$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07a1de96-5853-4c7c-aa68-5a55ec6b654e.roa File: 07a1de96-5853-4c7c-aa68-5a55ec6b654e.roa (raw, json) Hash identifier: v3RwANA/a4q6ZpNqb/sPKPAnhCAcNjn1MfGjRKRvvcA= Subject key identifier: 57:A4:F9:02:D3:C7:4B:38:72:B9:EF:28:83:20:9D:53:C2:91:BA:D8 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3D3FB73103020A5F6FF20EA06C32AE81AABC3FFE Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07a1de96-5853-4c7c-aa68-5a55ec6b654e.roa Signing time: Sun 19 Oct 2025 04:00:12 +0000 ROA not before: Sun 19 Oct 2025 04:00:12 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3f:b7:31:03:02:0a:5f:6f:f2:0e:a0:6c:32:ae:81:aa:bc:3f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 04:00:12 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=7137c301b103fa8fe44f39e3c0ee891f57726dc060a329ae74b7482b2fe6feed, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:d9:25:34:3b:70:62:1c:60:17:1a:f8:a7: fe:6a:09:45:46:47:f2:0f:e0:64:10:5c:44:51:67: 19:e3:e5:3c:00:9c:fb:5c:3c:d3:77:ab:e2:a3:53: e6:ba:54:3d:52:2f:ad:79:8c:7d:35:e1:0a:88:9e: b3:6c:c6:3e:21:1e:5e:50:30:d3:6e:7b:24:cc:02: c9:79:46:72:89:25:0d:6a:ef:e0:4e:1e:7e:9e:e8: e4:64:9e:0b:ee:b8:9e:a6:76:01:20:c9:4a:16:9d: 70:af:ba:39:47:6f:fc:bf:f1:f1:c0:38:51:07:e0: 4b:ca:e5:9c:59:7b:49:48:7a:00:6a:61:76:69:af: 03:b0:fc:7e:ae:99:c0:64:06:ad:4d:c4:6a:6d:ee: ba:01:e6:9b:fb:b2:c5:9b:07:31:f8:c1:b9:cb:5b: 68:6d:ed:57:d4:76:1b:11:fc:93:c2:53:82:4a:41: 91:25:56:d9:50:2a:1d:c2:a7:a4:97:76:ce:cc:7d: 52:4d:87:75:d4:9e:cd:12:90:3b:d5:58:ae:0a:0e: 20:65:a0:fc:d3:ba:fb:0c:fd:61:f5:1e:8d:04:9f: bb:51:25:3f:62:e5:64:92:96:5f:e6:9a:b0:18:81: 71:93:3f:eb:90:15:bf:84:d8:ac:2e:79:d5:07:1c: 22:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A4:F9:02:D3:C7:4B:38:72:B9:EF:28:83:20:9D:53:C2:91:BA:D8 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07a1de96-5853-4c7c-aa68-5a55ec6b654e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.37.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:18:91:e6:ad:ca:73:5e:fb:42:6e:eb:2a:19:b1:2b:c9:2b: 00:26:68:2e:d0:76:19:58:d1:49:58:bd:fd:18:07:20:d5:f7: 88:c2:b7:4f:18:de:56:2e:98:48:eb:eb:1b:e4:85:12:c7:9b: 8b:4b:d6:c0:af:18:24:26:72:8b:2e:22:9d:70:f4:83:04:c1: ae:21:51:6f:fe:39:98:04:2b:42:8a:33:21:43:49:1f:df:e5: 68:39:6f:43:b9:13:d6:68:4e:2f:22:23:23:62:73:80:a4:e0: dc:98:89:1e:a9:1a:b5:31:2b:86:35:4d:7c:59:7a:8f:a7:6f: e2:35:c2:61:2a:68:ed:8f:38:21:6b:95:22:1c:cb:d7:fc:0f: dc:fc:f5:b2:fd:d0:11:38:92:b9:47:ef:81:87:9b:5a:6c:73: 2a:f9:0c:27:70:44:88:8a:50:50:8c:cf:19:47:8d:dc:7d:c5: 8d:f1:2c:1e:ff:61:d9:eb:0e:1a:03:8c:f9:05:61:0b:18:61: 62:f3:40:d6:db:b4:f3:77:6f:37:d0:09:28:ff:e9:74:c0:ca: fc:21:e9:6c:3d:55:45:be:98:a8:13:4e:f9:95:04:65:7c:a2: dd:51:4a:04:7d:3c:3a:67:b7:c8:cb:74:75:75:34:e5:9f:66: 30:db:1e:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPT+3MQMCCl9v8g6gbDKugaq8P/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDE5MDQwMDEyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTM3YzMwMWIxMDNmYThmZTQ0ZjM5ZTNjMGVlODkxZjU3 NzI2ZGMwNjBhMzI5YWU3NGI3NDgyYjJmZTZmZWVkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn4dklNDtwYhxgFxr4p/5qCUVGR/IP4GQQXERRZxnj5TwA nPtcPNN3q+KjU+a6VD1SL615jH014QqInrNsxj4hHl5QMNNueyTMAsl5RnKJJQ1q 7+BOHn6e6ORkngvuuJ6mdgEgyUoWnXCvujlHb/y/8fHAOFEH4EvK5ZxZe0lIegBq YXZprwOw/H6umcBkBq1NxGpt7roB5pv7ssWbBzH4wbnLW2ht7VfUdhsR/JPCU4JK QZElVtlQKh3Cp6SXds7MfVJNh3XUns0SkDvVWK4KDiBloPzTuvsM/WH1Ho0En7tR JT9i5WSSll/mmrAYgXGTP+uQFb+E2KwuedUHHCIPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV6T5AtPHSzhyue8ogyCdU8KRutgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA3YTFkZTk2LTU4NTMtNGM3Yy1hYTY4LTVhNTVlYzZiNjU0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCUwDQYJKoZIhvcNAQELBQADggEBAA4YkeatynNe+0Ju6yoZsSvJKwAm aC7QdhlY0UlYvf0YByDV94jCt08Y3lYumEjr6xvkhRLHm4tL1sCvGCQmcosuIp1w 9IMEwa4hUW/+OZgEK0KKMyFDSR/f5Wg5b0O5E9ZoTi8iIyNic4Ck4NyYiR6pGrUx K4Y1TXxZeo+nb+I1wmEqaO2POCFrlSIcy9f8D9z89bL90BE4krlH74GHm1pscyr5 DCdwRIiKUFCMzxlHjdx9xY3xLB7/YdnrDhoDjPkFYQsYYWLzQNbbtPN3bzfQCSj/ 6XTAyvwh6Ww9VUW+mKgTTvmVBGV8ot1RSgR9PDpnt8jLdHV1NOWfZjDbHq8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:43:59 2025 by rpki-client