$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0eef1f06-902a-416e-81f2-b594374899b9.roa File: 0eef1f06-902a-416e-81f2-b594374899b9.roa (raw, json) Hash identifier: xGgR63vg9uTWQ+F/8V3xF23kDhxCo6d3dyrTe2PTIl8= Subject key identifier: 67:9D:71:C8:3A:19:91:ED:1B:AA:15:A9:1C:A5:1E:C0:80:A5:D6:B2 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 128CDAE8AA2631CEF305D258091141888050ECF6 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0eef1f06-902a-416e-81f2-b594374899b9.roa Signing time: Fri 10 Oct 2025 17:05:42 +0000 ROA not before: Fri 10 Oct 2025 17:05:42 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.97.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8c:da:e8:aa:26:31:ce:f3:05:d2:58:09:11:41:88:80:50:ec:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 10 17:05:42 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=c481d5b8c8284c8a92f2b86918d1cc03d7454d61d3764014a528fad6567a3d1e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:94:02:7d:81:50:d2:d0:ae:f5:0b:1f:78: d6:63:7f:1a:1e:d7:61:ab:46:c3:05:eb:1a:e7:95: 39:16:d8:42:b3:64:6e:4d:bb:5b:f4:e9:2d:95:f2: 6f:94:af:4c:4b:2a:28:89:3d:07:40:48:00:68:0c: 09:c7:78:b1:2e:e3:72:5f:6f:ea:86:53:76:e4:88: fb:04:25:62:5d:34:f2:f9:c4:4c:da:66:90:27:61: 1b:34:6a:08:a1:1d:37:10:16:69:b0:fb:7e:61:1c: 73:85:bc:b8:8c:e1:15:ce:7c:35:5c:b5:6a:26:c9: 20:ad:13:ae:fb:03:00:bb:85:5b:12:a1:20:e9:d0: 8a:4d:08:81:fa:42:9c:4a:32:54:1f:71:b2:53:65: 91:99:7b:9a:13:c0:a7:67:22:2c:ab:96:2f:2e:f2: d2:d2:7c:10:1a:fe:6b:03:e1:66:ba:c8:01:f1:63: d4:32:6a:32:46:06:a6:81:86:6e:4b:15:16:78:7d: a9:23:1a:fb:c4:c1:84:7a:22:b5:4e:7c:80:8f:b6: 5f:fa:8c:d3:10:47:0f:30:69:e9:36:2e:f6:c4:9d: 2b:99:82:94:30:d8:76:5c:6b:e8:6e:90:7c:7e:e2: 1a:45:3e:68:10:5a:10:8a:b7:aa:72:6d:21:fa:67: b3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9D:71:C8:3A:19:91:ED:1B:AA:15:A9:1C:A5:1E:C0:80:A5:D6:B2 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0eef1f06-902a-416e-81f2-b594374899b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.97.0.0/17 Signature Algorithm: sha256WithRSAEncryption 03:3d:06:f7:71:39:08:e6:6d:71:73:a7:15:3c:18:2f:b0:74: a2:2d:08:29:19:f7:5e:49:fe:42:0e:64:0a:60:11:40:91:40: 1b:b0:3c:ad:83:3b:f5:5e:9a:fc:4d:e1:f3:bf:ba:a5:c4:93: ab:7d:94:3c:bf:05:a0:11:35:97:37:8b:77:39:6a:21:71:2d: 9a:4b:b1:9f:14:52:e7:98:5a:42:9d:e3:20:0c:6e:50:40:fa: 68:13:61:bd:22:72:43:52:39:19:f1:1f:0f:0e:f0:77:42:2f: 24:20:9f:5c:3a:4f:2f:75:c5:1a:e1:c5:a6:61:3c:d3:3e:52: e3:51:2d:2b:ed:f3:f4:43:9d:07:d1:9c:df:99:fb:88:9a:78: ce:b7:91:cc:64:fe:ce:d5:44:82:de:3a:f6:97:10:f0:2c:3a: a4:e7:3c:fe:56:50:5d:be:10:93:64:3c:c5:3c:54:33:15:3a: c1:21:30:0b:07:1b:3b:98:69:50:80:b0:17:81:83:19:5a:e4: 8b:04:e0:24:98:a6:8b:d9:63:23:38:ea:da:8b:b0:05:2c:2a: bc:82:07:23:a9:cc:5c:2e:cd:8f:1c:80:f1:9f:38:f8:a6:50: 74:c5:2f:b5:d0:cd:ac:12:4b:8e:0f:99:06:61:2c:f2:b7:fb: 93:3e:50:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEoza6KomMc7zBdJYCRFBiIBQ7PYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDEwMTcwNTQyWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDgxZDViOGM4Mjg0YzhhOTJmMmI4NjkxOGQxY2MwM2Q3 NDU0ZDYxZDM3NjQwMTRhNTI4ZmFkNjU2N2EzZDFlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEGJQCfYFQ0tCu9QsfeNZjfxoe12GrRsMF6xrnlTkW2EKz ZG5Nu1v06S2V8m+Ur0xLKiiJPQdASABoDAnHeLEu43Jfb+qGU3bkiPsEJWJdNPL5 xEzaZpAnYRs0agihHTcQFmmw+35hHHOFvLiM4RXOfDVctWomySCtE677AwC7hVsS oSDp0IpNCIH6QpxKMlQfcbJTZZGZe5oTwKdnIiyrli8u8tLSfBAa/msD4Wa6yAHx Y9QyajJGBqaBhm5LFRZ4fakjGvvEwYR6IrVOfICPtl/6jNMQRw8waek2LvbEnSuZ gpQw2HZca+hukHx+4hpFPmgQWhCKt6pybSH6Z7OZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ51xyDoZke0bqhWpHKUewICl1rIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBlZWYxZjA2LTkwMmEtNDE2ZS04MWYyLWI1OTQzNzQ4OTliOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcjYQAwDQYJKoZIhvcNAQELBQADggEBAAM9BvdxOQjmbXFzpxU8GC+wdKIt CCkZ915J/kIOZApgEUCRQBuwPK2DO/VemvxN4fO/uqXEk6t9lDy/BaARNZc3i3c5 aiFxLZpLsZ8UUueYWkKd4yAMblBA+mgTYb0ickNSORnxHw8O8HdCLyQgn1w6Ty91 xRrhxaZhPNM+UuNRLSvt8/RDnQfRnN+Z+4iaeM63kcxk/s7VRILeOvaXEPAsOqTn PP5WUF2+EJNkPMU8VDMVOsEhMAsHGzuYaVCAsBeBgxla5IsE4CSYpovZYyM46tqL sAUsKryCByOpzFwuzY8cgPGfOPimUHTFL7XQzawSS44PmQZhLPK3+5M+UEc= -----END CERTIFICATE-----Generated at Mon Oct 20 21:05:09 2025 by rpki-client