$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b5f3fac7-c07c-40ba-a2a2-3cdee505a284.roa File: b5f3fac7-c07c-40ba-a2a2-3cdee505a284.roa (raw, json) Hash identifier: oLutfAiA4dgnHup4BOfZ3ygynyWYLBdqm95cIMkNGDY= Subject key identifier: 93:FC:17:96:7E:C8:53:66:8C:E0:CF:4D:38:DC:A4:98:8F:C2:D9:68 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 39BD0B22B2884313DE6850E2AE41918CAA8FB100 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b5f3fac7-c07c-40ba-a2a2-3cdee505a284.roa Signing time: Tue 09 Sep 2025 15:40:35 +0000 ROA not before: Tue 09 Sep 2025 15:40:35 +0000 ROA not after: Tue 14 Oct 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:bd:0b:22:b2:88:43:13:de:68:50:e2:ae:41:91:8c:aa:8f:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 9 15:40:35 2025 GMT Not After : Oct 14 23:59:59 2025 GMT Subject: serialNumber=7094a11fea3611c53ce12c777a35c558423bef8d6257756378dbf3fc6e80ba36, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:20:ef:68:23:ea:bc:eb:4e:13:a0:2a:e0: d7:36:30:6c:07:ea:79:70:65:bf:d6:73:c5:27:15: e8:4e:6e:9a:6d:f4:22:37:df:0b:59:33:17:a9:56: e2:f2:7b:4c:ba:b5:56:80:e8:ad:35:78:71:66:0d: d8:84:3f:eb:8e:0d:bd:52:d2:b4:04:6e:a0:b9:74: 9a:71:a2:a4:10:6c:df:28:e3:b2:e6:b5:2d:7c:df: 5b:82:64:4c:8b:89:18:30:e2:42:be:36:4d:6d:5a: bf:c0:d1:52:74:e0:05:28:15:dc:d3:fd:c5:d2:19: 15:c1:5b:ce:a5:ae:ae:5d:87:51:ac:b5:e3:7a:92: 4e:52:46:9e:a8:a3:81:66:08:30:28:db:d4:53:cc: 56:8e:8f:e6:85:8e:f4:1a:3f:ac:37:f7:12:43:22: f8:16:47:50:9d:5a:3b:d0:ef:ca:7e:0d:2c:e3:48: b3:1a:b9:c9:c7:e3:99:ce:e7:fb:b2:e4:de:78:f5: 6f:12:2e:96:fa:f2:71:41:f0:c1:86:2d:a2:e1:6b: 8d:05:2d:72:da:30:76:ea:2d:eb:62:96:9e:7d:73: cb:d1:3c:01:1e:c3:06:a5:19:3a:95:c5:96:ca:ff: 62:10:aa:e5:1b:e2:b4:6a:9e:a6:d8:37:1f:95:e8: 30:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FC:17:96:7E:C8:53:66:8C:E0:CF:4D:38:DC:A4:98:8F:C2:D9:68 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b5f3fac7-c07c-40ba-a2a2-3cdee505a284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.30.0/23 Signature Algorithm: sha256WithRSAEncryption 04:9b:74:14:16:99:6a:8f:7c:70:a9:29:6b:5b:1b:63:1d:39: c3:c8:71:34:6c:9b:64:f8:40:91:af:7c:c8:20:8b:68:29:5f: 8a:be:ac:96:63:bf:6a:bb:1c:c1:36:88:3b:5b:6e:bd:93:66: 2b:68:e7:28:bf:d1:a0:8b:a4:8c:e3:0a:33:77:fa:e6:c1:63: cc:90:92:f4:54:4c:fe:15:8d:5d:3e:ca:4f:e1:b9:bb:f5:97: 39:d1:e5:f1:e5:ec:c7:59:c8:b8:47:51:06:a2:77:19:33:65: 17:af:4e:1f:f0:75:8d:2a:1c:89:9b:2a:0a:58:9a:f3:95:bb: 13:bd:a7:a5:91:1f:49:0f:f2:67:a8:3d:97:41:c4:29:5f:a8: 1e:d8:3d:dc:47:15:64:26:35:e7:a4:9d:10:78:a3:d9:53:fe: e3:21:55:d9:f6:71:b7:8b:d7:6b:6f:b8:04:ea:ff:7d:d1:b5: d7:f8:65:28:15:df:1f:4a:e4:8c:82:e9:6b:10:fa:39:bb:90: bd:ad:2f:47:54:c9:7a:9d:9f:9d:ef:8b:06:41:60:de:26:2f: b2:e3:0e:84:b0:7b:1e:89:68:5b:93:fa:10:54:72:f7:98:2d: f7:52:78:49:9b:5d:04:97:c5:a8:5d:39:e0:88:9d:e3:a1:f2: 16:67:da:46 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOb0LIrKIQxPeaFDirkGRjKqPsQAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTA5MTU0MDM1WhcNMjUxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDk0YTExZmVhMzYxMWM1M2NlMTJjNzc3YTM1YzU1ODQy M2JlZjhkNjI1Nzc1NjM3OGRiZjNmYzZlODBiYTM2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClWyDvaCPqvOtOE6Aq4Nc2MGwH6nlwZb/Wc8UnFehObppt 9CI33wtZMxepVuLye0y6tVaA6K01eHFmDdiEP+uODb1S0rQEbqC5dJpxoqQQbN8o 47LmtS1831uCZEyLiRgw4kK+Nk1tWr/A0VJ04AUoFdzT/cXSGRXBW86lrq5dh1Gs teN6kk5SRp6oo4FmCDAo29RTzFaOj+aFjvQaP6w39xJDIvgWR1CdWjvQ78p+DSzj SLMaucnH45nO5/uy5N549W8SLpb68nFB8MGGLaLha40FLXLaMHbqLetilp59c8vR PAEewwalGTqVxZbK/2IQquUb4rRqnqbYNx+V6DBrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUk/wXln7IU2aM4M9NONykmI/C2WgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2I1ZjNmYWM3LWMwN2MtNDBiYS1hMmEyLTNjZGVlNTA1YTI4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYB4wDQYJKoZIhvcNAQELBQADggEBAASbdBQWmWqPfHCpKWtbG2MdOcPI cTRsm2T4QJGvfMggi2gpX4q+rJZjv2q7HME2iDtbbr2TZito5yi/0aCLpIzjCjN3 +ubBY8yQkvRUTP4VjV0+yk/hubv1lznR5fHl7MdZyLhHUQaidxkzZRevTh/wdY0q HImbKgpYmvOVuxO9p6WRH0kP8meoPZdBxClfqB7YPdxHFWQmNeeknRB4o9lT/uMh Vdn2cbeL12tvuATq/33Rtdf4ZSgV3x9K5IyC6WsQ+jm7kL2tL0dUyXqdn53viwZB YN4mL7LjDoSwex6JaFuT+hBUcveYLfdSeEmbXQSXxahdOeCIneOh8hZn2kY= -----END CERTIFICATE-----Generated at Fri Sep 19 15:29:18 2025 by rpki-client