c:64: e7:6a:0e:b5:f5:f1:b6:50:49:be:4e:da:9a:fb:53:4a:59:32: ce:a0:9a:8a:fb:68:57:3a:43:4d:11:e0:cd:ce:39:f7:38:bc: 04:30:e0:11:7d:eb:33:a7:9e:14:9e:01:6f:2f:29:cb:09:50: 42:4b:b2:e3:c2:60:a5:ff:a7:88:36:39:ab:9a:4e:db:75:d6: 6d:e3:d7:45:6a:9c:f0:15:f2:b7:d0:d9:8c:fe:5e:53:f6:f1: 2a:7c:04:04:7f:7e:12:66:1a:d9:ab:68:6d:eb:b9:57:65:a1: 10:22:e8:62:f3:18:c9:60:c6:74:66:68:cb:67:2e:79:ff:94: ae:ea:5e:19:70:a1:e5:74:00:9c:87:48:dd:44:4c:33:ee:a5: c8:73:3f:3b:49:1c:db:e1:d0:23:23:b4:c6:4f:1e:e1:cc:6a: 00:06:25:fa:8f:01:79:9f:b9:27:04:df:3f:19:a3:a8:4b:dd: 51:58:6e:92:57:04:0f:30:cc:ae:01:69:29:77:d1:5f:e6:4d: 48:02:0f:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQjML4Hg4DzcU9I0xnXQLrpNZQpcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTE5MTgwMDQxWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOGU3MGUxZTRmNzI4ZDA3MDVhOWZlNDY5ODljYjVhYmVi OWFkYTZmMDMxYmQ2NGIzYTk1NzIxMWE5ZjVjZmU1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC99NVf8OERMyfiYY0nvesugL0aeN17nP5vfIX896ttCHsh NezqDYShFC0HhxH/CUKm5uSTfUJAWvfdzz+T8GY6xOcawvJ5vLMwB5YEnsa1MC46 0U9A+1zdiJIKWtQqhFRT11/4xeljuhIctvf/CMRBcwuLHkW7tXEPTn4XvJvyN92q /e2VrKXADexz6kQ42HGFS6ZwpggxeJTyK1OlabZGJdLIrydyq9QHmjHG37Ptd8AE NK6GXMBq8n8dV6ptlc1erOt3ncHrQR5+3CGugBnMr9FtJaJ+wQmhvO8pSNwA9ASL Pg97Ig20GP+eUqBl9E0dla4W+TlD0HhB19zQTPyjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURLy50smcL2umik9ywbWDz33RVdIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2YxMDZiZDFmLTExNzUtNGVkYS1hZjk0LWY3ODhkYWIwOTgwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCUwDQYJKoZIhvcNAQELBQADggEBABt1/3x71d9p3nYStOMVcBfjDFRs IT7DLmdq9wxJTHmki/1jOr0lGQzbT508OqoZDBMxQf8MZOdqDrX18bZQSb5O2pr7 U0pZMs6gmor7aFc6Q00R4M3OOfc4vAQw4BF96zOnnhSeAW8vKcsJUEJLsuPCYKX/ p4g2OauaTtt11m3j10VqnPAV8rfQ2Yz+XlP28Sp8BAR/fhJmGtmraG3ruVdloRAi 6GLzGMlgxnRmaMtnLnn/lK7qXhlwoeV0AJyHSN1ETDPupchzPztJHNvh0CMjtMZP HuHMagAGJfqPAXmfuScE3z8Zo6hL3VFYbpJXBA8wzK4BaSl30V/mTUgCDyI= -----END CERTIFICATE-----Generated at Wed Oct 8 21:19:56 2025 by rpki-client