$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/070f035c-929a-4988-90b1-3eb5df15552f.roa File: 070f035c-929a-4988-90b1-3eb5df15552f.roa (raw, json) Hash identifier: 5yqdt34dsFIntnW4NPcXexctBLj4RJbcI2P7njIc6Xc= Subject key identifier: 0F:40:39:97:2B:C6:35:8A:BC:69:20:E2:66:0B:CB:10:D6:A4:EE:C6 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3A311D825806987392B50A53493B14992B57AA9B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/070f035c-929a-4988-90b1-3eb5df15552f.roa Signing time: Tue 04 Nov 2025 00:30:14 +0000 ROA not before: Tue 04 Nov 2025 00:30:14 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:31:1d:82:58:06:98:73:92:b5:0a:53:49:3b:14:99:2b:57:aa:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 4 00:30:14 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=40ad86688b7ca2f585c35a96ac4be2e137d4cbfaef3dea1a7a72a1d0fe74b0c4, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:76:83:01:fb:e3:e9:05:42:ae:f7:fe:3b:3b: de:95:00:c7:f1:9c:46:7f:37:ff:69:2d:18:1d:d7: 03:35:ca:41:d6:59:4e:47:31:e5:d8:bf:31:47:e4: 0f:15:71:65:18:29:17:41:4f:4e:b8:49:2e:20:84: dc:3e:64:2c:b0:5f:c6:8d:28:9a:56:dc:2c:27:3d: 59:98:d9:9c:e8:fd:62:69:c6:90:84:f4:9f:80:e3: aa:ee:4c:ed:0f:d1:a1:b3:02:e5:f7:85:9c:b5:77: fd:79:b8:f6:da:29:c4:8f:67:1c:3e:c1:d8:e7:6c: 07:f9:3e:5a:60:ad:db:ff:6b:3c:52:79:9b:03:17: 44:95:cb:f7:9f:d5:b2:df:67:ce:7f:77:47:00:cf: 64:ff:e3:05:e9:63:9d:b4:fc:8f:9a:67:f6:09:34: 30:b3:8f:c5:0b:61:2b:8e:51:4a:e4:99:01:83:9f: 5f:9f:ba:13:fd:fc:13:60:ea:ef:1d:9d:d5:3c:05: b7:02:6c:42:6c:50:9e:01:cc:72:dc:23:ae:9e:2e: e7:33:a4:c3:ba:ae:95:73:91:93:a5:80:06:e5:ec: a5:b5:72:82:fe:90:40:e6:aa:b2:db:fd:30:8e:9a: 4c:fc:81:8a:af:5c:11:c9:cd:83:2b:a8:d9:36:9a: 97:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:40:39:97:2B:C6:35:8A:BC:69:20:E2:66:0B:CB:10:D6:A4:EE:C6 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/070f035c-929a-4988-90b1-3eb5df15552f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.33.0/24 Signature Algorithm: sha256WithRSAEncryption 52:93:33:39:5e:4b:10:24:59:3e:9e:0a:ca:be:da:7f:24:3d: 19:11:22:3a:6b:66:13:03:08:54:2c:4c:83:e5:d9:d2:69:c5: 4d:99:aa:10:d7:41:b1:1b:3d:47:f8:2f:c7:5a:bb:3c:0b:54: cd:8a:24:ad:f1:42:88:a3:1b:bc:f2:c5:19:16:f8:ca:68:dc: 1e:95:2b:ab:1e:81:66:ab:1f:cc:e2:67:34:51:8c:6c:9c:e5: de:e2:59:45:64:96:03:7e:74:bc:48:e0:c7:7e:cf:7f:c6:08: 9f:1d:9c:23:4b:77:98:e2:f1:c6:99:ef:22:cd:bc:8b:88:01: 22:41:2b:83:93:11:40:94:18:4b:77:5b:e7:d4:03:3c:d1:e1: 50:31:63:17:7b:a7:b0:c0:b8:c1:43:60:32:8e:a9:b3:bd:dc: 31:56:4a:81:51:1d:6c:9c:1a:2d:59:40:cf:5e:1d:34:8b:62: 31:0a:a9:b6:94:f5:f1:c2:c5:db:a9:be:c5:f4:ba:00:56:98: bb:52:b1:7b:21:90:93:c0:c6:30:c6:57:46:91:4c:74:c0:1c: 00:c7:e1:a3:ee:7c:0d:02:d7:ca:c6:ce:38:36:9e:6b:89:4c: e6:78:ed:36:b4:92:1c:c3:cf:98:aa:43:08:01:5d:a3:b1:5d: 52:f3:97:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOjEdglgGmHOStQpTSTsUmStXqpswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTA0MDAzMDE0WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGFkODY2ODhiN2NhMmY1ODVjMzVhOTZhYzRiZTJlMTM3 ZDRjYmZhZWYzZGVhMWE3YTcyYTFkMGZlNzRiMGM0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcdoMB++PpBUKu9/47O96VAMfxnEZ/N/9pLRgd1wM1ykHW WU5HMeXYvzFH5A8VcWUYKRdBT064SS4ghNw+ZCywX8aNKJpW3CwnPVmY2Zzo/WJp xpCE9J+A46ruTO0P0aGzAuX3hZy1d/15uPbaKcSPZxw+wdjnbAf5Plpgrdv/azxS eZsDF0SVy/ef1bLfZ85/d0cAz2T/4wXpY520/I+aZ/YJNDCzj8ULYSuOUUrkmQGD n1+fuhP9/BNg6u8dndU8BbcCbEJsUJ4BzHLcI66eLuczpMO6rpVzkZOlgAbl7KW1 coL+kEDmqrLb/TCOmkz8gYqvXBHJzYMrqNk2mpfnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUD0A5lyvGNYq8aSDiZgvLENak7sYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA3MGYwMzVjLTkyOWEtNDk4OC05MGIxLTNlYjVkZjE1NTUyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCEwDQYJKoZIhvcNAQELBQADggEBAFKTMzleSxAkWT6eCsq+2n8kPRkR IjprZhMDCFQsTIPl2dJpxU2ZqhDXQbEbPUf4L8dauzwLVM2KJK3xQoijG7zyxRkW +Mpo3B6VK6segWarH8ziZzRRjGyc5d7iWUVklgN+dLxI4Md+z3/GCJ8dnCNLd5ji 8caZ7yLNvIuIASJBK4OTEUCUGEt3W+fUAzzR4VAxYxd7p7DAuMFDYDKOqbO93DFW SoFRHWycGi1ZQM9eHTSLYjEKqbaU9fHCxdupvsX0ugBWmLtSsXshkJPAxjDGV0aR THTAHADH4aPufA0C18rGzjg2nmuJTOZ47Ta0khzDz5iqQwgBXaOxXVLzly8= -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:48 2025 by rpki-client