$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa File: 07bd3aac-7c97-429a-9a81-6751e4001f6d.roa (raw, json) Hash identifier: QoQgrfzlhbbhk+xcF6HpnHzf4AwJ9bKuzoZWY97/DmA= Subject key identifier: F6:70:AE:BC:F8:C8:85:29:06:65:1B:E6:7D:BF:BE:73:10:4F:A6:2C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 53AE75C1DA81F5B2927C6075E0EF5AB135C5AA09 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa Signing time: Tue 21 Oct 2025 12:20:07 +0000 ROA not before: Tue 21 Oct 2025 12:20:07 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ae:75:c1:da:81:f5:b2:92:7c:60:75:e0:ef:5a:b1:35:c5:aa:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 21 12:20:07 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=8ee6f58871e1ac0675e522bf4822488f5cf85c4c1c1cd2a91b0dfe825b43d666, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b8:2e:05:86:ad:63:0e:31:a5:31:1e:7c:3f: d1:a3:57:3d:7b:cc:37:bb:32:f4:12:43:8b:43:cf: a4:e3:76:ce:d7:14:cb:d7:81:ab:f1:91:10:68:72: 21:eb:84:8c:79:44:69:3c:88:b7:64:4e:a1:c1:e0: c5:c7:aa:d6:d4:25:31:fb:e3:0b:ea:c2:16:b7:14: 12:e5:5a:70:37:a3:b4:58:fc:0c:30:f1:48:e6:84: 5c:2c:c9:20:a4:30:76:6c:e5:af:2f:cc:fe:54:e7: 9b:ad:e6:cb:0a:ed:17:dc:ac:0c:6d:3c:e6:71:66: fa:7d:b8:9d:27:6d:68:25:7d:ed:e8:fc:e1:1f:3b: ad:d4:ed:5d:f1:39:cc:29:a6:1b:f8:60:d2:40:bc: ae:3a:ae:4e:7f:49:93:b2:aa:ef:74:48:61:90:7f: 46:fd:98:d1:df:98:4b:8b:ef:e8:68:f3:dd:61:5f: 2d:55:4f:8e:a2:e9:16:36:25:ef:33:f8:48:4a:e9: d6:6c:13:f2:81:20:2a:79:03:0a:c0:80:08:c2:ec: 98:ff:a0:7b:a0:f2:23:90:f8:fe:96:dc:df:fe:38: 72:18:ba:b1:17:7f:e8:4f:96:6a:44:e2:e6:fb:ff: 63:16:03:46:f6:19:bb:21:5d:88:64:59:f8:3f:dc: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:70:AE:BC:F8:C8:85:29:06:65:1B:E6:7D:BF:BE:73:10:4F:A6:2C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.6.0/24 Signature Algorithm: sha256WithRSAEncryption 14:2d:1c:73:98:57:42:b6:92:e1:34:06:61:81:86:fb:1a:48: c1:64:6d:a7:55:94:e1:d4:6b:75:81:e4:01:a7:93:3e:36:41: dd:72:60:7e:a4:b3:da:95:b3:cd:8d:2f:e8:f2:00:1e:77:9b: d3:24:fe:ec:f0:57:35:8e:09:2a:2b:88:5c:68:82:18:b0:ab: fc:72:f3:08:e4:26:c5:5d:86:5b:5e:2c:db:0e:37:1f:37:5a: 06:9f:6c:de:a6:19:8d:de:b9:88:e1:19:1f:1a:a2:09:68:0a: 45:4c:03:2e:6f:70:a3:44:e4:37:fc:9a:ba:c9:d9:97:09:50: 06:e6:f4:03:88:c1:47:69:5e:34:35:e3:98:6c:ff:e4:30:c5: 1e:05:a2:78:c8:09:b2:72:b6:48:77:98:e4:23:b5:cc:32:88: 93:a5:b7:ee:d8:b9:4d:19:e4:b8:d7:92:0d:c2:e5:54:89:e4: 22:36:a3:da:08:24:82:44:60:5b:be:91:59:fa:ff:58:98:ba: 16:40:6e:28:c6:ba:f4:c6:91:3b:ae:eb:96:7f:98:16:ca:43: f0:38:61:b5:2f:70:5d:23:b6:e0:be:1e:8a:ac:1d:e9:4e:ad: ab:21:aa:8c:e1:8a:fc:bb:85:85:aa:cc:89:93:1b:80:c9:10: 3a:d6:c1:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU651wdqB9bKSfGB14O9asTXFqgkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDIxMTIyMDA3WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZWU2ZjU4ODcxZTFhYzA2NzVlNTIyYmY0ODIyNDg4ZjVj Zjg1YzRjMWMxY2QyYTkxYjBkZmU4MjViNDNkNjY2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIuC4Fhq1jDjGlMR58P9GjVz17zDe7MvQSQ4tDz6Tjds7X FMvXgavxkRBociHrhIx5RGk8iLdkTqHB4MXHqtbUJTH74wvqwha3FBLlWnA3o7RY /Aww8UjmhFwsySCkMHZs5a8vzP5U55ut5ssK7RfcrAxtPOZxZvp9uJ0nbWglfe3o /OEfO63U7V3xOcwpphv4YNJAvK46rk5/SZOyqu90SGGQf0b9mNHfmEuL7+ho891h Xy1VT46i6RY2Je8z+EhK6dZsE/KBICp5AwrAgAjC7Jj/oHug8iOQ+P6W3N/+OHIY urEXf+hPlmpE4ub7/2MWA0b2GbshXYhkWfg/3GJXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9nCuvPjIhSkGZRvmfb++cxBPpiwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA3YmQzYWFjLTdjOTctNDI5YS05YTgxLTY3NTFlNDAwMWY2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAYwDQYJKoZIhvcNAQELBQADggEBABQtHHOYV0K2kuE0BmGBhvsaSMFk badVlOHUa3WB5AGnkz42Qd1yYH6ks9qVs82NL+jyAB53m9Mk/uzwVzWOCSoriFxo ghiwq/xy8wjkJsVdhlteLNsONx83WgafbN6mGY3euYjhGR8aogloCkVMAy5vcKNE 5Df8mrrJ2ZcJUAbm9AOIwUdpXjQ145hs/+QwxR4FonjICbJytkh3mOQjtcwyiJOl t+7YuU0Z5LjXkg3C5VSJ5CI2o9oIJIJEYFu+kVn6/1iYuhZAbijGuvTGkTuu65Z/ mBbKQ/A4YbUvcF0jtuC+HoqsHelOrashqozhivy7hYWqzImTG4DJEDrWwSw= -----END CERTIFICATE-----Generated at Wed Nov 5 17:57:06 2025 by rpki-client