$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e88398f-80cd-4b06-bbdf-e3fab6e6abe1.roa File: 8e88398f-80cd-4b06-bbdf-e3fab6e6abe1.roa (raw, json) Hash identifier: P4DY6p/lWZJPPcdJ+EXvb7JRckQhXSvtjXy64PZzr54= Subject key identifier: 6A:96:71:64:73:4B:0E:9B:8C:8A:42:2A:B1:46:B5:97:17:3A:CA:62 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 57C025A21DAF107695105FB19B0E79169CEBDDB3 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e88398f-80cd-4b06-bbdf-e3fab6e6abe1.roa Signing time: Mon 15 Sep 2025 17:51:09 +0000 ROA not before: Mon 15 Sep 2025 17:51:09 +0000 ROA not after: Mon 20 Oct 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c0:25:a2:1d:af:10:76:95:10:5f:b1:9b:0e:79:16:9c:eb:dd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 15 17:51:09 2025 GMT Not After : Oct 20 23:59:59 2025 GMT Subject: serialNumber=2b81506cb25075fffe6f3da873ab7356544530fefcce45f6f0f0eb5bc934f8f0, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:41:a2:7c:9f:82:6c:78:66:65:1c:d3:71:9b: fd:fe:9a:71:44:60:32:5c:16:10:16:9d:10:1d:41: 63:c6:04:27:af:36:44:b6:d2:45:73:7d:16:28:5c: 4e:90:a1:46:3a:97:e5:57:a1:60:66:9c:c4:95:c3: 47:17:e6:64:b0:af:3c:94:0e:cc:ce:b8:cf:28:f9: 7c:df:6a:18:1c:88:37:9a:39:d3:2d:04:9f:94:33: d7:3d:0c:cb:e4:14:da:47:8b:45:79:80:24:a3:4b: 8e:bb:be:90:24:15:57:e6:a7:95:d3:82:35:e0:d7: 74:86:fb:cf:48:fc:9b:12:17:b0:c0:24:a3:16:08: f4:c4:0b:6b:e1:2b:04:7e:ef:33:a9:f0:89:4b:29: 68:fe:82:a4:5b:9a:2e:b0:e5:4f:16:86:72:a4:83: b4:54:e2:1d:5d:9f:29:48:bb:68:aa:b7:fc:e6:13: d1:79:6d:ae:1c:f3:b9:38:26:05:0c:e7:d8:20:c9: 14:73:f6:a5:97:61:17:02:2c:f6:6c:ce:20:ff:bf: 9d:db:38:ed:b2:b0:99:33:7e:ed:51:d1:e2:4b:89: 26:5a:bc:37:5e:fa:03:dd:2d:d7:3c:aa:3b:f6:a8: 26:17:8a:76:21:02:3f:0c:96:db:4a:d7:c2:a6:b7: f2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:96:71:64:73:4B:0E:9B:8C:8A:42:2A:B1:46:B5:97:17:3A:CA:62 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e88398f-80cd-4b06-bbdf-e3fab6e6abe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.8.0/24 Signature Algorithm: sha256WithRSAEncryption 43:12:8b:4a:52:9b:a9:d5:9c:c7:fd:f7:22:0d:07:34:b6:bc: 6b:5d:9a:c3:ef:f8:a7:60:ed:78:27:00:b2:24:28:06:cf:1b: 22:ca:60:e7:e2:da:94:63:70:b4:f3:7a:9d:81:67:a9:87:c5: 88:ed:8f:1d:5a:98:31:65:70:dd:e6:fd:2e:ed:20:f8:ac:90: 9c:8d:a2:d6:51:c6:30:3c:b7:8e:6b:f5:86:62:75:70:ce:11: b8:a5:ef:fb:94:8f:51:7d:bb:4f:f8:74:da:63:64:67:c9:34: a1:37:a3:a4:4f:20:ca:a1:64:e9:1d:d4:2a:63:b0:7f:6e:89: 69:a5:7d:3f:12:b5:92:e8:cd:63:61:cf:9c:d5:50:8a:98:53: 99:e0:7d:eb:a7:46:dc:f9:90:26:e5:13:c0:b6:35:fd:44:ca: a7:c4:72:f2:3d:1f:3a:51:c8:a1:b0:aa:a9:f5:59:36:d1:a9: a4:fb:c0:74:27:06:1b:04:cf:e5:82:d6:cb:a0:ee:c3:9f:fa: 64:36:10:4d:7a:f4:e3:e0:87:46:98:96:d6:17:64:85:a3:3c: e6:da:10:87:7d:03:03:2b:ca:22:57:4b:48:89:49:51:11:a3: 10:3c:43:a5:d2:ff:99:d5:0c:12:d2:61:29:31:b0:24:b6:36: 3a:91:89:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV8Aloh2vEHaVEF+xmw55Fpzr3bMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTE1MTc1MTA5WhcNMjUxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjgxNTA2Y2IyNTA3NWZmZmU2ZjNkYTg3M2FiNzM1NjU0 NDUzMGZlZmNjZTQ1ZjZmMGYwZWI1YmM5MzRmOGYwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiQaJ8n4JseGZlHNNxm/3+mnFEYDJcFhAWnRAdQWPGBCev NkS20kVzfRYoXE6QoUY6l+VXoWBmnMSVw0cX5mSwrzyUDszOuM8o+XzfahgciDea OdMtBJ+UM9c9DMvkFNpHi0V5gCSjS467vpAkFVfmp5XTgjXg13SG+89I/JsSF7DA JKMWCPTEC2vhKwR+7zOp8IlLKWj+gqRbmi6w5U8WhnKkg7RU4h1dnylIu2iqt/zm E9F5ba4c87k4JgUM59ggyRRz9qWXYRcCLPZsziD/v53bOO2ysJkzfu1R0eJLiSZa vDde+gPdLdc8qjv2qCYXinYhAj8MlttK18Kmt/I3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUapZxZHNLDpuMikIqsUa1lxc6ymIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhlODgzOThmLTgwY2QtNGIwNi1iYmRmLWUzZmFiNmU2YWJlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAgwDQYJKoZIhvcNAQELBQADggEBAEMSi0pSm6nVnMf99yINBzS2vGtd msPv+Kdg7XgnALIkKAbPGyLKYOfi2pRjcLTzep2BZ6mHxYjtjx1amDFlcN3m/S7t IPiskJyNotZRxjA8t45r9YZidXDOEbil7/uUj1F9u0/4dNpjZGfJNKE3o6RPIMqh ZOkd1CpjsH9uiWmlfT8StZLozWNhz5zVUIqYU5ngfeunRtz5kCblE8C2Nf1EyqfE cvI9HzpRyKGwqqn1WTbRqaT7wHQnBhsEz+WC1sug7sOf+mQ2EE169OPgh0aYltYX ZIWjPObaEId9AwMryiJXS0iJSVERoxA8Q6XS/5nVDBLSYSkxsCS2NjqRiVg= -----END CERTIFICATE-----Generated at Fri Sep 19 10:38:02 2025 by rpki-client