$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/74abdb75-ce74-4f18-ac4b-2432fc81d1f1.roa File: 74abdb75-ce74-4f18-ac4b-2432fc81d1f1.roa (raw, json) Hash identifier: h8W8fxLERTIovEv7t37Gyu9kj6NCB1IOuuMk23mRrtg= Subject key identifier: 85:9E:6A:A2:93:00:08:33:84:01:6D:56:16:D3:C2:39:CF:40:55:06 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4CFFCBD109F5387DB51257F665F03F3D96262A2F Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/74abdb75-ce74-4f18-ac4b-2432fc81d1f1.roa Signing time: Mon 01 Sep 2025 01:07:09 +0000 ROA not before: Mon 01 Sep 2025 01:07:09 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ff:cb:d1:09:f5:38:7d:b5:12:57:f6:65:f0:3f:3d:96:26:2a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 1 01:07:09 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=568a63d05787835b9b6cbf864919c13ca8b5e629978dfa91375fc126283581bd, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:50:df:10:78:a3:15:81:d0:64:8c:36:28:96: 57:21:2c:74:5f:2a:f1:32:4f:fd:41:51:ea:be:04: 0d:fd:3d:f1:f2:86:c9:08:47:9e:c0:db:2d:b9:ec: d4:d0:d5:4f:5e:8f:33:b7:5d:58:7e:45:d5:14:07: d2:99:72:93:15:9a:b6:34:fa:71:8d:8c:3a:40:b7: 37:de:87:10:90:61:b7:d4:2d:ea:26:36:22:be:94: 8c:2c:72:9d:90:80:61:95:7f:ff:cb:97:9a:39:a3: 83:f9:a4:9f:37:03:87:fa:2b:30:13:c1:87:0d:57: f4:4a:cc:1c:b4:3d:2c:f5:8a:02:de:55:7b:9b:53: 73:3b:d3:9b:95:f9:43:01:2f:6c:f9:b7:87:e9:29: 7e:2c:50:3b:59:5d:31:8b:37:59:55:22:11:65:f9: 37:ca:58:42:8b:ce:84:e7:a5:e0:f4:02:c7:8f:02: 71:22:55:05:30:88:6c:58:be:be:24:e7:32:6a:16: 83:64:65:09:24:95:b7:f2:b9:15:0c:74:3f:f0:a4: 30:84:51:69:5e:3d:a3:39:ef:ad:05:71:c7:85:32: 27:45:f9:29:9d:68:4d:69:62:02:dd:3f:bf:73:09: 5a:9c:e2:ac:4d:d6:56:b4:4b:c0:36:d5:b9:0f:1c: c9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9E:6A:A2:93:00:08:33:84:01:6D:56:16:D3:C2:39:CF:40:55:06 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/74abdb75-ce74-4f18-ac4b-2432fc81d1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.46.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:c9:6d:6d:00:65:8a:6e:80:71:cc:80:52:78:2d:30:c6:a7: 8a:53:8c:30:d0:25:c6:3e:dc:19:f0:55:38:ec:f1:a4:45:1b: ce:60:f2:31:a6:bd:a0:99:1c:64:62:cd:94:a5:c0:cb:0a:0f: 00:b1:f1:e6:30:93:ef:25:f1:4a:41:fe:d2:20:7d:94:75:b5: 6a:02:a7:81:29:89:f6:eb:2b:40:79:0b:88:4d:1e:f5:b6:76: 0f:41:48:93:6e:a3:af:d7:64:77:99:b0:e9:a8:d5:4b:6f:4e: f6:15:4a:92:b9:e8:18:28:8a:a6:74:34:68:66:27:9d:79:05: 17:4d:a3:14:ce:80:6a:54:e7:a6:94:46:b8:19:84:c4:ca:35: 77:c1:93:88:3e:61:4f:02:6c:18:f4:09:a5:4f:65:0b:f7:66: f2:a8:ff:dd:0c:b0:34:5c:87:ef:39:94:b3:d5:94:35:de:3c: 52:c4:b9:c0:1d:7f:1e:6b:9f:36:49:af:8a:96:f5:18:6a:19: 46:1d:90:59:c3:f6:f7:10:a6:8b:61:49:66:5a:43:ba:f3:61: 3a:89:b9:1b:93:f5:a9:6c:55:9e:e1:41:04:ae:63:c2:09:e9: 99:4d:f4:74:10:c8:c6:56:19:3e:9d:75:40:09:0e:d0:75:82: 6a:cd:23:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTP/L0Qn1OH21Elf2ZfA/PZYmKi8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTAxMDEwNzA5WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjhhNjNkMDU3ODc4MzViOWI2Y2JmODY0OTE5YzEzY2E4 YjVlNjI5OTc4ZGZhOTEzNzVmYzEyNjI4MzU4MWJkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjUN8QeKMVgdBkjDYollchLHRfKvEyT/1BUeq+BA39PfHy hskIR57A2y257NTQ1U9ejzO3XVh+RdUUB9KZcpMVmrY0+nGNjDpAtzfehxCQYbfU LeomNiK+lIwscp2QgGGVf//Ll5o5o4P5pJ83A4f6KzATwYcNV/RKzBy0PSz1igLe VXubU3M705uV+UMBL2z5t4fpKX4sUDtZXTGLN1lVIhFl+TfKWEKLzoTnpeD0AseP AnEiVQUwiGxYvr4k5zJqFoNkZQkklbfyuRUMdD/wpDCEUWlePaM5760FcceFMidF +SmdaE1pYgLdP79zCVqc4qxN1la0S8A21bkPHMl3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhZ5qopMACDOEAW1WFtPCOc9AVQYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzc0YWJkYjc1LWNlNzQtNGYxOC1hYzRiLTI0MzJmYzgxZDFmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC4wDQYJKoZIhvcNAQELBQADggEBAJvJbW0AZYpugHHMgFJ4LTDGp4pT jDDQJcY+3BnwVTjs8aRFG85g8jGmvaCZHGRizZSlwMsKDwCx8eYwk+8l8UpB/tIg fZR1tWoCp4EpifbrK0B5C4hNHvW2dg9BSJNuo6/XZHeZsOmo1UtvTvYVSpK56Bgo iqZ0NGhmJ515BRdNoxTOgGpU56aURrgZhMTKNXfBk4g+YU8CbBj0CaVPZQv3ZvKo /90MsDRch+85lLPVlDXePFLEucAdfx5rnzZJr4qW9RhqGUYdkFnD9vcQpothSWZa Q7rzYTqJuRuT9alsVZ7hQQSuY8IJ6ZlN9HQQyMZWGT6ddUAJDtB1gmrNI2Y= -----END CERTIFICATE-----Generated at Fri Sep 19 17:33:21 2025 by rpki-client