$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1abc2a38-5fb6-406f-aa0c-a0c43202bad5.roa File: 1abc2a38-5fb6-406f-aa0c-a0c43202bad5.roa (raw, json) Hash identifier: 06DEdSUQ7B7VKnQmDyVv0X46AlvNmWvEDraAEuPMkxk= Subject key identifier: 60:F8:B5:D6:92:CD:24:DE:9B:6C:42:6C:91:FF:49:AE:D9:54:54:73 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6EBB3EA73DA721E4B8B13FBD4CFC8E2F505127B5 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1abc2a38-5fb6-406f-aa0c-a0c43202bad5.roa Signing time: Fri 31 Oct 2025 01:40:17 +0000 ROA not before: Fri 31 Oct 2025 01:40:17 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:bb:3e:a7:3d:a7:21:e4:b8:b1:3f:bd:4c:fc:8e:2f:50:51:27:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 31 01:40:17 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=e91dbcfe62fe03f83659491d906b639aeb6da78cab3f687a51e241fcc31d411b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:c9:e4:3e:83:b7:74:39:49:67:d0:2b:64: 86:84:5f:7d:28:7e:d7:15:0b:e9:07:e3:34:10:5f: c1:25:59:51:f2:ff:c7:1c:78:b3:51:16:9f:e9:4f: f8:12:ff:92:de:c0:9c:36:70:0d:c5:f3:82:cb:29: 63:cd:eb:1f:d8:b6:4a:ef:a5:b6:00:b3:2a:ba:ff: 7d:cd:c9:4d:2e:1e:9c:30:17:e7:f6:88:ad:19:89: b0:2a:d7:6a:02:34:bc:eb:2b:c7:fe:6e:54:dc:be: 22:d9:19:61:7b:19:21:1e:b0:3b:69:45:98:61:4f: d4:f3:99:cd:e5:3d:c9:73:3b:f5:99:14:4d:44:d2: e4:17:1e:d2:f3:b6:71:75:ef:7e:48:ff:e1:8a:92: 26:00:b2:9b:4a:e8:13:15:a9:85:e4:1d:bd:ad:aa: 84:4e:b1:1b:77:f5:f7:10:df:33:43:d0:c3:b9:07: 20:e0:64:7a:1d:ce:2f:e5:39:1a:f6:c3:db:1b:64: 6c:2f:58:c5:41:72:17:8c:40:78:85:85:5c:c3:4e: 51:61:ff:28:fc:1e:c2:9c:d8:50:6e:4a:29:a5:33: 29:37:a3:4a:95:e1:c0:3c:6d:f0:79:94:48:fe:bb: 65:71:a0:5a:71:f4:94:00:24:0e:65:87:64:8d:19: cb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F8:B5:D6:92:CD:24:DE:9B:6C:42:6C:91:FF:49:AE:D9:54:54:73 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1abc2a38-5fb6-406f-aa0c-a0c43202bad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.30.0/23 Signature Algorithm: sha256WithRSAEncryption 74:a6:13:02:e2:61:b5:76:5f:05:41:7b:95:75:26:38:1b:3e: 9f:80:e1:3a:2c:35:51:7c:b1:e9:00:a7:8f:bc:d4:47:30:34: ea:18:a6:20:b0:8c:33:e1:a3:25:76:55:29:32:9a:75:ed:95: 6d:5f:9d:cc:2a:b2:58:3f:e6:3e:ba:b7:ba:68:83:4d:8c:4e: f4:31:c6:c2:da:4e:c4:7f:14:98:40:e5:64:97:db:ab:7c:17: bf:4b:fe:f9:10:48:8f:c0:22:8b:3e:c3:59:90:fe:7c:f3:23: 99:56:3a:fd:c5:23:8b:78:c5:4c:65:6f:90:77:12:39:3e:da: 84:8f:b7:6c:eb:46:e9:98:d1:71:33:bd:a7:c0:ca:c3:bf:0b: 8c:29:a9:79:e8:e8:38:a5:90:c5:13:65:74:fd:c5:b1:69:ad: 94:d0:cb:73:18:6b:e1:76:20:17:ed:69:ce:4f:ab:c4:2f:fc: 51:c5:6c:6c:58:60:b2:46:83:39:f7:42:0e:81:55:20:a6:da: 73:fa:49:0c:cd:da:14:12:87:c7:b7:f4:ba:80:18:40:e9:e2: c9:70:a0:60:70:9d:ae:52:31:41:96:e8:a4:af:cd:7b:e1:34: f1:1c:5d:c0:5b:a9:8d:c5:3e:47:b2:58:e3:6d:70:d0:68:76: db:51:3c:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbrs+pz2nIeS4sT+9TPyOL1BRJ7UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDMxMDE0MDE3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTFkYmNmZTYyZmUwM2Y4MzY1OTQ5MWQ5MDZiNjM5YWVi NmRhNzhjYWIzZjY4N2E1MWUyNDFmY2MzMWQ0MTFiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe4MnkPoO3dDlJZ9ArZIaEX30oftcVC+kH4zQQX8ElWVHy /8cceLNRFp/pT/gS/5LewJw2cA3F84LLKWPN6x/YtkrvpbYAsyq6/33NyU0uHpww F+f2iK0ZibAq12oCNLzrK8f+blTcviLZGWF7GSEesDtpRZhhT9Tzmc3lPclzO/WZ FE1E0uQXHtLztnF1735I/+GKkiYAsptK6BMVqYXkHb2tqoROsRt39fcQ3zND0MO5 ByDgZHodzi/lORr2w9sbZGwvWMVBcheMQHiFhVzDTlFh/yj8HsKc2FBuSimlMyk3 o0qV4cA8bfB5lEj+u2VxoFpx9JQAJA5lh2SNGctfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYPi11pLNJN6bbEJskf9JrtlUVHMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzFhYmMyYTM4LTVmYjYtNDA2Zi1hYTBjLWEwYzQzMjAyYmFkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYB4wDQYJKoZIhvcNAQELBQADggEBAHSmEwLiYbV2XwVBe5V1JjgbPp+A 4TosNVF8sekAp4+81EcwNOoYpiCwjDPhoyV2VSkymnXtlW1fncwqslg/5j66t7po g02MTvQxxsLaTsR/FJhA5WSX26t8F79L/vkQSI/AIos+w1mQ/nzzI5lWOv3FI4t4 xUxlb5B3Ejk+2oSPt2zrRumY0XEzvafAysO/C4wpqXno6DilkMUTZXT9xbFprZTQ y3MYa+F2IBftac5Pq8Qv/FHFbGxYYLJGgzn3Qg6BVSCm2nP6SQzN2hQSh8e39LqA GEDp4slwoGBwna5SMUGW6KSvzXvhNPEcXcBbqY3FPkeyWONtcNBodttRPKw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:19 2025 by rpki-client