$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/be153b52-0062-4ba3-acb4-859df88342b2.roa File: be153b52-0062-4ba3-acb4-859df88342b2.roa (raw, json) Hash identifier: 39pZClXbT6RKqdD6srUW9peLgx1IDPxxGvwuSpoN77U= Subject key identifier: 2D:80:F9:F7:72:60:4E:CE:3B:59:4C:25:1B:64:A8:F9:8E:25:0B:83 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 29508795B3E61114C188A3F0BEBE5F3817813A8B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/be153b52-0062-4ba3-acb4-859df88342b2.roa Signing time: Tue 09 Sep 2025 15:40:32 +0000 ROA not before: Tue 09 Sep 2025 15:40:32 +0000 ROA not after: Tue 14 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:50:87:95:b3:e6:11:14:c1:88:a3:f0:be:be:5f:38:17:81:3a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 9 15:40:32 2025 GMT Not After : Oct 14 23:59:59 2025 GMT Subject: serialNumber=b15682b6ee2f8bd262a94400c6ec0d627c0383259ae669afb53b0a35c4b24b3a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0c:80:82:b7:f7:19:e4:06:38:7e:db:8b:64: c9:e4:10:8d:19:9a:68:da:ed:05:76:7a:a3:3c:b2: 1a:f4:c3:8d:7e:1a:0d:1c:26:72:40:7c:2c:70:2d: 25:fd:eb:cd:73:8f:e6:9b:e5:de:bd:ef:e2:2c:84: 21:3e:a4:01:fc:99:2f:2e:c0:1c:00:f7:aa:03:83: f9:51:da:53:aa:54:54:96:ff:49:e1:3d:d8:58:2f: 16:7d:1e:9a:f0:5f:8b:6c:b8:af:97:e4:d7:2b:c2: d4:f0:92:89:1c:fe:7d:4e:f4:46:55:57:24:4b:2d: 77:c3:fc:80:39:46:88:d1:9a:56:fd:a1:ca:11:1d: fa:a8:ec:d5:c3:3b:b4:42:cd:49:d0:42:68:08:97: 73:ee:b6:57:dd:b9:ec:2e:f1:75:f6:a1:5f:ee:52: 4b:16:cb:83:28:ca:23:e8:f4:fc:a4:a0:5d:8f:f7: 46:ba:59:91:13:dd:61:eb:c7:7e:30:2d:85:47:93: 5d:5a:20:63:5a:9e:3a:14:f9:24:b5:69:67:8f:16: 0b:81:af:05:47:a1:57:b9:b1:91:1c:10:61:73:2c: 3a:69:aa:69:04:23:a0:55:87:5a:83:58:35:37:84: a4:13:ae:3a:70:52:da:40:6d:6d:3a:fd:5f:01:f9: 4c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:80:F9:F7:72:60:4E:CE:3B:59:4C:25:1B:64:A8:F9:8E:25:0B:83 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/be153b52-0062-4ba3-acb4-859df88342b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.16.0/23 Signature Algorithm: sha256WithRSAEncryption 06:1e:97:74:af:ad:f7:1b:d7:9f:b1:00:3c:d3:ba:fc:64:47: f2:af:c0:15:44:33:9a:64:60:92:a9:49:5c:61:f9:2d:ac:ac: d4:85:68:22:8f:14:55:68:e3:26:20:be:41:12:0f:81:c0:13: 0a:07:b5:2e:60:c5:60:dd:2e:12:87:34:fa:80:e9:d8:31:37: 2a:4e:db:44:45:89:e6:5a:14:57:69:c6:fe:ae:97:fe:e3:09: fd:83:a5:8c:60:31:95:40:81:a8:51:d8:42:b5:33:ba:ed:7b: eb:c7:9b:6b:f1:b4:04:72:18:53:eb:8c:92:64:74:03:aa:52: c1:3a:40:4d:2f:e0:4c:ec:98:89:f0:31:87:1b:77:b8:a1:4b: 0d:82:52:2a:2a:da:85:cb:35:3e:a3:76:93:69:9c:24:34:97: b4:b8:1f:17:ee:a7:c3:90:11:dc:1d:1a:25:94:2b:ec:8e:ae: 24:81:5b:ee:65:e5:c7:36:20:86:c6:71:35:58:08:1d:58:61: a5:b6:c3:33:d0:f4:2c:75:7a:02:03:6e:71:e4:21:6e:24:ad: ea:c5:42:96:6f:80:15:ba:b3:67:0b:75:30:f0:3e:38:c3:07: 59:ac:7d:e5:f7:45:f9:ed:bd:ae:a9:14:73:a4:e4:51:df:2e: c5:72:dd:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKVCHlbPmERTBiKPwvr5fOBeBOoswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTA5MTU0MDMyWhcNMjUxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTU2ODJiNmVlMmY4YmQyNjJhOTQ0MDBjNmVjMGQ2Mjdj MDM4MzI1OWFlNjY5YWZiNTNiMGEzNWM0YjI0YjNhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHDICCt/cZ5AY4ftuLZMnkEI0Zmmja7QV2eqM8shr0w41+ Gg0cJnJAfCxwLSX9681zj+ab5d697+IshCE+pAH8mS8uwBwA96oDg/lR2lOqVFSW /0nhPdhYLxZ9HprwX4tsuK+X5NcrwtTwkokc/n1O9EZVVyRLLXfD/IA5RojRmlb9 ocoRHfqo7NXDO7RCzUnQQmgIl3Putlfduewu8XX2oV/uUksWy4MoyiPo9PykoF2P 90a6WZET3WHrx34wLYVHk11aIGNanjoU+SS1aWePFguBrwVHoVe5sZEcEGFzLDpp qmkEI6BVh1qDWDU3hKQTrjpwUtpAbW06/V8B+UxrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULYD593JgTs47WUwlG2So+Y4lC4MwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2JlMTUzYjUyLTAwNjItNGJhMy1hY2I0LTg1OWRmODgzNDJiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBAwDQYJKoZIhvcNAQELBQADggEBAAYel3Svrfcb15+xADzTuvxkR/Kv wBVEM5pkYJKpSVxh+S2srNSFaCKPFFVo4yYgvkESD4HAEwoHtS5gxWDdLhKHNPqA 6dgxNypO20RFieZaFFdpxv6ul/7jCf2DpYxgMZVAgahR2EK1M7rte+vHm2vxtARy GFPrjJJkdAOqUsE6QE0v4EzsmInwMYcbd7ihSw2CUioq2oXLNT6jdpNpnCQ0l7S4 Hxfup8OQEdwdGiWUK+yOriSBW+5l5cc2IIbGcTVYCB1YYaW2wzPQ9Cx1egIDbnHk IW4krerFQpZvgBW6s2cLdTDwPjjDB1msfeX3Rfntva6pFHOk5FHfLsVy3e4= -----END CERTIFICATE-----Generated at Fri Sep 19 17:33:13 2025 by rpki-client