$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7c33d577-2251-4085-bace-8c3b8f2bada2.roa File: 7c33d577-2251-4085-bace-8c3b8f2bada2.roa (raw, json) Hash identifier: EuVHFLPSlilD2kDC+BvV5MqF1w/P0uwtn3oa2s3mK/s= Subject key identifier: 27:29:A2:4A:52:7A:35:59:D2:C6:1F:4F:95:D5:44:FA:5C:4D:9D:51 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 53B4F0BEC1836CB153C78A6BDE13C7526DB7CFCB Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7c33d577-2251-4085-bace-8c3b8f2bada2.roa Signing time: Wed 22 Oct 2025 00:10:06 +0000 ROA not before: Wed 22 Oct 2025 00:10:06 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b4:f0:be:c1:83:6c:b1:53:c7:8a:6b:de:13:c7:52:6d:b7:cf:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 22 00:10:06 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=cff9c3bef599238758b1d9469e61d42c3c01c303c4527e446314b16b89d5928e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:14:3d:86:6e:df:4b:20:de:7e:ac:8e:e0: 1e:f6:7a:60:64:c6:dc:e5:6b:97:11:9b:a1:aa:60: 0a:22:7a:64:37:8e:35:9c:c8:38:24:61:b2:35:38: 94:bd:ce:b1:60:06:4e:f7:4b:6f:53:4b:40:59:cf: b2:6f:08:8c:81:9b:85:5e:89:3e:9e:48:14:95:b9: ef:29:de:3d:0e:a1:11:b3:e4:39:59:ab:e9:81:6c: 6e:9a:f5:9c:f7:90:7a:bb:a2:e8:34:ba:00:04:40: 29:fa:6a:71:4c:de:09:0d:13:ed:d6:71:9c:0f:5a: d7:91:6c:70:fc:0d:5b:cb:54:ff:ad:14:e7:44:ba: 74:95:96:aa:ac:dc:12:8a:d9:22:2d:f9:49:b4:08: c5:47:f5:da:85:05:38:1d:f8:51:bb:af:1e:39:c4: de:a0:a7:d9:33:e0:46:08:56:1d:a5:4e:39:b8:47: af:c5:93:c8:a4:0f:50:76:65:24:dd:c2:8d:c1:d1: ae:57:95:4c:3b:37:c5:d0:07:b2:28:4a:70:bc:59: b9:92:7f:af:7d:23:85:91:57:b9:63:50:66:ea:f7: 8c:9c:a1:cd:10:1c:49:0b:ff:16:97:ac:8a:35:9f: 89:27:7e:4a:2f:3b:61:19:d5:ab:11:6f:05:82:56: 80:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:29:A2:4A:52:7A:35:59:D2:C6:1F:4F:95:D5:44:FA:5C:4D:9D:51 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7c33d577-2251-4085-bace-8c3b8f2bada2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.1.0/24 Signature Algorithm: sha256WithRSAEncryption 44:79:39:9c:62:4a:98:64:03:9e:5f:30:0e:06:68:b4:0b:4e: 4a:3e:ef:14:eb:04:a6:1f:7b:39:6e:48:57:45:67:bd:eb:6c: 5c:0b:be:3c:0a:b4:36:32:5f:21:1a:b0:bc:6c:13:c0:07:54: d4:6c:d6:dc:3b:b7:49:91:ca:d9:7d:92:ee:67:b6:4e:b8:77: ca:a4:e0:29:bc:db:a8:74:2e:f0:cc:43:2c:e6:5f:d4:24:44: 4f:41:59:54:c8:e2:67:de:34:33:d2:51:57:99:c2:15:62:47: ee:a7:87:55:1f:4f:0f:90:32:9a:97:2b:09:a1:27:4f:7a:00: 1d:e7:0c:b7:35:0f:5c:c6:90:60:31:17:cb:93:5c:72:c7:a4: 13:a6:5c:d1:41:93:88:b3:c8:be:f7:91:65:e7:ac:17:22:f8: 26:dc:14:44:17:5e:fd:d6:a3:04:9d:77:15:ca:82:bc:e5:82: b8:99:05:dc:24:cb:6f:ad:d1:c9:c9:e8:ec:ff:03:34:ba:6c: 65:e6:dd:c4:52:82:e4:ef:f6:aa:77:5e:31:46:f0:93:9a:4b: 31:15:4d:c6:3d:9f:c1:ce:f2:ac:09:95:2c:8d:09:57:9a:72: 57:9e:97:ff:d1:37:ba:ec:8d:08:fe:9e:97:05:5e:1f:a8:97: 03:6b:d8:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU7TwvsGDbLFTx4pr3hPHUm23z8swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDIyMDAxMDA2WhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZmY5YzNiZWY1OTkyMzg3NThiMWQ5NDY5ZTYxZDQyYzNj MDFjMzAzYzQ1MjdlNDQ2MzE0YjE2Yjg5ZDU5MjhlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6TRQ9hm7fSyDefqyO4B72emBkxtzla5cRm6GqYAoiemQ3 jjWcyDgkYbI1OJS9zrFgBk73S29TS0BZz7JvCIyBm4VeiT6eSBSVue8p3j0OoRGz 5DlZq+mBbG6a9Zz3kHq7oug0ugAEQCn6anFM3gkNE+3WcZwPWteRbHD8DVvLVP+t FOdEunSVlqqs3BKK2SIt+Um0CMVH9dqFBTgd+FG7rx45xN6gp9kz4EYIVh2lTjm4 R6/Fk8ikD1B2ZSTdwo3B0a5XlUw7N8XQB7IoSnC8WbmSf699I4WRV7ljUGbq94yc oc0QHEkL/xaXrIo1n4knfkovO2EZ1asRbwWCVoB7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJymiSlJ6NVnSxh9PldVE+lxNnVEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzdjMzNkNTc3LTIyNTEtNDA4NS1iYWNlLThjM2I4ZjJiYWRhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAEwDQYJKoZIhvcNAQELBQADggEBAER5OZxiSphkA55fMA4GaLQLTko+ 7xTrBKYfezluSFdFZ73rbFwLvjwKtDYyXyEasLxsE8AHVNRs1tw7t0mRytl9ku5n tk64d8qk4Cm826h0LvDMQyzmX9QkRE9BWVTI4mfeNDPSUVeZwhViR+6nh1UfTw+Q MpqXKwmhJ096AB3nDLc1D1zGkGAxF8uTXHLHpBOmXNFBk4izyL73kWXnrBci+Cbc FEQXXv3WowSddxXKgrzlgriZBdwky2+t0cnJ6Oz/AzS6bGXm3cRSguTv9qp3XjFG 8JOaSzEVTcY9n8HO8qwJlSyNCVeacleel//RN7rsjQj+npcFXh+olwNr2Nc= -----END CERTIFICATE-----Generated at Fri Oct 31 20:53:57 2025 by rpki-client